// SCAN REPORT

Claude File Management Server

35 tools. 17 can modify or destroy data without limits.

3 destructive tools with no built-in limits. Policy required.

Last updated: 4 Jul 2026

17 can modify or destroy data

18 read-only

35 tools total

Community server · catalogue entry verified 04/07/2026

How to control Claude File Management Server ↓

TOOL MAP

What Claude File Management Server exposes to your agents

Read (18) Write / Execute (14) Destructive / Financial (3)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Claude File Management Server tools

Destructive · High delete_data This tool performs irreversible deletion of database records. Destructive · High delete_file File deletion is a destructive operation that permanently removes data without the ability to recover it through the tool itself. Destructive · High remove_directory This tool irreversibly deletes data and cannot be undone. Execute · High crawl_site The name 'crawl_site' strongly implies web crawling — fetching and traversing external websites, which is an external operation with side effects (network requests, potentially large-scale scraping).

17 of Claude File Management Server's 35 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Claude File Management Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Claude File Management Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_data": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_notes": {
    "limits": [
      {
        "counter": "add_notes_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "analyze_python_code": {
    "limits": [
      {
        "counter": "analyze_python_code_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Claude File Management Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON CLAUDE FILE MANAGEMENT →

Instant setup, no code required.

FULL CATALOGUE

All 35 Claude File Management Server tools

DESTRUCTIVE 3 tools

Destructive delete_data Delete data from database table. Destructive delete_file Safely delete a file with confirmation. Destructive remove_directory Remove a directory. Use force=True to remove non-empty directories.

EXECUTE 1 tools

Execute crawl_site crawl_site

WRITE 13 tools

Write add_notes Append a note to Notes.txt with optional timestamp. Write copy_file Copy file from source to destination. Write create_database Create a new SQLite database. Write create_directory Create a new directory (including parent directories). Write create_table Create a table in SQLite database. columns format: {'column_name': 'data_type'} Write create_thumbnail Create a thumbnail from an image and return as base64-encoded PNG. Write insert_data Insert data into database table. Write move_file Move/rename file from source to destination. Write update_data Update data in database table. Write write_code Atomically write content to file_path using a temp file + os.replace. Write write_csv_file Write data to CSV file. Write write_json_file Write data to JSON file. Write write_txt Write or append content to New.txt.

READ 18 tools

Read analyze_python_code Analyze Python code for functions, classes, imports, and complexity. Read ask_site Query across all crawled pages of the website. Read count_lines_of_code Count total lines, code lines, comment lines, and blank lines. Read find_in_files Search for text across multiple files. Read get_file_info Get detailed file information. Read get_file_status Get status information for all managed files. Read list_directory_tree Show directory structure as a tree. Read list_files List all files in a directory with detailed metadata. Read list_tables List all tables in the database with their info. Read read_code Read the entire file at file_path (relative to this module). Read read_csv_file Read and parse CSV files with detailed information. Read read_json_file Read and parse JSON files. Read read_notes Read the most recent notes from Notes.txt. Read read_pdf Read and return text from PDF file with optional metadata. Read read_txt Read and return text from New.txt with file info. Read scrape_url Fetch and return cleaned text content from a webpage. Read search_notes Search for notes containing the specified query. Read select_data Select data from database table.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Claude File Management Server

Can an AI agent delete data through the Claude File Management Server MCP server? +

Yes. The Claude File Management Server server exposes 3 destructive tools including delete_data, delete_file, remove_directory. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Claude File Management Server? +

The Claude File Management Server server has 13 write tools including add_notes, copy_file, create_database. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Claude File Management Server.

How many tools does the Claude File Management Server MCP server expose? +

35 tools across 3 categories: Destructive, Read, Write. 18 are read-only. 17 can modify, create, or delete data.

How do I enforce a policy on Claude File Management Server? +

Register the Claude File Management Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Claude File Management Server tool call.

Deterministic rules across all 35 Claude File Management Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON CLAUDE FILE MANAGEMENT →

Instant setup, no code required.

35 Claude File Management Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.