edit_note

THE RISK

Critical Risk

Overwriting a file's content is destructive by default because the original data is lost. The backup option mitigates this only if explicitly invoked, but the tool's primary action is irreversible overwrite. An AI agent misusing this could silently replace any note in the vault with arbitrary content, with potential permanent data loss if no backup is made.

From the tool's definition 'Overwrites an existing note with new content' — the original content is replaced; without backup this is irreversible. The backup is optional ('with backup option'), meaning it may or may not be used.

Documented attack patterns abuse exactly the kind of access edit_note gives an agent:

HOW TO CONTROL EDIT_NOTE

PolicyLayer is an MCP gateway — it sits between your AI agents and Obsidian MCP Tool Server, and nothing reaches the server without passing your rules. This is the rule we recommend for edit_note:

policy.json

{
  "version": "1",
  "default": "deny",
  "hide": [
    "edit_note"
  ]
}

edit_note disappears from the agent's tool list entirely, and any attempt to call it is denied. The rest of the server keeps working.

Create a free account and register Obsidian MCP Tool Server — nothing to install.
Add this policy — paste it, or build it visually.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

RESTRICT THIS TOOL →

Free to start. No card required.

EXPLORE

More Obsidian MCP Tool Server tools

Destructive delete_note MCP Tool: Deletes a note file, optionally creating a backup first. Write append_to_daily_note MCP Tool: Appends content to a daily note (date optional, defaults today). Write append_to_note MCP Tool: Appends content to the end of an existing note, with backup option. Write create_daily_note MCP Tool: Creates a daily note (date optional, defaults today). Returns path or None. Write create_note MCP Tool: Creates a new note file with optional YAML frontmatter. Write update_note_metadata MCP Tool: Updates the YAML frontmatter of an existing note, with backup option. Read get_all_tags get_all_tags Read get_backlinks MCP Tool: Finds all notes linking to the target note_path. Returns a JSON list of paths.

All 18 Obsidian MCP Tool Server tools →

Destructive tools on other servers

Frida Game Hacking MCP clear_scan MegaMemory remove_concept Frida Agent MCP kill_app 1MCP Server mcp_uninstall

Go deeper

Critical-risk tools in Obsidian MCP Tool Server → Every critical-risk tool this server exposes, in one view.
All critical-risk MCP tools → Every critical-risk tool across the catalogue, and the policy pattern that contains them.
The MCP Attack Database → Documented attack patterns against MCP deployments — and the policies that stop them.
Rate Limiting MCP Tool Calls: A Practical Guide →
MCP Security: Why Prompt Guardrails Aren't Enough →

FAQ

What does the edit_note tool do? +

MCP Tool: Overwrites an existing note with new content, with backup option. It is categorised as a Destructive tool in the Obsidian MCP Tool Server MCP Server, which means it can permanently delete or destroy data. Block by default and require explicit approval.

How do I enforce a policy on edit_note? +

Register the Obsidian MCP Tool Server MCP server in PolicyLayer and add a rule for edit_note: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Obsidian MCP Tool Server. Nothing to install.

What risk level is edit_note? +

edit_note is a Destructive tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.

Can I rate-limit edit_note? +

Yes. Add a rate_limit block to the edit_note rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block edit_note completely? +

Set action: deny in the PolicyLayer policy for edit_note. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides edit_note? +

edit_note is provided by the Obsidian MCP Tool Server MCP server (rwb3n/obsidian-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Obsidian MCP Tool Server tool call.

Deterministic rules across all 18 Obsidian MCP Tool Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

GOVERN OBSIDIAN MCP TOOL →

Free to start. No card required.

18 Obsidian MCP Tool Server tools catalogued and risk-classified — across an index of 42,500+ MCP servers.

// WHAT EDIT_NOTE ON OBSIDIAN MCP TOOL SERVER DOES

// THE RISK

// HOW TO CONTROL EDIT_NOTE

// EXPLORE