Obsidian Mcp Secure

Connects Claude Desktop to your Obsidian vault through the Local REST API plugin, exposing nine tools for reading, writing, searching, and managing markdown notes. Security is the headliner here: path traversal blocks, Zod validation on every input, 512 KB file caps, explicit confirmation required for deletes, and full audit logging via winston. Works via stdio, runs with npx, and pairs well with the fetch MCP if you want Claude to cross-reference your notes against live web sources in a single conversation. The architecture is deliberate: Claude stays in Desktop, this server acts as the gate, Obsidian becomes a structured datasource instead of the UI where the AI lives.