roots-support

To enforce filesystem root boundaries in an MCP server, validate client-declared root directives and restrict all file operations to those designated paths. This prevents unauthorized access and ensures the server operates strictly within its allocated directory structure.

Validating path canonicalization for MCP server security involves resolving symlinks and relative paths to their absolute forms. This ensures that requested file operations remain within client-declared root boundaries and blocks malicious traversal attempts.

Yes, the roots-support skill specifically blocks directory traversal outside designated project folders. It enforces root declarations and performs path validation to prevent MCP servers from accessing files beyond their authorized boundaries.

To verify an MCP server restricts access to a specific directory, use the roots-support skill to test root boundary enforcement. It checks whether the server successfully blocks attempts to traverse outside the designated directory during operations.

Relying solely on client-declared root boundaries for MCP filesystem security can be limited if the server fails to properly canonicalize paths or resolve symlinks. Thorough path validation is required to prevent traversal vulnerabilities effectively.