mcp-obsidian

The server demonstrates a strong focus on security, crucial for interacting with personal knowledge bases. It explicitly prevents path traversal with `resolvePath` checks, filters access to sensitive directories like `.obsidian`, `.git`, and `node_modules` via `PathFilter`, and whitelists file extensions (`.md`, `.markdown`, `.txt`). Frontmatter input is validated to prevent dangerous YAML structures (functions, symbols) and ensure data integrity. Destructive operations like `delete_note` require explicit confirmation. Communication occurs over stdio, limiting network exposure. The `README` and `SECURITY.md` are thorough in outlining security measures and best practices. No `eval` or unsafe command execution patterns were found. This server is designed for safe operation within its defined scope.