io.github.stonematt/mcp-obsidian-cli

io.github.stonematt/mcp-obsidian-cli·v2.0.3·Security

Quality Score

/100

Save chat notes from Claude Desktop to your vault — MCP on Obsidian CLI. Keep what matters.

Repository →

§00 Trust verdict · v1 advisory · method

UNVERIFIEDno verdict on file

Verdict not yet evaluated for this tool. The hybrid eval runs adversarial cases first; coverage rolls out as the corpus expands. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: hybrid eval, four-state verdict, honest limits.

§01 Install

Claude Desktop (claude_desktop_config.json)

{
  "mcpServers": {
    "mcp-obsidian-cli": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-obsidian-cli"
      ],
      "env": {
        "OBSIDIAN_VAULT": "<obsidian_vault>",
        "OBSIDIAN_CLI_PATH": "obsidian-cli",
        "OBSIDIAN_TIMEOUT_MS": "15000"
      }
    }
  }
}

Cursor (.cursor/mcp.json)

{
  "mcpServers": {
    "mcp-obsidian-cli": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-obsidian-cli"
      ],
      "env": {
        "OBSIDIAN_VAULT": "<obsidian_vault>",
        "OBSIDIAN_CLI_PATH": "obsidian-cli",
        "OBSIDIAN_TIMEOUT_MS": "15000"
      }
    }
  }
}

Cline (cline_mcp_settings.json)

npx -y mcp-obsidian-cli

§02 Environment variables

OBSIDIAN_VAULT

Target vault name. If unset or unknown, the server prompts the caller on first tool use, listing the vaults Obsidian knows about.

OBSIDIAN_CLI_PATH

Path to the obsidian-cli binary. Auto-discovered on macOS; set explicitly on Linux/Windows or if the binary is non-standard.

OBSIDIAN_TIMEOUT_MS

Per-command timeout in milliseconds.

§03 MCP Quality Score · methodology

freshness

completeness

installability

documentation

stability

§04 Alternatives in Security

Helixar Security

ai.helixar/mcp

Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.

ai.smithery/Nekzus-npm-sentinel-mcp

Provide AI-powered real-time analysis and intelligence on NPM packages, including security, depend…

app.zenable/zenable

Zenable cleans up sloppy AI code and prevents vulnerabilities with deterministic guardrails