io.github.aliasunder

vault-cortex

Vault Cortex

Standalone MCP server for Obsidian vaults — hybrid search, memory, tasks, 26 tools, OAuth 2.1.

Streamable HTTPcommunityapplication

Package Details

ghcr.io/aliasunder/vault-mcp:0.26.1

https://github.com/aliasunder/vault-mcp/pkgs/container/vault-mcp
TransportStreamable HTTP
Runtimedocker

Runtime Arguments

Named
-p
8000:8000Publish the container's port 8000 on the host.
-vRequired
{VAULT_PATH}:/vault:rwBind-mount your Obsidian vault into the container at /vault.
-v
vault-cortex-data:/dataNamed volume for persistent state under /data — search index, OAuth token DB, and any log files. Keeps OAuth sessions alive across container restarts.

Environment Variables

MCP_AUTH_TOKEN
RequiredSecret

Bearer token for MCP client authentication. Must match the Authorization header sent by clients. Generate with: openssl rand -hex 32

PUBLIC_URL
Default:http://localhost:8000

Public URL clients use to reach this server. Used as the OAuth issuer URL in discovery metadata. Override when exposing the server outside localhost or on a non-default port.

EMBEDDING_ENABLED
Default:true

Enable or disable the embedding pipeline. When false, no ONNX model is downloaded, no vector tables are created, and search uses FTS5 only.

RERANK_MODE
Default:blended

Cross-encoder reranking mode: blended (position-aware score blending after RRF fusion) or none (skip reranking). Only takes effect when EMBEDDING_ENABLED is true.

MEMORY_ENABLED
Default:true

Enable or disable the structured memory layer. When false, memory tools are hidden, bootstrap is skipped, and server metadata omits memory references.

MEMORY_DIR
Default:About Me

Vault folder for structured memory files (About Me-style notes). Memory tools are hidden when MEMORY_ENABLED is false, but this value still feeds the defaults for PROTECTED_PATHS and ORPHAN_EXCLUDE_FOLDERS.

TZ
Default:UTC

IANA timezone for timestamps and daily note resolution.

LOG_LEVEL
Default:info

Logging verbosity.

LOG_DIR(file)

Directory for persistent log files. Unset by default — logs go to stdout only. Set to /data/logs to also write date-stamped .log files to the persistent volume.

LOG_RETENTION_DAYS(num)
Default:30

Days to retain persistent log files before cleanup.

PROTECTED_PATHS

Comma-separated vault folder names blocked from vault_delete_note. Default: MEMORY_DIR and "Daily Notes".

ORPHAN_EXCLUDE_FOLDERS

Comma-separated vault folder names excluded from vault_find_orphans. Default: "Daily Notes", "Templates", MEMORY_DIR.

SERVICE_DOCUMENTATION_URL
Default:https://github.com/aliasunder/vault-cortex

Override the OAuth service documentation URL exposed via discovery metadata.