Obsidian Turbocharged MCP Server: Tools, Setup for Claude Code, Cursor & More
Governed Obsidian vault access: hybrid retrieval, Markdown-native memory, HITL confirmations.
Works in
12 should work
Tap an app to see how to set it up and any known problems.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Client does not support this transport.
Client does not support this transport.
Install Obsidian Turbocharged MCP
Claude Code
- 1
Copy this prompt.
Add the Obsidian Turbocharged MCP server to Claude Code. Run this command: claude mcp add obsidian-turbocharged -e OBSIDIAN_TC_CONFIG=<OBSIDIAN_TC_CONFIG> -- npx -y obsidian-tc Ask me for OBSIDIAN_TC_CONFIG and only put the values in that config, nowhere else. Then check that it loaded and tell me if I need to sign in or restart.
- 2
Paste it into Claude Code. It shows the change and asks before running it.
Requires Node.js.
Built from the package data we hold. Not yet tested by us.
Tools
We don't list Obsidian Turbocharged MCP's tools here yet. After you connect it, ask your assistant "What can you do with Obsidian Turbocharged MCP?" to see them.
Security advisories
7 advisories
7 known advisories, all fixed in a newer version.
- obsidian-tc HTTP transport lacks Origin/DNS-rebinding protection, enabling drive-by vault access on loopbackcritical · Fixed in 1.3.1 · GHSA-pqh8-4pj7-32xx
- obsidian-tc tokens can access arbitrary configured vaultscritical · Fixed in 1.3.1 · GHSA-84c9-qqpq-2pq5
- obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTPhigh · Fixed in 1.31.4 · GHSA-737x-cwfr-5vvc
- obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changeshigh · Fixed in 1.31.4 · GHSA-r3g7-r4hr-m258
- obsidian-tc Bridge tools leak denied-note data via unfiltered sibling fieldsmedium · Fixed in 1.3.1 · GHSA-43r2-c7g8-prc8
Information
updated Nov 2, 2026
- Publisher
- Community
- Package
obsidian-tc- Registry
- npm
- Transport
- stdio
- Version
- 1.33.1
- License
- AGPL-3.0
- Last commit
- Oct 31, 2026
- Open issues
- 5
- Listed in
- Official MCP registry
