obsidian-mcp-tools
Add Obsidian integrations like semantic search and custom Templater prompts to Claude or any MCP client.
No outside reports on file
Only use this if your Obsidian vault contains nothing sensitive and you trust sharing its contents with Claude.
Based on public adoption and transparency signals as of Oct 27, 2026. Our opinion, not a code audit or security guarantee.
What it can access
- Local filesReads local filesNOTED
- Command executionNo shell command runner notedLOW
- Network reachLocal or standard API callsLOW
- CredentialsNo API token requiredLOW
- Package sourceGitHub (jacksteamdev/obsidian-mcp-tools)PUBLIC
Inferred from this listing’s public package details and description. Check the project’s source before installing.
Install
No npm or PyPI package is listed. Install from source: github.com/jacksteamdev/obsidian-mcp-tools ↗
Everything known
We found nothing about this project in the sources we read (last checked 2026-10-30). That does not mean it has no problems.
0 incidents · 0 advisories · 0 news articles · 0 community threads · checked 2026-10-30
Popularity grade: C (from public signals such as stars and downloads, not a code review). Graded 2026-10-27.
Sources we read: OSV, GitHub Advisory Database, CISA Known Exploited Vulnerabilities, 44 security news feeds and our incident library. Last checked 2026-10-30.
About Obsidian MCP Tools
This MCP server connects Claude or other AI tools to Obsidian, a note-taking app. It lets AI search your notes semantically (finding ideas by meaning, not just keywords) and run custom Templater prompts (templates that generate content based on rules you set).
Who it’s for
People who use Obsidian and want Claude to read, search, and help write notes inside their vault. Useful for researchers, writers, and knowledge workers who want AI help within their existing note system.
Alternatives
- Obsidian Web Clipper (built-in): Save web pages directly to Obsidian without AI involvement.
- Readwise integration: Auto-sync highlights from reading into Obsidian without exposing full vault.
- Standard Claude with copy-paste: Manually share specific notes with Claude instead of giving it vault access.
- Local LLMs with Obsidian plugins: Use privacy-focused models that run offline on your machine.
Setup
Check these steps against the project’s own instructions before running anything.
Follow the project's README for installation steps. Typically involves cloning or installing the package, then configuring your MCP client (like Claude Desktop) with the server details in a JSON config file.
Why this grade
Signal-based grade (3/7 points): well starred on GitHub, public source code. This reflects adoption and transparency, not a code review.
Popularity and upkeep
- GitHub stars
- 828
- Listing last refreshed
- 2026-10-27
These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.
Risks to watch for
- Direct vault access: The tool reads your entire Obsidian vault, including private notes, passwords, or sensitive information stored there.
- Templater execution: Custom Templater prompts run on your machine; malicious prompts in notes could execute unintended commands.
- Semantic search leaks: Search queries and note snippets sent to Claude are exposed to Anthropic; use only if you trust sharing vault content.
- AI confusion tricks: Hidden instructions in note titles or content could trick Claude into ignoring your actual requests or changing behavior.
- Local machine access: The server runs locally but could be exploited if your MCP client or Obsidian setup is compromised.
How to lower the risk
Least-privilege permissions
- Create a separate Obsidian vault for AI use; keep sensitive notes elsewhere.
- Limit MCP server permissions to read-only if the tool supports it.
Network isolation
- Run the MCP server only on your local machine; do not expose it over the network.
- Disable cloud sync for the AI-accessible vault if possible.
Monitoring
- Check Claude's conversation logs to see what notes it accessed and quoted.
- Review your Obsidian vault for unexpected changes after AI interactions.
Red flags to watch for
- Unexpected file modifications in your vault after using the tool.
- Claude quoting or acting on content you never asked it to read.
- The tool requesting network access or API keys beyond Obsidian.
Questions
How do I install Obsidian MCP Tools?
Obsidian MCP Tools does not publish a standalone npm or PyPI package. Clone or follow the setup instructions in its source repository at github.com/jacksteamdev/obsidian-mcp-tools.
Are there security reports about Obsidian MCP Tools?
No reports found for this package in our research (last checked 2026-10-30). Obsidian MCP Tools currently holds Grade C (Moderate risk signals) based on public adoption and transparency signals. Key risk areas to watch include direct vault access, templater execution, semantic search leaks.
Is Obsidian MCP Tools actively maintained?
Obsidian MCP Tools has 828 GitHub stars. Our directory data was last refreshed on 2026-10-27. Check recent commit activity, release tags, and open issues at github.com/jacksteamdev/obsidian-mcp-tools before pinning it in production.
What are alternatives to Obsidian MCP Tools?
Notable alternatives to Obsidian MCP Tools include Obsidian Web Clipper, Readwise integration (Auto-sync highlights from reading into Obsidian without exposing full vault), Standard Claude with copy-paste (Manually share specific notes with Claude instead of giving it vault access), Local LLMs with Obsidian plugins (Use privacy-focused models that run offline on your machine). You can also compare Obsidian MCP Tools side by side with other MCP servers in the Related tools section on this page.
README badge and team notes
Maintain or use Obsidian MCP Tools? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.
GitHub README Markdown:
[](https://agentarmorhq.com/skills/jacksteamdev-obsidian-mcp-tools)HTML embed:
<a href="https://agentarmorhq.com/skills/jacksteamdev-obsidian-mcp-tools"><img src="https://agentarmorhq.com/api/badge/jacksteamdev-obsidian-mcp-tools" alt="AgentArmorHQ Risk Grade for Obsidian MCP Tools" height="20" /></a>Terminal check:
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "jacksteamdev-obsidian-mcp-tools"- Compare Obsidian MCP Tools →
- Add to a team allowlist
- Claude and terminal guide →
- Download the PDF guide
Share with your security lead
Need sign-off to use obsidian-mcp-tools? Copy this note for Slack, a ticket or a pull request.
### AgentArmorHQ Security Review Memo: obsidian-mcp-tools
- **Listing URL:** https://agentarmorhq.com/skills/jacksteamdev-obsidian-mcp-tools
- **Type:** App connector
- **Risk Grade:** Grade C (Moderate risk signals)
- **Outside Security Advisories on File:** 0
- **Public Adoption:** 828 GitHub stars
#### Permission & Blast-Radius Signals
- **Local files:** Reads local files
- **Command execution:** No shell command runner noted
- **Network reach:** Local or standard API calls
- **Credentials:** No API token required
- **Package source:** GitHub (jacksteamdev/obsidian-mcp-tools)
#### Recommended Hardened Setup
- **Source Repo:** https://github.com/jacksteamdev/obsidian-mcp-tools
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.
_Based on public adoption and transparency signals as of Oct 27, 2026. Our opinion, not a code audit or security guarantee._Key facts
- Type
- App connector
- Publisher
- jacksteamdev
- Source code
- github.com/jacksteamdev/obsidian-mcp-tools
- Est. context load
- ~1.2k tokens / turn (~7 tool schemas, 0.6% of 200k context)
- Popularity
- 828 GitHub stars
- Last updated
- 2026-10-27
- Last graded
- 2026-10-27
Community
Discussions for Obsidian MCP Tools
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.
Check before you install, in Claude
Your assistant answers Block, Review or No known issues for any package before it installs it.
Get this check inside Claude