Standalone MCP server for Obsidian vaults — hybrid search, notes & files, memory, tasks, OAuth 2.1
The current version, v0.50.4, was published to the official MCP registry on 2026-09-13. It is distributed as the Docker image ghcr.io/aliasunder/vault-cortex:0.50.4, filed under Search by this index, and declares 24 environment variables. Removals and unreachable sources are measured across every server this index tracks, contract drift across the servers that answer in consecutive snapshots; the index's current counts put this record in context.
Using Vault Cortex in Claude, Cursor, Gemini CLI, Cline, or Zed? #
MCP tool contracts can change remotely with no version bump. The mcpindex gate pins each contract and HOLDs the call when it drifts-before your agent acts. Zero credentials. This is not the package install for this server itself (use Install this server for that).
Rewrites your MCP host config so each server launches behind the gate. Inspect first: curl -fsSL https://mcpindex.ai/install.sh | less
uv tool install mcpindex-gate && mcpindex-config-wire
Semantic screen found no manipulation pattern in the description. Conformance probe not yet run.
mcpindex.integrity.description passINFO
evidence“No malicious instructions found”via static_description
-
- Semantic screen only - the deterministic conformance probe has not run on this server
-
- Confidence is reported but not yet calibrated (v1)
-
- Screen reads the tool description, not the live behavior
-
- advisory
-
- registry description only no input schema
-
- screen model 8b
-
- Still current: the description we screened is unchanged, re-checked against the registry
-
- The registry listing (version, packages, links) changed after this screen ran - the description we assessed did not
Semantic screen: an LLM judge reads the tool description for hidden instructions (status PARTIAL). A pass means the description is not lying, not that the tool is safe: a high-capability tool with an honest description still warrants caution. The deterministic conformance probe has not been run on this server yet, so the screen here is semantic-only. Posture: advisory. Confidences are reported but not yet calibrated (calibrated=false at v1). Full verdict history is not shown on this page.
Own this server? Screen its description →
That verdict was true at screening time (snapshot 2026-09-13). #
Contracts can change after screening, with no version bump. The gate pins Vault Cortex’s tool contracts on first sight and holds any silent change before your agent acts - the check that keeps being true on Tuesday.
See your first HOLD in 2 minutes →
Related: how to trust an MCP server · screen before install · silent contract drift
People vet a server before wiring it in. One line on your project site or docs answers that with an independent record: screening verdict, registry provenance, contract drift history. It stays current as new screens and drift events land.
[Independent trust record for Vault Cortex](https://mcpindex.ai/server/io-github-aliasunder-vault-cortex) - screening verdict, registry provenance, and contract drift monitoring.
<a href="https://mcpindex.ai/server/io-github-aliasunder-vault-cortex">Independent trust record for Vault Cortex</a> - screening verdict, registry provenance, and contract drift monitoring.
A live verdict badge for your README or listing. It reflects the current screen, links back here, and updates when the verdict does.
[](https://mcpindex.ai/server/io-github-aliasunder-vault-cortex)
<a href="https://mcpindex.ai/server/io-github-aliasunder-vault-cortex"><img src="https://mcpindex.ai/api/v1/badge/io-github-aliasunder-vault-cortex" alt="mcpindex verdict" height="20" /></a>
MCP_AUTH_TOKEN
Bearer token for MCP client authentication. Must match the Authorization header sent by clients. Generate with: openssl rand -hex 32
PUBLIC_URL
Public URL clients use to reach this server. Used as the OAuth issuer URL in discovery metadata. Override when exposing the server outside localhost or on a non-default port.
EMBEDDING_ENABLED
Enable or disable the embedding pipeline. When false, no ONNX model is downloaded, no vector tables are created, and search uses FTS5 only.
RERANK_MODE
Cross-encoder reranking mode: blended (position-aware score blending after RRF fusion) or none (skip reranking). Only takes effect when EMBEDDING_ENABLED is true.
WINDOWS_MODE
Windows bind-mount mode: enables filesystem polling for the file watcher and rename-based moves across the Docker Desktop/WSL2 bridge. Set to true when the vault lives on a Windows drive.
MEMORY_ENABLED
Enable or disable the structured memory layer. When false, memory tools are hidden, bootstrap is skipped, and server metadata omits memory references.
FILE_TOOLS_ENABLED
Enable or disable file tools (vault_read_file, vault_list_files). When false, file tools are hidden and server metadata omits file tool references.
READONLY_MODE
Run the server read-only: every vault-writing tool is hidden, the memory folder is not auto-created, and server metadata omits write references.
DISABLED_TOOLS
Hide individual tools by name, comma-separated. Subtractive only — it cannot re-enable a tool another setting hides; an unknown tool name stops the server at startup.
MEMORY_DIR
Vault folder for structured memory files (About Me-style notes). Memory tools are hidden when MEMORY_ENABLED is false, but this value still feeds the defaults for PROTECTED_PATHS and ORPHAN_EXCLUDE_FOLDERS.
DAILY_NOTES_FOLDER
Vault folder for daily notes. Overrides the folder configured in Obsidian's daily-notes plugin.
DAILY_NOTES_FORMAT
Filename date format for daily notes (Moment.js tokens). Overrides the format configured in Obsidian's daily-notes plugin.
TRUST_PROXY_HOPS
Number of trusted reverse-proxy hops used to derive the client IP from X-Forwarded-For for OAuth rate limiting and request logs. With 0, injected forwarding headers are ignored.
TRUST_FORWARDED_HOPS
How many entries from the end of the RFC 7239 Forwarded header's for= list to count to reach the client IP for OAuth rate limiting and request logs. 0 ignores the header; 1 when the proxy in front writes it (e.g. AWS API Gateway); 2 when a CDN fronts that proxy and is the only way to reach it.
TZ
IANA timezone for timestamps and daily note resolution.
LOG_LEVEL
Logging verbosity.
LOG_DIR
Directory for log files that survive container re-creation. The container's own log is always written but discarded when the container is recreated; date-stamped files under LOG_DIR persist on the data volume. Default: /data/logs (remote image), none (local image). none keeps only the container log.
LOG_RETENTION_DAYS
Days to keep log files before automatic cleanup on startup; only applies when LOG_DIR is a path.
PROTECTED_PATHS
Comma-separated vault folder names blocked from vault_delete_note and vault_move_note. Default: MEMORY_DIR plus the daily notes folder, read from DAILY_NOTES_FOLDER or .obsidian/daily-notes.json (default Daily Notes). When set, overrides the default entirely.
ORPHAN_EXCLUDE_FOLDERS
Comma-separated vault folder names excluded from vault_find_orphans. Default: "Daily Notes", "Templates", MEMORY_DIR.
SERVICE_DOCUMENTATION_URL
Override the OAuth service documentation URL exposed via discovery metadata.
MAX_FILE_BYTES
Largest file vault_read_file will read, in bytes. Reading a larger file returns an error instead of content.
MAX_IMAGE_OUTPUT_BYTES
Byte budget for images returned by vault_read_file, in binary bytes before base64 encoding. Images exceeding the budget are downscaled/recompressed server-side to fit; raise for clients that accept larger tool responses.
MAX_PDF_RENDER_PAGES
Maximum PDF pages to render as images when raw: true is set on vault_read_file. The per-page byte budget is MAX_IMAGE_OUTPUT_BYTES divided evenly across the rendered pages.
Fodda Topic & Trend Researchai.fodda/topic-research
Trend, stats & insight search across PSFK expert graphs with citable sources.
ProductNowai.productnow/productnow
Connect AI agents to ProductNow's context engine to search, create, review, and act.
io.github.alibaizhanov/denselyio.github.alibaizhanov/densely
Lossless context compression: 2-8x fewer tokens, byte-exact recovery, search inside payloads