73
/ 100
12 days ago
glama

some-vault-some-mcp

MCP server that gives AI models read/write access to Obsidian vaults with semantic search, link graph analysis, canvas manipulation, and incremental indexing.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 2 credentials: VAULT_API_KEY, OPENAI_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configEMBEDDING_PROVIDERfastembed fastembed, ollama, openai, or mock
configOLLAMA_URLTo use Ollama instead: docker run ... -e EMBEDDING_PROVIDER=ollama -e =http://ollama:11434 some-vault-some-mcp
configVAULT_MCP_OVERRIDES
configsome_vault_some_mcp_OVERRIDESPath to YAML override file
configVAULT_SOFT_DELETE_IS_PERMANENTfalse true makes delete_note do hard deletes
configMCP_PORT3789 SSE port
configVAULT_BLOCKED_PATH_SUFFIXES
configVAULT_PATH"": "/path/to/your/obsidian/vault"
configLANCE_DB_PATH./data/vault.lance Where the vector index lives
configMCP_TRANSPORTsse sse or stdio
configMCP_HOST127.0.0.1 SSE bind address. Defaults to loopback — set 0.0.0.0 to expose on the network (the Docker image does this explicitly). Binding non-loopback without VAULT_API_KEY logs a warning.
🔐 secretVAULT_API_KEYMCP_HOST 127.0.0.1 SSE bind address. Defaults to loopback — set 0.0.0.0 to expose on the network (the Docker image does this explicitly). Binding non-loopback without logs a warning.
configVAULT_ALLOW_UNAUTH_SSEfalse true exempts the /sse GET from auth — only for clients that cannot send an Authorization header on the SSE stream (Cursor/Claude Code/Claude Desktop all can, so leave false)
🔐 secretOPENAI_API_KEYRequired if provider is openai (requires --extra openai)
configFASTEMBED_MODEL
configFASTEMBED_DIMENSIONS(auto-detected) Override dimension auto-detection
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/russellsch-some-vault-some-mcp-1rnhy0)](https://m8ven.ai/mcp/russellsch-some-vault-some-mcp-1rnhy0)
commit: 5c04b68f0fbe6e263d2fe48140a002e8aa74cf3e
code hash: b77d9ef6ed9422a29dbe430e7df565b637a37c7dcc012862ebd8e0f1d4b98f7f
verified: 7/19/2026, 8:49:53 AM
view raw JSON →