@@ -106,6 +106,10 @@ type SFTP struct {
 	Listen string `json:"listen" env:"LISTEN"`
 }
 
+type MCP struct {
+	Enable bool `json:"enable" env:"ENABLE"`
+}
+
 type Config struct {
 	Force                 bool        `json:"force" env:"FORCE"`
 	SiteURL               string      `json:"site_url" env:"SITE_URL"`
@@ -131,6 +135,7 @@ type Config struct {
 	S3                    S3          `json:"s3" envPrefix:"S3_"`
 	FTP                   FTP         `json:"ftp" envPrefix:"FTP_"`
 	SFTP                  SFTP        `json:"sftp" envPrefix:"SFTP_"`
+	MCP                   MCP         `json:"mcp" envPrefix:"MCP_"`
 	LastLaunchedVersion   string      `json:"last_launched_version"`
 	ProxyAddress          string      `json:"proxy_address" env:"PROXY_ADDRESS"`
 }
@@ -244,6 +249,9 @@ func DefaultConfig(dataDir string) *Config {
 			Enable: false,
 			Listen: ":5222",
 		},
+		MCP: MCP{
+			Enable: false,
+		},
 		LastLaunchedVersion: "",
 		ProxyAddress:        "",
 	}
 
@@ -0,0 +1,18 @@
+package server
+
+import (
+	"github.com/OpenListTeam/OpenList/v4/internal/conf"
+	"github.com/OpenListTeam/OpenList/v4/server/common"
+	"github.com/OpenListTeam/OpenList/v4/server/mcp"
+	"github.com/gin-gonic/gin"
+)
+
+func MCP(g *gin.RouterGroup) {
+	if !conf.Conf.MCP.Enable {
+		g.Any("/mcp", func(c *gin.Context) {
+			common.ErrorStrResp(c, "MCP server is not enabled", 403)
+		})
+		return
+	}
+	mcp.Register(g)
+}
@@ -0,0 +1,88 @@
+package mcp
+
+import (
+	"encoding/json"
+	"net/http"
+
+	"github.com/gin-gonic/gin"
+)
+
+type toolCallParams struct {
+	Name      string          `json:"name"`
+	Arguments json.RawMessage `json:"arguments"`
+}
+
+type toolResultContent struct {
+	Type string `json:"type"`
+	Text string `json:"text"`
+}
+
+func (s *Server) handleToolsCall(c *gin.Context, req request) (int, response) {
+	var params toolCallParams
+	if len(req.Params) == 0 {
+		return http.StatusBadRequest, response{
+			JSONRPC: "2.0",
+			ID:      req.ID,
+			Error:   &rpcError{Code: -32602, Message: "invalid tools/call params"},
+		}
+	}
+	if err := json.Unmarshal(req.Params, &params); err != nil || params.Name == "" {
+		return http.StatusBadRequest, response{
+			JSONRPC: "2.0",
+			ID:      req.ID,
+			Error:   &rpcError{Code: -32602, Message: "invalid tools/call params"},
+		}
+	}
+
+	var (
+		result any
+		err    *rpcError
+	)
+	switch params.Name {
+	case "openlist.fs.list":
+		result, err = s.callFSList(c, params.Arguments)
+	case "openlist.fs.get":
+		result, err = s.callFSGet(c, params.Arguments)
+	case "openlist.fs.link":
+		result, err = s.callFSLink(c, params.Arguments)
+	default:
+		return http.StatusOK, response{
+			JSONRPC: "2.0",
+			ID:      req.ID,
+			Error:   &rpcError{Code: -32601, Message: "unknown tool"},
+		}
+	}
+
+	if err != nil {
+		return http.StatusOK, response{
+			JSONRPC: "2.0",
+			ID:      req.ID,
+			Result: map[string]any{
+				"content": []toolResultContent{
+					{Type: "text", Text: err.Message},
+				},
+				"isError": true,
+			},
+		}
+	}
+
+	resultJSON, marshalErr := json.Marshal(result)
+	if marshalErr != nil {
+		return http.StatusInternalServerError, response{
+			JSONRPC: "2.0",
+			ID:      req.ID,
+			Error:   &rpcError{Code: -32603, Message: "failed to encode tool result"},
+		}
+	}
+
+	return http.StatusOK, response{
+		JSONRPC: "2.0",
+		ID:      req.ID,
+		Result: map[string]any{
+			"content": []toolResultContent{
+				{Type: "text", Text: string(resultJSON)},
+			},
+			"structuredContent": result,
+		},
+	}
+}
@@ -0,0 +1,183 @@
+package mcp
+
+import (
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"strings"
+	"testing"
+
+	"github.com/OpenListTeam/OpenList/v4/internal/conf"
+	"github.com/OpenListTeam/OpenList/v4/internal/model"
+	"github.com/OpenListTeam/OpenList/v4/server/common"
+	"github.com/gin-gonic/gin"
+)
+
+func TestToolsListRequiresInitializedSession(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+	srv := newTestServer(map[string]*session{
+		"s1": {id: "s1", userID: 1},
+	})
+
+	r := gin.New()
+	r.POST("/mcp", func(c *gin.Context) {
+		common.GinAppendValues(c, conf.UserKey, &model.User{ID: 1, Role: model.ADMIN})
+		srv.handlePost(c)
+	})
+
+	req := httptest.NewRequest(http.MethodPost, "http://example.com/mcp", strings.NewReader(`{
+		"jsonrpc":"2.0",
+		"id":1,
+		"method":"tools/list"
+	}`))
+	req.Header.Set("Accept", "application/json, text/event-stream")
+	req.Header.Set("Origin", "http://example.com")
+	req.Header.Set(ProtocolVersionHeader, ProtocolVersion)
+	req.Header.Set(SessionHeader, "s1")
+
+	w := httptest.NewRecorder()
+	r.ServeHTTP(w, req)
+
+	if w.Code != http.StatusBadRequest {
+		t.Fatalf("unexpected status: got %d want %d", w.Code, http.StatusBadRequest)
+	}
+	resp := decodeResponse(t, w)
+	if resp.Error == nil || resp.Error.Code != -32002 {
+		t.Fatalf("unexpected error response: %+v", resp.Error)
+	}
+}
+
+func TestToolsListSuccess(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+	srv := newTestServer(map[string]*session{
+		"s2": {id: "s2", userID: 1, initialized: true},
+	})
+
+	r := gin.New()
+	r.POST("/mcp", func(c *gin.Context) {
+		common.GinAppendValues(c, conf.UserKey, &model.User{ID: 1, Role: model.ADMIN})
+		srv.handlePost(c)
+	})
+
+	req := httptest.NewRequest(http.MethodPost, "http://example.com/mcp", strings.NewReader(`{
+		"jsonrpc":"2.0",
+		"id":2,
+		"method":"tools/list"
+	}`))
+	req.Header.Set("Accept", "application/json, text/event-stream")
+	req.Header.Set("Origin", "http://example.com")
+	req.Header.Set(ProtocolVersionHeader, ProtocolVersion)
+	req.Header.Set(SessionHeader, "s2")
+
+	w := httptest.NewRecorder()
+	r.ServeHTTP(w, req)
+
+	if w.Code != http.StatusOK {
+		t.Fatalf("unexpected status: got %d want %d", w.Code, http.StatusOK)
+	}
+	resp := decodeResponse(t, w)
+	if resp.Error != nil {
+		t.Fatalf("unexpected error response: %+v", resp.Error)
+	}
+
+	result, ok := resp.Result.(map[string]any)
+	if !ok {
+		t.Fatalf("unexpected result type: %T", resp.Result)
+	}
+	tools, ok := result["tools"].([]any)
+	if !ok || len(tools) != 3 {
+		t.Fatalf("unexpected tools payload: %#v", result["tools"])
+	}
+	names := map[string]bool{}
+	for _, rawTool := range tools {
+		currentTool, ok := rawTool.(map[string]any)
+		if !ok {
+			t.Fatalf("unexpected tool payload: %#v", rawTool)
+		}
+		name, _ := currentTool["name"].(string)
+		names[name] = true
+	}
+	if !names["openlist.fs.list"] || !names["openlist.fs.get"] || !names["openlist.fs.link"] {
+		t.Fatalf("unexpected tool names: %#v", names)
+	}
+}
+
+func TestToolsCallUnknownTool(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+	srv := newTestServer(map[string]*session{
+		"s3": {id: "s3", userID: 1, initialized: true},
+	})
+
+	r := gin.New()
+	r.POST("/mcp", func(c *gin.Context) {
+		common.GinAppendValues(c, conf.UserKey, &model.User{ID: 1, Role: model.ADMIN})
+		srv.handlePost(c)
+	})
+
+	req := httptest.NewRequest(http.MethodPost, "http://example.com/mcp", strings.NewReader(`{
+		"jsonrpc":"2.0",
+		"id":3,
+		"method":"tools/call",
+		"params":{"name":"openlist.fs.unknown","arguments":{"path":"/"}}
+	}`))
+	req.Header.Set("Accept", "application/json, text/event-stream")
+	req.Header.Set("Origin", "http://example.com")
+	req.Header.Set(ProtocolVersionHeader, ProtocolVersion)
+	req.Header.Set(SessionHeader, "s3")
+
+	w := httptest.NewRecorder()
+	r.ServeHTTP(w, req)
+
+	if w.Code != http.StatusOK {
+		t.Fatalf("unexpected status: got %d want %d", w.Code, http.StatusOK)
+	}
+	resp := decodeResponse(t, w)
+	if resp.Error == nil || resp.Error.Code != -32601 {
+		t.Fatalf("unexpected error response: %+v", resp.Error)
+	}
+}
+
+func TestToolsCallInvalidParams(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+	srv := newTestServer(map[string]*session{
+		"s4": {id: "s4", userID: 1, initialized: true},
+	})
+
+	r := gin.New()
+	r.POST("/mcp", func(c *gin.Context) {
+		common.GinAppendValues(c, conf.UserKey, &model.User{ID: 1, Role: model.ADMIN})
+		srv.handlePost(c)
+	})
+
+	req := httptest.NewRequest(http.MethodPost, "http://example.com/mcp", strings.NewReader(`{
+		"jsonrpc":"2.0",
+		"id":4,
+		"method":"tools/call",
+		"params":{"name":"openlist.fs.list","arguments":"bad"}
+	}`))
+	req.Header.Set("Accept", "application/json, text/event-stream")
+	req.Header.Set("Origin", "http://example.com")
+	req.Header.Set(ProtocolVersionHeader, ProtocolVersion)
+	req.Header.Set(SessionHeader, "s4")
+
+	w := httptest.NewRecorder()
+	r.ServeHTTP(w, req)
+
+	if w.Code != http.StatusOK {
+		t.Fatalf("unexpected status: got %d want %d", w.Code, http.StatusOK)
+	}
+	resp := decodeResponse(t, w)
+	if resp.Error != nil {
+		t.Fatalf("expected tool error result, got protocol error: %+v", resp.Error)
+	}
+}
+
+func decodeResponse(t *testing.T, w *httptest.ResponseRecorder) response {
+	t.Helper()
+
+	var resp response
+	if err := json.Unmarshal(w.Body.Bytes(), &resp); err != nil {
+		t.Fatalf("failed to decode response: %v", err)
+	}
+	return resp
+}