server.json

{
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "name": "io.github.aliasunder/vault-cortex",
  "title": "Vault Cortex",
  "description": "Standalone MCP server for Obsidian vaults — hybrid search, structured memory, 25 tools, OAuth 2.1.",
  "version": "0.25.2",
  "websiteUrl": "https://github.com/aliasunder/vault-cortex",
  "repository": {
    "url": "https://github.com/aliasunder/vault-cortex",
    "source": "github",
    "id": "1226067541"
  },
  "packages": [
    {
      "registryType": "oci",
      "identifier": "ghcr.io/aliasunder/vault-mcp:0.25.2",
      "runtimeHint": "docker",
      "runtimeArguments": [
        {
          "type": "named",
          "name": "-p",
          "description": "Publish the container's port 8000 on the host.",
          "value": "8000:8000"
        },
        {
          "type": "named",
          "name": "-v",
          "description": "Bind-mount your Obsidian vault into the container at /vault.",
          "value": "{VAULT_PATH}:/vault:rw",
          "isRequired": true,
          "variables": {
            "VAULT_PATH": {
              "description": "Absolute path to your Obsidian vault on the host machine.",
              "isRequired": true,
              "format": "filepath"
            }
          }
        },
        {
          "type": "named",
          "name": "-v",
          "description": "Named volume for persistent state under /data — search index, OAuth token DB, and any log files. Keeps OAuth sessions alive across container restarts.",
          "value": "vault-cortex-data:/data"
        }
      ],
      "transport": {
        "type": "streamable-http",
        "url": "http://localhost:8000/mcp",
        "headers": [
          {
            "name": "Authorization",
            "description": "Bearer token used by the MCP client. Must match the MCP_AUTH_TOKEN env var passed to the container.",
            "value": "Bearer {MCP_AUTH_TOKEN}",
            "isRequired": true,
            "isSecret": true,
            "variables": {
              "MCP_AUTH_TOKEN": {
                "description": "Bearer token for MCP client authentication. Generate with: openssl rand -hex 32",
                "isRequired": true,
                "isSecret": true
              }
            }
          }
        ]
      },
      "environmentVariables": [
        {
          "name": "MCP_AUTH_TOKEN",
          "description": "Bearer token for MCP client authentication. Must match the Authorization header sent by clients. Generate with: openssl rand -hex 32",
          "isRequired": true,
          "isSecret": true
        },
        {
          "name": "PUBLIC_URL",
          "description": "Public URL clients use to reach this server. Used as the OAuth issuer URL in discovery metadata. Override when exposing the server outside localhost or on a non-default port.",
          "default": "http://localhost:8000"
        },
        {
          "name": "EMBEDDING_ENABLED",
          "description": "Enable or disable the embedding pipeline. When false, no ONNX model is downloaded, no vector tables are created, and search uses FTS5 only.",
          "default": "true"
        },
        {
          "name": "RERANK_MODE",
          "description": "Cross-encoder reranking mode: blended (position-aware score blending after RRF fusion) or none (skip reranking). Only takes effect when EMBEDDING_ENABLED is true.",
          "default": "blended",
          "choices": ["blended", "none"]
        },
        {
          "name": "MEMORY_ENABLED",
          "description": "Enable or disable the structured memory layer. When false, memory tools are hidden, bootstrap is skipped, and server metadata omits memory references.",
          "default": "true"
        },
        {
          "name": "MEMORY_DIR",
          "description": "Vault folder for structured memory files (About Me-style notes). Memory tools are hidden when MEMORY_ENABLED is false, but this value still feeds the defaults for PROTECTED_PATHS and ORPHAN_EXCLUDE_FOLDERS.",
          "default": "About Me"
        },
        {
          "name": "TZ",
          "description": "IANA timezone for timestamps and daily note resolution.",
          "default": "UTC"
        },
        {
          "name": "LOG_LEVEL",
          "description": "Logging verbosity.",
          "default": "info",
          "choices": ["debug", "info", "warn", "error"]
        },
        {
          "name": "LOG_DIR",
          "description": "Directory for persistent log files. Unset by default — logs go to stdout only. Set to /data/logs to also write date-stamped .log files to the persistent volume.",
          "format": "filepath"
        },
        {
          "name": "LOG_RETENTION_DAYS",
          "description": "Days to retain persistent log files before cleanup.",
          "default": "30",
          "format": "number"
        },
        {
          "name": "PROTECTED_PATHS",
          "description": "Comma-separated vault folder names blocked from vault_delete_note. Default: MEMORY_DIR and \"Daily Notes\"."
        },
        {
          "name": "ORPHAN_EXCLUDE_FOLDERS",
          "description": "Comma-separated vault folder names excluded from vault_find_orphans. Default: \"Daily Notes\", \"Templates\", MEMORY_DIR."
        },
        {
          "name": "SERVICE_DOCUMENTATION_URL",
          "description": "Override the OAuth service documentation URL exposed via discovery metadata.",
          "default": "https://github.com/aliasunder/vault-cortex"
        }
      ]
    }
  ]
}