MCP server that exposes file operations (list, read, write, delete, unzip) in a sandbox directory, preventing path traversal.