Field-by-field comparison
Compare the evidence before choosing an MCP.
Each signal stays separate, missing facts remain visible, and the column order follows your selection.
| Evidence field | MCPVault for ObsidianMCP100 Recommended | io.github.blazickjp/arxiv-mcp-serverMCP100 Recommended |
|---|---|---|
| Task fit | ||
| Best for |
|
|
| Not ideal for |
|
|
| Avoid when |
|
|
| Provenance | ||
| Provenance details | Community implementation BitBonsai · Publisher source ↗ | Community implementation reviewed-promotion:io-github-blazickjp-arxiv-mcp-server · Publisher source ↗ |
| Maintenance | ||
| Maintenance details | Repo: Sep 21, 2026 Package: Not documented | Repo: Aug 26, 2026 Package: Not documented |
| Popularity evidence | ||
| GitHub stars | 1,672 GitHub stars · checked 2026-09-24T04:14:39.538000Z | 3,173 GitHub stars · checked 2026-09-24T04:14:39.538000Z |
| Client coverage | ||
| Client coverage details | Claude Code✓ Local stdio Claude Desktop✓ Local stdio Codex✓ Local stdio VS Code✓ Local stdio Cursor✓ Local stdio OpenCode✓ Local stdio | Claude Code✓ Local stdio Claude Desktop✓ Local stdio Codex✓ Local stdio VS Code✓ Local stdio Cursor✓ Local stdio OpenCode✓ Local stdio |
| Client coverage note | Local stdio runs on your computer. Streamable HTTP connects to a remotely hosted MCP server. | |
| Access and data | ||
| Authentication | None at the local stdio layer. | Default stdio operation requires no arXiv API key. citation_graph can optionally use SEMANTIC_SCHOLAR_API_KEY for higher reliability. If Streamable HTTP is enabled, the project recommends keeping it private or adding authentication upstream. |
| Cost | MCPVault is MIT licensed and free to run locally. MCP-host, model, backup, and storage costs remain. | The server is open source under Apache-2.0 and does not require an arXiv API key. External services may impose their own rate limits; an optional Semantic Scholar API key can improve citation reliability. |
| Permissions | The server has filesystem read and write access within the supplied vault root, including note creation, overwrite or patch, frontmatter changes, moves, tags, and deletion. Operating-system permissions and the configured vault path are the primary boundary. | The server searches external research services, downloads papers/source archives, and reads/writes its own local paper cache, topic watches, and semantic index under the configured storage path. It does not require broad account-level permissions. |
| Data handling | Vault content and metadata are read locally and returned to the MCP client and model. Changes are written directly to local files. MCPVault states that it does not receive, store, or transmit vault data, while the selected AI provider still processes content sent by the client. | Downloaded papers, source archives, topic watches, and indexes are stored locally (default ~/.arxiv-mcp-server/papers). Search/source/citation/download requests go to external services. Paper text and LaTeX are explicitly treated as untrusted external input. |
| Limitations | ||
| Tradeoffs |
|
|
| Risk context | A selected vault can contain a large body of private knowledge, and write tools can overwrite, move, or delete it. Use a dedicated vault, reliable backups or version control, an absolute path, a reviewed package version, and explicit approval for writes. | Low to medium. Main risks are prompt injection in paper content, hostile LaTeX archives, local disk writes, and optional HTTP exposure. The project mitigates archive traversal/decompression risks, bounds content, binds HTTP to loopback by default, and enables DNS-rebinding protections. |
| Evidence date | ||
| Editorial review | 2026-09-05 | 2026-09-11 |
| Candidate evidence | 2026-09-24T04:25:05.554391Z | 2026-09-24T04:25:05.554391Z |
Popularity, maintenance, fit, permissions, and client support are independent evidence fields.
Read the evidence method →