← Back to search

@wirux/mcp-markdown-vault

GitHub Actions Scanned 21h ago

Headless semantic MCP server for Obsidian, Logseq, Dendron and any markdown-based knowledge base

C
71.5 / 100

Versions

No versions found.

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 5

vault
annotations: none low

Manage vault notes. Vault scope: ${vaultScope}. Actions: list (browse notes), read (full note), create/update/delete (whole-file writes), stat (metadata), create_from_template (scaffold from template). For search strategy and conventions, read vault://overview.

path string action enum content string directory string variables record templatePath string
edit
annotations: none low

Edit notes safely. Vault scope: ${vaultScope}. Supports AST edits by heading/block ID, freeform line/string replacement, frontmatter_set metadata merges, batch operations (max 50), and dryRun=true unified diff previews. Read vault://overview for editing strategy and conventions.\n\nTIPS: Always use dryRun=true before destructive operations (delete, replace). Use bulk_read for reading 2+ files. Use view.outline before heading-specific edits when unsure of heading names. string_replace requires exact literal match including whitespace/newlines.

path string dryRun boolean blockId string content string endLine number heading string operation enum startLine number operations array replaceAll boolean searchText string replaceMode enum headingDepth number returnContent enum
view
annotations: none low

Read and search markdown notes. Vault scope: ${vaultScope}.\nActions: search (heading-aware fragment retrieval with TF-IDF + proximity), semantic_search (vector + lexical hybrid for conceptual queries), global_search (cross-vault exact-match grep), outline (file or directory structure tree), read (full file or single section by heading), frontmatter_get (parse YAML frontmatter), bulk_read (read multiple files/headings in one call), backlinks (find all notes linking to a given path).

path string items array query string action enum heading string directory string maxChunks number headingDepth number
workflow
annotations: none low

Manage optional agent workflow state for this vault (${vaultScope}): status, transition, history, reset. Typical flow: search → open_note → save → done; read vault://overview for usage guidance.

action enum transition string
system
annotations: none low

System administration for this vault (${vaultScope}). Actions: status (indexing/backlinks/workflow health), reindex (async rebuild), overview (folder tree), overview_status (meta/overview.md state), prepare_overview (gather evidence), save_overview (persist host-written overview).

scope string action enum maxDepth number overview string

Permissions 2

network medium
Server uses network capabilities via: fetch()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 25

medium
Vulnerable dependency: js-yaml@4.1.1 (GHSA-5p4m-2wfm-xmqj) dependency_analyzer · 95%
low
Tool 'vault' has no annotations annotation_checker · 100%
low
Tool 'edit' has no annotations annotation_checker · 100%
low
Tool 'view' has no annotations annotation_checker · 100%
low
Tool 'workflow' has no annotations annotation_checker · 100%
low
Tool 'system' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: js-yaml@4.1.1 (GHSA-2883-xcg3-v3hh) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.1 (GHSA-52cp-r559-cp3m) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.1 (GHSA-h67p-54hq-rp68) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.1.4 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: vault manifest_parser · 85%
info
Tool: edit manifest_parser · 85%
info
Tool: view manifest_parser · 85%
info
Tool: workflow manifest_parser · 85%
info
Tool: system manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (14) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'edit': Directive language: 'always' poisoning · 85%
info
SBOM generated: 733 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%