Atlas / MCP servers / tumf / Text Editor

Text EditorSAFE

Name: Text Editor
Author: tumf

mcp/tumf/text-editor

MCP server by tumf · file editing · llm tools · mcp · Audited 2026-10-06

A token-efficient MCP server for safe, line-oriented text file editing with partial reads, hash-based conflict detection, and atomic multi-file operations.

Verdict

SAFE

Grade

Trust score

89 /100

Exposed tools

6 2r · 3w · 1d

Transport

stdio

License

MIT

Stars

200

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://codecov.io/gh/tumf/mcp-text-editor) [](https://smithery.ai/server/mcp-text-editor) [](https://glama.ai/mcp/servers/k44dnvso10)

A Model Context Protocol (MCP) server that provides line-oriented text file editing capabilities through a standardized API. Optimized for LLM tools with efficient partial file access to minimize token usage.

Quick Start for Claude.app Users

To use this editor with Claude.app, add the following configuration to your prompt:

code ~/Library/Application\ Support/Claude/claude_desktop_config.json

{
"mcpServers": {
"text-editor": {
"command": "uvx",
"args": [
"mcp-text-editor"
]
}
}
}

Overview

MCP Text Editor Server is designed to facilitate safe and efficient line-based text file operations in a client-server architecture. It implements the Model Context Protocol, ensuring reliable file editing with robust conflict detection and resolution. The line-oriented approach makes it ideal for applications requiring synchronized file access, such as collaborative editing tools, automated text processing systems, or any scenario where multiple processes need to modify text files safely. The partial file access capability is particularly valuable for LLM-based tools, as it helps reduce token consumption by loading only the necessary portions of files.

Key Benefits

Line-based editing operations
Token-efficient partial file access with line-range specifications
Optimized for LLM tool integration
Safe concurrent editing with hash-based validation
Atomic multi-file operations
Robust error handling with custom error types
Comprehensive encoding support (utf-8, shift_jis, latin1, etc.)

Features

Line-ori

Read from source at commit 9a067f7559a6OBSERVED · 2026-10-06

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add mcp-text-editor -- uvx mcp-text-editor

claude-desktop

{
  "mcpServers": {
    "mcp-text-editor": {
      "command": "uvx",
      "args": [
        "mcp-text-editor"
      ]
    }
  }
}

Exposed tools (6)

2 read · 3 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`append_text_file_contents`	read	Append content to a text file.
`create_text_file`	write	Create a new text file.
`delete_text_file_contents`	destructive	Delete the contents of a text file.
`get_text_file_contents`	read	Get the contents of text files.
`insert_text_file_contents`	write	Insert content into a text file at a specific position.
`patch_text_file_contents`	write	Patch the contents of a text file.

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	PASS
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (1 observation(s))
Network: none-observed
Shell: none-observed
Dependencies: pinned
Secrets in source: none-found

Findings (11)

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59

delete_text_file_contents

Why it matters. 1 tool(s) can delete or overwrite

Fix. prefer a read-only mode or scoped tokens; the page states the blast radius

LOWInventory / provenance · inv.hidden_file · CWE-1104

.codecov.yml

.codecov.yml

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.pre-commit-config.yaml

.pre-commit-config.yaml

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWFilesystem / path · fs.system_paths · CWE-22, CWE-59

tests/test_path_validation.py:33

normalize_and_validate_path("/etc/passwd", tmpdir)