Obsidian Turbocharged

io.github.The-40-ThievesPublished by GitHub account The-40-Thievesv1.34.0Updated Nov 3, 2026

Governed Obsidian vault access: hybrid retrieval, Markdown-native memory, HITL confirmations.

Overview

Obsidian Turbocharged's local MCP server; no sign-in required; STDIO.

No AI overview yet: these facts come from the registry entry and the server itself.

Installation

In SourceWeft

  1. Open Obsidian Turbocharged in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

obsidian-tc

[obsidian-tc quickstart demo]

Obsidian Turbocharged — governed, agent-ready vault access over MCP.

[License: AGPL v3] [Status: Shipped v1.34.0] [CodSpeed]

[Deploy to Render]

What it is

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults, for humans and agents alike. Instead of raw filesystem access to years of notes, every tool call runs through one pipeline — auth, folder ACLs, a read-only kill switch, HITL confirmation on destructive ops, and an audit log. It also adds fused retrieval (full-text, vector, graph) and a memory tier — episodes, decay, forgetting — living inside your vault under that same ACL. A full tool surface across every domain (all visible by default; a smaller set with opt-in profile: "core"), via a 3-tool discovery facade plus the standard search/fetch pair, listed in the tool catalog. Pitch: docs/WHY.md.

60-second start

No install:

sh
npx obsidian-tc /path/to/vault

Every note tool and lexical search work immediately. Semantic search defaults to a bundled embedder — see When NOT to use for which install methods it reaches.

For multi-vault, auth, or ACLs, use a config file:

bash
npm install -g obsidian-tcobsidian-tc ./obsidian-tc.config.json   # Node >= 24 or Bun >= 1.1

The default local embedder is an opt-in install, so npm install -g obsidian-tc leaves it out. To use it, install the same version: npm install -g @the-40-thieves/obsidian-tc-embedder-local@<same version> (drop -g for a project install), or let obsidian-tc setup offer to. Ollama and hosted embedding providers need no local embedder; without any embedder, semantic search is off and everything else still works.

Also ships as a Docker image, .mcpb bundle, and standalone binaries. More: docs/QUICKSTART.md.

When NOT to use obsidian-tc

Honest guidance — this is a heavier product than most:

  • Smallest possible footprint, read-only access, or no MCP at all. A single trusted human over one vault, a read-only wrapper, or the Obsidian URI/Local REST API plugin may be all you need — see the full comparison.
  • Zero setup, source checkouts only. The vault is read off disk; semantic search defaults to a bundled offline embedder; npm/Docker need an explicit provider until published — see Embeddings.
  • Zero-config trades away auth/ACLs. obsidian-tc /path/to/vault boots with auth off, no folder ACL — fine only because it's local-only; governance is opt-in. Detail: SECURITY.md.
  • AGPL-3.0's network-copyleft terms. Not permissive; a commercial license may exist — see License.
  • Single-maintainer project.
  • Everything inside Obsidian, or vault-independent memory. See the comparison above.

Migrating from another MCP server: docs/CUTOVER.md.

How it compares

Most Obsidian MCP projects are vault-access servers, retrieval engines, or memory engines, rarely more than one. obsidian-tc is the only one we know of that is all three, with memory living in the vault under the same ACL as every other write. Full 9-project table and "where the others win".

ToolsGroupWhat it's for
obsidian-tcfull surface (3-tool facade)all threegoverned access + retrieval + in-vault memory
obsidian-local-rest-api18accessObsidian's own built-in MCP server; one bearer key, no ACL
basic-memory~35memoryentities/relations in a separate, portable markdown KB

More

Table of contents

TC Bridge · Status · Architecture · The interface · Claude Code / Cursor / VS Code · Docs · Trademark · License · Contributing

TC Bridge: the companion Obsidian plugin

If you arrived here from Obsidian's plugin browser: the TC Bridge listing points here because the plugin lives in this repo, but it's a small optional bridge, not the server described above. It extends Local REST API with endpoints for Obsidian-only features (Templater, Dataview, Tasks, Excalidraw, Git, Remotely Save). Every filesystem-level feature works without it.

  • Install Local REST API first; TC Bridge reuses its bearer-token auth, desktop-only. The server is installed separately (60-second start); reaching the bridges needs restApiUrl/restApiKey in the vault config (step 6). That key is a vault root password — read the trust boundary first.
  • Formerly "Obsidian Turbocharged." Settings migrate on first load — details in packages/plugin/README.md.

Status

Shipped — v1.34.0, published to npm as provenance-signed packages, container image on GHCR. Milestones: Roadmap; releases: CHANGELOG.md.

Retrieval changes are measured, not asserted: a statistical ship rule gates every ranking change against a private golden set. Headline figures once on this README were withdrawn 2026-08-07 as unreproducible — full account and a public-corpus result since: docs/EVALUATION.md.

Architecture

Polyglot monorepo:

PackageLanguagePurpose
packages/serverTypeScript (Bun)MCP layer, auth, routing, tools, plugin bridges
packages/pluginTypeScriptCompanion Obsidian plugin extending Local REST API
packages/sharedTypeScriptShared Zod schemas and types
packages/nativeRust (napi-rs)Optional acceleration, pure-JS fallback

Dispatch-pipeline and package-layout detail: ARCHITECTURE.md.

Every capability is a governed tool with declared access scopes. Read tools (read_note, search_vault, get_backlinks, ...) never mutate the vault. Write tools cover whole-note and partial edits: write_note, append_note, patch_note (heading- and block-anchored edits), update_frontmatter, tag and link maintenance. Separate scope classes gate delete and move (delete_note, move_note), bulk operations (bulk_set_property), execute (execute_command) and admin (add_vault, reload_vault). The complete, always-current list, grouped by access scope and generated from the tool registry, is the tool catalog.

The interface: five tools, every governed capability

By default the server advertises just five tools instead of a wall of 164: three meta-tools, find_capability, describe_capability, call_capability (invoke by name, same pipeline as a direct call), plus the standard search and fetch tools ChatGPT deep research needs. toolFacade.mode selects triad (default), domain or flat (a superseded auto also exists) — boundary-only, no gate bypassed. Per-client advice: MCP clients.

Install in Claude Code, Cursor, VS Code

Claude Code plugin (launches npx -y obsidian-tc, asks for your config file path on enable):

sh
claude plugin marketplace add The-40-Thieves/obsidian-tcclaude plugin install obsidian-tc@the-40-thieves

Grok Build and Muse Code (1.4.0+) read the same marketplace; details in Installation.

[Add to Cursor] [Install in VS Code] Install in VS Code Insiders

Or by hand — Cursor (mcpServers) / VS Code (servers), same object: {"command": "npx", "args": ["-y", "obsidian-tc"], "env": {"OBSIDIAN_TC_CONFIG": "/ABS/config.json"}}. A .mcpb bundle (bun run bundle) also installs into Claude Desktop / other MCPB hosts. For claude.ai and ChatGPT (remote HTTP), see distribution.

Docs

Trademark

obsidian-tc is independent and community-built, not affiliated with or endorsed by Obsidian or its maker, Dynalist Inc. "Obsidian" is a Dynalist Inc. trademark, used only nominatively. Official app: obsidian.md.

License

AGPL-3.0-only. See LICENSE and the licensing FAQ; a commercial exception may exist — open a discussion. Contributions under the DCO; sign-off in CONTRIBUTING.md.

Contributing

See CONTRIBUTING.md / Code of Conduct. Security: SECURITY.md.

Source: README.md at commit 74f0a6d

Tools

0
SourceWeft started this package once in an isolated sandbox, without credentials, to list its tools. That failed: the server did not start.

Version history

12
  1. v1.34.0LatestNov 3, 2026
  2. v1.33.1Oct 13, 2026
  3. v1.32.0Oct 3, 2026
  4. v1.31.8Sep 29, 2026
  5. v1.31.7Sep 29, 2026
  6. v1.31.6Sep 29, 2026
  7. v1.31.5Sep 26, 2026
  8. v1.31.4Sep 26, 2026
  9. v1.31.3Sep 21, 2026
  10. v1.31.2Sep 21, 2026
  11. v1.31.1Sep 19, 2026
  12. v1.30.1Sep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts