Filesystem Access

name: "Desktop Commander (containerized)"
description: "Terminal control and file editing for Claude. Runs in an isolated container with /tmp volume mount for file operations."
# Demonstrates: container.volumes with network: none for terminal/filesystem tools
# No API keys required

desktop-commander-container:
  type: stdio
  command: npx
  args:
    - "-y"
    - "@wonderwhy-er/desktop-commander"
  container:
    enabled: true
    network: none
    volumes:
      - "/tmp:/tmp:rw"

name: "Filesystem Server (containerized)"
description: "Read and write local files via the Model Context Protocol. Runs in an isolated container with a volume mount."

filesystem:
  type: stdio
  command: npx
  args:
    - "-y"
    - "@modelcontextprotocol/server-filesystem"
    - "/projects"
  container:
    enabled: true
    network: none
    volumes:
      - "$HOME/projects:/projects"

name: "Filesystem Server (subprocess)"
description: "Read and write local files via the Model Context Protocol. Runs as a subprocess via npx."

filesystem:
  type: stdio
  command: npx
  args:
    - "-y"
    - "@modelcontextprotocol/server-filesystem"
    - "/projects"

name: "Git Server (containerized)"
description: "Interact with Git repositories. Runs in an isolated container with read-only workspace mount."

git:
  type: stdio
  command: uvx
  args:
    - "mcp-server-git"
    - "--repository"
    - "/workspace"
  container:
    enabled: true
    network: none
    volumes:
      - "$HOME/projects:/workspace:ro"

name: "Git Server (subprocess)"
description: "Interact with Git repositories — read commits, diffs, branches, and file history. Runs as a subprocess via uvx."

git:
  type: stdio
  command: uvx
  args:
    - "mcp-server-git"
    - "--repository"
    - "/workspace"

name: "Obsidian MCP Server (containerized)"
description: "Read and write Obsidian vault notes via the Obsidian Local REST API plugin. Runs in a container with outbound network access to reach the local Obsidian instance."
# Secrets: OBSIDIAN_API_KEY — set with: argus-mcp secrets set OBSIDIAN_API_KEY <your-obsidian-api-key>
# Requires Obsidian running with the Local REST API community plugin enabled
# Get API key from: Obsidian → Settings → Local REST API

obsidian-container:
  type: stdio
  command: uvx
  args:
    - "mcp-obsidian"
  env:
    OBSIDIAN_API_KEY: "${OBSIDIAN_API_KEY}"
  container:
    enabled: true
    network: bridge

name: "WCGW Shell Agent (containerized)"
description: "General-purpose shell and code execution agent. Runs in an isolated container with a workspace volume mount."
# Demonstrates: container.volumes for workspace access with network: none for safety
# No API keys required — pure shell execution

wcgw-container:
  type: stdio
  command: uvx
  args:
    - "wcgw"
    - "--workspace"
    - "/workspace"
  container:
    enabled: true
    network: none
    volumes:
      - "${HOME}/projects:/workspace:rw"

name: "WCGW Shell Agent"
description: "General-purpose shell and code execution agent. Runs as a subprocess with direct host filesystem access."
# No API keys required — pure shell execution

wcgw:
  type: stdio
  command: uvx
  args:
    - "wcgw"