Obsidian Second Brain MCP

Local MCP server for Codex and Antigravity that automates an open Obsidian vault through Obsidian's official command-line interface. It uses MCP over STDIO, so no HTTP listener, API key, embeddings index, or cloud service is required. Obsidian remains the system of record; the server does not edit an iCloud vault directly.

Version 1.1 adds a PARA + life-todo layer: typed capture/file/task tools, MCP prompts, and read-only resources. The host LLM plans natural-language workflows; the server stays a thin, audited CLI facade. See docs/PARA.md, docs/PROMPTS.md, and docs/ROADMAP.md.

Requirements

• macOS with Obsidian 1.12.7 or newer.

• Node.js 20 or newer (the installer uses the Node executable that launched it).

• A built checkout of this project (npm install then npm run build).

• An open Obsidian vault.

Enable Obsidian's CLI before installing the MCP server:

1. Open Obsidian and choose Settings → General → Command line interface.

2. Enable the CLI and accept the macOS registration prompt.

3. Confirm that command -v obsidian prints a path (usually /usr/local/bin/obsidian). If it is elsewhere, set OBSIDIAN_BIN when starting the MCP server or before running the installer.

The server selects the most recently opened vault ID from ~/Library/Application Support/obsidian/obsidian.json. This means the vault can stay in iCloud while commands still go through Obsidian. Set OBSIDIAN_VAULT_ID to target a different registered vault.

For PARA workflows, run ensure_para once after install (or ask the client to) so Inbox/, Projects/, Areas/, Resources/, Archives/, and Life/Todos.md exist.

Related MCP server: obsidian-local-mcp

Install and configure

From the project directory:

npm install
npm run build
node scripts/install.mjs --dry-run
node scripts/install.mjs

The installer verifies Node, dist/index.js, and the Obsidian CLI; discovers the open vault ID; and merges an obsidian STDIO server into both client configurations:

• Codex: ~/.codex/config.toml

• Antigravity: ~/.gemini/config/mcp_config.json

Existing files are backed up with a timestamped .bak.* suffix before a real update. Existing settings and custom fields in the obsidian server entry are preserved; the command, entrypoint arguments, detected vault/CLI environment, and approval setting are refreshed. Codex receives default_tools_approval_mode = "auto" inside the [mcp_servers.obsidian] table so normal calls to this server do not require a confirmation for every operation.

Use one of these flags when only one client should be changed:

node scripts/install.mjs --codex-only
node scripts/install.mjs --antigravity-only

--dry-run performs prerequisite checks and prints the planned paths and backups without creating directories, backups, or configuration files. A missing Obsidian CLI is reported as a warning in dry-run mode, but blocks a real install. The installer never reads or prints note contents.

After installation, restart Codex and Antigravity, or use each client's MCP refresh/reload action. A running client does not automatically reload a changed MCP configuration; /mcp can show the current session's server state, but a full client restart may still be needed after the first install.

Tools

The server exposes fourteen tools. Read-only tools return structured data and do not write the audit log; mutations return concise before/after evidence and append one JSONL audit record.

Prompts and resources

The server instructions encourage: capture → review → file_note → manage_tasks; search before assuming a note exists; prefer typed tools; use prompts for PARA/life coaching; call suggest_use_cases for creative ideas grounded in vault evidence.

Creative workflows

The recommendation tool can surface workflows such as:

• PARA inbox triage: file Inbox notes into Projects, Areas, Resources, or Archives.

• Weekly life review: combine Areas, life todos, and open tasks into a daily-note narrative.

• Project next-actions sweep: clarify the next move on active projects.

• Forgotten-note resurfacing: rotate orphan notes into a daily review and connect the useful ones to active projects.

• Bridge-note generator: find disconnected tag/link clusters and outline a synthesis note that gives them a shared concept.

• Knowledge-gap radar: turn unresolved links and dead ends into a ranked research queue.

• Idea-collision studio: combine unrelated tag clusters into writing, experiment, or project concepts grounded in real notes.

Example prompts:

Capture "renew passport" as a life todo.
Triage my Inbox with PARA and file what is clearly a project.
Show unfinished life tasks and append next actions to today's daily note.
Status on project Website Redesign.
Suggest three creative second-brain workflows based on how my vault is structured.

For changes that affect several notes, ask the client to search/read first, show the proposed targets, and then perform the writes. The server permits autonomous writes by design, so client-level approval settings remain an important user choice.

Configuration

The MCP process reads these environment variables at startup:

The generated client entry uses the absolute Node executable, dist/index.js, the resolved Obsidian CLI path, and the detected vault ID, so it is independent of the shell's PATH. If the project moves or the default vault changes, rerun the installer to refresh those absolute values.

Safety and audit behavior

• All Obsidian arguments are passed as an array to execFile; there is no shell interpolation.

• Permanent deletion, arbitrary eval, and raw dev:*/developer-control commands are blocked, including through run_obsidian_command.

• organize_note and file_note use Obsidian move/trash only (no permanent delete).

• Every mutation records timestamp, tool, vault, affected targets, sanitized arguments, status, duration, and before/after metadata or content hashes.

• Content/body/text arguments are represented only by length and SHA-256 in the audit log. Note contents are not copied to logs or printed by the installer.

• The audit directory is created with mode 0700 and the JSONL file with mode

Development and tests

npm run check       # TypeScript type-check without emitting
npm run build       # Compile to dist/index.js
npm test            # Unit and MCP contract tests
npm run test:smoke  # Optional real-vault smoke test
node --check scripts/install.mjs
node scripts/install.mjs --dry-run

The real-vault smoke test is opt-in because it creates, updates, and trashes fixture notes. It should only be run with Obsidian open on the intended test vault. It exercises linked notes, search/read, properties, backlinks, tasks, trash, and audit entries, and must leave no fixture behind.

Troubleshooting

Obsidian CLI was not found — enable the CLI under Obsidian Settings → General, accept the registration prompt, and verify command -v obsidian. Set OBSIDIAN_BIN=/absolute/path/to/obsidian if registration used a non-standard path.

Compiled entrypoint not found — run npm install and npm run build from the project directory, then rerun the installer. The configured entrypoint is the absolute dist/index.js path.

No vault is detected — open the desired vault in Obsidian, or set OBSIDIAN_VAULT_ID to a vault ID from the vaults object in Obsidian's obsidian.json registry.

Tools do not appear — restart the client after installation and inspect its MCP page (/mcp in Codex). Check that the configured command and dist/index.js still exist and that Node is version 20 or newer.

A command fails — run the same read-only command in a terminal (for example, obsidian vault) and inspect the returned error. The server applies a vault ID to every command; a stale ID can be corrected with OBSIDIAN_VAULT_ID or by rerunning the installer after opening the desired vault.