MCP.Market

Obsidian Secure MCP server

by dewtech-technologies·io.github.dewtech-technologies/obsidian-mcp-secure·v1.0.4
No reviews yet

Secure MCP server for Obsidian with OWASP Top 10 controls and full audit logging.

B74/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B74/100

full report

Adoption
New

0 stars52 downloads/wk

Reviews

Write one

Nobody has reviewed Obsidian Secure yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Obsidian Secure tools (6, 2 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • create_notewrite action

    Cria uma nova nota no Obsidian

  • delete_notewrite action

    Deleta uma nota do vault. ATENÇÃO: ação irreversível.

  • edit_note

    Edita o conteúdo de uma nota existente (substitui o conteúdo inteiro)

  • list_notes

    Lista arquivos e pastas do vault ou de um diretório específico

  • read_note

    Lê o conteúdo de uma nota do Obsidian pelo caminho

  • search_notes

    Busca notas por conteúdo ou tag no vault

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan2 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 147 days ago8/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10
Overall 74/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Obsidian Secure compares

Against every graded Productivity MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
74/100
higher than 38% of 1,297 Productivity servers
Tools
6
the typical Productivity server has 7
Tools that change things
33%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
52
more than 41% of 423 Productivity servers with a package

What its tools let an agent do: 3 read · 1 create · 1 change · 1 delete

Install Obsidian Secure in Claude Code, Cursor or VS Code

Runs npx -y obsidian-mcp-secure on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add obsidian-mcp-secure -- npx -y obsidian-mcp-secure
Add to Cursor

What the publisher says

From the Obsidian Secure repository's README, as published. We do not edit it. Read it on GitHub

obsidian-mcp-secure

Secure Model Context Protocol server that turns your Obsidian vault into a reliable data source for any MCP-compatible AI client — built from scratch with OWASP Top 10 controls and full audit logging.

Listed on the official Anthropic MCP Registry as io.github.dewtech-technologies/obsidian-mcp-secure.

🧭 Positioning — this is NOT a plugin for Obsidian

It's the opposite: it's a bridge that lets Claude Desktop (or any MCP client) read and write inside Obsidian safely. Your AI assistant stays where it lives; your vault becomes a structured, auditable datasource it can reach.

┌─────────────────┐   MCP    ┌──────────────────────┐   HTTP   ┌────────────────────┐   FS   ┌─────────────┐
│                 │  stdio   │                      │  :27123  │                    │        │             │
│ Claude Desktop  │ ───────▶ │ obsidian-mcp-secure  │ ───────▶ │  Local REST API    │ ─────▶ │  Vault .md  │
│  (AI client)    │          │  (this package)      │          │ (Obsidian plugin)  │        │             │
└─────────────────┘          └──────────────────────┘          └────────────────────┘        └─────────────┘

One-liner: Claude is the brain, this MCP is the arm, Obsidian is the memory.

Why another Obsidian + AI integration?

There are plugins that put Claude inside Obsidian. This is the inverse, and it exists because:

  • Your assistant is Claude Desktop — that's where the general-purpose conversations happen. Your notes become one of many contexts Claude can reach, alongside web, GitHub, filesystems, etc.
  • Security is a first-class concern — deliberate attack surface, no shell access, path traversal blocked, inputs validated with Zod, every call audited.
  • Zero build, zero account — npx obsidian-mcp-secure and done. Works on Windows, macOS, Linux the same way.
  • Composability — combine this MCP with fetch, filesystem, git, GitHub, etc., and Claude can cross-reference your vault with external sources in a single conversation.

🛠️ Available Tools

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Obsidian Secure: common questions

Is Obsidian Secure MCP server safe?
Mostly: it is graded B (74/100). Read the Obsidian Secure safety report
How do I install Obsidian Secure?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Obsidian Secure need an API key?
Yes. The registry entry asks for OBSIDIAN_API_KEY.
Is Obsidian Secure maintained?
The last commit was 183 days ago (2026-05-03). The latest release is v1.0.4.
What can I use instead of Obsidian Secure?
Servers from other publishers that do the same job: Obsidian MCP server, Obsidian MCP server and Agent-Native Content MCP server.
How does Obsidian Secure compare with other Productivity MCP servers?
safety score 74/100 (higher than 38% of 1,297 Productivity servers); tools 6 (the typical Productivity server has 7); tools that change things 33% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Obsidian Secure

Same job from other publishers: the closest match first, then the best rated.

  • Obsidian
    MCP server that interacts with Obsidian via the Obsidian rest API community plugin
    A
  • Obsidian
    Read, write, search, and surgically edit Obsidian notes, tags, and frontmatter via MCP.
    A
  • Agent-Native Content
    Open-source Obsidian for MDX - edit local docs with agent assistance
    A
  • Obsidian Hybrid Search
    Search Obsidian vaults with hybrid full-text, fuzzy, semantic, and graph retrieval.
    B
  • DocsAgent — Zotero, Obsidian & Apple Notes MCP Server
    Instant, private access to your knowledge base: Zotero, Obsidian, Apple Notes (macOS).
    B