roots-support

Validate MCP servers enforce declared filesystem root boundaries.

47|5|Updated Apr 25, 2026

Search Tags:#security #mcp #filesystem #path validation #root enforcement

Ready to run

npx skills add https://github.com/RedHatProductSecurity/prodsec-skills --skill roots-support

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: roots-support
Source: https://github.com/RedHatProductSecurity/prodsec-skills/tree/main/module/skills/roots-support
Command: npx skills add https://github.com/RedHatProductSecurity/prodsec-skills --skill roots-support

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps developers and security teams ensure MCP servers strictly adhere to declared filesystem roots, preventing unauthorized access and path traversal vulnerabilities.

Core Features & Use Cases

Root Declaration Enforcement: Validates that MCP servers accept and respect client-declared root boundaries.
Path Validation: Performs path canonicalization, resolving symlinks and relative paths to enforce security constraints.
Use Case: During server review, verify that a MCP server properly restricts access to /home/user/project and blocks attempts to traverse outside this directory.

Quick Start

Use the roots-support skill to verify that your MCP server enforces root boundaries correctly.

Frequently Asked Questions about roots-support

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I enforce filesystem root boundaries in an MCP server?▼

To enforce filesystem root boundaries in an MCP server, validate client-declared root directives and restrict all file operations to those designated paths. This prevents unauthorized access and ensures the server operates strictly within its allocated directory structure.

What is the best way to validate path canonicalization for MCP server security?▼

Validating path canonicalization for MCP server security involves resolving symlinks and relative paths to their absolute forms. This ensures that requested file operations remain within client-declared root boundaries and blocks malicious traversal attempts.

Does the roots-support skill block directory traversal outside designated project folders?▼

Yes, the roots-support skill specifically blocks directory traversal outside designated project folders. It enforces root declarations and performs path validation to prevent MCP servers from accessing files beyond their authorized boundaries.

How do I verify that an MCP server properly restricts access to a specific directory?▼

To verify an MCP server restricts access to a specific directory, use the roots-support skill to test root boundary enforcement. It checks whether the server successfully blocks attempts to traverse outside the designated directory during operations.

What are the limitations of relying on client-declared root boundaries for MCP filesystem security?▼

Relying solely on client-declared root boundaries for MCP filesystem security can be limited if the server fails to properly canonicalize paths or resolve symlinks. Thorough path validation is required to prevent traversal vulnerabilities effectively.