Basalt MCP

A security-hardened MCP server that enables AI models to safely interact with Obsidian vaults through sandboxed file operations and todo tracking. It implements strict validation layers and resource limits to protect the local filesystem from potentially hostile tool calls.

→ cmillstead/basalt-mcp · listed on glama

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Reads files from sensitive locations

Touches: /etc/passwd

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/cmillstead-basalt-mcp-1h94uv)](https://m8ven.ai/mcp/cmillstead-basalt-mcp-1h94uv)

commit: b02e68cddd0302fe8948c3202c07ea38e5060e84

code hash: ab280a1751f2c41ed5214091aba17546624ce60a64081d7e8edb85172805bd2d

verified: 4/11/2026, 2:57:53 PM

view raw JSON →