# MCP servers v2.3.0 adds filesystem, git and fetch options

published: 2026-11-04T22:05:48.042Z
topic: mcp
source: https://github.com/modelcontextprotocol/servers/releases/tag/v2.3.0
url: https://aiagentnews.io/stories/mcp-servers-v2-3-0-adds-filesystem-git-and-fetch-options

The modelcontextprotocol/servers repository released v2.3.0, updating four npm servers and three PyPI servers. The release adds new tools and run-time options to the filesystem, git, fetch and time servers, plus a security dependency fix.

The release updates four npm packages and three PyPI packages in the modelcontextprotocol/servers repository, published on 4 November by maintainer cliffhall. The filesystem server 2.2.0 gains append_file and copy_file tools, an optional depth for directory_tree, and file:// template resources. It also adds a --read-only mode that serves only read tools, and --confine-roots to keep client Roots inside the command-line directories.

The fetch server 2026.11.4 adds --allowed-hosts for an operator host allowlist and a configurable HTTP request timeout. The git server adds a git_merge tool and a read-only git_remote tool, and git_diff now accepts revision ranges such as main..feature. The time server adds get_time_ago and defaults omitted timezone arguments to the local timezone.

The memory server 2.1.0 declares idempotentHint on create_entities, create_relations and add_observations. The sequential thinking server 2.1.1 caps the thought history each connection keeps. Security fixes include moving minimatch to ^11.0.4 for GHSA-g3hv-75wg-m249 and raising the qs override to at least 6.16.1.

## Why it matters if you build agents

Agents that call the filesystem server can now run it read-only or confine it to set directories, which limits what a model can change. Teams that fetch web pages can restrict requests to an allowlist of hosts. Pinned dependencies should be updated to pick up the minimatch and qs fixes.