Other MCP Server

MCP Obsidian

Name: MCP Obsidian
Author: MarkusPfundstein

Interacting with Obsidian via REST API

Scan flagged something by MarkusPfundstein3,014MITPythonBeginnerstdio

Install

Claude Code

claude mcp add markuspfundstein-mcp-obsidian -- uvx mcp-obsidian

Cursor

{
  "mcpServers": {
    "markuspfundstein-mcp-obsidian": {
      "command": "uvx",
      "args": [
        "mcp-obsidian"
      ]
    }
  }
}

VS Code

{
  "mcp": {
    "servers": {
      "markuspfundstein-mcp-obsidian": {
        "command": "uvx",
        "args": [
          "mcp-obsidian"
        ]
      }
    }
  }
}

Windsurf

{
  "mcpServers": {
    "markuspfundstein-mcp-obsidian": {
      "command": "uvx",
      "args": [
        "mcp-obsidian"
      ]
    }
  }
}

Claude Desktop

{
  "mcpServers": {
    "markuspfundstein-mcp-obsidian": {
      "command": "uvx",
      "args": [
        "mcp-obsidian"
      ]
    }
  }
}

Safety Report

100% Scan flagged something

Scanned 5 months ago

4 passed

Security

Authentication

details

Requires OBSIDIAN_API_KEY from the Obsidian REST API community plugin. Key must be set in MCP config.

Pass

CORS Policy

details

Communicates with local Obsidian REST API at 127.0.0.1 by default. No remote exposure unless OBSIDIAN_HOST is changed.

Pass

Rate Limiting

details

Local REST API; no rate limiting. Access is bounded by local network availability.

N/A

Known CVEs

details

No known CVEs. Risk is primarily data exposure — vault may contain sensitive personal notes.

Info

Code Quality

Dependency Audit

details

No public dependency audit. Caution: gives AI full read/write/delete access to Obsidian vault files.

Info

Dangerous Patterns

details

No dangerous code patterns detected

Pass

License

details

License not specified in the repository README.

Info

Code Source

details

Open source on GitHub (MarkusPfundstein/mcp-obsidian).

Pass

Community

Maintenance Status

details

Community maintained. Activity level moderate; not under active commercial maintenance.

Info

Compatibility

Claude CodeRequires Obsidian running with REST API plugin enabled. Set OBSIDIAN_API_KEY env var.

Not Tested

CursorStandard stdio MCP configuration. Obsidian must be running locally.

Not Tested

VS CodeCompatible via stdio MCP extensions.

Not Tested

WindsurfStandard stdio support.

Not Tested

Claude DesktopCommon use case. Configure OBSIDIAN_API_KEY, OBSIDIAN_HOST (default 127.0.0.1), OBSIDIAN_PORT (default 27124) in claude_desktop_config.json.

Not Tested

Tools Provided (7)

list_files_in_vault

Lists all files and directories in the root directory of your Obsidian vault.

list_files_in_dir

Lists all files and directories in a specific Obsidian directory.

get_file_contents

Returns the content of a single file in your vault.

search

Searches for documents matching specified text queries across all vault files.

patch_content

Inserts content into an existing note relative to a heading, block reference, or frontmatter field.

append_content

Appends content to a new or existing file in the vault.

delete_file

Deletes a file or directory from your vault.

Frequently Asked Questions

What is MCP Obsidian?

Interacting with Obsidian via REST API

What tools does MCP Obsidian provide?

MCP Obsidian provides 7 tools including list_files_in_vault, list_files_in_dir, get_file_contents, search. Each tool can be called by AI agents to perform specific operations.

Is MCP Obsidian safe to use?

We cannot tell you that, and nobody scanning at this scale can. What we did in March 2026 was shallow-clone MCP Obsidian and run five keyword searches over its source: auth identifiers, CORS configuration, rate-limit identifiers, the dependency manifest against a hardcoded list of 18 known-vulnerable packages, and unguarded eval/exec calls. At least one matched — the specific finding is in the scan report on this page. A text search cannot follow a variable, judge intent, or tell you what a server does once it is running, so "nothing matched" is not "safe". What the scan does and does not cover is written out at /mcp/security.

What are alternatives to MCP Obsidian?

Similar MCP servers include FastMCP, Oh My Posh Validator, Claude Flow. Each serves a similar purpose but may differ in features, language, and compatibility.

Stay Updated on MCP Servers

New servers, safety alerts, and install guides — weekly.

MCP Obsidian

Install

Safety Report

Compatibility

Tools Provided (7)

Frequently Asked Questions

Similar MCP Servers

FastMCP

Oh My Posh Validator

Claude Flow

Free AI writing tools

Stay Updated on MCP Servers