Back to MCP Trust Indexm8ven
35
/ 100
1 month ago
glama

ChatGPT Obsidian MCP Proxy

A local proxy that enables ChatGPT to access an Obsidian vault through the Obsidian Local REST API by tunneling via ngrok and adding the API key header.

→ Sumanth1305/chatgpt-obsidian-mcp-proxy· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 1 credential: OBSIDIAN_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies1 medium2 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

mediumhttp-proxy-middleware@3.0.3GHSA-64mm-vxmg-q3vj

http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass

lowhttp-proxy-middleware@3.0.3GHSA-4www-5p9h-95mh

http-proxy-middleware can call writeBody twice because "else if" is not used

lowhttp-proxy-middleware@3.0.3GHSA-9gqv-wp59-fq42

http-proxy-middleware allows fixRequestBody to proceed even if bodyParser has failed

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretOBSIDIAN_API_KEY— your_local_rest_api_key
configOBSIDIAN_TARGET
configPORT
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/sumanth1305-chatgpt-obsidian-mcp-proxy-1e7tc3)](https://m8ven.ai/mcp/sumanth1305-chatgpt-obsidian-mcp-proxy-1e7tc3)
commit: 7c2fe93d50413faab4261f3c63faac7a15be7700
code hash: 5f5b5aecdadc9fa6df61fe8827b41db051bf5690f9d290371484564695212442
verified: 6/25/2026, 9:50:24 AM
view raw JSON →