obsidian-mcp-server

{
  "version": "3.8.0",
  "transport": "stdio",
  "identifier": "obsidian-mcp-server",
  "runtimeHint": "npx",
  "registryType": "npm",
  "registryBaseUrl": "https://registry.npmjs.org",
  "environmentVariables": [
    {
      "name": "OBSIDIAN_API_KEY",
      "format": "string",
      "isRequired": true,
      "description": "Bearer token for the Obsidian Local REST API plugin (Settings → Community Plugins → Local REST API)."
    },
    {
      "name": "OBSIDIAN_BASE_URL",
      "format": "string",
      "default": "http://127.0.0.1:27123",
      "description": "Base URL of the Obsidian Local REST API. Default: http://127.0.0.1:27123 (enable \"Non-encrypted (HTTP) Server\" in plugin settings). Use https://127.0.0.1:27124 for the always-on HTTPS port (self-signed cert; pair with OBSIDIAN_VERIFY_SSL=false)."
    },
    {
      "name": "OBSIDIAN_VERIFY_SSL",
      "format": "string",
      "default": "false",
      "description": "Whether to verify the TLS certificate on the Obsidian endpoint. Default false because the plugin uses a self-signed cert."
    },
    {
      "name": "OBSIDIAN_REQUEST_TIMEOUT_MS",
      "format": "string",
      "default": "30000",
      "description": "Per-request timeout in milliseconds."
    },
    {
      "name": "OBSIDIAN_ENABLE_COMMANDS",
      "format": "string",
      "default": "false",
      "description": "Opt-in flag for the command-palette pair (obsidian_list_commands + obsidian_execute_command). Off by default — Obsidian commands are opaque and can be destructive."
    },
    {
      "name": "OBSIDIAN_READ_PATHS",
      "format": "string",
      "description": "Optional comma-separated vault-relative folder allowlist for reads. Prefix-based with implicit recursion; case-insensitive; backslashes read as slashes, repeated and trailing slashes and '.' segments dropped, and names normalized to Unicode NFC; an entry naming the vault root ('.') is rejected at startup. Unset = full vault. Write paths are implicitly readable. Example: 'public/,projects/'."
    },
    {
      "name": "OBSIDIAN_WRITE_PATHS",
      "format": "string",
      "description": "Optional comma-separated vault-relative folder allowlist for writes. Same syntax as OBSIDIAN_READ_PATHS. Unset = full vault, or the read scope when reads are restricted; paths in OBSIDIAN_DENY_PATHS stay denied. Example: 'projects/,scratch/'."
    },
    {
      "name": "OBSIDIAN_DENY_PATHS",
      "format": "string",
      "description": "Optional comma-separated vault-relative paths withheld from reads and writes. Same syntax as OBSIDIAN_READ_PATHS. Wins over both allowlists; denied paths are left out of listings, search results, and tag counts. Unset = nothing denied. Example: 'private/,journal/therapy/'."
    },
    {
      "name": "OBSIDIAN_READ_ONLY",
      "format": "string",
      "default": "false",
      "description": "Global read-only kill switch. When true, every write is denied regardless of OBSIDIAN_WRITE_PATHS, and the command-palette pair is suppressed (commands can mutate). Useful for shared or public-facing deployments."
    },
    {
      "name": "OBSIDIAN_DELETE_ELICITATION",
      "format": "string",
      "default": "false",
      "description": "Opt-in delete confirmation. When true, obsidian_delete_note asks the user to confirm each delete through an elicitation round (the client must support elicitation), and HTTP startup requires a stateful session unless OBSIDIAN_READ_ONLY=true disables the tool. Off by default — the delete runs on the first call, bounded by OBSIDIAN_WRITE_PATHS and OBSIDIAN_READ_ONLY."
    },
    {
      "name": "OBSIDIAN_OMNISEARCH_URL",
      "format": "string",
      "description": "Override URL for the Omnisearch plugin HTTP server. Unset derives from OBSIDIAN_BASE_URL host with port 51361. Required only if the Omnisearch plugin is not on the default port."
    },
    {
      "name": "MCP_LOG_LEVEL",
      "format": "string",
      "default": "info",
      "description": "Sets the minimum log level for output (e.g., 'debug', 'info', 'warn')."
    }
  ]
}