• 0.13.0 c2203359a3

    0.13.0 Stable

    jkaindl released this 2026-07-11 13:21:15 +00:00 | 169 commits to main since this release

    Added

    • External access via MCP is now a built-in plugin feature. Enable the MCP server in
      Settings → "MCP-Server" and connect an external LLM agent (e.g. Claude Code) with
      claude mcp add --transport http … — three read-only tools (search, related, read_note)
      over your vault's index. The server is desktop-only, binds to loopback (127.0.0.1) only,
      runs only while Obsidian is open, and requires a Bearer token (auto-generated on enable) on
      every request. Defense-in-depth: DNS-rebinding protection (Host-header allowlist), constant-time
      token comparison, and a realpath containment guard so read_note cannot follow a symlink out of
      the vault.

    Changed

    • The MCP server is now this in-plugin HTTP server (Streamable HTTP) instead of a separate stdio
      Node CLI — it is bundled into main.js and the standalone mcp-server.js target is removed.
    Downloads