Mcpvault MCP Server

Findings (12)

• highHigh. Something risky that needs a close look before you install.
  dropper issue

  Details are available to the maintainer after claiming this listing.
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  @modelcontextprotocol/client@2.0.0: 2 known vulnerabilities

  GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  @modelcontextprotocol/server@2.0.0: 4 known vulnerabilities

  GHSA-46jr-4wx8-v453, GHSA-f897-62hf-6gxq, GHSA-jm63-cq47-j5jp, GHSA-rvq5-wwqv-78pq

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  js-yaml@3.15.1: 1 known vulnerability

  GHSA-2883-xcg3-v3hh

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  source-map-js@1.2.1: 1 known vulnerability

  GHSA-68fv-2mgg-jv7q

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  vite@8.1.5: 5 known vulnerabilities

  GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  zod@4.3.6: 1 known vulnerability

  GHSA-mrhx-c7xc-m3w5

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  zod@4.4.3: 1 known vulnerability

  GHSA-mrhx-c7xc-m3w5

  website-shibumi/bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  @vitest/mocker@4.1.10: 2 known vulnerabilities

  GHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  vitest@4.1.10: 1 known vulnerability

  GHSA-82fw-gwwq-j7x9

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  hono@4.13.1: 5 known vulnerabilities

  GHSA-5r4p-p66f-jhc7, GHSA-crvj-82cr-hjcx, GHSA-g6gw-c38x-mqfc, GHSA-gqvv-2mrq-wpjv, GHSA-hxh3-vqpv-xpqv

  website-shibumi/bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  No manifest declaring network access and environment variables (agent.json)

Network activity

Tools exposed (18)

• read_note

  Read a note from the Obsidian vault

• write_note

  Write a note to the Obsidian vault

• patch_note

  Efficiently update part of a note by replacing a specific string. This is more efficient than rewriting the entire note for small changes.

• list_directory

  List files and directories in the vault (includes non-note filenames, while read/write tools remain note-only)

• delete_note

  Delete a note from the Obsidian vault (requires confirmation). Supports permanent delete, vault trash, or system trash.

• search_notes

  Search for notes in the vault by content or frontmatter

• move_note

  Move or rename a note in the vault

• move_file

  Move or rename any file in the vault (binary-safe, file-only, requires confirmation)

• read_multiple_notes

  Read multiple notes in a batch (max 10 files)

• update_frontmatter

  Update frontmatter of a note without changing content

• get_notes_info

  Get metadata for notes without reading full content

• get_frontmatter

  Extract frontmatter from a note without reading the content

• manage_tags

  Add, remove, or list tags in a note

• get_vault_stats

  Get vault statistics including total notes, folders, size, and recently modified files. Useful for understanding vault scope before batch operations.

• list_all_tags

  List all tags across the vault with occurrence counts. Returns both frontmatter tags and inline #hashtags, deduplicated and sorted by frequency. Useful for discovering existing tags before creating or organizing notes.

• wiki_link

  Read an Obsidian wiki link. Accepts the same syntax as Obsidian: [[Document Name]] or [[Document Name|Display Text]], including table-authored escapes like [[Document Name\|Display]] and path-qualified links like [[folder/Document Name]]. A #fragment suffix in the input is ignored. Searches the vaul

• get_note_outline

  Get the heading structure of a note without reading its full content. Returns headings with level, text, and line number. Use this first to navigate large notes efficiently, then call read_note_lines to read only the section you need.

• read_note_lines

  Read a specific line range from a note. Use after get_note_outline to read only the section you need instead of the full file.