obsidian-mcp-server 3.1.0 → 3.1.2

package/dist/services/obsidian/path-policy.d.ts

@@ -0,0 +1,56 @@
+/**
+ * @fileoverview Path-policy enforcement for the Obsidian Local REST API service.
+ * Single chokepoint for OBSIDIAN_READ_PATHS / OBSIDIAN_WRITE_PATHS / OBSIDIAN_READ_ONLY —
+ * tools and resources call into the service, the service consults this policy
+ * before every upstream HTTP call. See issue #40 for the spec.
+ *
+ * The policy carries the active scope so error data echoes back which paths
+ * are allowed; the LLM (or operator) can self-correct without poking at logs.
+ *
+ * @module services/obsidian/path-policy
+ */
+import type { ServerConfig } from '../../config/server-config.js';
+export type PathOp = 'read' | 'write';
+export type PathForbiddenSubreason = 'outside_read_paths' | 'outside_write_paths' | 'read_only_mode';
+/** Wire data shape thrown with `path_forbidden`. */
+export interface PathForbiddenData {
+    activeScope: string[];
+    op: PathOp;
+    path: string;
+    reason: 'path_forbidden';
+    recovery: {
+        hint: string;
+    };
+    subreason: PathForbiddenSubreason;
+}
+/**
+ * Enforces folder-scoped read/write permissions on vault-relative paths.
+ * Constructed once from validated `ServerConfig`; read paths and write paths
+ * arrive already lower-cased, trimmed of trailing slashes, and deduplicated by
+ * the config parser, so matching is a straight prefix-or-equal compare.
+ */
+export declare class PathPolicy {
+    #private;
+    constructor(config: ServerConfig);
+    /** True when no path policy is active — every op falls through to the upstream. */
+    get isUnrestricted(): boolean;
+    /** Snapshot for startup-banner logging. */
+    describe(): {
+        readPaths: readonly string[] | 'full vault';
+        writePaths: readonly string[] | 'full vault' | 'denied (read-only)';
+        readOnly: boolean;
+    };
+    /** True when both READ_ONLY=true and WRITE_PATHS is non-empty (operator should know WRITE_PATHS is ignored). */
+    get readOnlyShadowsWritePaths(): boolean;
+    isReadable(path: string): boolean;
+    isWritable(path: string): boolean;
+    /** Throws `path_forbidden` if the path is not readable. */
+    assertReadable(path: string): void;
+    /** Throws `path_forbidden` if the path is not writable (write tools also implicitly need read access). */
+    assertWritable(path: string): void;
+    /** Drop reads outside scope. Used by `obsidian_search_notes` to silently filter. */
+    filterReadable<T extends {
+        filename: string;
+    }>(hits: readonly T[]): T[];
+}
+//# sourceMappingURL=path-policy.d.ts.map

package/dist/services/obsidian/path-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-policy.d.ts","sourceRoot":"","sources":["../../../src/services/obsidian/path-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAE9D,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAEtC,MAAM,MAAM,sBAAsB,GAC9B,oBAAoB,GACpB,qBAAqB,GACrB,gBAAgB,CAAC;AAErB,oDAAoD;AACpD,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3B,SAAS,EAAE,sBAAsB,CAAC;CACnC;AAED;;;;;GAKG;AACH,qBAAa,UAAU;;gBAKT,MAAM,EAAE,YAAY;IAMhC,mFAAmF;IACnF,IAAI,cAAc,IAAI,OAAO,CAE5B;IAED,2CAA2C;IAC3C,QAAQ,IAAI;QACV,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,YAAY,CAAC;QAC5C,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,YAAY,GAAG,oBAAoB,CAAC;QACpE,QAAQ,EAAE,OAAO,CAAC;KACnB;IAQD,gHAAgH;IAChH,IAAI,yBAAyB,IAAI,OAAO,CAEvC;IAED,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAejC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAOjC,2DAA2D;IAC3D,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAKlC,0GAA0G;IAC1G,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAQlC,oFAAoF;IACpF,cAAc,CAAC,CAAC,SAAS;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE;CA8BxE"}

package/dist/services/obsidian/path-policy.js

@@ -0,0 +1,154 @@
+/**
+ * @fileoverview Path-policy enforcement for the Obsidian Local REST API service.
+ * Single chokepoint for OBSIDIAN_READ_PATHS / OBSIDIAN_WRITE_PATHS / OBSIDIAN_READ_ONLY —
+ * tools and resources call into the service, the service consults this policy
+ * before every upstream HTTP call. See issue #40 for the spec.
+ *
+ * The policy carries the active scope so error data echoes back which paths
+ * are allowed; the LLM (or operator) can self-correct without poking at logs.
+ *
+ * @module services/obsidian/path-policy
+ */
+import { forbidden } from '@cyanheads/mcp-ts-core/errors';
+/**
+ * Enforces folder-scoped read/write permissions on vault-relative paths.
+ * Constructed once from validated `ServerConfig`; read paths and write paths
+ * arrive already lower-cased, trimmed of trailing slashes, and deduplicated by
+ * the config parser, so matching is a straight prefix-or-equal compare.
+ */
+export class PathPolicy {
+    #readPaths;
+    #writePaths;
+    #readOnly;
+    constructor(config) {
+        this.#readPaths = config.readPaths;
+        this.#writePaths = config.writePaths;
+        this.#readOnly = config.readOnly;
+    }
+    /** True when no path policy is active — every op falls through to the upstream. */
+    get isUnrestricted() {
+        return !this.#readOnly && this.#readPaths === undefined && this.#writePaths === undefined;
+    }
+    /** Snapshot for startup-banner logging. */
+    describe() {
+        return {
+            readPaths: this.#readPaths ?? 'full vault',
+            writePaths: this.#readOnly ? 'denied (read-only)' : (this.#writePaths ?? 'full vault'),
+            readOnly: this.#readOnly,
+        };
+    }
+    /** True when both READ_ONLY=true and WRITE_PATHS is non-empty (operator should know WRITE_PATHS is ignored). */
+    get readOnlyShadowsWritePaths() {
+        return this.#readOnly && this.#writePaths !== undefined && this.#writePaths.length > 0;
+    }
+    isReadable(path) {
+        const candidate = normalize(path);
+        if (this.#readPaths === undefined)
+            return true;
+        if (matchesAny(candidate, this.#readPaths))
+            return true;
+        /** Write paths are implicitly readable — you can't sanely edit what you can't see. */
+        if (!this.#readOnly &&
+            this.#writePaths !== undefined &&
+            matchesAny(candidate, this.#writePaths)) {
+            return true;
+        }
+        return false;
+    }
+    isWritable(path) {
+        if (this.#readOnly)
+            return false;
+        const candidate = normalize(path);
+        if (this.#writePaths === undefined)
+            return true;
+        return matchesAny(candidate, this.#writePaths);
+    }
+    /** Throws `path_forbidden` if the path is not readable. */
+    assertReadable(path) {
+        if (this.isReadable(path))
+            return;
+        throw this.#deny(path, 'read', 'outside_read_paths');
+    }
+    /** Throws `path_forbidden` if the path is not writable (write tools also implicitly need read access). */
+    assertWritable(path) {
+        if (this.#readOnly) {
+            throw this.#deny(path, 'write', 'read_only_mode');
+        }
+        if (this.isWritable(path))
+            return;
+        throw this.#deny(path, 'write', 'outside_write_paths');
+    }
+    /** Drop reads outside scope. Used by `obsidian_search_notes` to silently filter. */
+    filterReadable(hits) {
+        /** Reads unrestricted when readPaths is unset — `isReadable` short-circuits to true. */
+        if (this.#readPaths === undefined)
+            return [...hits];
+        return hits.filter((h) => this.isReadable(h.filename));
+    }
+    #deny(path, op, subreason) {
+        const activeScope = this.#scopeFor(op);
+        const { message, recovery } = renderDenial(path, op, subreason, activeScope);
+        const data = {
+            reason: 'path_forbidden',
+            path,
+            op,
+            subreason,
+            activeScope,
+            recovery: { hint: recovery },
+        };
+        return forbidden(message, { ...data });
+    }
+    #scopeFor(op) {
+        if (op === 'write') {
+            if (this.#readOnly)
+                return [];
+            return [...(this.#writePaths ?? [])];
+        }
+        const set = new Set();
+        if (this.#readPaths)
+            for (const p of this.#readPaths)
+                set.add(p);
+        if (!this.#readOnly && this.#writePaths)
+            for (const p of this.#writePaths)
+                set.add(p);
+        return [...set];
+    }
+}
+function normalize(path) {
+    /**
+     * Match the parser's normalization rules so the candidate compares apples to
+     * apples against the configured prefixes.
+     */
+    return path.replace(/^[\\/]+|[\\/]+$/g, '').toLowerCase();
+}
+function matchesAny(candidate, prefixes) {
+    for (const prefix of prefixes) {
+        if (candidate === prefix)
+            return true;
+        /** Prefix match only at a path boundary so `pub` doesn't match `public/`. */
+        if (candidate.startsWith(`${prefix}/`))
+            return true;
+    }
+    return false;
+}
+/**
+ * Split into `message` (the "what") and `recovery` (the "how to fix"). The
+ * framework renders both in `content[]` as `Error: <message>` then
+ * `Recovery: <recovery>`, so they need to carry distinct information.
+ */
+function renderDenial(path, op, subreason, activeScope) {
+    if (subreason === 'read_only_mode') {
+        return {
+            message: `Path '${path}' is not writable: server is in read-only mode (OBSIDIAN_READ_ONLY=true).`,
+            recovery: 'Unset OBSIDIAN_READ_ONLY (or set it to false) to enable writes.',
+        };
+    }
+    const envVar = subreason === 'outside_write_paths' ? 'OBSIDIAN_WRITE_PATHS' : 'OBSIDIAN_READ_PATHS';
+    const opLabel = op === 'write' ? 'writable' : 'readable';
+    const scopeRender = activeScope.length > 0 ? activeScope.map((p) => `'${p}'`).join(', ') : '(empty)';
+    return {
+        message: `Path '${path}' is not ${opLabel}: outside ${envVar}.`,
+        recovery: `Allowed prefixes: [${scopeRender}]. Use a path within scope, or update ${envVar} to include this path.`,
+    };
+}
+//# sourceMappingURL=path-policy.js.map

package/dist/services/obsidian/path-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-policy.js","sourceRoot":"","sources":["../../../src/services/obsidian/path-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAoB1D;;;;;GAKG;AACH,MAAM,OAAO,UAAU;IACZ,UAAU,CAAgC;IAC1C,WAAW,CAAgC;IAC3C,SAAS,CAAU;IAE5B,YAAY,MAAoB;QAC9B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC;IACnC,CAAC;IAED,mFAAmF;IACnF,IAAI,cAAc;QAChB,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC;IAC5F,CAAC;IAED,2CAA2C;IAC3C,QAAQ;QAKN,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,YAAY;YAC1C,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,YAAY,CAAC;YACtF,QAAQ,EAAE,IAAI,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;IAED,gHAAgH;IAChH,IAAI,yBAAyB;QAC3B,OAAO,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;IACzF,CAAC;IAED,UAAU,CAAC,IAAY;QACrB,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC/C,IAAI,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QACxD,sFAAsF;QACtF,IACE,CAAC,IAAI,CAAC,SAAS;YACf,IAAI,CAAC,WAAW,KAAK,SAAS;YAC9B,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,EACvC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,UAAU,CAAC,IAAY;QACrB,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QACjC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAChD,OAAO,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACjD,CAAC;IAED,2DAA2D;IAC3D,cAAc,CAAC,IAAY;QACzB,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO;QAClC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACvD,CAAC;IAED,0GAA0G;IAC1G,cAAc,CAAC,IAAY;QACzB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO;QAClC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;IACzD,CAAC;IAED,oFAAoF;IACpF,cAAc,CAAiC,IAAkB;QAC/D,wFAAwF;QACxF,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,IAAY,EAAE,EAAU,EAAE,SAAiC;QAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAsB;YAC9B,MAAM,EAAE,gBAAgB;YACxB,IAAI;YACJ,EAAE;YACF,SAAS;YACT,WAAW;YACX,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC7B,CAAC;QACF,OAAO,SAAS,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,SAAS,CAAC,EAAU;QAClB,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YACnB,IAAI,IAAI,CAAC,SAAS;gBAAE,OAAO,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,IAAI,IAAI,CAAC,UAAU;YAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,WAAW;YAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,WAAW;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtF,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;IAClB,CAAC;CACF;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B;;;OAGG;IACH,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB,EAAE,QAA2B;IAChE,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,SAAS,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACtC,6EAA6E;QAC7E,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CACnB,IAAY,EACZ,EAAU,EACV,SAAiC,EACjC,WAA8B;IAE9B,IAAI,SAAS,KAAK,gBAAgB,EAAE,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,SAAS,IAAI,2EAA2E;YACjG,QAAQ,EAAE,iEAAiE;SAC5E,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GACV,SAAS,KAAK,qBAAqB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,qBAAqB,CAAC;IACvF,MAAM,OAAO,GAAG,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;IACzD,MAAM,WAAW,GACf,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,OAAO;QACL,OAAO,EAAE,SAAS,IAAI,YAAY,OAAO,aAAa,MAAM,GAAG;QAC/D,QAAQ,EAAE,sBAAsB,WAAW,yCAAyC,MAAM,wBAAwB;KACnH,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "obsidian-mcp-server",
-  "version": "3.1.0",
+  "version": "3.1.2",
   "mcpName": "io.github.cyanheads/obsidian-mcp-server",
   "description": "MCP server for Obsidian vaults — read, write, search, and surgically edit notes, tags, and frontmatter via the Local REST API plugin. STDIO or Streamable HTTP.",
   "type": "module",
@@ -29,11 +29,10 @@
     "changelog:build": "bun run scripts/build-changelog.ts",
     "changelog:check": "bun run scripts/build-changelog.ts --check",
     "test": "bunx vitest run",
-    "dev:stdio": "MCP_TRANSPORT_TYPE=stdio bun --watch src/index.ts",
-    "dev:http": "MCP_TRANSPORT_TYPE=http bun --watch src/index.ts",
     "start": "node dist/index.js",
     "start:stdio": "MCP_TRANSPORT_TYPE=stdio bun ./dist/index.js",
-    "start:http": "MCP_TRANSPORT_TYPE=http bun ./dist/index.js"
+    "start:http": "MCP_TRANSPORT_TYPE=http bun ./dist/index.js",
+    "publish-mcp": "mcp-publisher login github -token \"$(security find-generic-password -a \"$USER\" -s mcp-publisher-github-pat -w)\" && mcp-publisher publish"
   },
   "keywords": [
     "mcp",
@@ -67,18 +66,18 @@
     "access": "public"
   },
   "dependencies": {
-    "@cyanheads/mcp-ts-core": "^0.8.2",
+    "@cyanheads/mcp-ts-core": "^0.8.13",
     "@types/js-yaml": "^4.0.9",
     "js-yaml": "^4.1.1",
     "pino-pretty": "^13.1.3",
-    "undici": "^8.1.0"
+    "undici": "^8.2.0"
   },
   "devDependencies": {
-    "@biomejs/biome": "^2.4.13",
+    "@biomejs/biome": "^2.4.14",
     "@types/node": "^25.6.0",
     "depcheck": "^1.4.7",
     "ignore": "^7.0.5",
-    "tsc-alias": "^1.8.16",
+    "tsc-alias": "^1.8.17",
     "typescript": "^6.0.3",
     "vitest": "^4.1.5"
   }

package/server.json

@@ -6,14 +6,14 @@
     "url": "https://github.com/cyanheads/obsidian-mcp-server",
     "source": "github"
   },
-  "version": "3.1.0",
+  "version": "3.1.2",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "obsidian-mcp-server",
       "runtimeHint": "node",
-      "version": "3.1.0",
+      "version": "3.1.2",
       "packageArguments": [
         {
           "type": "positional",
@@ -59,6 +59,25 @@
           "isRequired": false,
           "default": "false"
         },
+        {
+          "name": "OBSIDIAN_READ_PATHS",
+          "description": "Optional comma-separated vault-relative folder allowlist for reads. Prefix-based with implicit recursion; case-insensitive; trailing slashes normalized. Unset = full vault. Write paths are implicitly readable. Example: 'public/,projects/'.",
+          "format": "string",
+          "isRequired": false
+        },
+        {
+          "name": "OBSIDIAN_WRITE_PATHS",
+          "description": "Optional comma-separated vault-relative folder allowlist for writes. Same syntax as OBSIDIAN_READ_PATHS. Unset = full vault. Example: 'projects/,scratch/'.",
+          "format": "string",
+          "isRequired": false
+        },
+        {
+          "name": "OBSIDIAN_READ_ONLY",
+          "description": "Global read-only kill switch. When true, every write is denied regardless of OBSIDIAN_WRITE_PATHS, and the command-palette pair is suppressed (commands can mutate). Useful for shared or public-facing deployments.",
+          "format": "string",
+          "isRequired": false,
+          "default": "false"
+        },
         {
           "name": "MCP_LOG_LEVEL",
           "description": "Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').",
@@ -76,7 +95,7 @@
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "obsidian-mcp-server",
       "runtimeHint": "node",
-      "version": "3.1.0",
+      "version": "3.1.2",
       "packageArguments": [
         {
           "type": "positional",
@@ -122,6 +141,25 @@
           "isRequired": false,
           "default": "false"
         },
+        {
+          "name": "OBSIDIAN_READ_PATHS",
+          "description": "Optional comma-separated vault-relative folder allowlist for reads. Prefix-based with implicit recursion; case-insensitive; trailing slashes normalized. Unset = full vault. Write paths are implicitly readable. Example: 'public/,projects/'.",
+          "format": "string",
+          "isRequired": false
+        },
+        {
+          "name": "OBSIDIAN_WRITE_PATHS",
+          "description": "Optional comma-separated vault-relative folder allowlist for writes. Same syntax as OBSIDIAN_READ_PATHS. Unset = full vault. Example: 'projects/,scratch/'.",
+          "format": "string",
+          "isRequired": false
+        },
+        {
+          "name": "OBSIDIAN_READ_ONLY",
+          "description": "Global read-only kill switch. When true, every write is denied regardless of OBSIDIAN_WRITE_PATHS, and the command-palette pair is suppressed (commands can mutate). Useful for shared or public-facing deployments.",
+          "format": "string",
+          "isRequired": false,
+          "default": "false"
+        },
         {
           "name": "MCP_HTTP_HOST",
           "description": "The hostname for the HTTP server.",