How to Connect an FTP or FTPS Server to Cursor

FTP and FTPS in Cursor

Short answer: add the FTP server to AnythingMCP as a File Search connector, preferably over FTPS (FTP with TLS). AnythingMCP indexes the full text of the folder you pick and keeps the index in sync. Then connect AnythingMCP to Cursor. Cursor can find files by name and by content, read the pages it needs and give you the file itself, attached or as a temporary download link. Nothing is ever written to the server.

An AI assistant cannot open an FTP server on its own, and one that could would have to download every file to answer one question. The index is what makes a question like "what does article NT-601 cost in the current price list?" take seconds.

What you need

• An FTP account that can read the folder. A read-only account is the right choice.
• The host name and the mode: explicit FTPS usually on port 21, implicit FTPS on port 990, plain FTP on 21.
• An AnythingMCP workspace: AnythingMCP Cloud (7 days free) or your own self-hosted install.

FTPS or plain FTP? Use FTPS whenever the server offers it. Plain FTP sends the password unencrypted: AnythingMCP accepts it only after you confirm that, and an Enterprise workspace policy can forbid it. A Fritz!Box has its own Marketplace entry with the right settings.

Set it up

Step 1 — Set up the File Search connector

In AnythingMCP, open the Marketplace and pick FTP / FTPS (File Search), or open Connectors → New → File Search and choose FTPS (explicit or implicit) or FTP. A short wizard guides you; there is no long form to fill in.

1. Connect. Enter host, port, user name, password and the folder to use, for example /exports. For plain FTP, confirm that the password travels unencrypted.
2. Test. AnythingMCP connects, signs in and lists the folder before anything is saved, and shows a checklist (address, reachability, encryption, server identity, login, folder) with what to fix when a step fails. A certificate from a public authority is accepted as it is. A self-signed certificate is shown as a fingerprint: confirm it once, and from then on AnythingMCP refuses a different certificate before the password is sent.
3. Scan. Click Scan folder. AnythingMCP lists the folder without indexing it yet and shows a tree with the number of files in every subfolder, the file types and the years. Folders that look like archives (Alt, Old, Archive, Backup) are already unticked, so Cursor never quotes an outdated document. A bar compares your selection with your plan while you tick folders, file types or an age limit; when the selection is larger than the plan, untick more or upgrade.
4. Describe. AnythingMCP drafts the connector's description from the scan, for example "Price lists and data sheets from the supplier portal, PDF and Excel, 2022–2026". This text tells Cursor what the folder contains and when to search it. If an AI model is configured on the server, the wizard can draft it with AI and says exactly what is sent (folder names, file names, the first 2,000 characters of up to 20 sample files, personal data masked); otherwise the draft is built from the folder structure. Edit it as you like.
5. Activate. Choose the tool prefix, the sync interval and the MCP servers that get the connector, and click Activate.

The first sync starts right away and runs in a separate background service: Cursor and your other connectors keep answering at full speed while it runs. The connector's Files tab shows its progress: files found, indexed and skipped, the last and next sync, and a Sync now button.

Step 2 — Copy the server URL

In MCP Servers, open the server you chose in the wizard and copy its URL.

Step 3 — Add the connector in Cursor

Your server URL: in AnythingMCP, open MCP Servers → the server this connector is on, and copy its URL (https://cloud.anythingmcp.com/mcp/…). Use it wherever this guide shows YOUR_SERVER_ID.

Cursor reads MCP servers from ~/.cursor/mcp.json. Add this entry:

{
  "mcpServers": {
    "anythingmcp": {
      "url": "https://cloud.anythingmcp.com/mcp/YOUR_SERVER_ID",
      "headers": { "X-API-Key": "YOUR_MCP_API_KEY" }
    }
  }
}

1. Create an MCP API key in AnythingMCP under MCP Servers → your server → API keys, and paste it in place of YOUR_MCP_API_KEY.
2. Save the file and restart Cursor.
3. Open Cursor → Settings → MCP and check that anythingmcp is listed and connected.
4. Start chatting: the agent can now call the file search tools.

Step 4 — Ask

Start a new chat and ask about the content of your files. Cursor searches the index first, opens the pages that matched and answers with the file name, the page and the file's date, so you can check the source.

What Cursor can do with the files

<prefix> is the tool prefix you choose in the wizard, for example pricelists. Every tool except _share_file only reads.

Supported files: text is extracted from over 100 file types: PDF (page by page); Word, Excel and PowerPoint including macro and template variants and .xlsb; OpenDocument; Outlook .msg, .eml and .mbox with the text of their attachments; .rtf, .epub, .xps; Apple Pages, Numbers and Keynote (through their PDF preview); .svg and the text of .dxf CAD drawings; CSV, Markdown, HTML, XML, JSON, YAML, calendars and contacts; and source code. Every other file is still found by name, and PDF pages and images can be shown to the AI as pictures. Scanned PDFs without a text layer are read with OCR on Enterprise.

Prompts to try in Cursor

• "Search the supplier exports for the current Nordtor price list and give me the price of NT-601."
• "Which data sheets mention fire protection class T30?"
• "List every Excel row in the exports folder that contains the discount group 12."
• "Which files in the folder were changed this month?"

How syncing works

AnythingMCP compares the size and modification time of every file with the last run and downloads only new and changed files. Passive data connections go only to the server's own address. Files whose content is identical to the indexed version are recognised by their checksum (SHA-256) and not processed again. Deleted files leave the index. A file that cannot be read is retried on the next syncs and, after three failures (at once for password-protected files), stays findable by name, with the reason on the Files tab.

Syncing runs in its own background service, separate from the server that answers Cursor: a large first sync does not slow down your questions, and search keeps working with the last index while a sync runs.

When the folder outgrows your plan, the sync pauses before downloading anything instead of indexing only part of it: the Files tab shows how many files the folder now holds against your plan, Cursor keeps searching the files already indexed and is told that newer files may be missing, and you can untick folders or upgrade. A paused folder is checked again once a day and resumes by itself when it fits.

Security

• Read-only. The connector only lists and reads. It has no tool that writes, renames or deletes on the server.
• Your workspace only. The index is stored per workspace and every query is limited to it, by the application and again by the database (Row-Level Security).
• Credentials are stored encrypted and decrypted only in the background sync service. Cursor and your colleagues never see them.
• Who sees what follows your MCP roles: a role without the file tools does not see them. On Enterprise you can also allow or deny folders per role.
• File content is data. The tools tell the model never to follow instructions found inside a file.
• Certificate pinned. A self-signed certificate you confirmed is checked on every connection, before the password is sent.
• Passive mode stays on the server. Data connections go only to the address of the server itself.
• AnythingMCP Cloud connects only to servers on the public internet: a host in a private network is refused, also after a redirect. A server in your office network must be reachable from outside, or you run AnythingMCP self-hosted next to it.

Limits by plan

Self-hosted: Starter includes one File Search connector with up to 500 files, Team three connectors with 2,000 files, Enterprise has no limit and syncs down to every 5 minutes; the largest file is set by FILES_MAX_FILE_BYTES (100 MB by default). Self-hosted File Search needs a paid licence or the 30-day trial, which has the Team limits; the free Community edition has no File Search after the trial. All plans.

FAQ

Does Cursor support custom MCP servers on the free tier? Yes, MCP is available on Hobby, Pro and Business plans.

Explicit or implicit FTPS? Whichever your server offers. Explicit FTPS starts on the normal FTP port (usually 21) and switches to TLS; implicit FTPS speaks TLS from the start, usually on port 990.

My server only offers plain FTP. AnythingMCP connects after you confirm that the password travels unencrypted. Prefer a read-only account then, and ask whether the server can enable FTPS.

Does AnythingMCP copy all of the server? No. AnythingMCP keeps the extracted text, not the files. A file is read again only when it changed, or when you ask for the file itself.

Is vector search used? No. Company documents are searched for exact names, codes and numbers, where keyword search with page-level results is more reliable than embeddings.

Related

• Search your company file server with AI
• Find prices in supplier price lists with AI
• Search inside Nextcloud and WebDAV files with AI
• Share files from an AI chat as download links
• Connect an FTP or FTPS Server to Claude
• Connect an FTP or FTPS Server to ChatGPT
• Connect an FTP or FTPS Server to Gemini
• Connect an FTP or FTPS Server to Microsoft Copilot
• Connect an FTP or FTPS Server to Muse
• Other file sources in Cursor: SFTP server, WebDAV server, S3 bucket, Nextcloud, ownCloud, Synology NAS, QNAP NAS, Fritz!Box storage, Hetzner Storage Box, Network folder (self-hosted)