// SCAN REPORT

Obsidian Modified

33 tools. 7 can modify or destroy data without limits.

1 destructive tool with no built-in limits. Policy required.

Last updated: 1 Jul 2026

7 can modify or destroy data

26 read-only

33 tools total

Community server · catalogue entry verified 01/07/2026

How to control Obsidian Modified ↓

TOOL MAP

What Obsidian Modified exposes to your agents

Read (26) Write / Execute (6) Destructive / Financial (1)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Obsidian Modified tools

Destructive · High delete_file This tool permanently deletes files or directories, which cannot be reversed. Execute · High execute_command This tool runs Obsidian commands whose effects depend entirely on the arguments provided (which commands are executed). Execute · Medium open_file Opening a file triggers an external operation in the Obsidian application (switching the active view/tab to that file), which is more than a passive read — it causes a side effect in the running application. Write · High put_content This tool replaces the full content of a file, which is a destructive-in-practice write operation.

7 of Obsidian Modified's 33 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Obsidian Modified

PolicyLayer is an MCP gateway — it sits between your AI agents and Obsidian Modified, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_file": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "append_content": {
    "limits": [
      {
        "counter": "append_content_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "batch_get_file_contents": {
    "limits": [
      {
        "counter": "batch_get_file_contents_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Obsidian Modified — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON OBSIDIAN MODIFIED →

Instant setup, no code required.

FULL CATALOGUE

All 33 Obsidian Modified tools

DESTRUCTIVE 1 tools

Destructive delete_file Delete a file or directory from the vault.

EXECUTE 2 tools

Execute execute_command Execute one or more Obsidian commands in order. For commands that operate on notes, open a note first. Execute open_file Open a file in Obsidian.

WRITE 4 tools

Write append_content Append content to a file. Creates the file if it does not exist. Write patch_content Insert content relative to a heading, block, or frontmatter in a file. Write put_content Overwrite the entire content of a file. Creates the file if it does not exist. Write rename_file Rename a file in the vault while preserving wikilink integrity vault-wide.

READ 26 tools

Read batch_get_file_contents Return the contents of multiple files concatenated with headers. Read complex_search Search using JsonLogic query. Supports glob and regexp operators for pattern matching. Read detect_note_clusters Detect communities/clusters of related notes using graph analysis. Read find_and_replace Find and replace text vault-wide across every .md file in the targeted vault. Read find_orphan_notes Find notes with no incoming or outgoing links. Read find_path_between_notes Find the shortest link path between two notes. Read find_similar_notes Find notes semantically similar to a given note. Read get_active_file Get the currently active file in Obsidian. Read get_file_contents Returns the content of a single file in your vault. Read get_frontmatter_field Returns the named frontmatter field Read get_heading_contents Returns the raw markdown body content under the targeted heading. Read get_most_connected_notes Get the most connected notes by link count or PageRank. Read get_note_connections Get all connections for a note: outgoing links, backlinks, tags. Read get_periodic_note Get the current periodic note for a specified period. Read get_recent_changes Get recently modified files in the vault. Read get_recent_periodic_notes Get most recent periodic notes for a specified period type. Read get_vault_stats Get overview statistics about the vault: total notes, links, orphans, tags, clusters. Read get_vault_structure Get the folder tree structure of the vault. Read list_commands List all available commands in Obsidian. For commands that operate on notes, open a note first. Read list_files_in_dir Lists all files and directories in a specific directory within your Obsidian vault. Read list_files_in_vault Lists all files and directories in the root of your Obsidian vault. Read list_vaults List all configured Obsidian vaults with their IDs and capabilities. Read pattern_search Regex pattern extraction with context. Use for structured data mining, format analysis, content auditing. Read search Performs a keyword search across all files in the vault. Read semantic_search Concept-based search via Smart Connections. Finds conceptually related content using meaning/context similarit

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Obsidian Modified

Can an AI agent delete data through the Obsidian Modified MCP server? +

Yes. The Obsidian Modified server exposes 1 destructive tools including delete_file. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Obsidian Modified? +

The Obsidian Modified server has 4 write tools including append_content, patch_content, put_content. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Obsidian Modified.

How many tools does the Obsidian Modified MCP server expose? +

33 tools across 4 categories: Destructive, Execute, Read, Write. 26 are read-only. 7 can modify, create, or delete data.

How do I enforce a policy on Obsidian Modified? +

Register the Obsidian Modified MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Obsidian Modified tool call.

Deterministic rules across all 33 Obsidian Modified tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON OBSIDIAN MODIFIED →

Instant setup, no code required.

33 Obsidian Modified tools catalogued and risk-classified — across an index of 43,000+ MCP servers.