obsidian-mcp-pro

Item: obsidian-mcp-pro
Rating: 64
Author: M8ven

The most feature-complete MCP server for Obsidian vaults. 23 tools and 3 resources for search, read, write, tags, link analysis, graph traversal, and canvas support.

→ rps321321/obsidian-mcp-pro · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Tool annotations don’t match behaviour

1 read-only tool performs write/delete/exec — get_note (line 55: /^(\d+)(?:-(\d+))?$/.exec(value))

⚠️

Tool descriptions don’t match what handlers do

1 tool describes read intent but its handler mutates — get_note (line 55: /^(\d+)(?:-(\d+))?$/.exec(value))

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 3 credentials: MCP_HTTP_TOKEN, OBSIDIAN_EMBEDDING_API_KEY, OPENAI_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configLOG_FORMAT

configLOG_LEVEL

🔐 secretMCP_HTTP_TOKEN— your-secret npx -y obsidian-mcp-pro --transport=http --port=3333

configOBSIDIAN_CACHE_DISABLED— The embedding cache is vault-local, excluded from vault scans (.obsidian/ is pruned), and can be deleted at any time. Persistence can be turned off with =1.

🔐 secretOBSIDIAN_EMBEDDING_API_KEY— OPENAI_API_KEY falls back if unset or blank Required for hosted providers.

configOBSIDIAN_EMBEDDING_MODEL— nomic-embed-text (Ollama), text-embedding-3-small (OpenAI) if unset or blank Provider-specific model identifier.

configOBSIDIAN_EMBEDDING_PROVIDER— ollama if unset or blank ollama, openai, or none to disable.

configOBSIDIAN_EMBEDDING_URL

configOBSIDIAN_READ_PATHS— Folder-scoped permissions: / OBSIDIAN_WRITE_PATHS allowlists gate every tool at the path-resolution choke point

configOBSIDIAN_VAULT_NAME— 2 Environment variable to select a vault by folder name when multiple vaults exist

configOBSIDIAN_VAULT_PATH— "": "/path/to/your/vault"

configOBSIDIAN_WRITE_PATHS— Folder-scoped permissions: OBSIDIAN_READ_PATHS / allowlists gate every tool at the path-resolution choke point

🔐 secretOPENAI_API_KEY— OBSIDIAN_EMBEDDING_API_KEY falls back if unset or blank Required for hosted providers.

configXDG_CONFIG_HOME

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/rps321321-obsidian-mcp-pro-n2szf1)](https://m8ven.ai/mcp/rps321321-obsidian-mcp-pro-n2szf1)

commit: cc1eef18d6f4059b59478e982cc1ee39ca99dd0d

code hash: 966de90cfc30b66feb19e05049cd4b941a7a82a2805305f480711c7b8894940b

verified: 6/14/2026, 11:05:06 AM

view raw JSON →