obsidian-mcp-sb

The server is intentionally designed as read-only, preventing any modifications to the user's Obsidian vault. It communicates via standard I/O (stdio), which limits direct network attack surface. Robust path traversal protection is implemented to ensure file access is restricted to the designated vault directory. File indexing is subject to a configurable maximum file size (default 10MB) to prevent resource exhaustion. All incoming API parameters (e.g., note types, statuses, categories, dates) undergo strict validation to prevent injection or unexpected behavior. No 'eval' or suspicious obfuscation was identified, nor were any hardcoded secrets. SQLite with WAL mode is used for efficient and concurrent database operations.