← Back to search

@wirux/mcp-markdown-vault

GitHub Actions Scanned 14d ago

Headless semantic MCP server for Obsidian, Logseq, Dendron and any markdown-based knowledge base

B
75 / 100

Versions

2.3.0latest
Jun 2, 2026
2.2.0
May 27, 2026
2.1.0
May 27, 2026
2.0.1
May 25, 2026
2.0.0
May 13, 2026
+ show 21 moreshow less
1.10.1
May 13, 2026
1.10.0
May 12, 2026
1.9.1
May 7, 2026
1.9.0
May 7, 2026
1.8.2
Apr 15, 2026
1.8.1
Apr 15, 2026
1.8.0
Apr 15, 2026
1.7.9
Apr 14, 2026
1.7.4
Apr 14, 2026
1.7.3
Apr 14, 2026
1.7.2
Apr 14, 2026
1.7.1
Apr 14, 2026
1.7.0
Apr 14, 2026
1.6.0
Apr 13, 2026
1.5.0
Apr 13, 2026
1.4.0
Apr 13, 2026
1.3.0
Apr 13, 2026
1.2.0
Apr 13, 2026
1.1.0
Apr 13, 2026
1.0.4
Apr 13, 2026
1.0.0
Apr 12, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 5

vault
annotations: none low

Manage vault notes. Vault scope: ${vaultScope}. Actions: list (browse notes), read (full note), create/update/delete (whole-file writes), stat (metadata), create_from_template (scaffold from template). For search strategy and conventions, read vault://overview.

path string action enum content string directory string variables record templatePath string
edit
annotations: none low

Edit notes safely. Vault scope: ${vaultScope}. Supports AST edits by heading/block ID, freeform line/string replacement, frontmatter_set metadata merges, batch operations (max 50), and dryRun=true unified diff previews. Read vault://overview for editing strategy and conventions.\n\nTIPS: Always use dryRun=true before destructive operations (delete, replace). Use bulk_read for reading 2+ files. Use view.outline before heading-specific edits when unsure of heading names. string_replace requires exact literal match including whitespace/newlines.

path string dryRun boolean blockId string content string endLine number heading string operation enum startLine number operations array replaceAll boolean searchText string replaceMode enum headingDepth number returnContent enum
view
annotations: none low

Read and search markdown notes. Vault scope: ${vaultScope}.\nActions: search (heading-aware fragment retrieval with TF-IDF + proximity), semantic_search (vector + lexical hybrid for conceptual queries), global_search (cross-vault exact-match grep), outline (file or directory structure tree), read (full file or single section by heading), frontmatter_get (parse YAML frontmatter), bulk_read (read multiple files/headings in one call), backlinks (find all notes linking to a given path).

path string items array query string action enum heading string directory string maxChunks number headingDepth number
workflow
annotations: none low

Manage optional agent workflow state for this vault (${vaultScope}): status, transition, history, reset. Typical flow: search → open_note → save → done; read vault://overview for usage guidance.

action enum transition string
system
annotations: none low

System administration for this vault (${vaultScope}). Actions: status (indexing/backlinks/workflow health), reindex (async rebuild), overview (folder tree), overview_status (meta/overview.md state), prepare_overview (gather evidence), save_overview (persist host-written overview).

scope string action enum maxDepth number overview string

Permissions 2

network medium
Server uses network capabilities via: fetch()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 23

low
Tool 'vault' has no annotations annotation_checker · 100%
low
Tool 'edit' has no annotations annotation_checker · 100%
low
Tool 'view' has no annotations annotation_checker · 100%
low
Tool 'workflow' has no annotations annotation_checker · 100%
low
Tool 'system' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: js-yaml@4.1.1 (GHSA-52cp-r559-cp3m) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.1 (GHSA-5p4m-2wfm-xmqj) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.1 (GHSA-h67p-54hq-rp68) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: vault manifest_parser · 85%
info
Tool: edit manifest_parser · 85%
info
Tool: view manifest_parser · 85%
info
Tool: workflow manifest_parser · 85%
info
Tool: system manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (14) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'edit': Directive language: 'always' poisoning · 85%
info
SBOM generated: 733 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%