Obsidian Sync MCP

MCP server for Obsidian — access your vault from any AI agent, even when your machine is off. Powered by Self-hosted LiveSync.

→ es617/obsidian-sync-mcp · listed on glama

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Known vulnerabilities in dependencies: 3 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 3 credentials: COUCHDB_PASSWORD, MCP_AUTH_TOKEN, password

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configBASE_URL— e =https://your-server-url \

configCOUCHDB_DATABASE— e =obsidian -e VAULT_NAME=MyVault \

configCOUCHDB_OBFUSCATE_PROPERTIES— CouchDB mode false Set to true if "Obfuscate Properties" is enabled in LiveSync (obfuscates file paths, sizes, dates in the database)

configCOUCHDB_PASSPHRASE— e =your-encryption-passphrase \

🔐 secretCOUCHDB_PASSWORD— e COUCHDB_USER=admin -e =yourpassword \

configCOUCHDB_URL— e =https://your-couchdb:5984 \

configCOUCHDB_USER— e =admin -e COUCHDB_PASSWORD=yourpassword \

configDATA_DIR— v mcp-data:/data -e =/data \

configHOST— Optional 0.0.0.0 Bind address (127.0.0.1 to restrict to localhost)

configLOG_LEVEL— Optional — Set to debug for verbose logging (library logs, change feed, index sync)

🔐 secretMCP_AUTH_TOKEN— e =yourpassword \

configMCP_REFRESH_DAYS— Optional 14 Days before auth session expires

configPORT— BASE_URL Optional http://localhost: Public URL (for OAuth callbacks when using a tunnel)

configVAULT_NAME— e COUCHDB_DATABASE=obsidian -e =MyVault \

configVAULT_PATH— ~/Documents/MyVault \

configdatabase— Filesystem mode — reads .md files directly from your vault folder. No needed.

confighostname

configpassphrase— The script asks for your CouchDB connection details, vault name, and encryption .

🔐 secretpassword— 3. The MCP_AUTH_TOKEN is the you enter when an agent connects

configuri_passphrase

configusername— COUCHDB_USER CouchDB mode admin CouchDB

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/es617-obsidian-sync-mcp-16zcr1)](https://m8ven.ai/mcp/es617-obsidian-sync-mcp-16zcr1)

commit: 58f1faf1708224aea3b89bbcc1e458fbbf1286c8

code hash: f1fcc4e420b81d1aa92de70157aea77d5eea1c0991eb472a932d4be51de37429

verified: 4/11/2026, 2:21:46 PM

view raw JSON →