Field-by-field comparison

Compare the evidence before choosing an MCP.

Each signal stays separate, missing facts remain visible, and the column order follows your selection.

MCPs in this comparison

io.github.blazickjp/arxiv-mcp-serverMCPVault for Obsidian

Uncheck an MCP to remove it. Comparing two or three keeps each signal in its own row.

Comparable alternatives

Azure MCP ServerMCP100 RecommendedChrome DevTools MCPMCP100 RecommendedContext7 MCPMCP100 RecommendedGrafana Cloud MCPMCP100 RecommendedGoogle MCP Toolbox for DatabasesMCP100 RecommendedPlaywright MCPMCP100 Recommended

Shown only when capability or industry context overlaps.

Side-by-side MCP evidence comparison
Evidence field	io.github.blazickjp/arxiv-mcp-serverMCP100 Recommended	MCPVault for ObsidianMCP100 Recommended
Task fit
Best for	Researchers who want focused arXiv literature workflows with local storage and bounded reads Agents that need original LaTeX sections, citation graphs, BibTeX export, and topic watches without ingesting whole papers into context	Obsidian users who want local search and supervised note maintenance Vaults protected by version control or reliable backups Users able to expose only a dedicated, bounded vault
Not ideal for	Users who need a fully hosted zero-local-state service Workflows that cannot safely treat paper text and LaTeX as untrusted content	Unbacked-up personal knowledge bases Read-only research where a simpler filesystem search is sufficient Enterprise knowledge requiring centralized authorization and audit controls
Avoid when	Your agent automatically acts on instructions embedded in retrieved papers without approval You expose the optional HTTP transport publicly without upstream authentication and explicit Host/Origin controls	The vault contains secrets, regulated data, or material that cannot reach the selected AI provider Write, move, and delete tools cannot be confirmed by a human The vault path cannot be narrowed to a dedicated directory
Provenance
Provenance details	Community implementation reviewed-promotion:io-github-blazickjp-arxiv-mcp-server · Publisher source ↗	Community implementation BitBonsai · Publisher source ↗
Maintenance
Maintenance details	Repo: Aug 26, 2026 Package: Not documented	Repo: Sep 21, 2026 Package: Not documented
Popularity evidence
GitHub stars	3,173 GitHub stars · checked 2026-09-24T04:14:39.538000Z	1,672 GitHub stars · checked 2026-09-24T04:14:39.538000Z
Client coverage
Client coverage details	Claude Code✓ Local stdio Claude Desktop✓ Local stdio Codex✓ Local stdio VS Code✓ Local stdio Cursor✓ Local stdio OpenCode✓ Local stdio	Claude Code✓ Local stdio Claude Desktop✓ Local stdio Codex✓ Local stdio VS Code✓ Local stdio Cursor✓ Local stdio OpenCode✓ Local stdio
Client coverage note	Local stdio runs on your computer. Streamable HTTP connects to a remotely hosted MCP server.
Access and data
Authentication	Default stdio operation requires no arXiv API key. citation_graph can optionally use SEMANTIC_SCHOLAR_API_KEY for higher reliability. If Streamable HTTP is enabled, the project recommends keeping it private or adding authentication upstream.	None at the local stdio layer.
Cost	The server is open source under Apache-2.0 and does not require an arXiv API key. External services may impose their own rate limits; an optional Semantic Scholar API key can improve citation reliability.	MCPVault is MIT licensed and free to run locally. MCP-host, model, backup, and storage costs remain.
Permissions	The server searches external research services, downloads papers/source archives, and reads/writes its own local paper cache, topic watches, and semantic index under the configured storage path. It does not require broad account-level permissions.	The server has filesystem read and write access within the supplied vault root, including note creation, overwrite or patch, frontmatter changes, moves, tags, and deletion. Operating-system permissions and the configured vault path are the primary boundary.
Data handling	Downloaded papers, source archives, topic watches, and indexes are stored locally (default ~/.arxiv-mcp-server/papers). Search/source/citation/download requests go to external services. Paper text and LaTeX are explicitly treated as untrusted external input.	Vault content and metadata are read locally and returned to the MCP client and model. Changes are written directly to local files. MCPVault states that it does not receive, store, or transmit vault data, while the selected AI provider still processes content sent by the client.
Limitations
Tradeoffs	Local storage and bounded reads improve privacy/context control, but downloaded papers, source archives, alerts, and indexes remain on the user's machine Citation graphs depend on Semantic Scholar and optional API credentials; semantic search/reindex require the pro extra	Local stdio avoids a hosted MCP service, but note contents still enter the MCP host and model context. Frontmatter-aware writes are more useful than generic file access but increase integrity risk. npx makes setup simple, while stricter environments may prefer a pinned and reviewed package version. Version 0.16.0 migrated to MCP TypeScript SDK v2 / protocol 2026-07-28 while retaining dual-era stdio compatibility.
Risk context	Low to medium. Main risks are prompt injection in paper content, hostile LaTeX archives, local disk writes, and optional HTTP exposure. The project mitigates archive traversal/decompression risks, bounds content, binds HTTP to loopback by default, and enables DNS-rebinding protections.	A selected vault can contain a large body of private knowledge, and write tools can overwrite, move, or delete it. Use a dedicated vault, reliable backups or version control, an absolute path, a reviewed package version, and explicit approval for writes.
Evidence date
Editorial review	2026-09-11	2026-09-05
Candidate evidence	2026-09-24T04:25:05.554391Z	2026-09-24T04:25:05.554391Z

Popularity, maintenance, fit, permissions, and client support are independent evidence fields.

Read the evidence method →