Back to Browse

Freshvault MCP Server

Developer ToolsModerate7.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Local semantic search over your Obsidian vault - always fresh, never reindex.

About

Local semantic search over your Obsidian vault - always fresh, never reindex.

Security Report

7.2
Moderate7.2Low Risk

freshvault is a well-architected MCP server with strong security practices. It operates entirely locally (100% local embeddings via Ollama), implements proper file path validation with symlink guards, and uses read-only tools appropriate for vault searching. Code quality is high with comprehensive error handling and input validation. Permissions align well with the server's purpose (filesystem read access to vault, network access to embedding server). Minor findings around broad exception handling and token storage configuration do not materially impact security. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

5 files analyzed · 6 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

Absolute path to the Obsidian vault (optional if configured via `freshvault setup`)Optional

Environment variable: FRESHVAULT_VAULT

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-kioko-lab-freshvault": {
      "env": {
        "FRESHVAULT_VAULT": "your-freshvault-vault-here"
      },
      "args": [
        "-y",
        "freshvault"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

freshvault

CI npm MCP Registry node

한국어 · 日本語

Your Obsidian vault is Claude's memory. Always fresh, always local.

Every other vault-search MCP makes you re-run an index command, babysit a watch terminal, or click "Update Index" in a web UI. freshvault watches your vault from inside the MCP server: edit a note, and Claude sees it seconds later. Automatically. Forever.

freshvault demo: save a note, the watcher reindexes it automatically, semantic search finds it seconds later

  • 🔄 Never reindex — the file watcher lives in the server process; boot catch-up absorbs offline edits
  • 🔒 100% local — embeddings via Ollama (bge-m3), your notes never leave your machine
  • 🌏 Multilingual by defaultbge-m3 handles Korean, Japanese, and 100+ languages that English-only defaults fail on
  • 🎯 Benchmark-driven retrieval — unconditional BM25 fusion wrecked Korean paraphrase queries (82.5% → 47.5% top-1), so it's off; pure dense missed identifier queries outright (57.1%), so it's not gone either. Lexical scoring is gated on code-like query tokens: paraphrase 82.5% → 82.5% (identical), identifiers 57.1% → 100% — receipts
  • 🪶 No vector DB, no Docker, no Python — JSON metadata + a Float32 sidecar, plain Node, source you can read in one sitting
  • 🧠 Chunking that respects sentences — YAML frontmatter stripped, splits on paragraph/sentence boundaries (CJK-aware)

Install

Prerequisites: Node 20+ and Ollama.

npx -y freshvault setup

That's it. The wizard detects your Obsidian vault, pulls the embedding model, builds the index, and registers with Claude Code. There is no step 2, and there is never a step 2: no index command to re-run, no watch terminal, no background service.

{
  "mcpServers": {
    "freshvault": {
      "command": "npx",
      "args": ["-y", "freshvault", "serve"],
      "env": { "FRESHVAULT_VAULT": "/absolute/path/to/your/vault" }
    }
  }
}

Claude Code one-liner:

claude mcp add freshvault -s user -- npx -y freshvault serve

Use

Just ask Claude about your notes:

"Search my notes for what I wrote about cache eviction strategies"

Three tools, all read-only:

toolwhat it does
search_notessemantic search + optional folder / tags / modified_after / modified_before scoping; exact-title lookups boosted; at most 2 chunks per note so one long note can't own the results (max_per_file)
get_note_contextfull note + its backlinks/outlinks from the vault link graph (path-traversal safe)
index_statusfreshness report: notes/chunks, excluded count, last sync, watcher state

Scoped queries competitors gate behind settings or paywalls work per-query here:

"Search my notes tagged #project modified after June for the budget discussion"

How it works

Obsidian vault ──fs.watch──▶ freshvault MCP server ──search_notes──▶ Claude
   (.md files)               (chunks → bge-m3 embeddings              (generation)
                              → one JSON index, incremental)
  • Incremental: only changed/deleted notes are re-embedded (mtime+size diff), debounced 4s
  • Safety net: a 60s mtime sweep catches events the watcher misses (network drives, atomic-rename editors)
  • Multi-client safe: first server process becomes the writer (heartbeated lock); others are readers that hot-reload and promote themselves if the writer dies
  • Transactional: an embedding-server outage mid-index can never lose or corrupt notes
  • Scale: vectors live in a packed Float32 sidecar (fast startup, compact); brute-force cosine over thousands of chunks is milliseconds. Honest note: search is still linear — sub-100ms into tens of thousands of chunks, but this is not a vector DB replacement for huge corpora

Multiple vaults

Register one server per vault — index files are kept per-vault automatically:

claude mcp add work-vault -s user -e FRESHVAULT_VAULT=/path/to/work -- npx -y freshvault serve
claude mcp add personal-vault -s user -e FRESHVAULT_VAULT=/path/to/personal -- npx -y freshvault serve

Other embedding servers (LM Studio, LiteLLM, OpenAI-compatible)

FRESHVAULT_EMBED_API=openai FRESHVAULT_EMBED_URL=http://localhost:1234 npx -y freshvault serve

Anything speaking /v1/embeddings works; FRESHVAULT_EMBED_KEY for authenticated endpoints (never written to the config file).

Configuration

Everything works with zero config after setup. Override when needed:

FlagEnvDefault
--vaultFRESHVAULT_VAULTfrom setup
--modelFRESHVAULT_MODELbge-m3
--ollama-urlFRESHVAULT_OLLAMA_URLhttp://localhost:11434
--dataFRESHVAULT_DATAplatform data dir
FRESHVAULT_EMBED_APIollama (or openai)
FRESHVAULT_EMBED_URLhttp://localhost:1234 (openai mode)
FRESHVAULT_EMBED_KEYnone (openai mode, optional)
FRESHVAULT_IGNOREnone — e.g. Templates/,Daily/** (or ignore: [] in config)
FRESHVAULT_LEXICAL_GATEon — lexical scoring for code-like query tokens; off for pure dense (or lexicalGate: false in config)

Commands: setup · serve (default) · index (manual escape hatch) · status

Ignore patterns

Patterns follow gitignore semantics, matched against vault-relative paths:

PatternExcludes
Templates/any Templates directory at any depth — Templates/, work/Templates/
/Templatesonly the vault-root Templates/
Daily/**everything under the root-level Daily/ only — the internal slash anchors it
**/Daily/**everything under any Daily/, at any depth
*.excalidraw.mdthat filename at any depth
work/wip.mdexactly that path, relative to the vault root
  • A slash anywhere but the end anchors the pattern to the vault root. A trailing slash only means "directory" — it does not anchor.
  • * and ? never cross a /. ** crosses directories only as a whole path segment (**/x, x/**, x/**/y); glued inside a segment it collapses to a single *, as in git.
  • Matches end on a segment boundary — Templates never matches TemplatesOld.
  • ! negation and character classes are not supported; such patterns match nothing.
  • FRESHVAULT_IGNORE is comma-separated, so a pattern cannot contain a comma.

Behaviour change since v0.3.0. v0.3.0 treated a trailing slash as a root anchor, so Templates/ excluded only the vault-root Templates/ and silently indexed every nested one — no warning, just a quietly polluted index. Patterns shaped like Templates/, /Templates, **/x and a/**/b now exclude more than before (/Templates previously matched nothing at all). Conversely, ** glued inside a segment (Daily**md) no longer crosses /. Run freshvault status after upgrading and compare the excluded count if it matters to you.

Benchmark

Two retrieval micro-benchmarks ship in-repo (node scripts/bench.mjs): ko-bench (30 Korean notes, 40 paraphrase queries) and id-bench (38 technical notes, 14 identifier queries). Both run under three scoring modes — dense, hybrid-always, and the shipped gated mode — and the script checks the no-regression contract itself. Results and the bge-m3-ko (85.0% top-1, 634MB) import guide in docs/ko-bench.md.

Roadmap

  • MCPB bundle for one-click Claude Desktop install
  • Reranking pass for large vaults
  • PDF text extraction at index time

License

MIT © Kioko Lab

Reviews

No reviews yet

Be the first to review this server!