Credentials behind the Keychain
Passwords and private keys are encrypted with the macOS Keychain and stored only on disk. No MCP tool ever returns a credential; agents refer to servers by name or id.
macOS · FTP · FTPS · SFTP · MCP
100 servers.
One command.
FTP Man keeps your hosting accounts and credentials on your Mac and hands AI agents like Claude Code file-operation tools only. Passwords never leave the machine by any path.
Apple silicon · Intel · macOS 12+ · Signed & notarized
› replace robots.txt on every server tagged wordpress
1 approval · sequential · per-server isolation
01
Don’t hand your passwords to an agent
Many servers at once
Pick servers by tag or list, hand over one operation, and get a per-server result. One failure never stops the rest.
Humans approve, everything is logged
Require in-app approval for writes and deletes, or lock everything with read-only mode. Every call lands in the activity log.
A real file browser
Path bar, expandable tree, sortable columns, text preview, upload, download, rename and delete. See what the agent did with your own eyes.
02
Three steps
-
1
Import servers
Register 100 servers from one CSV: name, host, protocol, account, tags. Passwords are encrypted on import.
name,host,protocol,username,password,tags client-a,ftp.client-a.com,ftp,deploy,•••••,wordpress;client-a client-b,sftp.client-b.io,sftp,ubuntu,•••••,wordpress;client-b
-
2
Connect an agent
The app serves a token-protected MCP endpoint on 127.0.0.1. Paste one command from the Settings tab. A bridge for stdio-only clients is bundled.
claude mcp add --transport http ftp-man \ http://127.0.0.1:7391/mcp \ --header "Authorization: Bearer ‹token›"
-
3
Just ask
“Read wp-config.php on every wordpress server and tell me where WP_DEBUG is on.” The agent makes one batch call and gets a result per server.
batch { tag: "wordpress", operation: { type: "read_file", path: "wp-config.php" } } → 106 results · 101 ok · 5 failed
03
Tools exposed to agents
Exactly these thirteen. None of them returns a credential.
| list_servers | read | Servers and tags, never credentials |
| test_connection | read | Connectivity and base directory |
| list_files | read | List a directory |
| get_file_info | read | Stat a path |
| read_file | read | File contents, size-limited |
| find_files | read | Recursive glob search |
| download_file | read | Download to this Mac |
| write_file | write | Create or overwrite with text |
| upload_file | write | Upload a local file |
| make_directory | write | Create directories |
| rename_path | write | Rename or move |
| delete_path | write | Delete, optionally recursive |
| batch | batch | Run one of the above across many servers |
04
Where the boundary is
On this Mac
- Encrypted credentials
- Server connections and transfers
- Approval queue and activity log
- MCP endpoint bound to 127.0.0.1
Bearer token
What the agent sees
- Server names, hosts, tags
- File listings and contents
- Operation results and errors
- Passwords or keys — never
- The token lives in a 0600 file and can be regenerated from the app at any time.
- The app is Developer ID signed and Apple notarized. No auto-update, no telemetry.
- The connection pool is capped and batches run sequentially by default, respecting shared-host connection limits.
05
Download
Open the DMG and drag the app to Applications. The Claude Code connection command is in the Settings tab.
Claude Desktop and other stdio clients
{ "mcpServers": { "ftp-man": {
"command": "node",
"args": ["/Applications/FTP Man.app/Contents/Resources/bridge/ftp-man-mcp.mjs"] } } }