Local Workspace MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 73 installs a week from npm. Last commit 13 Oct 2026.
Bounded, read-oriented filesystem, git and named-task tools over authorized workspace roots.
We read the source, 4 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
const child = spawn(file, args, {
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add local-workspace-mcp -- npx -y local-workspace-mcp
{
"mcpServers": {
"local-workspace-mcp": {
"command": "npx",
"args": [
"-y",
"local-workspace-mcp"
]
}
}
}
[mcp_servers.local-workspace-mcp]
command = "npx"
args = ["-y", "local-workspace-mcp"]
{
"mcpServers": {
"local-workspace-mcp": {
"command": "npx",
"args": [
"-y",
"local-workspace-mcp"
]
}
}
}
{
"servers": {
"local-workspace-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"local-workspace-mcp"
]
}
}
}
Cloud replacement for mcp-server-filesystem — 20 tools for S3, Azure Blob, and GCS
Read, create, and edit files.
Standalone MCP filesystem tools server — view, edit, shell, workdir.
Filesystem-based MCP server for Obsidian vaults — read, search, and edit notes, no app required.
A sandboxed, agentic workspace providing secure filesystem, bash, and uv-powered Python execution.
MCP server for AI assistants: read, write, edit, and manage files securely on local filesystem.
Hardened filesystem for AI agents — jailed root, read-only default, traversal/symlink-safe.
Memory for coding agents, checked against the filesystem and git before it is believed.
Answers built from our own checks of this server.