-
0.13.0 Stable
released this
2026-07-11 13:21:15 +00:00 | 169 commits to main since this releaseAdded
- External access via MCP is now a built-in plugin feature. Enable the MCP server in
Settings → "MCP-Server" and connect an external LLM agent (e.g. Claude Code) with
claude mcp add --transport http …— three read-only tools (search,related,read_note)
over your vault's index. The server is desktop-only, binds to loopback (127.0.0.1) only,
runs only while Obsidian is open, and requires a Bearer token (auto-generated on enable) on
every request. Defense-in-depth: DNS-rebinding protection (Host-header allowlist), constant-time
token comparison, and a realpath containment guard soread_notecannot follow a symlink out of
the vault.
Changed
- The MCP server is now this in-plugin HTTP server (Streamable HTTP) instead of a separate stdio
Node CLI — it is bundled intomain.jsand the standalonemcp-server.jstarget is removed.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- External access via MCP is now a built-in plugin feature. Enable the MCP server in