MCP-server-for-notes
by Nsujatno
Overview
This server reformats messy brain dump notes into clean Markdown and saves them directly to an Obsidian vault using Claude's AI capabilities.
Installation
uv run python main.pyEnvironment Variables
- OBSIDIAN_VAULT_PATH
Security Notes
The server has critical path traversal vulnerabilities. The `create_note`, `append_to_note`, and `list_notes` functions do not properly validate paths derived from user/AI input (filename, folder). If an attacker or a misbehaving AI provides input like `../../sensitive_file.txt` for `filename` or `../` for `folder`, the server could potentially write to, append to, or list files/directories outside the specified `OBSIDIAN_VAULT_PATH`. While `get_note` includes a necessary `is_relative_to` check, this crucial validation is missing from other file-modifying and listing functions. This poses a significant risk to the integrity and confidentiality of files on the host system.
Similar Servers
mcp-obsidian
Provides a secure, universal AI bridge for Obsidian vaults, enabling MCP-compatible AI assistants to read, write, and manage notes.
obsidian-mcp-plugin
This plugin connects your Obsidian vault to AI assistants through MCP (Model Context Protocol), enabling them to understand and navigate your notes as a connected knowledge graph.
obsidian-mcp-server
Enables AI assistants to interact with and manage an Obsidian markdown vault via the Model Context Protocol (MCP).
ObsidianMate
An intelligent, AI-powered assistant designed to supercharge Obsidian note-taking workflows.