Field-by-field comparison
Compare the evidence before choosing an MCP.
Each signal stays separate, missing facts remain visible, and the column order follows your selection.
| Evidence field | Graphiti MCPWatchlist candidate | MCPVault for ObsidianMCP100 Selected |
|---|---|---|
| Task fit | ||
| Best for |
|
|
| Not ideal for |
|
|
| Avoid when |
|
|
| Provenance | ||
| Provenance details | First-party MCP Zep / getzep · Publisher source ↗ | Community implementation BitBonsai · Publisher source ↗ |
| Maintenance | ||
| Maintenance details | Repo: Not documented Package: Not documented | Repo: Aug 13, 2026 Package: Aug 9, 2026 |
| Popularity evidence | ||
| GitHub stars | Not documented | 1,613 GitHub stars · checked 2026-08-14T18:46:26.000Z |
| Package downloads / 30 days | No reliable download data | 50,394 package downloads / 30 days · checked 2026-09-08 |
| External adoption evidence | Not documented |
|
| Client coverage | ||
| Client coverage details | Not documented | Claude Code✓ Local stdio Claude Desktop✓ Local stdio Codex✓ Local stdio VS Code✓ Local stdio Cursor✓ Local stdio OpenCode✓ Local stdio |
| Client coverage note | Local stdio runs on your computer. Streamable HTTP connects to a remotely hosted MCP server. | |
| Access and data | ||
| Authentication | Current MCP server docs do not establish built-in HTTP authentication as a default control; deployments should rely on local access or external network/reverse-proxy controls. | None at the local stdio layer. |
| Cost | Open-source server; database and LLM/embedder provider costs apply. | MCPVault is MIT licensed and free to run locally. MCP-host, model, backup, and storage costs remain. |
| Permissions | Tools include add/search plus delete_episode, delete_entity_edge, and clear_graph. Database privileges are those of the configured Neo4j/FalkorDB credentials. | The server has filesystem read and write access within the supplied vault root, including note creation, overwrite or patch, frontmatter changes, moves, tags, and deletion. Operating-system permissions and the configured vault path are the primary boundary. |
| Data handling | Stores knowledge-graph episodes/entities/facts and uses configured LLM/embedder providers during ingestion/search. Anonymous telemetry can be disabled. | Vault content and metadata are read locally and returned to the MCP client and model. Changes are written directly to local files. MCPVault states that it does not receive, store, or transmit vault data, while the selected AI provider still processes content sent by the client. |
| Limitations | ||
| Tradeoffs |
|
|
| Risk context | High. Default network exposure plus destructive graph tools and backend/LLM credentials create material unauthorized-access and data-loss risk. | A selected vault can contain a large body of private knowledge, and write tools can overwrite, move, or delete it. Use a dedicated vault, reliable backups or version control, an absolute path, a reviewed package version, and explicit approval for writes. |
| Evidence date | ||
| Editorial review | 2026-09-11 | 2026-09-05 |
| Candidate evidence | 2026-09-11T00:00:00.000Z | 2026-09-05T00:00:00.000Z |
Popularity, maintenance, fit, permissions, and client support are independent evidence fields.
Read the evidence method →