ModelsAtlas
Explore
Atlas / MCP servers / statutecontempt951 / obsidian-llm-wiki

obsidian-llm-wikiBLOCK

mcp/statutecontempt951/obsidian-llm-wiki
MCP server by statutecontempt951 · codex · compiled knowledge · gemini cli · Audited 2026-10-11
⚑ Report / re-scanSource ↗

Convert your Obsidian markdown vault into a six-persona MCP team for local LLM tools to provide cited, accurate insights.

Verdict
BLOCK
Grade
D
Trust score
61 /100
Exposed tools
5 5r · 0w · 0d
Transport
stdio
License
GPL-3.0
Stars
1
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://raw.githubusercontent.com/Statutecontempt951/obsidian-llm-wiki/main/creatures/vault-janitor/obsidianllmwiki_v3.7.zip)

📌 What is this software?

The obsidian-llm-wiki software turns your personal notes into a powerful team of virtual assistants. It reads your markdown vault and creates a structured knowledge base. This base works with AI tools like Claude Code, Codex, and Gemini.

The software acts as a bridge. It takes the ideas you already wrote in Obsidian and lets AI models access them. These models use your specific information to answer questions. They cite your notes to prove their accuracy. They do not guess or halluciation facts. You gain a headless knowledge base that acts as a personal research expert.

🚀 System Requirements

Your computer must meet these basic standards to run this software:

  • Windows 10 or Windows 11.
  • A stable internet connection for the AI tools.
  • At least 4GB of free hard drive space.
  • An existing Obsidian vault with your notes.

📦 How to Install

Visit the official repository page to download the software.

  1. Click the link above to reach the main page.
  2. Look for the "Releases" section on the right side of the screen.
  3. Click the latest version link.
  4. Download the file ending in .exe for Windows.
  5. Save the file to your desktop.

Once the download finishes, double-click the file. Windows might show a security prompt. Click "Run" to continue. The installer will guide you through the setup. Choose a folder where you want to keep the application.

⚙️ Setting Up Your Vault

The software needs to read your notes to function. Follow these steps to connect your vault:

  1. Open the obsidian-llm-wiki application.
  2. Click the "Settings" tab.
  3. Locate the "V
Read from source at commit 0fccd2491969OBSERVED · 2026-10-11
Advertisement
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add mcp --env ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY} --env CIRCLEBACK_API_KEY=${CIRCLEBACK_API_KEY} --env FEISHU_APP_SECRET=${FEISHU_APP_SECRET} --env GMAIL_CLIENT_SECRET=${GMAIL_CLIENT_SECRET} -- npx -y @obsidian-llm-wiki/[email protected]
claude-desktop
{
  "mcpServers": {
    "mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@obsidian-llm-wiki/[email protected]"
      ],
      "env": {
        "ANTHROPIC_API_KEY": "${ANTHROPIC_API_KEY}",
        "CIRCLEBACK_API_KEY": "${CIRCLEBACK_API_KEY}",
        "FEISHU_APP_SECRET": "${FEISHU_APP_SECRET}",
        "GMAIL_CLIENT_SECRET": "${GMAIL_CLIENT_SECRET}"
      }
    }
  }
}
03

Exposed tools (5)

5 read · 0 write · 0 destructive.

ToolRiskDescription
_TEST_VAULT_EMPTYread
_TEST_VAULT_MISSINGread
_TEST_VAULT_PRESENTread
_TEST_VAULT_TOKEN_Areadtest
_TEST_VAULT_TOKEN_ABSENTreadtest
04

Trust audit

BLOCKgrade D · trust 61/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (3 observation(s))
Network
declared (7 observation(s))
Shell
declared (7 observation(s))
Dependencies
not all pinned
Secrets in source
found

Findings (20)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
mcp-server/src/adapters/gitnexus.ts:50
await exec(this.binary, ["--version"], { timeout: 5000 });
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
mcp-server/src/adapters/gitnexus.ts:71
const { stdout } = await exec(this.binary, args, {
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
mcp-server/src/adapters/vaultbrain/pglite-engine.ts:11
exec(sql: string): Promise<unknown>;
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
mcp-server/src/compile-trigger.ts:153
const { stdout } = await exec(this.python, [kbMeta, "diff", this.vaultPath, topic], {
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
mcp-server/src/compile-trigger.ts:215
const { stdout, stderr } = await exec(this.python, args, {
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHHard-coded secrets · secret.db_uri · CWE-798, CWE-321
.env.domestic.example:31
VOILE_DB_URL=postgres://postgres:postgres@localhost:5432/voile
HIGHHard-coded secrets · secret.db_uri · CWE-798, CWE-321
compiler/memu_sync.py:22
--dsn            $MEMU_DSN or postgresql://postgres:postgres@localhost:5432/memu
HIGHHard-coded secrets · secret.db_uri · CWE-798, CWE-321
compiler/memu_sync.py:57
DEFAULT_DSN = "postgresql://postgres:postgres@localhost:5432/memu"
MEDIUMInventory / provenance · inv.binary · CWE-1104
creatures/vault-janitor/obsidian_llm_wiki_v3.7.zip
obsidian_llm_wiki_v3.7.zip
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
compiler/memu_sync.py:59
DEFAULT_OLLAMA_URL = "http://127.0.0.1:11434"
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
mcp-server/src/scripts/sync-vault-to-memu.ts:47
"  --ollama-url URL           default http://127.0.0.1:11434",
MEDIUMHard-coded secrets · secret.db_uri · CWE-798, CWE-321
docs/PERF-MEMU.md:5
- PG: `postgresql://postgres:postgres@localhost:5432/memu` (1059 active gm_nodes, 3087 edges)
MEDIUMHard-coded secrets · secret.db_uri · CWE-798, CWE-321
mcp-server/src/adapters/memu.test.ts:20
*   MEMU_TEST_DSN=postgresql://postgres:postgres@localhost:5432/memu_test \
LOWInventory / provenance · inv.hidden_file · CWE-1104
.env.domestic.example
.env.domestic.example
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
mcp-server/src/index.ts:1159
const compilerPath = resolve(__dirname, "../../compiler");
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
mcp-server/package.json
@electric-sql/pglite, @modelcontextprotocol/sdk, @types/pg, pg, ws, @types/node, @types/ws, esbuild
Why it matters. 9 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427
recipes/gmail-to-vault.md:18
- command: 'curl -sf -X POST https://oauth2.googleapis.com/token -d "client_id=$GMAIL_CLIENT_ID&client_secret=$GMAIL_CLIENT_SECRET&refresh_token=$GMAIL_REFRESH_TOKEN&grant_type=refresh_token" | grep -
Why it matters. an instruction to move sensitive data to an outside destination
Fix. remove; a skill never needs the user's secrets off the machine
INFOInventory / provenance · inv.oversize · CWE-1104
mcp-server/bundle.js
mcp-server/bundle.js
Why it matters. 1145228 bytes not read
INFOPrompt injection · prompt.fetch_and_trust · CWE-94, CWE-1427
recipes/napcat-to-vault.md:37
1. Install NapCatQQ from https://github.com/NapNeko/NapCatQQ (follow release instructions for your QQNT version)
Why it matters. remote text is to be obeyed as instructions
INFOPrompt injection · prompt.persistence · CWE-94, CWE-1427
recipes/x-to-vault.md:44
Add to your shell profile (`~/.bashrc`, `~/.zshrc`, or Windows environment variables):
Why it matters. instructs the agent to persist itself in the user's environment

Gates applied: no_behavioural_pass.

Audited 2026-10-11 · audit v0.4.1 · source sha 0fccd2491969full audit observations/trust-audit/mcp-server/statutecontempt951__obsidian-llm-wiki.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-110fccd2491969BLOCKD61first audit
06

Questions

What is the obsidian-llm-wiki MCP server?

Convert your Obsidian markdown vault into a six-persona MCP team for local LLM tools to provide cited, accurate insights.

What tools does obsidian-llm-wiki expose?

5 in total: 5 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is obsidian-llm-wiki safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (61/100) and found 8 critical or high issues in the source. Each one is listed on this page with the file and line it is on.

What credentials does obsidian-llm-wiki need?

It reads ANTHROPIC_API_KEY, CIRCLEBACK_API_KEY, FEISHU_APP_SECRET, GMAIL_CLIENT_SECRET, GMAIL_REFRESH_TOKEN, LINEAR_API_KEY, NAPCAT_TOKEN, OPENAI_API_KEY, VAULT_MIND_AUTH_TOKEN, WEFLOW_TOKEN and X_BEARER_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does obsidian-llm-wiki run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as @obsidian-llm-wiki/mcp at 0.1.0.

How current is this page?

The grade is for one exact copy of the source (0fccd2491969), read on 2026-10-11. The repository is watched and re-audited when it changes.

Advertisement