What is the vaultguard MCP server?
AI agents use your Obsidian secrets by name — values never reach their context.
How to install vaultguard
Copy-paste configuration for popular MCP clients.
VAULTGUARD_PASSPHRASErequiredsecretPassphrase that decrypts the encrypted secret blocks in your Obsidian vault.
VAULTGUARD_VAULT_PATHPath to your Obsidian vault (overrides the one in ~/.vaultguard/config.json).
VAULTGUARD_HOMEConfig directory (defaults to ~/.vaultguard).
VAULTGUARD_ALLOW_GET_SECRETSet to 1 to enable get_secret (default: disabled so values never reach the agent).
Related MCP servers
Identity-scoped schema selection for text-to-SQL. Returns only the tables the caller may read.

CogniRepo
Persistent memory and context for AI agents—FAISS, AST, call graphs, and 35 MCP tools for 50–80% token reduction.

Lexicon
Fixes the names and jargon speech-to-text gets wrong before your agent acts on a dictated prompt.

Phantom Secrets
Protect AI agents from leaking API keys by replacing real secrets with scoped phm_ tokens and a local proxy.

webfetch
License-first federated image search with attribution, dimensions, and download tooling.
Track DSA/LeetCode practice with spaced repetition, ships with NeetCode 150.

