vaultguard

by ashishrao-4·io.github.ashishrao-4/vaultguard·v0.1.2

AI agents use your Obsidian secrets by name — values never reach their context.

B83/100grade B

What users say

No reviews yet

Safety scan

B83/100

Adoption

Growing

0 stars138 downloads/wk

Reviews

Nobody has reviewed vaultguard yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Tool lists for local packages are only visible after install.

scanner v0.1.3 · 2026-09-19 · same rubric, same numbers if you re-run it

no findings

Code scan8 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 1 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Runs npx -y @ashishrao-4/vaultguard on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add vaultguard -- npx -y @ashishrao-4/vaultguard

Same job from other publishers, ranked by rating then adoption.

coolify
45 optimized tools for managing Coolify infrastructure, diagnostics, and docs search
not reviewed
Established
C
Mindwtr
Task and project automation for local and self-hosted Mindwtr Cloud data; read-only by default.
not reviewed
Established
A
Obsidian Hybrid Search
Search Obsidian vaults with hybrid full-text, fuzzy, semantic, and graph retrieval.
not reviewed
Established
C
OrchestKit Docs MCP
Read-only MCP server for the OrchestKit docs: full-text search + Markdown fetch. No auth.
not reviewed
Established
A
loci
Cross-session memory and hybrid RAG over your notes and docs. Local-first, with cited answers.
not reviewed
Established
A

Local package. It runs on your machine, not through the gateway.

VAULTGUARD_PASSPHRASEsecretPassphrase that decrypts the encrypted secret blocks in your Obsidian vault.
VAULTGUARD_VAULT_PATHPath to your Obsidian vault (overrides the one in ~/.vaultguard/config.json).
VAULTGUARD_HOMEConfig directory (defaults to ~/.vaultguard).
VAULTGUARD_ALLOW_GET_SECRETSet to 1 to enable get_secret (default: disabled so values never reach the agent).

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/ashishrao-4-vaultguard.svg)](https://mcp.market/server/ashishrao-4-vaultguard)