Skip to content

This release adds 3 notable features for engineering teams evaluating rollout.

Published 4mo MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai claude markdown mcp model-context-protocol notes
+3 more
obsidian sse secrets-management

Affected surfaces

auth

Summary

AI summary

Optional API key authentication added to secure MCP endpoints.

Full changelog

What's New

🔐 API Key Authentication

The server now supports optional API key authentication to secure your MCP endpoints.

Features:

  • New API_KEY environment variable to enable authentication
  • Support for Bearer token via Authorization header
  • Support for api_key query parameter
  • Health endpoint shows auth status (enabled/disabled)
  • Fully backward compatible - auth disabled when API_KEY not set

Protected endpoints: /sse (GET/POST), /message (POST)
Public endpoint: /health (GET)

Usage

# Docker
docker run -d \
  -v /path/to/vault:/vault:rw \
  -p 3001:3000 \
  -e VAULT_PATH=/vault \
  -e API_KEY=your-secret-key \
  ghcr.io/smith-and-web/obsidian-mcp-server:latest

# npx
API_KEY=your-secret-key VAULT_PATH=/path/to/vault npx @smith-and-web/obsidian-mcp-server

Client Configuration

{
  "mcpServers": {
    "obsidian": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://your-domain.com/sse?api_key=your-secret-key"]
    }
  }
}

See the Authentication section in the README for full documentation.


Full Changelog: https://github.com/smith-and-web/obsidian-mcp-server/compare/v1.2.2...v1.3.0

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track smith-and-web/obsidian-mcp-server

Get notified when new releases ship.

Sign up free

About smith-and-web/obsidian-mcp-server

SSE-enabled MCP server for remote Obsidian vault management with 29 tools for notes, directories, frontmatter, tags, search, and link operations. Docker-ready with health monitoring.

All releases →

Beta — feedback welcome: [email protected]