
MCPVault: Obsidian MCP Server Setup for Claude, Cursor and Other Apps
Lets Claude, Cursor and other apps read, search and edit the notes in your Obsidian vault.
MCPVault is a community server that gives your assistant access to the notes in an Obsidian vault. It runs on your computer and reads the vault files directly, so Obsidian does not need to be open and no plugin is needed. You pass it the path to your vault, and it stays inside that folder. You can start it read-only so the assistant cannot change notes.
Good for
- Obsidian users who want an assistant to search and summarize their notes
- People who want edits kept to one folder, with a read-only option
- Developers who keep project notes in a vault and use Claude Code or Cursor
Works in
12 should work
Tap an app to see how to set it up and any known problems.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Client does not support this transport.
Client does not support this transport.
Install mcpvault MCP
Claude Code
- 1
Copy this prompt.
Add the mcpvault MCP server to Claude Code. Run this command: claude mcp add mcpvault -- npx -y @bitbonsai/mcpvault /path/to/your/vault Then check that it loaded and tell me if I need to sign in or restart.
- 2
Paste it into Claude Code. It shows the change and asks before running it.
Requires Node.js, Node.js 22.12+, Path to your Obsidian vault.
Read-only mode: Add --read-only after the vault path. The seven tools that change notes are hidden and rejected.
Replace /path/to/your/vault with the folder of your Obsidian vault. The server will not start without it. The README gives configs for several apps using npx @bitbonsai/mcpvault@latest <vault path>; these configs use the same package and are adapted by us.
Built from the package data we hold. Not yet tested by us.
Tools
Finds notes by their text or properties
Searches note content, and optionally frontmatter, with multi-word matching. You can limit it to a folder or skip folders. Returns 5 results by default and 20 at most.
Try: “Find my notes that mention the Q3 launch.”
Files ·
search_notesOpens one note
Returns the content and frontmatter of a note in your vault.
Try: “Read my note project-ideas.md.”
Files ·
read_noteOpens up to 10 notes at once
Reads several notes in one call, with options to leave out content or frontmatter.
Try: “Read these three meeting notes.”
Files ·
read_multiple_notesLists files and folders
Lists what is in a vault folder, including files that are not notes.
Try: “List the files in my Projects folder.”
Files ·
list_directoryShows the headings of a note
Returns the heading structure with levels and line numbers, so large notes can be read in parts.
Try: “Show the outline of my thesis note.”
Files ·
get_note_outlineReads a range of lines from a note
Reads only the lines you ask for, after you find them in the outline.
Try: “Read lines 40 to 80 of my thesis note.”
Files ·
read_note_linesReads a note's properties only
Returns the frontmatter of a note without its content.
Try: “What are the properties on my reading-list note?”
Files ·
get_frontmatterGets details of notes without their content
Returns metadata for the notes you name.
Try: “When were these notes last changed?”
Files ·
get_notes_infoShows the size of your vault
Returns note and folder counts, total size and recently changed files.
Try: “How big is my vault?”
Files ·
get_vault_statsLists every tag with counts
Returns frontmatter tags and inline hashtags across the vault, most used first.
Try: “What tags do I use most?”
Files ·
list_all_tagsOpens a note from a [[wiki link]]
Resolves an Obsidian link such as [[Document Name]] to a note and returns alternatives when the name is ambiguous.
Try: “Open [[Weekly Review]].”
Files ·
wiki_linkCreates or edits a note
Writes a note with overwrite, append or prepend mode, optionally with frontmatter. Overwrite replaces the note.
Try: “Create a note with today's date and my to-dos.”
Write ·
write_noteReplaces text inside a note
Swaps one exact piece of text for another. It fails when the text matches more than once, unless you allow replace-all.
Try: “Change "draft" to "final" in the report note.”
Write ·
patch_noteChanges a note's properties
Updates frontmatter, merging with existing fields by default, without touching the content.
Try: “Set status to done on this note.”
Write ·
update_frontmatterAdds, removes or lists tags on a note
Adds or removes tags on one note, or lists its tags.
Try: “Add the tag #review to this note.”
Write ·
manage_tagsMoves or renames a note
Moves a note to a new path. Overwriting an existing file needs an explicit option.
Try: “Move this note into the Archive folder.”
Write ·
move_noteMoves or renames any file
Moves a non-note file too. You must repeat both paths to confirm.
Try: “Move image.png into attachments.”
Write ·
move_fileDeletes a note
Deletes a note after you confirm its path. It can delete permanently, move to a .trash folder in the vault, or move to the system trash. Permanent deletion is the default.
Try: “Delete the old-draft note and move it to the trash.”
Delete ·
delete_note
Read from the source code
Permissions
high risk · 2 things to watch · 3 advisories
High risk
It can overwrite and permanently delete notes in the vault you point it at. Start it with the read-only option unless the assistant needs to edit, and keep your vault backed up.
What it can do
- Read your data
- Create and change things
- Delete things
- Read-only modeHow to turn it on
Watch out for
It can delete and overwrite your notes
Delete is permanent by default, and writing in overwrite mode replaces a note. Use --read-only, or keep your vault in git or backups. github.com
Access is limited to the vault folder
The README says it blocks path traversal, symlink escapes, dotfiles and the .obsidian, .git and node_modules folders. Everything else in the vault is readable. github.com
Security advisories
3 known advisories, all fixed in a newer version.
- Vault boundary bypass when writing through unresolved symlink pathsmedium · Fixed in 0.17.1 · GHSA-97wj-cq79-2crq
- MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nestedmedium · Fixed in 0.11.5 · GHSA-9c83-rr99-vfwj
- MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalencemedium · Fixed in 0.11.4 · GHSA-j99q-93c9-h869
Technical details
| Turning on read-only | Add --read-only after the vault path. Seven tools that change notes are then hidden and rejected. |
|---|---|
| Sign-in and keys | No sign-in or key. It reads the folder you pass on the command line. |
Questions
Is MCPVault the official Obsidian MCP server?
No. It is a community project by BitBonsai, not made by the Obsidian team.
Do I need an Obsidian plugin or Obsidian open?
No. It reads and writes the vault files directly, so Obsidian does not need to be running and no plugin is required.
Do I need an API key?
No. It runs locally and needs only the path to your vault.
Can I run it read-only?
Yes. Add the read-only option after the vault path and the seven tools that change notes are hidden and rejected.
Which apps does it work with?
The README gives configs for Claude Desktop, Claude Code, ChatGPT Desktop (Enterprise and above), OpenCode, Gemini CLI, Codex, IntelliJ IDEA 2025.1+, Cursor, Windsurf and Ontheia. Any app that runs local stdio servers can use it.
What Node.js version do I need?
Node.js 22.12.0 or later, according to the README.
Does delete_note remove notes for good?
By default, yes. You can ask for a move to a .trash folder inside the vault or to the system trash instead.
Information
updated Nov 2, 2026
- Publisher
- Community
- Package
@bitbonsai/mcpvault- Registry
- npm
- Transport
- stdio
- Auth
- None
- Version
- 0.18.0
- License
- MIT
- Last commit
- Oct 31, 2026
- Open issues
- 10
Sources
Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.
Show all 2Hide
- github.com · github.com
- www.npmjs.com · npmjs.com