Delv
CommunityActive· 1mo4.3by Markus Pfundstein

Obsidian MCP (MarkusPfundstein)

Interacts with an Obsidian vault over the Local REST API plugin for listing, reading, searching, and managing notes.

C
Safety & Trust

Delv Safety Grade: C

Score 61/100 · assessed 2026-04-28

Maintainer45
Permissions55
Supply chain72
Transparency68
Incidents100

This community MCP server connects Claude to your Obsidian vault via the Local REST API plugin, enabling note reading, searching, creation, and modification. The maintainer is a solo developer with limited public profile and modest repository activity. The server requires an API key and host configuration, suggesting the Local REST API plugin runs as a local HTTP service. Permissions are moderately scoped: it can read and write your entire vault's markdown files, search content, and create new notes. The supply chain is reasonable via uvx/PyPI distribution, and the code is open source with basic documentation. The main risk is filesystem write access to your knowledge base combined with a single maintainer. No known security incidents exist, but the reliance on a third-party Obsidian plugin (Local REST API) adds an additional trust dependency. Suitable for personal use where you trust Claude with vault modification rights.

Lethal Trifecta (prompt-injection exposure)

ONE OF THREE
Private dataYes
Reads secrets, credentials, private files
Untrusted inputNo
Ingests web pages, PRs, issues, emails
External commsNo
Can send data outbound

Same as obsidian.

Green flags

  • Open source with visible Python codebase on GitHub
  • Standard PyPI distribution via uvx reduces supply chain risk
  • Uses API key authentication for local plugin access
  • Clear documentation of required environment variables
  • No known security incidents or malicious activity

Red flags

  • Solo maintainer with limited public track record
  • Full read/write access to entire Obsidian vault
  • Depends on third-party Local REST API plugin for security boundary
  • No apparent rate limiting or scope restrictions on vault operations

Permissions requested

Read filesWrite filesOutbound networkRead env
Assessed by Delv Editorial using public metadata. Grades are advisory and update as the ecosystem changes. They do not replace your own review of permissions and code before granting an agent access to sensitive systems.

Install

uvx mcp-obsidian
Env vars needed: OBSIDIAN_API_KEYOBSIDIAN_HOST

Review

This MCP turns your Obsidian vault into a queryable knowledge base for Claude. It sits on top of the Local REST API plugin, which means you need that installed and running first. Once wired up, you can ask Claude to search your notes, read specific files, create new ones, or answer questions by pulling context from your vault. The workflow I keep coming back to: asking Claude to summarise scattered notes on a topic, then draft a new note synthesising them. It works because Claude can actually read your markdown, follow wikilinks, and write back into the vault without you copy-pasting. The good part is how invisible it becomes once configured. You just chat, and Claude reaches into your notes when it needs to. The search is regex-based, which is powerful if you know what you're doing and annoying if you don't. There's no fuzzy matching, so you need to be precise or cast a wide net with wildcards. The API key setup is straightforward, but you do need to expose Obsidian's REST API to localhost, which some people won't love from a security perspective. It's fine for a local dev machine, less fine if you're on shared infrastructure. Quirks: the Local REST API plugin itself can be a bit temperamental if Obsidian restarts or if you're switching vaults. You'll get cryptic errors until you realise the plugin needs a manual kick. Also, this is strictly for reading and writing markdown. If you're heavy into Dataview queries or complex plugins, Claude won't understand those constructs. It sees raw markdown, nothing more. Who shouldn't bother: anyone not already using Obsidian, or anyone expecting Claude to magically understand their vault structure without clear filenames and folder hierarchies. This is a power tool for people who already have a well-organised vault and want to query it programmatically. If your notes are a mess, Claude will just surface the mess faster.
Verdict

Install this if you live in Obsidian and want Claude to treat your vault as working memory. Skip it if you're not already committed to Obsidian or if your notes are poorly organised. The setup overhead only pays off if you're querying your vault regularly.

Good at

  • Turns your existing Obsidian vault into queryable context without exporting or duplicating notes.
  • Regex search is powerful for developers who know how to wield it.
  • Note creation from chat is surprisingly useful for capturing ideas mid-conversation.
  • Lightweight and doesn't require cloud sync or third-party services.

Watch out

  • Depends on the Local REST API plugin, which can be flaky after Obsidian restarts.
  • No fuzzy search, so you need exact terms or regex patterns to find notes reliably.
  • Only sees raw markdown, so Dataview queries and plugin-specific syntax are invisible to Claude.
  • Exposing a local REST API may not sit well with stricter security setups.

Use cases

  • vault Q&A
  • note creation from chat
  • personal search
  • knowledge workflows

Getting started

1. Install the Local REST API plugin in Obsidian, enable it, and generate an API key in its settings. 2. Run `uvx mcp-obsidian` and add the server to your Claude Desktop config with `OBSIDIAN_API_KEY` and `OBSIDIAN_HOST` (usually `http://127.0.0.1:27123`). 3. Restart Claude Desktop and verify by asking Claude to list files in your vault. 4. Test a search query with a specific term from one of your notes to confirm regex search works. 5. Watch out for the Local REST API plugin going silent after Obsidian restarts. You may need to toggle it off and on again in settings.

Works with

Claude DesktopClaude CodeCursor

Similar MCPs