npm JavaScript analyzed 3.5.2

obsidian-mcp-server

v3.5.2
npm

Read, write, search, and surgically edit Obsidian vault notes, tags, and frontmatter via MCP. STDIO or Streamable HTTP.

maintainer
cyanheads
licence
Apache-2.0
first seen
2026-05-22
last seen
2026-09-11
releases · 30d
12
short id

obsidian-mcp-server is an MCP server distributed on npm, maintained by cyanheads, tracked here since May 2026. It has shipped 77 releases (currently 3.5.2) and exposes 14 tools. Tools include obsidian_append_to_note, obsidian_delete_note, obsidian_execute_command, obsidian_get_note, obsidian_list_commands, obsidian_list_notes, and 8 more. Its composite risk grade is A — an inferred review prompt computed from observed signals, not a verdict.

what we found

Its 14 tools appear to reach shell / exec and network, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-10: 14 tools added and 22 tools removed.

full security breakdown →
tools 14
  • obsidian_append_to_note
  • obsidian_delete_note
  • obsidian_execute_command
  • obsidian_get_note
  • obsidian_list_commands
  • obsidian_list_notes
  • obsidian_list_tags
  • obsidian_manage_frontmatter
  • obsidian_manage_tags
  • obsidian_open_in_ui
  • obsidian_patch_note
  • obsidian_replace_in_note
  • obsidian_search_notes
  • obsidian_write_note
release cadence · 90d 22 releases
06-14 00:00 07-28 00:00 now
recent releases last 10
version date src
v3.5.2 2026-09-09 github
3.5.2 2026-09-09 npm
v3.5.1 2026-09-04 github
3.5.1 2026-09-04 npm
v3.5.0 2026-08-22 github
3.5.0 2026-08-22 npm
v3.4.0 2026-08-22 github
3.4.0 2026-08-22 npm
v3.3.1 2026-08-21 github
3.3.1 2026-08-21 npm

view all →