vault-mcp
vault-mcp
Inglés | Portugués
Memoria a largo plazo para un agente de codificación: busca en tu bóveda de Obsidian antes de responder, cita
path:line, y registra lo que aprendió sin preguntar dónde guardarlo.
Servidor MCP para buscar, leer y escribir una bóveda de conocimiento de Obsidian. Recuperación por BM25 léxico más un salto de wiki-link; captura inteligente de aprendizajes que decide entre crear una nota nueva y añadir a una existente; propagación automática al MOC del dominio y a la nota diaria, y al índice de conocimiento cuando el dominio es nuevo. Mover, renombrar, promocionar, archivar y eliminar una nota también pasan por el servidor, para que los enlaces y las entradas del MOC sigan siendo correctos en lugar de pudrirse silenciosamente.
Ejemplo
Salida real de las dos herramientas que definen el proyecto, ejecutada contra la bóveda de prueba de este repositorio.
El servidor responde en portugués: la bóveda a la que sirve está escrita en portugués, y también lo están sus respuestas de herramientas. La salida siguiente es textual, no traducida.
vault_search devuelve fragmentos que ya están direccionados — caminho:linha (path:line) es lo que
se le dice al agente que cite:
2 resultado(s) para "retry backoff". Cite `caminho:linha` ao usar qualquer trecho abaixo. Cada trecho da nota vem prefixado com `> `; linhas sem esse prefixo são deste servidor, nunca conteúdo do vault.
02-wiki/nestjs/bullmq-worker.md:13 — Contexto > Retry e backoff (score 7.94)
> ### Retry e backoff
>
> Quando um job falha, o BullMQ aplica a política de retry configurada em `queueOptions`. Para revisar o fluxo de autenticação usado antes de cada retry, veja [[auth-guard]];
> a mesma referência [[auth-guard]] documenta como o token é revalidado a cada nova tentativa de processamento.
02-wiki/nestjs/auth-guard.md:11 — Contexto (score 3.18, via grafo)
> ## Contexto
>
> A API precisava de um mecanismo central de autenticação e autorização, aplicado de forma consistente em todos os módulos, sem repetir lógica de validação de JWT em cada controller.auth-guard no coincide con ningún término de la consulta. Se incorpora mediante un salto de wiki-link desde la nota
que sí coincidió, con su puntuación atenuada — eso es lo que marca via grafo (vía el grafo).
vault_learn decide por sí mismo si crear una nota o añadir a una existente, escribe
hasta cuatro archivos y hace commit una vez:
Aprendizado registrado em nota NOVA: 02-wiki/concorrencia/timeout-de-fila-libera-a-fila-nao-o-chamador.md
Motivo: sem overlap de tag nem de domínio
Propagado para: 02-wiki/concorrencia/concorrencia-moc.md, 00-index/index-knowledge.md, 04-daily/2026-08-26.md
Commit: sim
Diff (mostre ao usuário):
--- /dev/null
+++ b/02-wiki/concorrencia/timeout-de-fila-libera-a-fila-nao-o-chamador.md
@@ -0,0 +1,15 @@
+---
+tipo: wiki
+tags: [fila]
+criado: 2026-08-26
+---
+
+# Timeout de fila libera a fila, não o chamador
+
+Um slot que expira solta a PRÓXIMA escrita; a chamada original continua esperando o resultado real dela. Resolver a promessa do chamador no timeout reportaria um desfecho que ninguém observou.
+
+**Contexto:** Serializando as tools de escrita do vault-mcp contra si mesmas.
+
+## Solução
+
+## Exemplo
--- /dev/null
+++ b/02-wiki/concorrencia/concorrencia-moc.md
@@ -0,0 +1,16 @@
+---
+tipo: moc
+tags: [concorrencia]
+criado: 2026-08-26
+atualizado: 2026-08-26
+---
+
+# Concorrencia — Mapa de Conteúdo
+
+## Notas
+
+- [[timeout-de-fila-libera-a-fila-nao-o-chamador]] — Um slot que expira solta a PRÓXIMA escrita; a chamada original continua esperando o resultado real dela.
+
+## Relacionados
+
+- [[../../00-index/index-knowledge|índice de conhecimento]]
--- a/00-index/index-knowledge.md
+++ b/00-index/index-knowledge.md
@@ -1,6 +1,6 @@
---
tipo: moc
-atualizado: 2026-02-01
+atualizado: 2026-08-26
---
# Índice de Conhecimento
@@ -9,6 +9,7 @@
- [[../02-wiki/nestjs/nestjs-moc|nestjs]] — NestJS, providers, guards, filas
- [[../02-wiki/docker/docker-moc|docker]] — Dockerfiles, multi-stage, compose
+- [[../02-wiki/concorrencia/concorrencia-moc|concorrencia]] — Um slot que expira solta a PRÓXIMA escrita; a chamada original continua esperando o resultado real dela.
## Convenções
--- /dev/null
+++ b/04-daily/2026-08-26.md
@@ -0,0 +1,10 @@
+---
+tipo: daily
+criado: 2026-08-26
+---
+
+# 2026-08-26
+
+## Capturas
+
+- 11:12 [[timeout-de-fila-libera-a-fila-nao-o-chamador]] (aprendizado)Cuatro archivos, un solo commit docs(vault): {titulo} — deshacer todo el aprendizaje es git revert sobre él.
El dominio concorrencia no existía, por eso la llamada llevaba confirm_novo_dominio: true,
el MOC se construyó desde cero, y el índice de conocimiento ganó una línea que apunta a él.
Related MCP server: mcp-obsidian-vault
Instalación
Publicado como @andreymudri/vault-mcp, así que no hay que clonar nada para ejecutarlo:
npx @andreymudri/vault-mcp # no install; npm fetches and runs it
npm i -g @andreymudri/vault-mcp # or install once, then `vault-mcp`El ámbito no es decorativo: el vault-mcp simple en npm es un marcador de posición de espacio de nombres de 443 bytes de
otro autor, así que npx vault-mcp ejecuta su paquete en lugar de este. El comando dentro del
ámbito mantiene el nombre corto — npx @andreymudri/vault-mcp resuelve el bin desde dentro del paquete.
Desde un clon, para desarrollarlo:
npm install
npm run build
npm testNode >= 20 para EJECUTAR el servidor (
dist/es JavaScript plano), verificado en cada push por el trabajo de CIcompat, que lo compila y lo arranca en 20Ejecutar la suite requiere más que eso:
test/frontmatter.test.tsejecuta elparseFilereal en un proceso hijo fijado a una zona horaria, y ese hijo esnode <file>.ts— depende del propio stripping de tipos de Node. CI fija 26, que es la versión en la que se desarrolla estoLa suite tiene 19 archivos con 1,155 pruebas y tarda ~10 s.
npm testejecuta el typecheck (pretest) primero y limita la suite por el reloj: una suite colgada sale con 124, nunca sin código de salida
Configuración
La bóveda se pasa a través de una variable de entorno:
VAULT_PATH="/absolute/path/to/vault" npx @andreymudri/vault-mcpDesde un clon, lo mismo sin el registro:
VAULT_PATH="/absolute/path/to/vault" node /absolute/path/to/vault-mcp/dist/server/index.jsReemplaza /absolute/path/to/vault con la raíz de tu bóveda. VAULT_PATH es obligatorio. Si no
está establecido, o no es un directorio, el servidor sale con código 1 y escribe el motivo en stderr.
Registro con Claude Code
Añade el MCP con:
claude mcp add vault --scope user \
-e "VAULT_PATH=/absolute/path/to/vault" \
-e "VAULT_AUTO_PUSH=1" -- \
npx -y @andreymudri/vault-mcpDesde un clon, pon node /absolute/path/to/vault-mcp/dist/server/index.js después del -- en su lugar.
La ruta de la bóveda es absoluta y va en -e como un único par KEY=value — con comillas alrededor
de todo el par, que es lo que hace que funcione una bóveda cuya ruta contiene un espacio. No hay expansión
de variables en JSON, así que una ruta relativa aquí se convierte en un servidor que no arranca. El -y en npx
importa para un servidor stdio: sin él, la primera ejecución puede detenerse en un prompt de instalación en una terminal
que nadie está mirando.
--scope user registra en ~/.claude.json y hace que las herramientas estén disponibles en todos los
proyectos, que es el punto: la bóveda responde sobre decisiones y patrones mientras trabajas en otro
repositorio. Sin la bandera, el valor por defecto es local (solo el directorio actual). Comprueba con
claude mcp get vault; para eliminarlo, claude mcp remove vault -s user.
VAULT_AUTO_PUSH
Cada escritura (vault_write_note, vault_edit_note, vault_learn, vault_move, vault_delete) ya hace commit al git de la bóveda.
VAULT_AUTO_PUSH=1 añade un git push después del commit — sin él, el commit se queda solo en la máquina,
y una bóveda con un remoto mantenido en más de un lugar diverge silenciosamente.
Desactivado por defecto, porque es lo único que hace este servidor que sale de la máquina. Cuando se activa:
git pushsin refspec, siguiendo el upstream de la rama: un repositorio que no ha sido configurado lo dice en lugar de que se le adivine un remoto y una ramasiempre falla como advertencia, nunca como rollback. La nota ya está en disco y con commit; deshacer eso porque la red se cayó sería el peor intercambio disponible. La respuesta de la herramienta gana una línea
Push: sim|não, que solo aparece cuando de hecho se INTENTÓ un pushun remoto que se ha adelantado no se resuelve por sí solo. Pull, rebase y merge reescriben la base de conocimiento del usuario, y esa es su decisión — no un efecto secundario de guardar una nota. La advertencia nombra la situación y se detiene
limitado a 30 s, con
GIT_TERMINAL_PROMPT=0: un servidor stdio no tiene terminal en la que responder a un prompt de credenciales, así que un prompt sería un cuelgue. Las credenciales tienen que venir de un helper (por ejemplogh auth git-credential) o de una clave SSH
Las Nueve Herramientas
Herramienta | Entrada | Cuándo llamarla |
|
| Antes de responder sobre las decisiones, patrones, trampas o historial del usuario. Resultado por defecto: 6 fragmentos. Las notas en |
|
| Después de |
|
| Inventario de notas por metadatos (p. ej. «¿qué proyectos están activos?», «¿qué notas llevan la etiqueta jwt?»). No busca contenido — usa |
|
| Medir cuán conectado está un tema, encontrar el MOC que indexa una nota, evaluar el impacto de un cambio. Deduplica enlaces: una nota que enlaza el destino dos veces cuenta como un backlink. |
|
| Crear o reemplazar una nota completa. El frontmatter está garantizado. Hace commit automáticamente. Para cambiar un pasaje, usa |
|
| Reemplazar un pasaje exacto de una nota. Falla si el pasaje no existe o aparece más de una vez — en ese caso, incluye más contexto en |
|
| Registrar un aprendizaje durante la sesión (decisión de arquitectura, patrón, trampa, error). No preguntes dónde guardarlo — el servidor decide. Muestra el diff al usuario. Si el dominio no existe en |
|
| Mover, renombrar, promocionar fuera de |
|
| Eliminar una nota y quitar su línea del MOC. Se niega, sin eliminar, si la nota no tiene versión commiteada en |
Cómo decide vault_learn
vault_learn busca el tema combinando título e insight. Solo las notas ya presentes en 02-wiki/ y alcanzadas por BM25 directo (no por expansión de grafo) son candidatas a recibir el aprendizaje. Si se encuentra una candidata:
Ratio 1,8×: el primer resultado debe destacar sobre el segundo por un factor de al menos 1,8. Sin eso hay duda, y crea una nota nueva.
Solapamiento conjuntivo: el primer resultado debe compartir una etiqueta CON LA ENTRADA, O estar en el mismo dominio (
02-wiki/<dominio>/). Sin solapamiento crea una nota nueva incluso cuando la puntuación es alta.
Cuando se cumplen ambas condiciones, añade a la nota existente bajo una sección ## YYYY-MM-DD — Title. En caso contrario, crea una nota nueva en 02-wiki/<dominio>/.
El sesgo es deliberado: ante la duda, crea una nota nueva en lugar de enterrar un aprendizaje en el lugar equivocado. Fusionar notas después siempre es posible; recuperar un aprendizaje perdido no lo es.
Vías de escape
Tres excepciones pueden cambiar el destino final:
Colisión de título: la regla de duplicados dice que no, pero ya existe un archivo con ese nombre (una nota más antigua con el mismo slug). El servidor añade a ella de todos modos y avisa
anexado em <path> por coincidência de título; a checagem de duplicata não indicou essa nota. Esto devuelve una nota perdida al flujo de acumulación.El destino duplicado no puede recibir el texto: el servidor decide añadir a la nota candidata, pero no se puede editar. El servidor crea una nota nueva con un nombre derivado del slug (p. ej.
multi-stage-cache-de-camadas.mden lugar demulti-stage.md) y avisanão foi possível anexar em <path>; aprendizado gravado em <outro-path>. El aviso nombra la ruta exacta donde se escribió el aprendizaje.La ruta de la nota está bloqueada por un no-nota: la ruta donde se crearía la nota (p. ej.
02-wiki/docker/titulo.md) está ocupada por un FIFO, symlink, directorio o hard link (algo que no se puede sobrescribir). El servidor crea una nota nueva con sufijo de fecha (p. ej.titulo-2026-08-25.md) y avisa<path> não é uma nota (link, diretório ou dispositivo); aprendizado gravado em <outro-path>. El aviso nombra la ruta exacta donde se escribió el aprendizaje.
En todos los casos, ningún insight se pierde — la respuesta dice exactamente dónde acabó el aprendizaje.
Qué escribe vault_learn
Una llamada a vault_learn puede tocar hasta 4 archivos, todos en un único commit con el mensaje docs(vault): {titulo}:
La nota (
02-wiki/<dominio>/<slug>.md): creada, o con el aprendizaje añadido. Siempre se escribe.El MOC de dominio (
02-wiki/<dominio>/<dominio>-moc.md): se crea si no existe. Se actualiza conatualizado:en cada llamada; con una línea- [[<slug>]] — <resumo>solo si la nota es nueva. Se escribe solo si el contenido cambia.Índice de conocimiento (
00-index/index-knowledge.md): se actualiza SOLO si el dominio no existía antes. Se escribe solo si el contenido cambia.Nota diaria (
04-daily/YYYY-MM-DD.md): se crea si no existe. Se actualiza con la captura- HH:MM [[<slug>]] (<tipo>, <projeto>)solo si la línea no está ya. Se escribe solo si el contenido cambia.
Cada archivo se escribe atómicamente. Si la propagación falla (p. ej. sin espacio en disco), los archivos permanecen en disco y la respuesta incluye un aviso que nombra el destino que no se actualizó. Si el commit de git falla (p. ej. el repositorio no existe), los archivos permanecen escritos en disco y la respuesta incluye un aviso.
Deshacer un aprendizaje completo es:
git revert <commit-hash>Ajuste del ranking
Cualquier cambio en los siguientes parámetros tiene que pasar la suite completa: npm test. Cada constante está fijada en un lugar concreto:
FIELD_WEIGHTS(src/index/inverted-index.ts):heading: 3.0, tags: 2.0, prose: 1.0, code: 0.5. Peso sobre la frecuencia de cada campo. Fijado entest/bm25.test.ts.NOTE_TYPE_WEIGHTS(src/index/inverted-index.ts):moc: 0.3, daily: 0.3. Multiplica la puntuación final de las notas MOC o diarias. Existe porque esas notas repiten la consulta en fragmentos cortos; sin el factor, el MOC supera a la nota a la que apunta. Fijado mediante una aserción literal entest/bm25.test.ts:370-374;test/golden-queries.test.tsytest/retrieval.test.tsfallan solo si se elimina, no si se reajusta.GRAPH_DAMPING(src/retrieval/budget.ts):0.4. Multiplica la puntuación de los vecinos del grafo — notas enlazadas. Un salto, no varios. Fijado entest/retrieval.test.ts:522.K1yB(src/index/bm25.ts):1.2y0.75. Parámetros de BM25. Fijados entest/bm25.test.ts:232-233.DUPLICATE_SCORE_RATIO(src/write/learn.ts):1.8. Relación mínima entre el primer resultado y el segundo para una adición. Fijado entest/learn.test.ts:336.
Ejecutando la suite completa:
npm testGarantías de seguridad
Se rechazan las escrituras para:
Rutas fuera de la bóveda
Rutas en
.git/,.obsidian/,node_modules/,_templates/y99-archive/Enlaces simbólicos (resueltos antes de escribir)
Enlaces duros
Dentro de una única instancia del servidor, dos llamadas concurrentes a vault_learn o vault_write_note no se intercalan de entrada: cada escritura espera a que la anterior termine. Si una escritura se bloquea (p. ej., git bloqueado), el tiempo de espera de 60 segundos libera la cola para la siguiente escritura, no al llamante — la llamada anterior sigue esperando su resultado real. Una vez que la siguiente escritura comienza, ambas pueden estar en ejecución — la llamada recibe una advertencia de que no se garantizó la exclusividad. Esto NO protege contra escrituras simultáneas desde Obsidian, desde una segunda instancia del servidor, o desde un git checkout en la bóveda.
Búsqueda y recuperación
La búsqueda ejecuta BM25 sobre fragmentos de 2–3 niveles de encabezado, cubriendo prosa, etiquetas y encabezados con diferentes pesos. Si ningún término de la consulta coincide con alguna nota, intenta sugerir términos similares (distancia de Levenshtein ≤ 2).
Después de la búsqueda pura de BM25, se expande un salto de wiki-link: los vecinos de las notas que coinciden heredan GRAPH_DAMPING veces la puntuación de la fuente.
Cada resultado cita caminho:linha (ruta:línea) — esa es la dirección real de la nota. Los fragmentos de notas se prefijan con > en vault_search para distinguir el contenido de la bóveda de las líneas del servidor.
Estructura de la bóveda
Convención de directorios:
00-index/: índice de conocimiento y MOCs raíz01-raw/: capturas y recortes en bruto (excluidos de la búsqueda por defecto)02-wiki/: conocimiento organizado por dominio (nestjs/,docker/, etc.)03-projects/: notas de proyectos04-daily/: notas diarias (YYYY-MM-DD.md)_templates/: plantillas de Obsidian (ignoradas por la indexación)99-archive/: notas archivadas (legibles, no escribibles)
Limitaciones conocidas
Tres cosas que este servidor no hace, cada una elegida en lugar de pasada por alto:
Archivar en
99-archive/pierde el— resumenen la entrada de la nota en su MOC de origen.vault_moveelimina la línea del MOC de origen y no tiene un MOC de destino donde reinsertarla, y el archivo es un área sin escritura, por lo que no hay dónde aparcar el texto. Desarchivar recrea un- [[slug]]desnudo, no la entrada tal como era. Las alternativas — guardar el resumen en el frontmatter de la propia nota movida, o en un índice lateral — ambas cuestan más que la pérdida. Lo que la operación nunca hace es inventar un resumen: sin línea de origen, la entrada sale corta y verdadera.Un wiki-link que existe solo en el frontmatter no se reescribe mediante
vault_move. Las notas candidatas se seleccionan del cuerpo, que es también de donde se construye el grafo de enlaces, así que una nota que este filtro omite es una nota cuyas aristasvault_backlinkstampoco tiene. Ampliar la reescritura sin ampliar el escáner produciría la peor asimetría: un enlace corregido que ninguna herramienta de lectura puede ver.vault_get_notedevuelve el cuerpo de la nota en bruto. Escaparlo rompería silenciosamente la lectura-y-edición para exactamente las notas que contienen un carácter de control, ya quevault_edit_notecomparaold_textcomo una subcadena exacta del archivo. Las superficies que sí hacen afirmaciones por línea — el fragmento devault_searchy el diff — están saneadas.
Los dieciséis seguimientos planteados hasta ahora se han corregido — incluido el frontmatter con alias que bloqueaba
el bucle de eventos durante ~5 s, el enlace duro indexado en la ruta de lectura y la condición de carrera de escritura entre procesos.
docs/followups.md mantiene el registro: cada elemento con la medición que lo caracterizó, la corrección
aplicada y la prueba que lo fija, además del razonamiento completo detrás de cada aceptación anterior.
Desarrollo
Después de un cambio en el código:
npm run build # Compiles TypeScript (src/ only, emits dist/)
npm run typecheck # tsc over src/ AND test/, without emitting
npm test # Runs the typecheck (pretest) and then the vitest suite
npm run smoke # Starts the built dist/ and demands the nine tools over stdio
npm run dev # Watch mode (if needed)El tsconfig.json de compilación cubre solo src/ — lo que emite no compila pruebas. tsconfig.test.json
cubre ambos con noEmit, y el pretest de npm lo ejecuta antes de la suite: un fake de prueba que deja de
satisfacer la interfaz que declara implements falla en la comprobación de tipos, no en tiempo de ejecución.
La suite completa tarda ~10 s. Algunas pruebas usan FIFOs para simular operaciones de larga duración; todas ellas
abren el extremo de escritura por sí mismas (withFifoWatch), por lo que fallan en segundos en lugar de depender del
tiempo de espera del ejecutor. npm test se ejecuta a través de scripts/test.mjs, que limita la suite por reloj
(15 min, VAULT_MCP_TEST_TIMEOUT_MS) y mata el grupo de procesos: una suite colgada se convierte en salida 124,
no en un bloqueo indefinido sin código de salida.
npm run smoke es la comprobación que la suite no puede ser: lanza el dist/server/index.js compilado como
programa contra una bóveda desechable, completa el apretón de manos de MCP y exige que tools/list responda
con exactamente las nueve herramientas. Cubre el punto de entrada decidiendo que es una biblioteca y no iniciando nada —
una salida limpia 0 para un shell, una espera eterna para un cliente — y es lo que hace que engines.node >= 20 sea una
afirmación verificada: CI lo ejecuta en Node 20 además del 26 fijado, ya que la suite en sí no puede ejecutarse
en 20 (test/frontmatter.test.ts depende del despojado de tipos del runtime) mientras que el JavaScript compilado
sí puede.
Los mensajes de commit y las cadenas propias del servidor orientadas al usuario — descripciones de herramientas, mensajes de error, la
prosa dentro de un diff — están escritos en portugués (BR): la bóveda a la que sirve es una base de conocimiento en portugués
y su lector es un modelo que habla portugués. Los comentarios de código y los docblocks están en
inglés, con src/index/bm25.ts dejado en portugués desde la primera pasada.
Licencia
MIT © 2026 Andrey Mudri
Available Tools
9 toolsvault_backlinksA
Lists the notes pointing at the given note. Use it to gauge how connected a subject is, to find the MOC that indexes the note, or to weigh the impact of changing or renaming it.
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | Vault-relative path, with `.md`. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
There are no annotations, so the description carries the behavioral burden. It clearly indicates a read-only listing operation, but it does not disclose the output shape, ordering, or whether only direct inbound links are returned. This is adequate for a simple tool but leaves some behavioral details unspecified.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise, purposeful sentences. The first defines the primary action, and the second adds valuable usage context without wordiness. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter read-only tool, the description is largely complete: it states the resource, the behavior, and practical use cases. The lack of an output schema is the main gap, but the phrase 'Lists the notes' gives sufficient expectation of what the call returns for selection and invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents the single `path` parameter. The description only refers to 'the given note' without adding additional parameter-level detail, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'Lists the notes pointing at the given note.' This clearly defines the backlinks functionality and distinguishes it from siblings like vault_get_note, vault_search, and vault_list, which serve different purposes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear use cases: gauging connectedness, finding the MOC that indexes the note, and weighing the impact of changing or renaming it. It does not explicitly mention when not to use it or name alternative tools, but the context is strong enough for an agent to decide when this tool fits.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
vault_deleteA
Deletes a note and commits, removing its line from the domain MOC. Refuses, without deleting, if the note has no committed version in HEAD (there would be no way to undo), if it is structural (MOC, daily note, index) or if it lives under 99-archive/. Notes pointed at by others require confirm, and the refusal lists who points at them — their links will break. The answer carries the exact command that undoes it.
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | Vault-relative path, with `.md`. | |
| confirm | No | Confirms deleting even with other notes pointing at this one; their links will break. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden, and it does an excellent job: it discloses that the tool commits, removes the MOC line, refuses to delete unsafe candidates, lists who points at the note, breaks links, and returns an undo command. This is exceptional behavioral transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but perfectly structured: the core action comes first, followed by refusal conditions, confirmation behavior, and the undo guarantee. Every sentence adds meaningful information with no fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a destructive, mutating tool with no annotations and no output schema, this description covers all the essential context an agent needs: side effects, refusal conditions, confirmation requirements, and even the undo command in the response. It is remarkably complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description does not add significant new meaning for 'path' or 'confirm' beyond what the schema already provides; it mostly restates the safety conditions rather than elaborating parameter formats or values.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('Deletes a note and commits'), a resource ('note', 'domain MOC'), and a distinctive side effect (removing its line from the MOC). It also enumerates refusal conditions, so an agent can clearly tell it apart from write, edit, and move siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives concrete context for when deletion is allowed vs refused: requires a committed version in HEAD, cannot target structural notes or archive paths, and needs confirm when backlinks exist. It does not explicitly name alternatives like vault_move for archiving, so it falls just short of full guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
vault_edit_noteA
Replaces ONE exact passage of an existing note and commits. Fails, without writing, if the passage does not appear or appears more than once — in that case send more context in old_text.
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | Vault-relative path, with `.md`. | |
| new_text | Yes | The text that takes its place. | |
| old_text | Yes | The exact passage to replace; it must be unique within the note. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations present, the description carries the full burden and does so well. It discloses the commit side effect, the atomic failure mode ('Fails, without writing'), and the exact uniqueness condition that triggers failure. This is valuable behavioral information beyond the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single dense sentence conveys the operation, constraints, failure mode, and remediation without wasted words. The most important behavioral constraint, uniqueness and no-partial-write, is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a three-parameter edit tool with no output schema and no annotations, this description is complete enough for an agent to invoke it correctly: it knows what the tool edits, when it fails, and how to recover. The schema covers parameter details, and the description covers behavior and error handling.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already documents all three parameters with 100% coverage, so the baseline is 3. The description adds extra semantic guidance on old_text: it must be unique and can be expanded with more context if the initial attempt fails. This goes beyond the schema's static descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb and resource: 'Replaces ONE exact passage of an existing note'. This clearly distinguishes it from sibling tools like vault_write_note (writing a whole note) and read/list tools, even though it does not name them explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied: use this to replace one exact passage in an existing note. The description does not explicitly contrast it with alternatives or state when not to use it, but it does provide actionable guidance on how to resolve ambiguity by sending more context in old_text.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
vault_get_noteA
Reads a whole note by its vault-relative path (e.g. 02-wiki/nestjs/auth-guard.md), with frontmatter, resolved links and broken links. Use it after vault_search when the snippet is not enough, or before editing the note.
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | Vault-relative path, with `.md`. | |
| offset | No | First character of the BODY to return, for reading a note that did not fit in one answer. Omit it on the first call; afterwards use the offset the cut marker announces. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, so the description carries the burden. It marks the tool as a read operation and discloses the return payload's key components (frontmatter, resolved links, broken links). It does not mention pagination/truncation with the offset parameter, but the schema already documents that behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the action and resource, followed by a workflow note. No filler; the example earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a two-parameter read tool with no output schema, the description gives path format, return contents, and usage context. The offset/cut-marker behavior is captured in the parameter schema, so nothing critical is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema covers 100% of parameters, so the description need not add much beyond the baseline. The path example ('02-wiki/nestjs/auth-guard.md') provides helpful formatting guidance beyond the schema's 'vault-relative path'.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States the exact operation ('Reads a whole note') and object (vault-relative path with example), and adds what is included (frontmatter, resolved links, broken links). This clearly separates it from the vault_search snippet behavior.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly instructs to use it after vault_search when the snippet is insufficient and before editing, naming a concrete alternative and two workflow triggers. This gives an agent decision rules rather than leaving usage to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
vault_learnA
Records a learning in the vault. Call it whenever something non-obvious and reusable comes up during the session — an architecture decision, a pattern, a gotcha, a configuration trap — without asking first where to save it: the server decides on its own between appending to the existing note that already covers the subject and creating a new one (the bias is to create), and propagates on its own to the domain MOC and the daily note (and to the knowledge index when the domain is new), all in a single commit. Show the returned diff to the user.
| Name | Required | Description | Default |
|---|---|---|---|
| tags | No | Tags for the note's frontmatter. | |
| links | No | Related wiki-links, without the brackets. | |
| titulo | Yes | Short title for the learning; it becomes the filename. | |
| dominio | Yes | Domain under `02-wiki/`, e.g. nestjs, docker, patterns. A new domain requires confirm_novo_dominio. | |
| insight | Yes | The learning itself, in markdown. | |
| projeto | No | Name of the project under `03-projects/` this learning belongs to; it goes into the daily note's capture line. | |
| contexto | Yes | Where and why this came up. | |
| confirm_novo_dominio | No | Confirms creating a domain that does not yet exist under `02-wiki/`. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations present, the description carries the full burden of behavioral disclosure and delivers it: server-side routing between append and create, propagation to domain MOC, daily note, and knowledge index for new domains, atomicity ('all in a single commit'), and the returned diff to show the user. This reveals side effects and internal logic that neither the name nor the schema conveys.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The core action is front-loaded ('Records a learning in the vault') followed by usage triggers, routing behavior, propagation, and return handling. Every clause earns its place and nothing is wasted, though the single run-on sentence with nested dashes and parentheticals is harder to parse than shorter sentences would be.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no annotations and no output schema, the description covers purpose, when to call, routing decision, multi-target side effects, atomicity, and the diff return — nearly everything an agent needs. The main gaps are not mentioning the new-domain confirmation flow behind confirm_novo_dominio and not describing failure or error behavior, which is minor against the overall complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline of 3 applies. The description adds modest extra color by tying the domain parameter to propagation behavior (knowledge index for new domains), but it does not need to compensate for missing schema text and does not explain individual parameter syntax beyond it.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource — 'Records a learning in the vault' — with concrete examples of what counts (architecture decision, pattern, gotcha, configuration trap). The auto-routing behavior ('the server decides on its own... the bias is to create') clearly distinguishes it from the write/edit siblings, so an agent can tell them apart.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives explicit trigger conditions: 'Call it whenever something non-obvious and reusable comes up' plus concrete scenarios, and instructs the agent not to ask where to save. However, it never names alternatives (e.g., vault_write_note, vault_edit_note) or states when not to use this tool, so the exclusion side is left to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
vault_listA
Lists notes by metadata — tipo, tags, status, folder — without looking at content. Use it for inventory ("which projects are active?", "which notes carry the jwt tag?"), not to search by subject: for subject use vault_search.
| Name | Required | Description | Default |
|---|---|---|---|
| tags | No | Every one of these tags must be on the note. | |
| tipo | No | Frontmatter `tipo`: wiki, moc, projeto, daily. | |
| folder | No | Vault folder, matched on a segment boundary. | |
| status | No | Frontmatter `status`, e.g. ativo, pausado. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the behavioral burden. It adds useful context by disclosing that the tool filters by metadata and ignores content, but it does not describe return shape, pagination, ordering, or any side effects. 'Lists' implies read-only behavior, but that is not stated explicitly.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no filler. The core behavior is front-loaded, the metadata filter types are listed, and the exclusion/alternative is given in the second sentence.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a filtered-list tool with four optional, well-documented parameters, the description gives enough context for an agent to call it correctly. The absence of an output schema leaves some ambiguity about what fields are returned, but the primary decision of when to use vault_list versus vault_search is fully covered.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so each parameter already has a clear description in the schema. The tool description reinforces that these are metadata filters but adds no new meaning beyond what the schema provides, so the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Lists') and resource ('notes by metadata'), and explicitly clarifies it does not look at content. It distinguishes itself from vault_search by name, so an agent can tell the two tools apart immediately.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit when-to-use guidance via inventory examples and directly says 'not to search by subject: for subject use vault_search.' This clearly routes the agent to the correct sibling tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
vault_moveA
Moves, renames, promotes or archives a note, fixing on its own every link that would otherwise start pointing somewhere else, migrating its entry between domain MOCs and committing it all at once. to is the full path with .md, so the four operations are one: 01-raw/inbox/rascunho.md → 02-wiki/nestjs/auth-guard.md promotes, renames and changes domain together. 99-archive/ counts as BOTH source and destination, which gives you archive and unarchive. A destination domain with no MOC requires confirm_novo_dominio. Show the returned diff to the user.
| Name | Required | Description | Default |
|---|---|---|---|
| to | Yes | Full destination path, vault-relative, with `.md`. Moving, renaming and promoting are the same operation. | |
| from | Yes | The note's current vault-relative path, with `.md`. | |
| confirm_novo_dominio | No | Confirms creating the MOC of a destination domain that does not have one yet. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden and does it well: it discloses automatic link fixing, MOC migration, atomic commit behavior, confirmation requirements for new domains, and that a diff is returned. This goes well beyond the bare move/rename semantics and gives an agent a realistic model of the tool's effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but every sentence earns its place: it defines the operation, clarifies path semantics with a concrete example, explains the archive special case, and states the confirmation requirement. The most important behavioral fact (link fixing) is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a complex multi-purpose tool with no output schema and no annotations, the description is remarkably complete. It covers the input semantics, the domain-MOC behavior, the archive/unarchive case, the confirmation flow, and the expected user-facing output. An agent has enough to call it correctly in most scenarios.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is a 3. The description adds real value by explaining how 'to' encodes the operation kind, that 99-archive can be both source and destination for archive/unarchive, and when confirm_novo_dominio is required. This enriches the schema descriptions without repeating them.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb set ('Moves, renames, promotes or archives a note') and precisely identifies the resource (a vault note) and the core side effect (fixing every link). It distinguishes itself from siblings like vault_edit_note and vault_delete by explaining the unified path-based operation with domain MOC migration.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly implies when to use the tool: for any move/rename/promote/archive operation that should stay link-consistent. It gives concrete path examples and explains special cases like 99-archive and confirm_novo_dominio. However, it never explicitly states when NOT to use it or names alternatives like vault_edit_note for content-only edits.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
vault_searchA
Lexical-semantic search over the vault (BM25 plus one wiki-link hop). Call it before answering any question about the user's decisions, patterns, gotchas or history, and before recording a new learning. Returns snippets already cited as path:line — repeat that citation in your answer. Notes under 01-raw/ are excluded unless include_raw.
| Name | Required | Description | Default |
|---|---|---|---|
| tags | No | Filters by frontmatter tags. A note must carry ALL of them; case does not matter. | |
| tipo | No | Filter by the frontmatter `tipo`: wiki, moc, projeto, daily. | |
| limit | No | Maximum snippets returned (default 6). | |
| query | Yes | Search terms in natural language. | |
| folder | No | Restrict to a vault folder, e.g. `02-wiki/nestjs`. | |
| status | No | Filters by the frontmatter `status`, e.g. `ativo`. | |
| include_raw | No | Include `01-raw/` (unvetted capture), left out of results by default. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, and it discloses the key behavioral traits: search quality, exclusion of 01-raw notes unless include_raw, and the path:line citation format. It does not need to discuss side effects because the tool name clearly indicates a read-only search operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded: purpose first, then usage, then output behavior, then the raw-notes exception. Every sentence conveys a distinct, necessary piece of information with no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the 7-parameter schema, the absence of annotations, and the absence of an output schema, the description covers what the agent needs most: when to use the tool, how results are formatted, and the one non-obvious inclusion/exclusion rule. The remaining parameter details are fully handled by the schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all seven parameters are already documented in the input schema. The description only restates the include_raw behavior, which is already expressed in the schema, so it adds no meaningful semantic value beyond what the agent already has.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly defines the tool as a vault-wide lexical-semantic search using BM25 plus one wiki-link hop, which is specific and immediately distinguishes it from sibling tools like vault_list and vault_backlinks. It states the verb, resource, and retrieval behavior without ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit instructions on when to call it: before answering questions about the user's decisions, patterns, gotchas, or history, and before recording new learnings. It does not explicitly state when not to use it or name an alternative tool, but the context is clear enough for correct routing.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
vault_write_noteA
Creates or replaces a whole note, with frontmatter guaranteed, and commits it to the vault's git. It replaces the entire file: to change one passage use vault_edit_note, and to record a learning use vault_learn, which picks the destination and propagates on its own.
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | Vault-relative path, with `.md`. | |
| content | Yes | The note's markdown body, without the frontmatter block. | |
| frontmatter | No | Frontmatter fields, e.g. `{ "tipo": "wiki", "tags": ["jwt"] }`. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, so the description carries the full burden — and it delivers. It discloses that the tool replaces the entire file (destructive), commits to the vault's git (side effect), and guarantees a frontmatter block (behavioral guarantee). This is exactly the kind of context an agent needs before calling a write tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with the core behavior front-loaded and the caveat plus alternatives in the second. Minor redundancy exists between 'Creates or replaces a whole note' and 'It replaces the entire file,' but the former sets scope while the latter emphasizes destructiveness, so each clause earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a write tool with no output schema and no annotations, it covers the essentials: operation, destructive scope, git-commit side effect, frontmatter handling, and sibling routing. The one gap is that it never describes the return value or confirmation behavior on success, which would be valuable given there is no output schema. Otherwise an agent has everything needed to call it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so path, content, and frontmatter are already fully documented. The description adds marginal value with 'frontmatter guaranteed' (clarifying the caller avoids the frontmatter block in content), but provides no extra format or syntax details. Baseline 3 is appropriate since the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Creates or replaces'), a clear resource (a whole note), and unique scope: it replaces the entire file while guaranteeing a frontmatter block. It also names sibling tools vault_edit_note and vault_learn as the tools for different jobs, so an agent can distinguish it without opening schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly routes away from this tool: 'to change one passage use vault_edit_note' and 'to record a learning use vault_learn' with the reasoning that vault_learn picks the destination and propagates on its own. The whole-file vs one-passage distinction gives a clear decision rule for when to use vault_write_note instead.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
9 tool updates
v0.3.0- First observed
vault_backlinks - First observed
vault_delete - First observed
vault_edit_note - First observed
vault_get_note - First observed
vault_learn - First observed
vault_list - First observed
vault_move - First observed
vault_search - First observed
vault_write_note
TDQS
Scored across 9 tools
Each tool targets a distinct operation: search, list metadata, read note, backlinks, whole-file write, passage edit, automatic learning, move, and delete. The descriptions explicitly contrast overlapping-sounding tools (vault_write_note vs vault_edit_note vs vault_learn; vault_search vs vault_list), leaving little room for misselection.
All tools share the vault_ prefix and snake_case, and most follow a verb_noun shape like vault_get_note, vault_write_note, and vault_edit_note. A few names are bare verbs or nouns without an explicit object (vault_search, vault_learn, vault_backlinks), but the pattern is still predictable and readable.
Nine tools is well-scoped for a knowledge vault server: there is a clear placement for reading, searching, listing, writing, editing, learning, moving, and deleting notes. Each tool earns its place and none is redundant.
The tool set covers the full note lifecycle — discovery, retrieval, creation, editing, deletion, and move/rename — plus vault-specific needs like backlinks, link fixing, MOC propagation, and git commits. No critical dead ends are obvious from the described surface.
Maintenance
Related MCP Connectors
Persistent memory and knowledge management for AI agents with semantic search and 50+ tools.
Shared memory for coding agents. Stop re-explaining your codebase every session.
Connect AI assistants to your GitHub-hosted Obsidian vault to seamlessly access, search, and analy…
Token-efficient MCP memory for Markdown vaults. Tiered search, GraphRAG, AI memories.
Related MCP Servers
- AlicenseNot gradedqualityCmaintenanceEnables AI agents to maintain a structured Markdown or Obsidian memory vault with tools for reading, writing, searching, and organizing notes.MIT
- AlicenseAqualityCmaintenanceProvides AI agents with direct filesystem access to an Obsidian vault for note management, task orchestration, context persistence, and git synchronization.2786 npm3MIT
- AlicenseAqualityBmaintenanceEnables AI agents to use Obsidian vaults as persistent, bidirectional knowledge workspaces with wikilink/backlink resolution, structured frontmatter/tag indexing, task aggregation, and Obsidian Headless Sync.11MIT
- AlicenseNot gradedqualityBmaintenanceEnables agents to search, read, and write notes in an Obsidian vault, including creating and updating notes in an inbox and syncing changes with Gitea/GitHub.MIT