
Obsidian Mcp Secure
Connects Claude Desktop to your Obsidian vault through the Local REST API plugin, exposing nine tools for reading, writing, searching, and managing markdown notes. Security is the headliner here: path traversal blocks, Zod validation on every input, 512 KB file caps, explicit confirmation required for deletes, and full audit logging via winston. Works via stdio, runs with npx, and pairs well with the fetch MCP if you want Claude to cross-reference your notes against live web sources in a single conversation. The architecture is deliberate: Claude stays in Desktop, this server acts as the gate, Obsidian becomes a structured datasource instead of the UI where the AI lives.
- tools
- 9
- auth
- Secret needed
- transport
- STDIO
- env vars
- 4
- last updated
- Apr 24, 2026
Tools
9 toolsPublic tool metadata for what this MCP can expose to an agent.
read_noteRead a note by path
Read a note by path
No parameter schema in public metadata yet.
list_notesList files/folders in the vault or a subdirectory
List files/folders in the vault or a subdirectory
No parameter schema in public metadata yet.
create_noteCreate a new .md note
Create a new .md note
No parameter schema in public metadata yet.
edit_noteOverwrite an existing note (previous content goes to the audit log)
Overwrite an existing note (previous content goes to the audit log)
No parameter schema in public metadata yet.
delete_noteDelete a note — requires confirm: true (Zod rejects otherwise)
Delete a note — requires confirm: true (Zod rejects otherwise)
No parameter schema in public metadata yet.
search_notesFull-text / tag search using Obsidian's own search engine
Full-text / tag search using Obsidian's own search engine
No parameter schema in public metadata yet.
find_note_by_nameFind notes by partial name — case-insensitive, no exact path needed
Find notes by partial name — case-insensitive, no exact path needed
No parameter schema in public metadata yet.
list_tagsEnumerate all tags in the vault with usage count; sortable by name or frequency
Enumerate all tags in the vault with usage count; sortable by name or frequency
No parameter schema in public metadata yet.
create_backlinksAdd [[wikilinks]] to a ## Relacionadas section in a note — explicit and auditable
Add [[wikilinks]] to a ## Relacionadas section in a note — explicit and auditable
No parameter schema in public metadata yet.
Sponsors
Configuration
OBSIDIAN_API_KEY*secretAPI Key generated by Obsidian's Local REST API plugin (Settings -> Local REST API -> API Key)
OBSIDIAN_HOSTdefault: http://127.0.0.1Host of the Local REST API (default: http://127.0.0.1)
OBSIDIAN_PORTdefault: 27123Port of the Local REST API (default: 27123)
LOG_DIRdefault: ./logsDirectory for audit logs (default: ./logs)
Readme
Details
- Repository
- github.com/dewtech-technologies/obsidian-mcp-secure
- Categories
- Documents & Knowledge, Security & Pentesting
- Package
obsidian-mcp-secure- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active