Skip to main content

Pathgate

pathgate is a Python Model Context Protocol (MCP) server that exposes a controlled filesystem interface to MCP clients such as Claude Desktop, Cursor, VS Code, and inspector tools. The server only permits access to directories that are explicitly allow-listed at startup.

What it does

The server exposes:

  • File resources via file://...
  • Directory resources via directory://...
  • Tools for reading, writing, listing, creating, deleting, moving, copying, searching, and inspecting files/directories
  • Built-in prompts for directory analysis and file discovery

Security model

Access is restricted by allow-listed paths. At startup, the server resolves the supplied paths and only permits operations within those directories.

  • Paths are checked with os.path.realpath() and prefix matching
  • Symlinks are resolved before comparison
  • The server can be run in read-only mode to disable mutating operations

Installation

git clone https://github.com/geekgod382/pathgate.git
cd pathgate
python -m pip install -e .

This installs the pathgate console command from pyproject.toml.

Usage

Start with allowed directories

pathgate "C:\Users\<username>\Documents" "C:\Users\<username>\Projects"

Read-only mode

pathgate --read-only "C:\Users\<username>\Documents"

Environment variable alternative

$env:FS_MCP_ALLOWED_PATHS = "C:\Users\<username>\Documents;C:\Users\<username>\Projects"
pathgate

On macOS/Linux, use : instead of ; for the path separator.

Tools

The current implementation exposes these tools:

  • read_file_tool — read a file and return its content, size, and encoding
  • write_file_tool — write content to a file
  • list_directory_tool — list directory contents, optionally recursively
  • create_directory_tool — create a directory tree if needed
  • delete_file_tool — delete a single file
  • delete_directory_tool — delete a directory, optionally recursively
  • move_file_tool — move or rename a file/directory
  • copy_file_tool — copy a file/directory
  • search_files_tool — search for files matching a pattern
  • get_file_info_tool — return metadata for a file or directory

MCP client configuration

Example Claude Desktop configuration:

{
  "mcpServers": {
    "filesystem": {
      "command": "pathgate",
      "args": ["C:\\Users\\<username>\\Documents"]
    }
  }
}

Example requests

Once connected, clients can ask:

List the files in C:\Users\<username>\Documents
Read C:\Users\<username>\Documents\notes.txt
Search for *.py files under C:\Users\<username>\Projects
Create a file at C:\Users\<username>\Documents\todo.txt with the content "Ship release"

Project layout

pathgate/
├── pathgate/
│   ├── __init__.py
│   ├── __main__.py
│   ├── config.py
│   ├── prompts.py
│   ├── resources.py
│   ├── server.py
│   ├── tool_schemas.py
│   └── tools.py
├── tests/
│   └── test_server.py
├── pyproject.toml
├── README.md
└── LICENSE

Requirements

  • Python 3.10+
  • mcp>=1.25

References

Metadata

Release files for pathgate 0.2.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for pathgate 0.2.0
File Size Uploaded Provenance Actions
pathgate-0.2.0.tar.gz 8.7 kB Without provenance Details for pathgate-0.2.0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for pathgate 0.2.0
File Interpreter ABI Platform Actions
pathgate-0.2.0-py3-none-any.whl Python 3 none any Details for pathgate-0.2.0-py3-none-any.whl

Total release size: 19.4 kB

Release files / pathgate-0.2.0.tar.gz

Download URL pathgate-0.2.0.tar.gz
Size 8.7 kB
Tags Source
SHA-256 checksum
How to use checksums
3c3f609b0f28d879b6df523c9fc56f9b2389d90967d518f2a985bcb9ffbde539
BLAKE2b-256 checksum
How to use checksums
b46cd3cc8ec7d74d334dfac6ec3a4732463ae759fa27847e184f3320ce3bc99e
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.12.10

Release files / pathgate-0.2.0-py3-none-any.whl

Download URL pathgate-0.2.0-py3-none-any.whl
Size 10.7 kB
Tags Python 3
SHA-256 checksum
How to use checksums
ca39f043fb3a0dfcbb71b1ef376062c37950674e4bedee2c7370b38884453ce6
BLAKE2b-256 checksum
How to use checksums
b168a8036ce128d1a33569b4aac16be17433427b0d6d4a20681be05cfa7d0049
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.12.10

Security for pathgate 0.2.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page