Vault Cortex

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

• Connection: Runs on your computer
• Transport: Streamable HTTP
• Category: Docs, sheets & office work
• You need to fill in: MCP_AUTH_TOKEN

Install

Pick the AI app you use, then copy the settings.

You need

• DockerDocker installed

Which app do you use?

{
  "mcpServers": {
    "vault-cortex": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "MCP_AUTH_TOKEN",
        "-e",
        "PUBLIC_URL",
        "-e",
        "EMBEDDING_ENABLED",
        "-e",
        "RERANK_MODE",
        "-e",
        "WINDOWS_MODE",
        "-e",
        "MEMORY_ENABLED",
        "-e",
        "FILE_TOOLS_ENABLED",
        "-e",
        "READONLY_MODE",
        "-e",
        "DISABLED_TOOLS",
        "-e",
        "MEMORY_DIR",
        "-e",
        "DAILY_NOTES_FOLDER",
        "-e",
        "DAILY_NOTES_FORMAT",
        "-e",
        "TRUST_PROXY_HOPS",
        "-e",
        "TRUST_FORWARDED_HOPS",
        "-e",
        "TZ",
        "-e",
        "LOG_LEVEL",
        "-e",
        "LOG_DIR",
        "-e",
        "LOG_RETENTION_DAYS",
        "-e",
        "PROTECTED_PATHS",
        "-e",
        "ORPHAN_EXCLUDE_FOLDERS",
        "-e",
        "SERVICE_DOCUMENTATION_URL",
        "-e",
        "MAX_FILE_BYTES",
        "-e",
        "MAX_IMAGE_OUTPUT_BYTES",
        "-e",
        "MAX_PDF_RENDER_PAGES",
        "ghcr.io/aliasunder/vault-cortex:0.56.3"
      ],
      "env": {
        "MCP_AUTH_TOKEN": "your-value",
        "PUBLIC_URL": "your-value",
        "EMBEDDING_ENABLED": "your-value",
        "RERANK_MODE": "your-value",
        "WINDOWS_MODE": "your-value",
        "MEMORY_ENABLED": "your-value",
        "FILE_TOOLS_ENABLED": "your-value",
        "READONLY_MODE": "your-value",
        "DISABLED_TOOLS": "your-value",
        "MEMORY_DIR": "your-value",
        "DAILY_NOTES_FOLDER": "your-value",
        "DAILY_NOTES_FORMAT": "your-value",
        "TRUST_PROXY_HOPS": "your-value",
        "TRUST_FORWARDED_HOPS": "your-value",
        "TZ": "your-value",
        "LOG_LEVEL": "your-value",
        "LOG_DIR": "your-value",
        "LOG_RETENTION_DAYS": "your-value",
        "PROTECTED_PATHS": "your-value",
        "ORPHAN_EXCLUDE_FOLDERS": "your-value",
        "SERVICE_DOCUMENTATION_URL": "your-value",
        "MAX_FILE_BYTES": "your-value",
        "MAX_IMAGE_OUTPUT_BYTES": "your-value",
        "MAX_PDF_RENDER_PAGES": "your-value"
      }
    }
  }
}

claude mcp add vault-cortex --env MCP_AUTH_TOKEN=your-value --env PUBLIC_URL=your-value --env EMBEDDING_ENABLED=your-value --env RERANK_MODE=your-value --env WINDOWS_MODE=your-value --env MEMORY_ENABLED=your-value --env FILE_TOOLS_ENABLED=your-value --env READONLY_MODE=your-value --env DISABLED_TOOLS=your-value --env MEMORY_DIR=your-value --env DAILY_NOTES_FOLDER=your-value --env DAILY_NOTES_FORMAT=your-value --env TRUST_PROXY_HOPS=your-value --env TRUST_FORWARDED_HOPS=your-value --env TZ=your-value --env LOG_LEVEL=your-value --env LOG_DIR=your-value --env LOG_RETENTION_DAYS=your-value --env PROTECTED_PATHS=your-value --env ORPHAN_EXCLUDE_FOLDERS=your-value --env SERVICE_DOCUMENTATION_URL=your-value --env MAX_FILE_BYTES=your-value --env MAX_IMAGE_OUTPUT_BYTES=your-value --env MAX_PDF_RENDER_PAGES=your-value -- docker run -i --rm -e MCP_AUTH_TOKEN -e PUBLIC_URL -e EMBEDDING_ENABLED -e RERANK_MODE -e WINDOWS_MODE -e MEMORY_ENABLED -e FILE_TOOLS_ENABLED -e READONLY_MODE -e DISABLED_TOOLS -e MEMORY_DIR -e DAILY_NOTES_FOLDER -e DAILY_NOTES_FORMAT -e TRUST_PROXY_HOPS -e TRUST_FORWARDED_HOPS -e TZ -e LOG_LEVEL -e LOG_DIR -e LOG_RETENTION_DAYS -e PROTECTED_PATHS -e ORPHAN_EXCLUDE_FOLDERS -e SERVICE_DOCUMENTATION_URL -e MAX_FILE_BYTES -e MAX_IMAGE_OUTPUT_BYTES -e MAX_PDF_RENDER_PAGES ghcr.io/aliasunder/vault-cortex:0.56.3

{
  "mcpServers": {
    "vault-cortex": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "MCP_AUTH_TOKEN",
        "-e",
        "PUBLIC_URL",
        "-e",
        "EMBEDDING_ENABLED",
        "-e",
        "RERANK_MODE",
        "-e",
        "WINDOWS_MODE",
        "-e",
        "MEMORY_ENABLED",
        "-e",
        "FILE_TOOLS_ENABLED",
        "-e",
        "READONLY_MODE",
        "-e",
        "DISABLED_TOOLS",
        "-e",
        "MEMORY_DIR",
        "-e",
        "DAILY_NOTES_FOLDER",
        "-e",
        "DAILY_NOTES_FORMAT",
        "-e",
        "TRUST_PROXY_HOPS",
        "-e",
        "TRUST_FORWARDED_HOPS",
        "-e",
        "TZ",
        "-e",
        "LOG_LEVEL",
        "-e",
        "LOG_DIR",
        "-e",
        "LOG_RETENTION_DAYS",
        "-e",
        "PROTECTED_PATHS",
        "-e",
        "ORPHAN_EXCLUDE_FOLDERS",
        "-e",
        "SERVICE_DOCUMENTATION_URL",
        "-e",
        "MAX_FILE_BYTES",
        "-e",
        "MAX_IMAGE_OUTPUT_BYTES",
        "-e",
        "MAX_PDF_RENDER_PAGES",
        "ghcr.io/aliasunder/vault-cortex:0.56.3"
      ],
      "env": {
        "MCP_AUTH_TOKEN": "your-value",
        "PUBLIC_URL": "your-value",
        "EMBEDDING_ENABLED": "your-value",
        "RERANK_MODE": "your-value",
        "WINDOWS_MODE": "your-value",
        "MEMORY_ENABLED": "your-value",
        "FILE_TOOLS_ENABLED": "your-value",
        "READONLY_MODE": "your-value",
        "DISABLED_TOOLS": "your-value",
        "MEMORY_DIR": "your-value",
        "DAILY_NOTES_FOLDER": "your-value",
        "DAILY_NOTES_FORMAT": "your-value",
        "TRUST_PROXY_HOPS": "your-value",
        "TRUST_FORWARDED_HOPS": "your-value",
        "TZ": "your-value",
        "LOG_LEVEL": "your-value",
        "LOG_DIR": "your-value",
        "LOG_RETENTION_DAYS": "your-value",
        "PROTECTED_PATHS": "your-value",
        "ORPHAN_EXCLUDE_FOLDERS": "your-value",
        "SERVICE_DOCUMENTATION_URL": "your-value",
        "MAX_FILE_BYTES": "your-value",
        "MAX_IMAGE_OUTPUT_BYTES": "your-value",
        "MAX_PDF_RENDER_PAGES": "your-value"
      }
    }
  }
}

{
  "servers": {
    "vault-cortex": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "MCP_AUTH_TOKEN",
        "-e",
        "PUBLIC_URL",
        "-e",
        "EMBEDDING_ENABLED",
        "-e",
        "RERANK_MODE",
        "-e",
        "WINDOWS_MODE",
        "-e",
        "MEMORY_ENABLED",
        "-e",
        "FILE_TOOLS_ENABLED",
        "-e",
        "READONLY_MODE",
        "-e",
        "DISABLED_TOOLS",
        "-e",
        "MEMORY_DIR",
        "-e",
        "DAILY_NOTES_FOLDER",
        "-e",
        "DAILY_NOTES_FORMAT",
        "-e",
        "TRUST_PROXY_HOPS",
        "-e",
        "TRUST_FORWARDED_HOPS",
        "-e",
        "TZ",
        "-e",
        "LOG_LEVEL",
        "-e",
        "LOG_DIR",
        "-e",
        "LOG_RETENTION_DAYS",
        "-e",
        "PROTECTED_PATHS",
        "-e",
        "ORPHAN_EXCLUDE_FOLDERS",
        "-e",
        "SERVICE_DOCUMENTATION_URL",
        "-e",
        "MAX_FILE_BYTES",
        "-e",
        "MAX_IMAGE_OUTPUT_BYTES",
        "-e",
        "MAX_PDF_RENDER_PAGES",
        "ghcr.io/aliasunder/vault-cortex:0.56.3"
      ],
      "env": {
        "MCP_AUTH_TOKEN": "your-value",
        "PUBLIC_URL": "your-value",
        "EMBEDDING_ENABLED": "your-value",
        "RERANK_MODE": "your-value",
        "WINDOWS_MODE": "your-value",
        "MEMORY_ENABLED": "your-value",
        "FILE_TOOLS_ENABLED": "your-value",
        "READONLY_MODE": "your-value",
        "DISABLED_TOOLS": "your-value",
        "MEMORY_DIR": "your-value",
        "DAILY_NOTES_FOLDER": "your-value",
        "DAILY_NOTES_FORMAT": "your-value",
        "TRUST_PROXY_HOPS": "your-value",
        "TRUST_FORWARDED_HOPS": "your-value",
        "TZ": "your-value",
        "LOG_LEVEL": "your-value",
        "LOG_DIR": "your-value",
        "LOG_RETENTION_DAYS": "your-value",
        "PROTECTED_PATHS": "your-value",
        "ORPHAN_EXCLUDE_FOLDERS": "your-value",
        "SERVICE_DOCUMENTATION_URL": "your-value",
        "MAX_FILE_BYTES": "your-value",
        "MAX_IMAGE_OUTPUT_BYTES": "your-value",
        "MAX_PDF_RENDER_PAGES": "your-value"
      }
    }
  }
}

Your choice stays on this device in a cookie; no account needed.

Values you fill in

• MCP_AUTH_TOKEN secret required env
  Bearer token for MCP client authentication. Must match the Authorization header sent by clients. Generate with: openssl rand -hex 32
• PUBLIC_URL env
  Public URL clients use to reach this server. Used as the OAuth issuer URL in discovery metadata. Override when exposing the server outside localhost or on a non-default port.
• EMBEDDING_ENABLED env
  Enable or disable the embedding pipeline. When false, no ONNX model is downloaded, no vector tables are created, and search uses FTS5 only.
• RERANK_MODE env
  Cross-encoder reranking mode: blended (position-aware score blending after RRF fusion) or none (skip reranking). Only takes effect when EMBEDDING_ENABLED is true.
• WINDOWS_MODE env
  Windows bind-mount mode: enables filesystem polling for the file watcher and rename-based moves across the Docker Desktop/WSL2 bridge. Set to true when the vault lives on a Windows drive.
• MEMORY_ENABLED env
  Enable or disable the structured memory layer. When false, memory tools are hidden, bootstrap is skipped, and server metadata omits memory references.
• FILE_TOOLS_ENABLED env
  Enable or disable file tools (vault_read_file, vault_list_files). When false, file tools are hidden and server metadata omits file tool references.
• READONLY_MODE env
  Run the server read-only: every vault-writing tool is hidden, the memory folder is not auto-created, and server metadata omits write references.
• DISABLED_TOOLS env
  Hide individual tools by name, comma-separated. Subtractive only — it cannot re-enable a tool another setting hides; an unknown tool name stops the server at startup.
• MEMORY_DIR env
  Vault folder for structured memory files (About Me-style notes). Memory tools are hidden when MEMORY_ENABLED is false, but this value still feeds the defaults for PROTECTED_PATHS and ORPHAN_EXCLUDE_F…
• DAILY_NOTES_FOLDER env
  Vault folder for daily notes. Overrides the folder configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json (an empty folder there follows Obsidian's…
• DAILY_NOTES_FORMAT env
  Filename date format for daily notes (Moment.js tokens). Overrides the format configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back t…
• TRUST_PROXY_HOPS env
  Number of trusted reverse-proxy hops used to derive the client IP from X-Forwarded-For for OAuth rate limiting and request logs. With 0, injected forwarding headers are ignored.
• TRUST_FORWARDED_HOPS env
  How many entries from the end of the RFC 7239 Forwarded header's for= list to count to reach the client IP for OAuth rate limiting and request logs. 0 ignores the header; 1 when the proxy in front wr…
• TZ env
  IANA timezone for timestamps and daily note resolution.
• LOG_LEVEL env
  Logging verbosity.
• LOG_DIR env
  Directory for log files that survive container re-creation. The container's own log is always written but discarded when the container is recreated; date-stamped files under LOG_DIR persist on the da…
• LOG_RETENTION_DAYS env
  Days to keep log files before automatic cleanup on startup; only applies when LOG_DIR is a path.
• PROTECTED_PATHS env
  Comma-separated vault folder names blocked from vault_delete_note and vault_move_note. Default: MEMORY_DIR plus the daily notes folder, read from DAILY_NOTES_FOLDER or .obsidian/daily-notes.json (def…
• ORPHAN_EXCLUDE_FOLDERS env
  Comma-separated vault folder names excluded from vault_find_orphans. Default: the daily notes folder, "Templates", and MEMORY_DIR. DAILY_NOTES_FOLDER wins; otherwise .obsidian/daily-notes.json is rea…
• SERVICE_DOCUMENTATION_URL env
  Override the OAuth service documentation URL exposed via discovery metadata.
• MAX_FILE_BYTES env
  Largest file vault_read_file will read, in bytes. Reading a larger file returns an error instead of content.
• MAX_IMAGE_OUTPUT_BYTES env
  Byte budget for images returned by vault_read_file, in binary bytes before base64 encoding. Images exceeding the budget are downscaled/recompressed server-side to fit; raise for clients that accept l…
• MAX_PDF_RENDER_PAGES env
  Maximum PDF pages to render as images when raw: true is set on vault_read_file. The per-page byte budget is MAX_IMAGE_OUTPUT_BYTES divided evenly across the rendered pages.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Runs on your computer; the tool list appears in your AI app after you install it.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 6, 2026

• ✓ Pass

  Maker matches the repo

  The registry name was verified with the GitHub account aliasunder, which owns the repo

• … Not checked yet

  Still maintained

  We have not read this repo from GitHub yet

• … Not checked yet

  Has a licence

  We have not read this repo from GitHub yet

• – Not applicable

  Endpoint responds

  This one runs on your computer; there is no internet endpoint

• – Not applicable

  Sign-in with OAuth

  Runs on your computer and uses local settings instead

• … Not checked yet

  No hidden instructions in tool descriptions

  Runs on your computer; we can only read tool lists from internet endpoints

Compared with others in Docs, sheets & office worki

• More stars than 0% of the other 2167 servers in this category
• Published to the registry more recently than 100% of the other 2167 servers in this category
• Basic checks equal to or better than 100% of the other 2167 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

README from the maker

npx vault-cortex@latest init

# 1. Get the quickstart files