Hive Vault
PYPI · HIVE-VAULT
On-demand Obsidian vault access for AI coding assistants — 17 tools, 5 resources, 4 prompts.
Available components
Last scanned (18 hours ago)
Scores higher than 97% of PyPI servers
Category Memory and Knowledge
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security100
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- Runs hatchling.build at install time, a recognised build step with no custom scripting around it. View diagnostics → Pass
- 1 of 23 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency100
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to mlorentedev/hive). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 1 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability82
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1951 tokens (~162/item across 12 items; 10 tools + 2 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management77
- Stability observed for 23 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 10 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 12 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 −3
- Stability: pass → 0.77 functional
- 30 Oct 26 +15
- Malware scan: unverified → pass ▲ security
- 29 Oct 26 +1
- Stability: 0.97 → pass security
- 28 Oct 26 −1
- Stability: pass → 0.97 functional
- 25 Oct 26 −15
- Malware scan: pass → unverified ▼ security
- 22 Oct 26 +16
- Malware scan: unverified → pass ▲ security
- Stability: 0.97 → pass security
- 21 Oct 26 −16
- Malware scan: pass → unverified ▼ security
- Stability: pass → 0.97 functional
- 17 Oct 26 +18
- Malware scan: unverified → pass ▲ security
- Stability: 0.80 → pass security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 4 Nov 2026 · Analysed pypi/hive-vault@1.12.2
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | pypi |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | mlorentedev/hive |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/mlorentedev/hive/.github/workflows/release.yml@refs/heads/master |
| Rekor log index | 1550043758 |
| Predicate type | PyPI publish attestation https://docs.pypi.org/attestations/publish/v1 |
| Subject digest | sha256:1ca1c0fcf04895713827840146e4d3eac43e21becff5619ecb1d76aea2bb7e14 |
Background: How many MCP packages publish verified provenance →
Install scripts 1 script
| Hook | Tier | Command |
|---|---|---|
| build_backend | allowlisted | hatchling.build |
Background: Why install scripts are a supply-chain risk →
Dependencies 23 packages
| Packages resolved | 23 |
|---|---|
| Stale | 1 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
capture_lesson Capture Lesson ~204
Capture lessons: inline (structured fields) or batch (raw text via worker). Inline mode (default): provide title, context, problem, solution. Batch mode: provide text to extract lessons automatically via worker.
| Name | Type | Req | Description |
|---|---|---|---|
| context | string | – | What you were doing (inline mode). |
| max_lessons | integer | – | Maximum lessons to extract in batch mode. Default 5. |
| min_confidence | number | – | Minimum confidence for batch extraction. Default 0.7. |
| problem | string | – | What went wrong or what decision was needed (inline mode). |
| project | string | yes | Project slug (directory under 10_projects/). |
| solution | string | – | What fixed it or what was decided (inline mode). |
| tags | array | – | Optional tags (e.g. ["python", "testing"]). |
| text | string | – | Raw text to extract lessons from (batch mode). |
| title | string | – | Short descriptive title (inline mode). |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
delegate_task Delegate Task ~220
Offload work to a cheaper model or summarize vault files. When project is provided, reads a vault file. Small files (≤50 lines) are returned directly. Large files are auto-delegated to a worker for summarization — falls back to raw content if workers are unavailable.
| Name | Type | Req | Description |
|---|---|---|---|
| context | string | – | Optional system context for the model. |
| max_cost_per_request | number | – | Max USD. 0 = free models only. |
| max_summary_lines | integer | – | Target summary length for summarization. |
| max_tokens | integer | – | Maximum tokens in the response. |
| model | string | – | 'auto', 'ollama', 'openrouter-free', 'openrouter' (paid), or model ID. |
| path | string | – | Relative path to a .md file. Overrides section. |
| project | string | – | Project slug for vault summarization mode. |
| prompt | string | – | The task description or code to process. |
| section | string | – | Shortcut name for summarization. Ignored if path is set. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
session_briefing Session Briefing ~69
Call at the start of every new session to load project context. Assembles active tasks, recent lessons, git activity, and project health into a single response — replaces 3-4 manual tool calls.
| Name | Type | Req | Description |
|---|---|---|---|
| project | string | yes | Project slug (directory under 10_projects/). |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
vault_health Vault Health ~153
Return vault health metrics, validation, and optional usage analytics. Without parameters, returns a health summary for all projects. When checks are specified, runs drift detection (frontmatter, stale, links). When include_usage is True, appends tool usage analytics.
| Name | Type | Req | Description |
|---|---|---|---|
| checks | array | – | Validation checks to run. Empty = health summary only. Options: frontmatter, stale, links. |
| include_usage | boolean | – | Append vault tool usage analytics. Default False. |
| max_issues | integer | – | Maximum validation issues to report. Default 50. |
| project | string | – | Project slug to validate. Empty = all projects. |
| usage_days | integer | – | Usage look-back window in days. Default 30. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
vault_list Vault List ~95
List vault projects, or files within a project. When called without arguments, lists all available projects. When called with a project, lists files in that project directory.
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | – | Subdirectory within the project. Empty = project root. |
| pattern | string | – | Glob pattern to filter files (e.g. 'adr-*', '*.md'). |
| project | string | – | Project slug. Empty = list all projects. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
vault_patch Vault Patch ~224
Surgical find-and-replace in a vault file with auto git commit. Supports single or multi-replacement. For a single replacement, provide ``find`` and ``replace``. For multiple replacements, provide ``patches`` — a list of ``{"find": "...", "replace": "..."}`` dicts applied in sequence. Do not mix both modes. Each ``find`` value must appear exactly once in the file (after prior patches in the list have been applied). If any patch fails validation, no changes are written. Uses 3-pass cascading match: exact → body-only → whitespace-normalized.
| Name | Type | Req | Description |
|---|---|---|---|
| find | string | – | Exact text to find (single mode). Empty = not set. |
| patches | array | – | List of {"find", "replace"} dicts (multi mode). |
| path | string | yes | Relative path to the file within the project. |
| project | string | yes | Project slug or '_meta' for cross-project content. |
| replace | string | – | Replacement text (single mode). Empty = not set. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
vault_query Vault Query ~127
Read content from a vault project — use instead of direct filesystem access.
| Name | Type | Req | Description |
|---|---|---|---|
| include_metadata | boolean | – | Prepend a structured metadata line from YAML frontmatter. |
| max_lines | integer | – | Maximum lines to return. 0 = unlimited. |
| path | string | – | Relative path to a specific .md file within the project. Overrides section. |
| project | string | yes | Project slug (directory under 10_projects/), or '_meta' for 00_meta/. |
| section | string | – | Shortcut name (context, tasks, roadmap, lessons). Ignored if path is set. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
vault_search Vault Search ~243
Search the vault: full-text, ranked, or recent changes. Default mode: flat full-text search across all vault files. Ranked mode (ranked=True): results scored by relevance. Recent mode (since_days>0): files changed in the last N days.
| Name | Type | Req | Description |
|---|---|---|---|
| max_lines | integer | – | Maximum output lines. Default 500. |
| max_results | integer | – | Max files when ranked. Default 10. |
| project | string | – | Filter to this project (recent mode only). |
| query | string | – | Text to search for (case-insensitive). |
| ranked | boolean | – | Score results by relevance. Default False. |
| scope | string | – | Restrict search to a scope (e.g. 'work', 'projects'). Empty = all. |
| since_days | integer | – | Show recent changes (0 = disabled). Default 0. |
| status_filter | string | – | Only files whose frontmatter status matches. |
| tag_filter | string | – | Only files that have this frontmatter tag. |
| type_filter | string | – | Only files whose frontmatter type matches. |
| use_regex | boolean | – | Treat query as regex. Default False. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
vault_write Vault Write ~168
Write to the vault: append, replace a section, or create a new file. Modes: - append/replace: Update a project section. Requires section. - create: Create a new file with auto-generated frontmatter. Requires path and doc_type.
| Name | Type | Req | Description |
|---|---|---|---|
| content | string | yes | Markdown content to write (body only for create mode). |
| doc_type | string | – | Document type for frontmatter. For create mode. |
| operation | string | – | 'append', 'replace', or 'create'. Default 'append'. |
| path | string | – | Relative path for new file. For create mode. |
| project | string | yes | Project slug or '_meta' for cross-project content. |
| section | string | – | Section shortcut (context, tasks, roadmap, lessons). For append/replace. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
worker_status Worker Status ~41
Show worker health: budget, connectivity, available models, and usage stats.
| Name | Type | Req | Description |
|---|---|---|---|
| include_models | boolean | – | Include available model list from all providers. Default True. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
How do I install the Hive Vault MCP server?
Hive Vault runs locally as a PyPI package, launched with uvx hive-vault. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
pypi · hive-vault
claude mcp add mlorentedev-hive-vault -- uvx hive-vault
What is the Hive Vault MCP server?
Hive Vault is an MCP server listed in the public MCP registry as io.github.mlorentedev/hive-vault. On-demand Obsidian vault access for AI coding assistants, 17 tools, 5 resources, 4 prompts. This page covers its PyPI package (hive-vault).
Is the Hive Vault MCP server safe to use?
Hive Vault scores 94 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 4 November 2026. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Hive Vault MCP server expose?
Hive Vault exposes 10 tools: vault_list, vault_query, vault_search, session_briefing, vault_write, and 5 more. Their descriptions and schemas cost roughly 1,544 tokens of context every time the server is loaded.
Is the Hive Vault MCP server still maintained?
Hive Vault is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the Hive Vault MCP server under?
Hive Vault declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.