vaultguard MCP server

by ashishrao-4·io.github.ashishrao-4/vaultguard·v0.1.2

AI agents use your Obsidian secrets by name — values never reach their context.

B83/100grade B

What users say

No reviews yet

Safety scan

B83/100

Adoption

Growing

0 stars272 downloads/wk

Reviews

Nobody has reviewed vaultguard yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

get_secret
Decrypt and return one secret value by name. Prefer passing secrets into commands with run_with_secret instead of reading them here.
list_secrets
List the names of secrets available in the Obsidian vault. Returns only names, never values.
run_with_secretwrite action
Run a shell command with secrets injected into its environment as variables. The secret values are never echoed back to the caller.

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

no findings

Code scan8 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 1 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Runs npx -y @ashishrao-4/vaultguard on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add vaultguard -- npx -y @ashishrao-4/vaultguard

Is vaultguard MCP server safe?: Mostly: it is graded B (83/100). Read the vaultguard safety report
How do I install vaultguard?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does vaultguard need an API key?: Yes. The registry entry asks for VAULTGUARD_PASSPHRASE.
Is vaultguard maintained?: The last commit was 2 days ago (2026-09-18). The latest release is v0.1.2.
What can I use instead of vaultguard?: Servers from other publishers that do the same job: Slack channel name shape, value discarded MCP server, Obsidian MCP server and Agent-Native Content MCP server. Compare all vaultguard alternatives.

Same job from other publishers: the closest match first, then the best rated.

Slack channel name shape, value discarded
Slack channel name shape, value discarded
More from sadri-dridi →
not reviewed
New
A
Obsidian
Read, write, search, and surgically edit Obsidian notes, tags, and frontmatter via MCP.
not reviewed
Established
A
Agent-Native Content
Open-source Obsidian for MDX - edit local docs with agent assistance
not reviewed
Established
A
Obsidian Hybrid Search
Search Obsidian vaults with hybrid full-text, fuzzy, semantic, and graph retrieval.
not reviewed
Established
B
Exomem
Local Markdown/Obsidian knowledge substrate for MCP agents with governed memory and hybrid search.
not reviewed
Established
A

Local package. It runs on your machine, not through the gateway.

VAULTGUARD_PASSPHRASEsecretPassphrase that decrypts the encrypted secret blocks in your Obsidian vault.
VAULTGUARD_VAULT_PATHPath to your Obsidian vault (overrides the one in ~/.vaultguard/config.json).
VAULTGUARD_HOMEConfig directory (defaults to ~/.vaultguard).
VAULTGUARD_ALLOW_GET_SECRETSet to 1 to enable get_secret (default: disabled so values never reach the agent).

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/ashishrao-4-vaultguard.svg)](https://mcp.market/server/ashishrao-4-vaultguard)