
Product
Socket Firewall Now Blocks Malicious VS Code and Open VSX Extensions
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.
Obsidian MCP server for Claude — filesystem-direct vault access, 575× smaller payloads than the REST plugin.
The Obsidian MCP server for Claude — search and edit your vault without burning context.
Seekstone is an Obsidian MCP server that gives Claude (and any Model Context Protocol client) direct read and write access to your Obsidian vault. No Obsidian app needs to be running, no plugins are required, and nothing leaves your machine.
It reads your vault directly from disk instead of routing through the Obsidian Local REST API plugin. The practical difference: a search that returns ~1.75 MB and ~459,000 tokens via the REST plugin returns ~3 KB and ~800 tokens via Seekstone — a ~575× reduction. Claude can search and read your entire note library without burning most of its context window on a single tool call.
Two npm names, one server:
| Package | Best for |
|---|---|
obsidian-mcp-seekstone | Searching npm for "obsidian mcp" |
seekstone | Shorter name if you already know it |
Choose the method that suits you best.
Download seekstone.mcpb from GitHub Releases, double-click it in Claude Desktop, and pick your Obsidian vault folder when prompted. No JSON editing, no terminal, no Node.js setup required.
Run the setup helper and let Seekstone find your vault automatically:
npx -y obsidian-mcp-seekstone init
Seekstone reads Obsidian's own vault registry to detect your vault, validates it, and either prints the config to paste or patches Claude Desktop directly:
# Auto-detect vault, print config to paste
npx -y obsidian-mcp-seekstone init
# Auto-detect vault, patch Claude Desktop in place (with backup)
npx -y obsidian-mcp-seekstone init --write
# Specify vault explicitly if you have multiple
npx -y obsidian-mcp-seekstone init --vault "/path/to/vault"
# Generate the Claude Code command instead
npx -y obsidian-mcp-seekstone init --client code
Add to claude_desktop_config.json (Settings → Developer → Edit Config):
{
"mcpServers": {
"seekstone": {
"command": "npx",
"args": ["-y", "obsidian-mcp-seekstone"],
"env": { "SEEKSTONE_VAULT": "/absolute/path/to/your/vault" }
}
}
}
claude mcp add seekstone --env SEEKSTONE_VAULT=/absolute/path/to/your/vault -- npx -y obsidian-mcp-seekstone
| Tool | Description |
|---|---|
search | Full-text search. Returns ranked ~200-char excerpts, not full notes. Fuzzy, prefix, and phrase queries. |
read_note | Read the full content of a note by vault-relative path. |
list_notes | List notes, optionally filtered by folder prefix or tag. |
create_note | Create a note (optional frontmatter + body); parent dirs created automatically. |
delete_note | Permanently delete a note. |
move_note | Move/rename a note; destination dirs created automatically. |
append_note | Append to a note body without touching frontmatter. |
patch_frontmatter | Set/update/delete frontmatter keys without reordering existing keys or changing quote style. |
| Env var | Required | Description |
|---|---|---|
SEEKSTONE_VAULT | yes | Absolute path to your Obsidian vault. |
SEEKSTONE_LOG_LEVEL | no | error | warn | info (default) | debug. |
SEEKSTONE_LOG_FILE | no | Absolute path; when set, JSON-line logs are appended here (size-rotated). |
SEEKSTONE_WATCH_POLL | no | Set to 1 to stat-poll for changes instead of native OS events — reliable on network drives, WSL, containers. |
Does the Obsidian app need to be running? No — Seekstone reads the vault folder from disk directly.
Do I need the Local REST API plugin? No — Seekstone bypasses it entirely (that's where the 575× reduction comes from).
How does seekstone init find my vault automatically?
It reads Obsidian's own vault registry (obsidian.json) — the same file Obsidian uses to track your known vaults. One vault → auto-selected. Multiple → lists them and asks you to pick with --vault.
What is the .mcpb file?
An MCP Bundle — a zip containing the server and its manifest. Claude Desktop installs it with a double-click, no terminal required.
Which AI clients does it support? Any MCP-over-stdio client: Claude Desktop, Claude Code, Cursor, Windsurf, Continue, and others.
Does it work on Windows? Yes — tested on macOS, Linux, and Windows in CI on every commit.
Is it safe? No network calls, no telemetry. The vault path is sandboxed — no tool reads or writes outside it.
.mcpb bundle has no external requirements)FAQs
Obsidian MCP server for Claude — filesystem-direct vault access, 575× smaller payloads than the REST plugin.
The npm package seekstone receives a total of 976 weekly downloads. As such, seekstone popularity was classified as not popular.
We found that seekstone demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.

Research
More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.

Research
/Security News
A new npm package tests AI malware scanners with prompt injection, safety-triggering comments, context flooding, and obfuscated JavaScript.