MCP servers · by job

Files & storage MCP servers

83 MCP servers that read, convert and manage files, documents and storage. 35 are SAFE, 17 CAUTION and 31 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Files & storage MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/files/page/4

Verdicts · 83 servers

✓SAFE35!CAUTION17✕BLOCK31

Transports

A server can list more than one transport.

Tool risk

20

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 7 tools.

Servers with no destructive tools →

83 files & storage servers

73–83 of 83 · ranked by trust score, then stars

Anymd

SylphxAI/anymd

✕BLOCK F

Any file → clean Markdown for AI agents: PDF, Word, PowerPoint, Excel, EPUB, HTML and web pages, images (OCR), audio and video (metadata, subtitles, transcripts). A fast Rust MCP server and CLI that runs on your machine. No API key.

★ 1,0351 readstdio

PDF Reader

sylphxltd/pdf-reader-mcp

✕BLOCK F

Any file → clean Markdown for AI agents: PDF, Word, PowerPoint, Excel, EPUB, HTML and web pages, images (OCR), audio and video (metadata, subtitles, transcripts). A fast Rust MCP server and CLI that runs on your machine. No API key.

★ 1,0201 readstdio

PDF Reader

sylphxai/pdf-reader-mcp

✕BLOCK F

Any file → clean Markdown for AI agents: PDF, Word, PowerPoint, Excel, EPUB, HTML and web pages, images (OCR), audio and video (metadata, subtitles, transcripts). A fast Rust MCP server and CLI that runs on your machine. No API key.

★ 9361 readstdio

harborclerk

r0shi/harborclerk

✕BLOCK F

An MCP server that lets AI agents query your document archive instead of uploading it — with OCR, hybrid search, and cited local-AI answers in a private, Mac-native app.

★ 32 writestreamable-http

md-business

meta-taro/md-business

✕BLOCK F

Business documents as Markdown — invoices, design docs and test sheets validated by JSON Schema, rendered to A4 PDF, and editable by AI agents through a built-in MCP server. Tauri desktop app + Chrome extension.

★ 16 writestdio

artifactflow

Gadsotek/artifactflow

✕BLOCK F

Open-source, self-hosted, versioned vault for AI-generated HTML, Markdown, Mermaid, and image artifacts, with scoped MCP access and isolated two-origin previews.

★ 51 readstreamable-http

CharFloat

Jolly-J/CharFloat

✕BLOCK F

字浮 CharFloat · 给你的 AI 开个 Office 外挂。你说,它当场改。Universal Bridge between AI Agents and Microsoft Office & WPS Office

★ 25 destructivesse

Tisty

rgdevment/Tisty

!CAUTION F

Free, open source task manager and Markdown notes for Windows and macOS. An archive that keeps what each task taught you: plain files, no account, no server, MCP for your assistant.

★ 3Not listed in sourcestdio

Markdown Vault

pvliesdonk/markdown-vault-mcp

✕BLOCK F

Generic markdown vault MCP with hybrid search

★ 342 readstdio

Basic Memory

basicmachines-co/basic-memory

✕BLOCK F

AI conversations that actually remember. Never re-explain your project to your AI again. Join our Discord: https://discord.gg/tyvKNccgqN

★ 4,0161 destructivestdio

Flexible GraphRAG

stevereiner/flexible-graphrag

✕BLOCK F

Python, LlamaIndex, LangChain, 15 Property Graph, 4 RDF , 10 Vector, OpenSearch, Elasticsearch DBs. 14 data sources, 10 auto sync: Alfresco, Nuxeo, etc. KG auto-building, Ontologies, LLMs, Docling, LlamaParse, LiteParse, GraphRAG, RAG, Hybrid Search, AI Chat. TypeScript React, Vue, Angular frontends

★ 1889 read

Other jobs

By risk

Questions

How do you decide which servers are files & storage servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which files & storage MCP servers rank highest on trust?
Markdownify (zcaceres/markdownify-mcp), ImageSorcery (sunriseapps/imagesorcery-mcp) and Ori Mnemos (aayoawoyemi/ori-mnemos), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many files & storage servers only read?
28 of the 83 declare tools that all only read; 20 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.