M
MCP Directory CURATED DIRECTORY
911 MCP servers indexed
中文
← Back to directory
COMPARE UP TO 4 SERVERS

Compare MCP servers

Compare scores, permissions, risks, and fit in one decision-focused table.

DimensionIWETurn a folder of Markdown notes into a queryable knowledge graph for you and your AI agentsObsidian Web MCPSecure remote access to your Obsidian vault over HTTPS with OAuth 2.0 authentication.
FMRS56 / 100 · C68 / 100 · C
Reliability8 / 209 / 20
Security and permissions11 / 2016 / 20
Maintenance13 / 2014 / 20
Documentation13 / 2017 / 20
Setup experience11 / 2012 / 20
Best for
  • Individuals whose knowledge lives in plain markdown files and who value local-first, git-versioned notes.
  • AI agent users who want their note graph as agent memory and want retrieval by structure rather than similarity guessing.
  • Developers and writers who use both an editor LSP workflow and the command line over the same notes.
  • Teams that need agent writes to declare their blast radius and to pass schema and graph-hygiene checks.
  • Users who want secure remote access to their Obsidian vault from any device.
  • Integrating Claude.ai (web) or mobile with Obsidian.
  • Those needing concurrent writes with Obsidian Sync without file conflicts.
Not for
  • People who want a cloud-hosted notes or memory service with no local file directory.
  • Users expecting the server to include its own AI model or inference — IWE has no built-in AI and must be paired with an external agent.
  • Scenarios that only need generic vector search and do not care about note hierarchy or link structure.
  • Builders who need a stable library-level API — the liwe crate is published but not yet API-stable.
  • Users who only need local stdio MCP access without remote capabilities.
  • Those unwilling to set up an OAuth password or use a Cloudflare Tunnel.
  • Users with extremely high security requirements who distrust network exposure (though encrypted).
Required permissions
  • Read markdown note files under the working directory the server is started in.
  • Write and modify note files in that directory, including creating, renaming, deleting, refactoring, and targeted block updates.
  • Watch the notes directory for file changes so editor edits are reflected immediately.
  • Communicate over stdio with MCP clients; running via npx requires network access to fetch the @iwe-org/mcp package.
  • Read and write files in the directory specified by VAULT_PATH.
  • Perform file operations (move, delete with soft delete to .trash).
  • Create daily notes, write binary files.
  • Maintain an in-memory frontmatter index, potentially modifying index files.
  • Access the network (for Cloudflare Tunnel, heartbeat URLs).
Risks and side effects
  • The agent holds write access to the notes directory; MCP writes must declare expect guards and validate before writing, but permitted changes still land on disk.
  • Pointing the MCP server at the wrong working directory lets the agent read and write markdown files in an unintended folder.
  • Using npx fetches an npm package from the network on first run, adding a dependency on the network and the upstream package.
  • Validation covers schemas, frontmatter, and graph-hygiene warnings, but dangling links, orphan pages, and near-duplicates are surfaced as warnings and still need human judgement.
  • The liwe crate in the repository is published but not yet API-stable, so projects building on it should pin versions.
  • Credential leakage: exposed OAuth password or MCP token could allow unauthorized access.
  • Path traversal mitigation is not infallible; keep updated.
  • Extension system is not sandboxed; loading untrusted extensions could be risky.
  • Audit log is best-effort and not tamper-evident; records may be dropped at runtime.
  • Misconfiguration may cause the server to fail to start or expose vulnerabilities.
Supported clientsClaude Code, Claude Desktop, Cursor, WindsurfClaude Desktop, Claude Mobile, Claude Web
Tools520