Back to MCP Trust Indexm8ven
54
/ 100
4 days ago
official

sunub/obsidian-mcp-server

Search your Obsidian vault to quickly find notes by title or keyword, summarize related content, a…

→ sunub/obsidian-mcp-server· listed on official
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Officialnpm

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Known vulnerabilities in dependencies: 1 critical, 3 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
// known CVEs in dependencies1 critical3 high

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalvitest@3.2.4GHSA-5xrq-8626-4rwp

When Vitest UI server is listening, arbitrary file can be read and executed

high@modelcontextprotocol/sdk@1.17.5GHSA-345p-7cg4-v4c7

@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse

high@modelcontextprotocol/sdk@1.17.5GHSA-8r9q-7v3j-jr4g

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

high@modelcontextprotocol/sdk@1.17.5GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configFORCE_GENERIC_KEYBINDING_HINTS
configLLM_API_URL— MCP 서버의 Vault 검색/읽기 도구에는 VAULT_DIR_PATH가 핵심 설정입니다. 과 LLM_CHAT_MODEL은 저장소에 포함된 개발용 CLI UI에서 대화형 스트리밍 답변을 받을 때 필요합니다.
configLLM_CHAT_MODEL— llama3 CLI UI 답변 생성 모델명 CLI 사용 시
configLLM_RERANKER_API_URL
configLLM_TIMEOUT_MS
configLOGGING_LEVEL— info debug, info, warn, error 아니오
configNO_COLOR
configOS
configVAULT_DIR_PATH— "": "/Users/username/Documents/MyVault"
configVAULT_METRICS_LOG_PATH
configWT_SESSION
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/sunub-obsidian-mcp-server-355hdt)](https://m8ven.ai/mcp/sunub-obsidian-mcp-server-355hdt)
commit: bbae5aaca3b62287d10727e2c9932dfc57ca4e9a
code hash: df4902c0bb2d1686a45524b4de38338c0ed29e1fd4d91da15bc4fc9c8ae36b61
verified: 7/27/2026, 10:31:07 AM
view raw JSON →