Obsidian (StevenStavrakis) MCP Server

obsidian-mcp npm v1.0.6

Published by stevenstavrakis — no publish provenance and no vendor-owned scope, so the publisher could not be verified. The repository link below is self-declared.

MCP server that lets AI assistants interact with Obsidian vaults.

View on npm ↗ Repository ↗ Raw report (JSON) ↗

Trust grade

100/100

Last scanned 2026-07-22

Trust

A · 100/100

How safe the published surface and source look. Deterministic; every point is auditable.

Capability

Minimal

Blast radius if it went rogue — what the server’s tools could reach. Independent of trust.

Coverage

Metadata

How much the scan could actually inspect. Shallow coverage is stated, never hidden.

A Why this grade

Started at 100 and nothing was deducted: the deterministic scan raised no scored threat in the published surface it inspected (coverage: Metadata — see below for what that scan could and could not see). Capability observations and advisory notes are recorded but never lower the score.

Findings 0

✓ No findings. The scan raised nothing on this surface — see Coverage for how deep it could look.

What this scan could not see

No tools were enumerated, so prompt-injection, capability and toxic-flow analysis had no tool surface to inspect. To grade a package’s real runtime tools, scan the running server: --command "npx -y <package>".
The implementation source was not read — this reflects registry metadata only. Add --online to fetch and analyze the published package source.

Versions

Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.

Version	Score	Findings	Engine	Scanned
`v1.0.6` latest	A 100/100	0	1.5.0	2026-07-22

Embed this score

Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.

Markdown (GitHub README)

[![MCP Trust Score](https://mcptrustchecker.com/registry/obsidian-mcp/badge.svg)](https://mcptrustchecker.com/registry/obsidian-mcp)

HTML

<a href="https://mcptrustchecker.com/registry/obsidian-mcp"><img src="https://mcptrustchecker.com/registry/obsidian-mcp/badge.svg" alt="MCP Trust Score" height="20"></a>

Prefer shields.io styling? Point it at https://mcptrustchecker.com/registry/obsidian-mcp/badge.json via https://img.shields.io/endpoint?url=…

Verify this score yourself

The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.

npx mcptrustchecker scan obsidian-mcp --online

Use the free API → How scoring works

Other implementations of Obsidian 33

Independent packages implementing the same tool, scanned with the same engine. Compare all 34 side by side →

Obsidian (sunub) Source verified npm

@sunub/obsidian-mcp-server

Security scan results for the Obsidian (sunub) MCP server.

Productivity & Workflow Score 100/100 0 findings 58/wk Cap. Minimal

Obsidian (zethictech) Source verified npm

@zethictech/obsidian-mcp

Security scan results for the Obsidian (zethictech) MCP server.

Productivity & Workflow Score 100/100 2 findings 43/wk Cap. High

Obsidian (smith-and-web) Source verified npm

@smith-and-web/obsidian-mcp-server

Security scan results for the Obsidian (smith-and-web) MCP server.

Productivity & Workflow Score 100/100 0 findings 26/wk Cap. Minimal

Obsidian (yanxue06) Source verified npm

@yanxue06/obsidian-mcp

Security scan results for the Obsidian (yanxue06) MCP server.

Productivity & Workflow Score 100/100 0 findings 23/wk Cap. Minimal

Obsidian (pawells) Source verified npm

@pawells/mcp-obsidian

Security scan results for the Obsidian (pawells) MCP server.

Productivity & Workflow Score 100/100 0 findings 4/wk Cap. Minimal

Obsidian (cyanheads) npm

obsidian-mcp-server

Reads, writes, searches, and surgically edits Obsidian vault notes, tags, and frontmatter over MCP, with STDIO or Streamable HTTP transports.

Files & Storage Score 100/100 1 finding 3.4k/wk Cap. High

More in Files & Storage

Add Source verified npm

mcp-add

Security scan results for the Add MCP server.

Files & Storage Score 100/100 0 findings 366/wk Cap. Minimal

Agentmetal npm

@agentmetal/mcp

Security scan results for the Agentmetal MCP server.

Files & Storage Score 100/100 1 finding 74/wk Cap. High

Astro npm

astro-mcp

Security scan results for the Astro MCP server.

Files & Storage Score 100/100 1 finding 1.1k/wk Cap. Moderate

Atp Mcp Adapter Source verified npm

@mondaydotcomorg/atp-mcp-adapter

Security scan results for the Atp Mcp Adapter MCP server.

Files & Storage Score 100/100 0 findings 2.4k/wk Cap. Minimal

Auralis Google npm

auralis-google

Security scan results for the Auralis Google MCP server.

Files & Storage Score 100/100 0 findings Cap. Minimal

Aws npm

@yawlabs/aws-mcp

Security scan results for the Aws MCP server.

Files & Storage Score 100/100 0 findings 267/wk Cap. Minimal