Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.n0zer0d4y/vulcan-file-ops

NPM · @N0ZER0D4Y/VULCAN-FILE-OPS · SCANNED AUG 7

MCP server for AI assistants: read, write, edit, and manage files securely on local filesystem.

+59 this week 59 Trust /100
Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security89
  • No malware found by supply-chain analysis.Pass
  • CVE check failed: a known high-severity CVE affects pdfjs-dist 5.7.284, reached via officeparser > pdfjs-dist. A fixed version is available. View diagnostics → Fail
  • No install/post-install scripts declared.Pass
  • 115 of 327 dependencies flagged as unhealthy (3 deprecated). View diagnostics → Partial
Provenance & Transparency19
Schema Quality & AI Usability69
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 1957 tokens (~115/item across 17 items; 17 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @n0zer0d4y/vulcan-file-ops

# add to Claude Code
claude mcp add n0zer0d4y-vulcan-file-ops -- npx -y @n0zer0d4y/vulcan-file-ops
# add to Codex CLI
codex mcp add n0zer0d4y-vulcan-file-ops -- npx -y @n0zer0d4y/vulcan-file-ops
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "n0zer0d4y-vulcan-file-ops": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@n0zer0d4y/vulcan-file-ops"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add n0zer0d4y-vulcan-file-ops --command npx --arg -y --arg @n0zer0d4y/vulcan-file-ops
# ~/.hermes/config.yaml
mcp_servers:
  n0zer0d4y-vulcan-file-ops:
    command: "npx"
    args: ["-y", "@n0zer0d4y/vulcan-file-ops"]
// mcp.json
{
  "mcpServers": {
    "n0zer0d4y-vulcan-file-ops": {
      "command": "npx",
      "args": [
        "-y",
        "@n0zer0d4y/vulcan-file-ops"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 7 Aug 26 +1
    • CVE-2026-16633 affects this package: high security
    • Dependency health: partial → 0.84 functional
  • 6 Aug 26 +29
    • Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
    • Tool coverage: unverified → 100 functional
    • MCP protocol: unverified → pass functional
    • First check of Schema quality: fail functional
    • First check of Schema quality: fail functional
    • First check of Tool coverage: 100 functional
    • First check of Schema quality: good functional
  • 2 Aug 26 +29
    • CVE-2026-31808 affects this package: medium security
    • Provenance: unverified → fail security
    • Known CVEs: unverified → fail security
    • Install scripts: unverified → pass security
    • Malware scan: unverified → pass security
    • Security disclosure: unverified → fail functional
    • Maintenance: unverified → pass functional
    • License: unverified → pass functional
    • Dependency health: unverified → partial functional
    • Licence: MIT functional
  • 31 Jul 26 −18
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 30 Jul 26 0
    • Tool coverage: Tool coverage not yet verified: our sandbox run of this package did not complete, so we have no tool definitions to assess. functional
    • Schema quality: Schema quality not yet verified: our sandbox run of this package did not complete, so we have no schema to assess. functional
  • 27 Jul 26 18

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 7 Aug 2026 · Analysed npm/@n0zer0d4y/[email protected]

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem npm
Vulnerabilities 2 findings
ID CVE Severity Vector Fix available
GHSA-5v7r-6r5c-r473 CVE-2026-31808 medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L yes
GHSA-hq66-cqwq-w95j CVE-2026-16633 high yes
Dependencies 327 packages
Packages resolved 327
Deprecated 3
Stale 114
Tree resolution Complete
MCP tools · 17 exposed · ~1,894 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens
attach_image ~99

Attach an image file for AI vision analysis. The image will be presented to the AI model as if uploaded directly by the user, enabling the AI to see and describe visual content, read text in images, analyze diagrams, etc. Supports attaching a single image or multiple images at once. Supports PNG, JPEG, GIF, WebP, BMP, and SVG formats. Note: This requires the MCP client to support vision capabilities. Only works within allowed directories.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

delete_files ~53

Delete single or multiple files and directories securely. Supports recursive directory deletion with safety controls. All paths are validated before deletion begins. Operations are processed concurrently for performance. Maximum 100 paths per operation. Only works within allowed directories.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

edit_file ~332

Apply precise modifications to text and code files with intelligent matching. **Single File Editing (mode: 'single'):** Edit one file with multiple sequential edits using exact, flexible, or fuzzy matching strategies. **Multi-File Editing (mode: 'multiple'):** Edit multiple files concurrently in a single operation. Each file can have its own edit configuration. **Matching Strategies:** 1. Exact: Character-for-character match (fastest, safest) 2. Flexible: Whitespace-insensitive, preserves original indentation 3. Fuzzy: Token-based regex matching for maximum compatibility **Features:** - Concurrent processing for multi-file operations - Per-file matching strategy control - Dry-run preview mode - Detailed diff output with statistics - Atomic operations with rollback capability - Cross-platform line ending preservation **Maximum:** 50 files per multi-file operation **Best Practices:** - Include 3-5 lines of context before and after the change for reliability - Add 'instruction' field to describe the purpose of each edit - Use 'dryRun: true' to preview changes before applying - For multiple related changes, use array of edits (applied sequentially) - Set 'expectedOccurrences' to validate replacement count - Use 'matchingStrategy' to control matching behavior (defaults to 'auto') **CRITICAL - Multi-line Content:** - Use actual newline characters in oldText/newText strings, NOT \n escape sequences - The MCP/JSON layer handles encoding automatically - Using \n literally will search for/write backslash+n characters (wrong!) Only works within allowed directories.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

execute_shell ~173

Execute shell commands on the host system with security controls. Commands are executed as 'bash -c <command>' on Unix/Mac. The tool captures stdout, stderr, exit codes, and signals. Commands exceeding the timeout will be automatically terminated. ⚠️ SECURITY REQUIREMENTS: - At least ONE approved directory must be configured before executing any shell commands - Working directory (workdir parameter or process.cwd()) MUST be within allowed directories - All file/directory paths in command arguments are validated against allowed directories - Command substitution and dangerous patterns may be restricted If no workdir is specified, the server's current working directory will be used and validated. No pre-approved commands. All commands require user approval before execution. IMPORTANT: Always provide a clear description of what the command does and why it's needed.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

file_operations ~95

Perform bulk file operations (move, copy, rename) on single or multiple files and directories concurrently. All operations are validated for security before execution. Supports conflict resolution strategies for existing destinations. Maximum 100 files per operation for performance.

NameTypeReqDescription
filesarrayyesArray of source-destination file pairs
onConflictstringHow to handle destination conflicts
operationstringyesThe type of file operation to perform

No output schema declared.

No examples provided.

get_file_info ~57

Extract comprehensive metadata and statistics for files or directories. Provides detailed information including size, timestamps (creation and last modification), permissions, and entry type. Perfect for inspecting file properties and attributes without accessing the actual content. Only works within allowed directories.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

glob_files ~78

Perform recursive pattern-based searches for files and directories. Accepts glob-style patterns matching paths relative to the search root. Use simple patterns like '*.ext' for current directory matches, or '**/*.ext' for deep subdirectory searches. Returns absolute paths to all discovered items. Excellent for locating files when exact paths are unknown. Only searches within allowed directories.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

grep_files ~114

Search text patterns within file contents using regex. Returns matching line numbers and context - use with read_file/read_multiple_files to retrieve actual content. Supports: regex patterns, case-insensitive (-i), context lines (-A/-B/-C), file type filters (type: js/py/ts/etc), glob patterns, multiline mode. Output modes: content (lines+context), files_with_matches (paths only), count (match counts). Respects ignored folders. Use head_limit to cap results. Only searches within allowed directories.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_allowed_directories ~66

Display all directories currently accessible to the server. Note that subdirectories within listed paths are implicitly accessible as well. Use this to determine available filesystem scope and plan operations accordingly before attempting file access. CURRENTLY ACCESSIBLE DIRECTORIES: None. Use this tool to register directories for access.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_directory ~66

List directory contents with flexible output formats. Replaces the previous list_directory, list_directory_with_sizes, and directory_tree tools. Supports simple listings, detailed views with sizes/timestamps, hierarchical tree display, and structured JSON output. Automatically filters globally configured ignored folders. Only works within allowed directories.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

make_directory ~41

Create single or multiple directories with recursive parent creation (like Unix 'mkdir -p'). Idempotent - won't error if directories exist. Only works within allowed directories.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

move_file ~66

Relocate or rename files and directories in a single atomic operation. Supports cross-directory moves with simultaneous renaming when needed. Fails safely if the destination path already exists to prevent accidental overwrites. Can also perform simple same-directory renames. Both source and destination must be within allowed directories.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

read_file ~107

Read files with flexible modes. Supports text and documents (PDF, DOCX, PPTX, XLSX, ODT, ODP, ODS). PDF: Extracts with format metadata (fonts, colors, layout). Modes: full (entire file), head (first N lines), tail (last N lines), range (lines from startLine to endLine, inclusive, 1-indexed). Document files ignore mode parameters and always return full content. Only works within allowed directories.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

read_multiple_files ~105

Batch read multiple files concurrently with per-file mode control. Supports text and documents (PDF, DOCX, PPTX, XLSX, ODT, ODP, ODS). Each file can specify its own read mode: full, head (first N lines), tail (last N lines), or range (arbitrary line range). Document files ignore mode parameters and return full content. Processes files concurrently for performance. Maximum 50 files per operation. Only works within allowed directories.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

register_directory ~65

Register a directory for access. This allows the AI to dynamically gain access to directories specified by the human user during conversation. The directory and all its subdirectories will become accessible for all filesystem operations. CURRENTLY ACCESSIBLE DIRECTORIES: None. Use this tool to register directories for access.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

write_file ~256

Create/replace files. Supports text (UTF-8), PDF, and DOCX with HTML formatting. **PDF/DOCX with HTML Formatting:** - Provide HTML content for rich formatting (headings, bold, italic, colors, tables, lists) - Supports: <h1>-<h6>, <p>, <div>, <span>, <strong>, <em>, <u>, <table>, <ul>, <ol> - CSS styling: colors, fonts, alignment, borders, margins, padding - Example: '<html><body><h1 style="color: #2c3e50;">Title</h1><p>Content</p></body></html>' - Plain text fallback: If content is not HTML, creates simple formatted document **Text files:** UTF-8 encoding. **Overwrites without confirmation.** IMPORTANT - Multi-line Content: - Use actual newline characters in the content string, NOT escape sequences like \n - MCP/JSON will handle the encoding automatically - Incorrect: {"content": "line1\nline2"} - this writes literal \n characters - Correct: Use actual line breaks in your JSON string value Only works within allowed directories.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

write_multiple_files ~121

Write multiple files concurrently. Supports text, PDF, and DOCX with HTML formatting. File type auto-detected by extension. Failed writes for individual files won't stop others. Returns detailed results for each file. **PDF/DOCX with HTML:** Provide HTML content for rich formatting. Automatically detects HTML and applies formatting. Plain text creates simple documents. IMPORTANT - Multi-line Content: - Use actual newline characters in content strings, NOT \n escape sequences - Each file's content will be written exactly as provided in the string Only works within allowed directories.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.