Secure MCP server for Obsidian with OWASP Top 10 controls and full audit logging.
Connect Runs on your machine
claude mcp add obsidian-mcp-secure -e OBSIDIAN_API_KEY=<OBSIDIAN_API_KEY> -e OBSIDIAN_HOST=<OBSIDIAN_HOST> -e OBSIDIAN_PORT=<OBSIDIAN_PORT> -e LOG_DIR=<LOG_DIR> -- npx -y [email protected]{
"mcpServers": {
"obsidian-mcp-secure": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"OBSIDIAN_API_KEY": "<OBSIDIAN_API_KEY>",
"OBSIDIAN_HOST": "<OBSIDIAN_HOST>",
"OBSIDIAN_PORT": "<OBSIDIAN_PORT>",
"LOG_DIR": "<LOG_DIR>"
}
}
}
}{
"mcpServers": {
"obsidian-mcp-secure": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"OBSIDIAN_API_KEY": "<OBSIDIAN_API_KEY>",
"OBSIDIAN_HOST": "<OBSIDIAN_HOST>",
"OBSIDIAN_PORT": "<OBSIDIAN_PORT>",
"LOG_DIR": "<LOG_DIR>"
}
}
}
}{
"servers": {
"obsidian-mcp-secure": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"OBSIDIAN_API_KEY": "<OBSIDIAN_API_KEY>",
"OBSIDIAN_HOST": "<OBSIDIAN_HOST>",
"OBSIDIAN_PORT": "<OBSIDIAN_PORT>",
"LOG_DIR": "<LOG_DIR>"
}
}
}
}Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
OBSIDIAN_API_KEYRequired, secret | API Key generated by Obsidian's Local REST API plugin (Settings -> Local REST API -> API Key) |
OBSIDIAN_HOSTOptional | Host of the Local REST API (default: http://127.0.0.1) |
OBSIDIAN_PORTOptional | Port of the Local REST API (default: 27123) |
LOG_DIROptional | Directory for audit logs (default: ./logs) |
Details
| Package | [email protected] (NPM, stdio) |
| First published | 24 Apr 2026 |
| Last updated | 24 Apr 2026 |
| Registry name | io.github.dewtech-technologies/obsidian-mcp-secure |
More productivity servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.