🗃️ftpmcp🗃️

A focused Model Context Protocol server for FTP and FTPS file operations. It deliberately does not implement SFTP: SSH-based transfers belong in an SSH MCP instead of duplicating credentials and transport logic here.

Features

• Plain FTP, explicit FTPS and implicit FTPS
• Any number of named FTP hosts in one MCP process
• Remote operations restricted to each host's root
• Local uploads and downloads restricted to each host's local_root, including symlink checks
• Read-only mode and separately guarded deletion
• Structured MCP results and errors
• No credential values in tool responses

Installation

npm install -g @vielhuber/ftpmcp

Configuration

{
    "hosts": [
        {
            "host": "website",
            "hostname": "ftp.example.com",
            "protocol": "ftps",
            "port": 21,
            "username": "user",
            "password": "your_password",
            "root": "/public_html",
            "local_root": "/host/data",
            "read_only": false,
            "allow_delete": false,
            "tls_reject_unauthorized": true,
            "timeout": 30000
        }
    ]
}

Pass the file to the server:

export FTP_CONFIG_FILE=/path/to/ftp-hosts.json

protocol accepts ftp, ftps and ftps-implicit. Prefer FTPS whenever the server supports it. Plain FTP sends credentials and content without transport encryption.

root is the visible remote root for every tool path on that host. Configure the FTP account itself with an equivalent server-side chroot: FTP cannot reliably prevent a server-provided symbolic link from pointing outside a merely client-side path boundary.

local_root restricts local uploads and downloads. Both relative paths and absolute paths below that directory are accepted.

read_only: true blocks uploads, directory creation, renames and deletion. Deletion additionally requires allow_delete: true.

Every operation except list_hosts requires the selected host alias.

MCP client

{
    "mcpServers": {
        "ftp": {
            "command": "ftpmcp",
            "env": {
                "FTP_CONFIG_FILE": "/path/to/ftp-hosts.json"
            }
        }
    }
}

Tools

Tool	Purpose
list_hosts	List every configured host without credentials
test_connection	Verify the configured connection and login
list_directory	List one remote directory
download_file	Download a remote file below the selected host's local_root
upload_file	Upload a local file without overwriting by default
create_directory	Create a remote directory
rename_path	Rename or move a remote file or directory
delete_file	Delete one file when deletion is enabled
delete_directory	Delete an empty or explicitly recursive directory when deletion is enabled

Development

npm install
npm test
npm run format:check

License

MIT