
Security News
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
obsidian-tc
Advanced tools
MCP server for Obsidian — comprehensive tool surface for humans and autonomous agents
MCP server for Obsidian. Comprehensive tool surface for humans and autonomous agents.
This is the main package — published to npm as obsidian-tc.
See the repo root README for project overview and the ARCHITECTURE record for the dispatch pipeline and topology.
✅ Shipped — v1.31.3. The full tool surface (163 tools across 31 domains, milestones
M0–M7) is implemented and released. Built on Bun + Hono with Zod 4 schemas; runs under
Node >=24 (the test suite runs vitest under Node for node:sqlite).
npm install -g obsidian-tc
obsidian-tc /path/to/vault # zero-config: single vault "main", all defaults
obsidian-tc serve ./config.json # or a config file (multi-vault, auth, ACLs, embeddings)
Beyond serve, the CLI ships an offline command family that runs against the same
config + caches (no server needed):
| Command | What it does |
|---|---|
config show / validate | Print the effective config (secrets redacted) / validate it |
plugin install --vault <p> | Copy the companion plugin into a vault |
cluster [--k N] | Recompute chunk clusters for diversified retrieval |
compact [--dry-run] [--into <dir>] [--json <f>] | Reclaim disk from cache.db/experiential.db: FTS5 'optimize' + VACUUM (in place by default; --into <dir> copies via VACUUM INTO and prints the mv), verified with PRAGMA integrity_check |
activation-recompute | Fold the retrieval log into ACT-R activation scores |
citation-infer --transcript <f> | Stamp cited_in_response + citation_state on retrieval events from a session transcript. --allow-uncertain lets the judge abstain — dark by default: it changes the judge prompt and moves abstentions out of the citation count |
contribution-report | Per-note output-contribution report (top contributors + dead-retrieved) |
prefetch [--vault id] [--ttl-hours N] | Prewarm the session-bootstrap context cache (TTL enforced at read) |
densify-llm [--vault id] | LLM Pass-3 semantic-edge densification via the local gateway (graph densification, experimental; refuses if no gateway resolves) |
reflect [--max-judged N] | Sleep-time pass: stamp episode eligibility + update the preference profile |
metrics [--since ms] [--until ms] [--json f] | Knowledge-health scorecard from the derive layer |
gaps --queries <f> / --calibrate <golden.yaml> | Knowledge-gap detector / threshold calibration |
forget (--episode <id> | --note <rel>) [--erase] / --verify | Dependency-aware deletion + hash-chained audit |
context-export --out <f> [--vault id] | Export the derived plane (preferences, episodes, note_quality, retrieval feedback, forget_log) as a versioned, vendor-neutral JSON bundle |
context-import <bundle> [--vault id] [--dry-run] | Import a context-export bundle. --vault remaps the bundle's vault-scoped rows to the target vault (refuses a multi-source-vault bundle); forget always wins over import |
FAQs
MCP server for Obsidian — comprehensive tool surface for humans and autonomous agents
We found that obsidian-tc demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.