Vault Toolkit Bridge

Vault Toolkit Bridge is a desktop Obsidian plugin that exposes the current vault to local AI clients through the Model Context Protocol (MCP). It uses the standard Obsidian plugin API for note content, active-note state, metadata, tags, frontmatter, and atomic writes.

The server listens on 127.0.0.1 only. It does not send vault data to an external service, collect telemetry, or require an Obsidian account. Obsidian 1.13.0 or newer is required.

MCP tools

• read_note — read a note and its metadata.
• read_active_note — read the note active in this Obsidian window.
• search_notes — search paths and full note content by text or regex, with tag and exact frontmatter filters. Results include match locations and a content excerpt.
• get_backlinks — list resolved Markdown notes that link to a note.
• get_outgoing_links — list resolved Markdown notes linked from a note.
• get_graph_neighbors — traverse incoming and outgoing links up to 10 levels and return nodes, distances, and directed edges.
• list_notes — list Markdown notes in the vault.
• get_note_metadata — return timestamps, tags, and frontmatter.
• get_vault_metadata — summarize notes, folders, and tag usage.
• create_note — create a note, parent folders, and optional frontmatter.
• update_note — replace an entire note atomically.
• append_to_note — append Markdown content.
• patch_note — replace one exact, unique text fragment.
• update_frontmatter — set or remove a frontmatter property atomically.
• rename_note — rename or move a note with app.fileManager.renameFile, allowing Obsidian to update wikilinks consistently.
• batch_write — create or update up to 100 notes as one transaction. Paths are prevalidated; a failed write restores original contents and trashes newly created notes and empty folders according to the user's Obsidian preference.
• create_from_template — instantiate a note from a template using {{title}}, {{date}}, {{time}}, optional date/time formats such as {{date:YYYY-MM-DD}}, and custom variables.
• query_dataview — execute Dataview DQL through the enabled Dataview plugin API and return JSON-safe structured data.

All failed tool calls return isError: true and a structuredContent.error object with a stable code and human-readable message. Dataview absence is reported as DATAVIEW_NOT_INSTALLED; it does not stop the MCP server.

Tool argument examples

{
  "name": "search_notes",
  "arguments": {
    "query": "design package",
    "regex": "status:\\s+(draft|review)",
    "frontmatter": { "project": "vault-toolkit" },
    "case_sensitive": false,
    "limit": 50
  }
}

{
  "name": "batch_write",
  "arguments": {
    "operations": [
      { "type": "create", "path": "Design/Package.md", "content": "# Package" },
      { "type": "update", "path": "Design/Index.md", "content": "# Index\n\n[[Package]]" }
    ]
  }
}

batch_write supports optional frontmatter on both operation types. An update must provide content, frontmatter, or both. Duplicate paths in one batch are rejected before any write begins.

{
  "name": "create_from_template",
  "arguments": {
    "template_path": "Templates/Project.md",
    "target_path": "Projects/Vault Toolkit.md",
    "variables": { "owner": "researcher", "status": "draft" }
  }
}

The Obsidian command palette also includes controls for starting, stopping, and restarting the MCP server and using the note operations manually.

Multiple vaults

Enable the plugin in every vault that an AI client should access. Each open vault starts at port 8766; if that port is occupied, it automatically tries later ports. The preferred port and scan range are configurable per vault.

GET http://127.0.0.1:<port>/health identifies the vault name and selected port. A multi-vault MCP client can scan the configured range and route each operation to a specific vault.

Installation

GitHub release

1. Download main.js, manifest.json, and styles.css from the latest GitHub release.
2. Create <Vault>/.obsidian/plugins/vault-toolkit/.
3. Copy the three files into that directory.
4. Reload Obsidian, then enable Vault Toolkit Bridge in Settings → Community plugins.

BRAT

Add this repository in BRAT:

https://github.com/pavel-litvinov/obsidian_chat_gpt_plugin

Then enable Vault Toolkit Bridge in every vault you want to expose.

MCP connection

The plugin serves JSON-RPC MCP requests at:

http://127.0.0.1:8766/mcp

Open Settings → Vault Toolkit Bridge to see the actual endpoint when several vaults are open.

The plugin generates a unique bearer token for each vault. Copy it from Settings → Vault Toolkit Bridge and send it as:

Authorization: Bearer <token>

Development

Node.js 18 or newer is required.

npm install
npm run typecheck
npm run lint
npm run build

The production build writes main.js at the repository root. A release tag must exactly match the version in manifest.json; GitHub Actions builds and attaches main.js, manifest.json, and styles.css to the release.

Security

• Desktop only: the plugin uses Node's local HTTP server.
• The server binds only to 127.0.0.1.
• Browser-originated requests are rejected, and MCP requests must use Content-Type: application/json.
• Every MCP request requires a randomly generated per-vault bearer token.
• The plugin does not read from or write to the system clipboard.
• No outbound network requests, analytics, telemetry, ads, or paid services are included.
• Write tools modify vault files and should be used with normal backups or version control.

To report a vulnerability privately, follow SECURITY.md.

Vault access and privacy

The search_notes, list_notes, and vault metadata tools enumerate Markdown file paths in the vault where the plugin is enabled. This is required to search notes and summarize tags and folders. The plugin does not enumerate files outside that vault and does not transmit the resulting paths or note content beyond its localhost-only MCP server.

Individual note content is read or changed only when a corresponding MCP tool or Obsidian command is invoked. Enable the plugin only in vaults that you intend to make available to a local AI client.