46
grade D
3 days ago
mcp_so

mcp-obsidian

MCP Server connected to Obsidian Vault with Local REST API. (re-write it completely with BUN to make it faster and more lightweight)

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Known vulnerabilities in dependencies: 5 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 4 credentials: API_KEY, GITHUB_TOKEN, MCP_HTTP_TOKEN, TEST_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configAPI_HOST
🔐 secretAPI_KEY
configAPI_PORT
configAPI_RETRY_INTERVAL
configAPI_TEST_TIMEOUT
configAPI_URLS
configCLEANUP_ON_FAILURE
configCOMPOSE_PROJECT_NAME
🔐 secretGITHUB_TOKEN
configMCP_HTTP_HOST
configMCP_HTTP_PATH
configMCP_HTTP_PORT
🔐 secretMCP_HTTP_TOKEN
configMCP_TRANSPORTS
configPRUNE_VOLUMES
configREMOVE_IMAGES
configREMOVE_NETWORKS
configREMOVE_VOLUMES
🔐 secretTEST_TOKEN
configWSL_DISTRO_NAME
configWSL_GATEWAY_IP
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/oleksandrkucherenko-mcp-obsidian-via-rest-1lqova)](https://m8ven.ai/mcp/oleksandrkucherenko-mcp-obsidian-via-rest-1lqova)
commit: 2408ca6d99616166237ac259c105b3a0cbd23695
code hash: cbe65a7f0bd3810ce999eba23607563bda13f01f809225343a9b223d58ef67cc
verified: 4/18/2026, 7:08:39 PM
view raw JSON →