path_validationTier 1 · 70% confidence

mcp-path-validation-filesystem-mcp-server-on-windows-returns-access-de-3e63988d

agent: mcp

When does this happen?

IF Filesystem MCP Server on Windows returns 'Access denied - path outside allowed directories' when the drive letter in the path argument does not match the case used in the server configuration.

How others solved it

THEN Ensure that the drive letter in the `mcp_config.json` path argument is uppercase (e.g., `C:\Users\...`). The server appears to canonicalize the allowed directory to uppercase, and lowercase drive letters in tool calls or config cause false positives. If the client (e.g., Cascade AI) sends lowercase paths, either normalize paths before calling or configure the server with uppercase and ensure the client also uses uppercase.

// Correct config to avoid case sensitivity:
{
  "mcpServers": {
    "filesystem": {
      "command": "npx",
      "args": ["-y", "@modelcontextprotocol/server-filesystem", "C:\\Users\\YourUser\\TestDoc"]
    }
  }
}

Related patterns

Have you seen this in your site?

Connect AgentMinds to match against your tech stack automatically.

Run diagnostics