Zum Inhalt springen

Verlauf von Vault Cortex

io.github.aliasunder/vault-cortex · Registerstatus: aktiv

Angaben zu diesem Eintrag melden

Jede veröffentlichte Änderung an diesem Eintrag, die jüngste zuerst.

Änderungen
2026-10-11Deklarierte Version: 0.54.11 → 0.54.12
2026-10-11Im Register geändert am (Rohangabe): 2026-10-08 → 2026-10-10
2026-10-11Im Register eingetragen am (Rohangabe): 2026-10-08 → 2026-10-10
2026-10-11Verbindungswege (Quellstruktur): {"packages":[{"registryType":"oci","identifier":"ghcr.io/aliasunder/vault-cortex:0.54.11","runtimeHint":"docker","transport":"streamable-http","environment":[{"name":"MCP_AUTH_TOKEN","description":"Bearer token for MCP client authentication. Must match the Authorization header sent by clients. Generate with: openssl rand -hex 32","required":true,"secret":true},{"name":"PUBLIC_URL","description":"Public URL clients use to reach this server. Used as the OAuth issuer URL in discovery metadata. Override when exposing the server outside localhost or on a non-default port.","required":false,"secret":false},{"name":"EMBEDDING_ENABLED","description":"Enable or disable the embedding pipeline. When false, no ONNX model is downloaded, no vector tables are created, and search uses FTS5 only.","required":false,"secret":false},{"name":"RERANK_MODE","description":"Cross-encoder reranking mode: blended (position-aware score blending after RRF fusion) or none (skip reranking). Only takes effect when EMBEDDING_ENABLED is true.","required":false,"secret":false},{"name":"WINDOWS_MODE","description":"Windows bind-mount mode: enables filesystem polling for the file watcher and rename-based moves across the Docker Desktop/WSL2 bridge. Set to true when the vault lives on a Windows drive.","required":false,"secret":false},{"name":"MEMORY_ENABLED","description":"Enable or disable the structured memory layer. When false, memory tools are hidden, bootstrap is skipped, and server metadata omits memory references.","required":false,"secret":false},{"name":"FILE_TOOLS_ENABLED","description":"Enable or disable file tools (vault_read_file, vault_list_files). When false, file tools are hidden and server metadata omits file tool references.","required":false,"secret":false},{"name":"READONLY_MODE","description":"Run the server read-only: every vault-writing tool is hidden, the memory folder is not auto-created, and server metadata omits write references.","required":false,"secret":false},{"name":"DISABLED_TOOLS","description":"Hide individual tools by name, comma-separated. Subtractive only — it cannot re-enable a tool another setting hides; an unknown tool name stops the server at startup.","required":false,"secret":false},{"name":"MEMORY_DIR","description":"Vault folder for structured memory files (About Me-style notes). Memory tools are hidden when MEMORY_ENABLED is false, but this value still feeds the defaults for PROTECTED_PATHS and ORPHAN_EXCLUDE_FOLDERS.","required":false,"secret":false},{"name":"DAILY_NOTES_FOLDER","description":"Vault folder for daily notes. Overrides the folder configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"Daily Notes\".","required":false,"secret":false},{"name":"DAILY_NOTES_FORMAT","description":"Filename date format for daily notes (Moment.js tokens). Overrides the format configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"YYYY-MM-DD\".","required":false,"secret":false},{"name":"TRUST_PROXY_HOPS","description":"Number of trusted reverse-proxy hops used to derive the client IP from X-Forwarded-For for OAuth rate limiting and request logs. With 0, injected forwarding headers are ignored.","required":false,"secret":false},{"name":"TRUST_FORWARDED_HOPS","description":"How many entries from the end of the RFC 7239 Forwarded header's for= list to count to reach the client IP for OAuth rate limiting and request logs. 0 ignores the header; 1 when the proxy in front writes it (e.g. AWS API Gateway); 2 when a CDN fronts that proxy and is the only way to reach it.","required":false,"secret":false},{"name":"TZ","description":"IANA timezone for timestamps and daily note resolution.","required":false,"secret":false},{"name":"LOG_LEVEL","description":"Logging verbosity.","required":false,"secret":false},{"name":"LOG_DIR","description":"Directory for log files that survive container re-creation. The container's own log is always written but discarded when the container is recreated; date-stamped files under LOG_DIR persist on the data volume. Default: /data/logs (remote image), $STORAGE_ROOT/data/logs (single-volume mode), none (local image). none keeps only the container log.","format":"filepath","required":false,"secret":false},{"name":"LOG_RETENTION_DAYS","description":"Days to keep log files before automatic cleanup on startup; only applies when LOG_DIR is a path.","format":"number","required":false,"secret":false},{"name":"PROTECTED_PATHS","description":"Comma-separated vault folder names blocked from vault_delete_note and vault_move_note. Default: MEMORY_DIR plus the daily notes folder, read from DAILY_NOTES_FOLDER or .obsidian/daily-notes.json (default Daily Notes). When set, overrides the default entirely.","required":false,"secret":false},{"name":"ORPHAN_EXCLUDE_FOLDERS","description":"Comma-separated vault folder names excluded from vault_find_orphans. Default: the daily notes folder, \"Templates\", and MEMORY_DIR. DAILY_NOTES_FOLDER wins; otherwise .obsidian/daily-notes.json is read per query (fallback \"Daily Notes\"). When set, replaces the defaults entirely. Set to a comma (,) to exclude nothing; an empty value uses the defaults.","required":false,"secret":false},{"name":"SERVICE_DOCUMENTATION_URL","description":"Override the OAuth service documentation URL exposed via discovery metadata.","required":false,"secret":false},{"name":"MAX_FILE_BYTES","description":"Largest file vault_read_file will read, in bytes. Reading a larger file returns an error instead of content.","format":"number","required":false,"secret":false},{"name":"MAX_IMAGE_OUTPUT_BYTES","description":"Byte budget for images returned by vault_read_file, in binary bytes before base64 encoding. Images exceeding the budget are downscaled/recompressed server-side to fit; raise for clients that accept larger tool responses.","format":"number","required":false,"secret":false},{"name":"MAX_PDF_RENDER_PAGES","description":"Maximum PDF pages to render as images when raw: true is set on vault_read_file. The per-page byte budget is MAX_IMAGE_OUTPUT_BYTES divided evenly across the rendered pages.","format":"number","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]} → {"packages":[{"registryType":"oci","identifier":"ghcr.io/aliasunder/vault-cortex:0.54.12","runtimeHint":"docker","transport":"streamable-http","environment":[{"name":"MCP_AUTH_TOKEN","description":"Bearer token for MCP client authentication. Must match the Authorization header sent by clients. Generate with: openssl rand -hex 32","required":true,"secret":true},{"name":"PUBLIC_URL","description":"Public URL clients use to reach this server. Used as the OAuth issuer URL in discovery metadata. Override when exposing the server outside localhost or on a non-default port.","required":false,"secret":false},{"name":"EMBEDDING_ENABLED","description":"Enable or disable the embedding pipeline. When false, no ONNX model is downloaded, no vector tables are created, and search uses FTS5 only.","required":false,"secret":false},{"name":"RERANK_MODE","description":"Cross-encoder reranking mode: blended (position-aware score blending after RRF fusion) or none (skip reranking). Only takes effect when EMBEDDING_ENABLED is true.","required":false,"secret":false},{"name":"WINDOWS_MODE","description":"Windows bind-mount mode: enables filesystem polling for the file watcher and rename-based moves across the Docker Desktop/WSL2 bridge. Set to true when the vault lives on a Windows drive.","required":false,"secret":false},{"name":"MEMORY_ENABLED","description":"Enable or disable the structured memory layer. When false, memory tools are hidden, bootstrap is skipped, and server metadata omits memory references.","required":false,"secret":false},{"name":"FILE_TOOLS_ENABLED","description":"Enable or disable file tools (vault_read_file, vault_list_files). When false, file tools are hidden and server metadata omits file tool references.","required":false,"secret":false},{"name":"READONLY_MODE","description":"Run the server read-only: every vault-writing tool is hidden, the memory folder is not auto-created, and server metadata omits write references.","required":false,"secret":false},{"name":"DISABLED_TOOLS","description":"Hide individual tools by name, comma-separated. Subtractive only — it cannot re-enable a tool another setting hides; an unknown tool name stops the server at startup.","required":false,"secret":false},{"name":"MEMORY_DIR","description":"Vault folder for structured memory files (About Me-style notes). Memory tools are hidden when MEMORY_ENABLED is false, but this value still feeds the defaults for PROTECTED_PATHS and ORPHAN_EXCLUDE_FOLDERS.","required":false,"secret":false},{"name":"DAILY_NOTES_FOLDER","description":"Vault folder for daily notes. Overrides the folder configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"Daily Notes\".","required":false,"secret":false},{"name":"DAILY_NOTES_FORMAT","description":"Filename date format for daily notes (Moment.js tokens). Overrides the format configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"YYYY-MM-DD\".","required":false,"secret":false},{"name":"TRUST_PROXY_HOPS","description":"Number of trusted reverse-proxy hops used to derive the client IP from X-Forwarded-For for OAuth rate limiting and request logs. With 0, injected forwarding headers are ignored.","required":false,"secret":false},{"name":"TRUST_FORWARDED_HOPS","description":"How many entries from the end of the RFC 7239 Forwarded header's for= list to count to reach the client IP for OAuth rate limiting and request logs. 0 ignores the header; 1 when the proxy in front writes it (e.g. AWS API Gateway); 2 when a CDN fronts that proxy and is the only way to reach it.","required":false,"secret":false},{"name":"TZ","description":"IANA timezone for timestamps and daily note resolution.","required":false,"secret":false},{"name":"LOG_LEVEL","description":"Logging verbosity.","required":false,"secret":false},{"name":"LOG_DIR","description":"Directory for log files that survive container re-creation. The container's own log is always written but discarded when the container is recreated; date-stamped files under LOG_DIR persist on the data volume. Default: /data/logs (remote image), $STORAGE_ROOT/data/logs (single-volume mode), none (local image). none keeps only the container log.","format":"filepath","required":false,"secret":false},{"name":"LOG_RETENTION_DAYS","description":"Days to keep log files before automatic cleanup on startup; only applies when LOG_DIR is a path.","format":"number","required":false,"secret":false},{"name":"PROTECTED_PATHS","description":"Comma-separated vault folder names blocked from vault_delete_note and vault_move_note. Default: MEMORY_DIR plus the daily notes folder, read from DAILY_NOTES_FOLDER or .obsidian/daily-notes.json (default Daily Notes). When set, overrides the default entirely.","required":false,"secret":false},{"name":"ORPHAN_EXCLUDE_FOLDERS","description":"Comma-separated vault folder names excluded from vault_find_orphans. Default: the daily notes folder, \"Templates\", and MEMORY_DIR. DAILY_NOTES_FOLDER wins; otherwise .obsidian/daily-notes.json is read per query (fallback \"Daily Notes\"). When set, replaces the defaults entirely. Set to a comma (,) to exclude nothing; an empty value uses the defaults.","required":false,"secret":false},{"name":"SERVICE_DOCUMENTATION_URL","description":"Override the OAuth service documentation URL exposed via discovery metadata.","required":false,"secret":false},{"name":"MAX_FILE_BYTES","description":"Largest file vault_read_file will read, in bytes. Reading a larger file returns an error instead of content.","format":"number","required":false,"secret":false},{"name":"MAX_IMAGE_OUTPUT_BYTES","description":"Byte budget for images returned by vault_read_file, in binary bytes before base64 encoding. Images exceeding the budget are downscaled/recompressed server-side to fit; raise for clients that accept larger tool responses.","format":"number","required":false,"secret":false},{"name":"MAX_PDF_RENDER_PAGES","description":"Maximum PDF pages to render as images when raw: true is set on vault_read_file. The per-page byte budget is MAX_IMAGE_OUTPUT_BYTES divided evenly across the rendered pages.","format":"number","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]}
2026-10-11Paketbezeichner (Rohangabe): ghcr.io/aliasunder/vault-cortex:0.54.11 → ghcr.io/aliasunder/vault-cortex:0.54.12
2026-10-11Paketkoordinate: oci:ghcr.io/aliasunder/vault-cortex:0.54.11 → oci:ghcr.io/aliasunder/vault-cortex:0.54.12
2026-10-09Deklarierte Version: 0.54.10 → 0.54.11
2026-10-09Im Register geändert am (Rohangabe): 2026-10-06 → 2026-10-08
2026-10-09Im Register eingetragen am (Rohangabe): 2026-10-06 → 2026-10-08
2026-10-09Verbindungswege (Quellstruktur): {"packages":[{"registryType":"oci","identifier":"ghcr.io/aliasunder/vault-cortex:0.54.10","runtimeHint":"docker","transport":"streamable-http","environment":[{"name":"MCP_AUTH_TOKEN","description":"Bearer token for MCP client authentication. Must match the Authorization header sent by clients. Generate with: openssl rand -hex 32","required":true,"secret":true},{"name":"PUBLIC_URL","description":"Public URL clients use to reach this server. Used as the OAuth issuer URL in discovery metadata. Override when exposing the server outside localhost or on a non-default port.","required":false,"secret":false},{"name":"EMBEDDING_ENABLED","description":"Enable or disable the embedding pipeline. When false, no ONNX model is downloaded, no vector tables are created, and search uses FTS5 only.","required":false,"secret":false},{"name":"RERANK_MODE","description":"Cross-encoder reranking mode: blended (position-aware score blending after RRF fusion) or none (skip reranking). Only takes effect when EMBEDDING_ENABLED is true.","required":false,"secret":false},{"name":"WINDOWS_MODE","description":"Windows bind-mount mode: enables filesystem polling for the file watcher and rename-based moves across the Docker Desktop/WSL2 bridge. Set to true when the vault lives on a Windows drive.","required":false,"secret":false},{"name":"MEMORY_ENABLED","description":"Enable or disable the structured memory layer. When false, memory tools are hidden, bootstrap is skipped, and server metadata omits memory references.","required":false,"secret":false},{"name":"FILE_TOOLS_ENABLED","description":"Enable or disable file tools (vault_read_file, vault_list_files). When false, file tools are hidden and server metadata omits file tool references.","required":false,"secret":false},{"name":"READONLY_MODE","description":"Run the server read-only: every vault-writing tool is hidden, the memory folder is not auto-created, and server metadata omits write references.","required":false,"secret":false},{"name":"DISABLED_TOOLS","description":"Hide individual tools by name, comma-separated. Subtractive only — it cannot re-enable a tool another setting hides; an unknown tool name stops the server at startup.","required":false,"secret":false},{"name":"MEMORY_DIR","description":"Vault folder for structured memory files (About Me-style notes). Memory tools are hidden when MEMORY_ENABLED is false, but this value still feeds the defaults for PROTECTED_PATHS and ORPHAN_EXCLUDE_FOLDERS.","required":false,"secret":false},{"name":"DAILY_NOTES_FOLDER","description":"Vault folder for daily notes. Overrides the folder configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"Daily Notes\".","required":false,"secret":false},{"name":"DAILY_NOTES_FORMAT","description":"Filename date format for daily notes (Moment.js tokens). Overrides the format configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"YYYY-MM-DD\".","required":false,"secret":false},{"name":"TRUST_PROXY_HOPS","description":"Number of trusted reverse-proxy hops used to derive the client IP from X-Forwarded-For for OAuth rate limiting and request logs. With 0, injected forwarding headers are ignored.","required":false,"secret":false},{"name":"TRUST_FORWARDED_HOPS","description":"How many entries from the end of the RFC 7239 Forwarded header's for= list to count to reach the client IP for OAuth rate limiting and request logs. 0 ignores the header; 1 when the proxy in front writes it (e.g. AWS API Gateway); 2 when a CDN fronts that proxy and is the only way to reach it.","required":false,"secret":false},{"name":"TZ","description":"IANA timezone for timestamps and daily note resolution.","required":false,"secret":false},{"name":"LOG_LEVEL","description":"Logging verbosity.","required":false,"secret":false},{"name":"LOG_DIR","description":"Directory for log files that survive container re-creation. The container's own log is always written but discarded when the container is recreated; date-stamped files under LOG_DIR persist on the data volume. Default: /data/logs (remote image), $STORAGE_ROOT/data/logs (single-volume mode), none (local image). none keeps only the container log.","format":"filepath","required":false,"secret":false},{"name":"LOG_RETENTION_DAYS","description":"Days to keep log files before automatic cleanup on startup; only applies when LOG_DIR is a path.","format":"number","required":false,"secret":false},{"name":"PROTECTED_PATHS","description":"Comma-separated vault folder names blocked from vault_delete_note and vault_move_note. Default: MEMORY_DIR plus the daily notes folder, read from DAILY_NOTES_FOLDER or .obsidian/daily-notes.json (default Daily Notes). When set, overrides the default entirely.","required":false,"secret":false},{"name":"ORPHAN_EXCLUDE_FOLDERS","description":"Comma-separated vault folder names excluded from vault_find_orphans. Default: the daily notes folder, \"Templates\", and MEMORY_DIR. DAILY_NOTES_FOLDER wins; otherwise .obsidian/daily-notes.json is read per query (fallback \"Daily Notes\"). When set, replaces the defaults entirely. Set to a comma (,) to exclude nothing; an empty value uses the defaults.","required":false,"secret":false},{"name":"SERVICE_DOCUMENTATION_URL","description":"Override the OAuth service documentation URL exposed via discovery metadata.","required":false,"secret":false},{"name":"MAX_FILE_BYTES","description":"Largest file vault_read_file will read, in bytes. Reading a larger file returns an error instead of content.","format":"number","required":false,"secret":false},{"name":"MAX_IMAGE_OUTPUT_BYTES","description":"Byte budget for images returned by vault_read_file, in binary bytes before base64 encoding. Images exceeding the budget are downscaled/recompressed server-side to fit; raise for clients that accept larger tool responses.","format":"number","required":false,"secret":false},{"name":"MAX_PDF_RENDER_PAGES","description":"Maximum PDF pages to render as images when raw: true is set on vault_read_file. The per-page byte budget is MAX_IMAGE_OUTPUT_BYTES divided evenly across the rendered pages.","format":"number","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]} → {"packages":[{"registryType":"oci","identifier":"ghcr.io/aliasunder/vault-cortex:0.54.11","runtimeHint":"docker","transport":"streamable-http","environment":[{"name":"MCP_AUTH_TOKEN","description":"Bearer token for MCP client authentication. Must match the Authorization header sent by clients. Generate with: openssl rand -hex 32","required":true,"secret":true},{"name":"PUBLIC_URL","description":"Public URL clients use to reach this server. Used as the OAuth issuer URL in discovery metadata. Override when exposing the server outside localhost or on a non-default port.","required":false,"secret":false},{"name":"EMBEDDING_ENABLED","description":"Enable or disable the embedding pipeline. When false, no ONNX model is downloaded, no vector tables are created, and search uses FTS5 only.","required":false,"secret":false},{"name":"RERANK_MODE","description":"Cross-encoder reranking mode: blended (position-aware score blending after RRF fusion) or none (skip reranking). Only takes effect when EMBEDDING_ENABLED is true.","required":false,"secret":false},{"name":"WINDOWS_MODE","description":"Windows bind-mount mode: enables filesystem polling for the file watcher and rename-based moves across the Docker Desktop/WSL2 bridge. Set to true when the vault lives on a Windows drive.","required":false,"secret":false},{"name":"MEMORY_ENABLED","description":"Enable or disable the structured memory layer. When false, memory tools are hidden, bootstrap is skipped, and server metadata omits memory references.","required":false,"secret":false},{"name":"FILE_TOOLS_ENABLED","description":"Enable or disable file tools (vault_read_file, vault_list_files). When false, file tools are hidden and server metadata omits file tool references.","required":false,"secret":false},{"name":"READONLY_MODE","description":"Run the server read-only: every vault-writing tool is hidden, the memory folder is not auto-created, and server metadata omits write references.","required":false,"secret":false},{"name":"DISABLED_TOOLS","description":"Hide individual tools by name, comma-separated. Subtractive only — it cannot re-enable a tool another setting hides; an unknown tool name stops the server at startup.","required":false,"secret":false},{"name":"MEMORY_DIR","description":"Vault folder for structured memory files (About Me-style notes). Memory tools are hidden when MEMORY_ENABLED is false, but this value still feeds the defaults for PROTECTED_PATHS and ORPHAN_EXCLUDE_FOLDERS.","required":false,"secret":false},{"name":"DAILY_NOTES_FOLDER","description":"Vault folder for daily notes. Overrides the folder configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"Daily Notes\".","required":false,"secret":false},{"name":"DAILY_NOTES_FORMAT","description":"Filename date format for daily notes (Moment.js tokens). Overrides the format configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"YYYY-MM-DD\".","required":false,"secret":false},{"name":"TRUST_PROXY_HOPS","description":"Number of trusted reverse-proxy hops used to derive the client IP from X-Forwarded-For for OAuth rate limiting and request logs. With 0, injected forwarding headers are ignored.","required":false,"secret":false},{"name":"TRUST_FORWARDED_HOPS","description":"How many entries from the end of the RFC 7239 Forwarded header's for= list to count to reach the client IP for OAuth rate limiting and request logs. 0 ignores the header; 1 when the proxy in front writes it (e.g. AWS API Gateway); 2 when a CDN fronts that proxy and is the only way to reach it.","required":false,"secret":false},{"name":"TZ","description":"IANA timezone for timestamps and daily note resolution.","required":false,"secret":false},{"name":"LOG_LEVEL","description":"Logging verbosity.","required":false,"secret":false},{"name":"LOG_DIR","description":"Directory for log files that survive container re-creation. The container's own log is always written but discarded when the container is recreated; date-stamped files under LOG_DIR persist on the data volume. Default: /data/logs (remote image), $STORAGE_ROOT/data/logs (single-volume mode), none (local image). none keeps only the container log.","format":"filepath","required":false,"secret":false},{"name":"LOG_RETENTION_DAYS","description":"Days to keep log files before automatic cleanup on startup; only applies when LOG_DIR is a path.","format":"number","required":false,"secret":false},{"name":"PROTECTED_PATHS","description":"Comma-separated vault folder names blocked from vault_delete_note and vault_move_note. Default: MEMORY_DIR plus the daily notes folder, read from DAILY_NOTES_FOLDER or .obsidian/daily-notes.json (default Daily Notes). When set, overrides the default entirely.","required":false,"secret":false},{"name":"ORPHAN_EXCLUDE_FOLDERS","description":"Comma-separated vault folder names excluded from vault_find_orphans. Default: the daily notes folder, \"Templates\", and MEMORY_DIR. DAILY_NOTES_FOLDER wins; otherwise .obsidian/daily-notes.json is read per query (fallback \"Daily Notes\"). When set, replaces the defaults entirely. Set to a comma (,) to exclude nothing; an empty value uses the defaults.","required":false,"secret":false},{"name":"SERVICE_DOCUMENTATION_URL","description":"Override the OAuth service documentation URL exposed via discovery metadata.","required":false,"secret":false},{"name":"MAX_FILE_BYTES","description":"Largest file vault_read_file will read, in bytes. Reading a larger file returns an error instead of content.","format":"number","required":false,"secret":false},{"name":"MAX_IMAGE_OUTPUT_BYTES","description":"Byte budget for images returned by vault_read_file, in binary bytes before base64 encoding. Images exceeding the budget are downscaled/recompressed server-side to fit; raise for clients that accept larger tool responses.","format":"number","required":false,"secret":false},{"name":"MAX_PDF_RENDER_PAGES","description":"Maximum PDF pages to render as images when raw: true is set on vault_read_file. The per-page byte budget is MAX_IMAGE_OUTPUT_BYTES divided evenly across the rendered pages.","format":"number","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]}
2026-10-09Paketbezeichner (Rohangabe): ghcr.io/aliasunder/vault-cortex:0.54.10 → ghcr.io/aliasunder/vault-cortex:0.54.11
2026-10-09Paketkoordinate: oci:ghcr.io/aliasunder/vault-cortex:0.54.10 → oci:ghcr.io/aliasunder/vault-cortex:0.54.11
2026-10-07Deklarierte Version: 0.54.9 → 0.54.10
2026-10-07Im Register geändert am (Rohangabe): 2026-10-05 → 2026-10-06
2026-10-07Im Register eingetragen am (Rohangabe): 2026-10-05 → 2026-10-06
2026-10-07Beschreibungen der Umgebungsvariablen (Rohangabe): DAILY_NOTES_FOLDER=Vault folder for daily notes. Overrides the folder configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to "Daily Notes". · DAILY_NOTES_FORMAT=Filename date format for daily notes (Moment.js tokens). Overrides the format configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to "YYYY-MM-DD". · DISABLED_TOOLS=Hide individual tools by name, comma-separated. Subtractive only — it cannot re-enable a tool another setting hides; an unknown tool name stops the server at startup. · EMBEDDING_ENABLED=Enable or disable the embedding pipeline. When false, no ONNX model is downloaded, no vector tables are created, and search uses FTS5 only. · FILE_TOOLS_ENABLED=Enable or disable file tools (vault_read_file, vault_list_files). When false, file tools are hidden and server metadata omits file tool references. · LOG_DIR=Directory for log files that survive container re-creation. The container's own log is always written but discarded when the container is recreated; date-stamped files under LOG_DIR persist on the data volume. Default: /data/logs (remote image), $STORAGE_ROOT/data/logs (single-volume mode), none (local image). none keeps only the container log. · LOG_LEVEL=Logging verbosity. · LOG_RETENTION_DAYS=Days to keep log files before automatic cleanup on startup; only applies when LOG_DIR is a path. · MAX_FILE_BYTES=Largest file vault_read_file will read, in bytes. Reading a larger file returns an error instead of content. · MAX_IMAGE_OUTPUT_BYTES=Byte budget for images returned by vault_read_file, in binary bytes before base64 encoding. Images exceeding the budget are downscaled/recompressed server-side to fit; raise for clients that accept larger tool responses. · MAX_PDF_RENDER_PAGES=Maximum PDF pages to render as images when raw: true is set on vault_read_file. The per-page byte budget is MAX_IMAGE_OUTPUT_BYTES divided evenly across the rendered pages. · MCP_AUTH_TOKEN=Bearer token for MCP client authentication. Must match the Authorization header sent by clients. Generate with: openssl rand -hex 32 · MEMORY_DIR=Vault folder for structured memory files (About Me-style notes). Memory tools are hidden when MEMORY_ENABLED is false, but this value still feeds the defaults for PROTECTED_PATHS and ORPHAN_EXCLUDE_FOLDERS. · MEMORY_ENABLED=Enable or disable the structured memory layer. When false, memory tools are hidden, bootstrap is skipped, and server metadata omits memory references. · ORPHAN_EXCLUDE_FOLDERS=Comma-separated vault folder names excluded from vault_find_orphans. Default: DAILY_NOTES_FOLDER (else "Daily Notes"), "Templates", MEMORY_DIR. · PROTECTED_PATHS=Comma-separated vault folder names blocked from vault_delete_note and vault_move_note. Default: MEMORY_DIR plus the daily notes folder, read from DAILY_NOTES_FOLDER or .obsidian/daily-notes.json (default Daily Notes). When set, overrides the default entirely. · PUBLIC_URL=Public URL clients use to reach this server. Used as the OAuth issuer URL in discovery metadata. Override when exposing the server outside localhost or on a non-default port. · READONLY_MODE=Run the server read-only: every vault-writing tool is hidden, the memory folder is not auto-created, and server metadata omits write references. · RERANK_MODE=Cross-encoder reranking mode: blended (position-aware score blending after RRF fusion) or none (skip reranking). Only takes effect when EMBEDDING_ENABLED is true. · SERVICE_DOCUMENTATION_URL=Override the OAuth service documentation URL exposed via discovery metadata. · TRUST_FORWARDED_HOPS=How many entries from the end of the RFC 7239 Forwarded header's for= list to count to reach the client IP for OAuth rate limiting and request logs. 0 ignores the header; 1 when the proxy in front writes it (e.g. AWS API Gateway); 2 when a CDN fronts that proxy and is the only way to reach it. · TRUST_PROXY_HOPS=Number of trusted reverse-proxy hops used to derive the client IP from X-Forwarded-For for OAuth rate limiting and request logs. With 0, injected forwarding headers are ignored. · TZ=IANA timezone for timestamps and daily note resolution. · WINDOWS_MODE=Windows bind-mount mode: enables filesystem polling for the file watcher and rename-based moves across the Docker Desktop/WSL2 bridge. Set to true when the vault lives on a Windows drive. → DAILY_NOTES_FOLDER=Vault folder for daily notes. Overrides the folder configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to "Daily Notes". · DAILY_NOTES_FORMAT=Filename date format for daily notes (Moment.js tokens). Overrides the format configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to "YYYY-MM-DD". · DISABLED_TOOLS=Hide individual tools by name, comma-separated. Subtractive only — it cannot re-enable a tool another setting hides; an unknown tool name stops the server at startup. · EMBEDDING_ENABLED=Enable or disable the embedding pipeline. When false, no ONNX model is downloaded, no vector tables are created, and search uses FTS5 only. · FILE_TOOLS_ENABLED=Enable or disable file tools (vault_read_file, vault_list_files). When false, file tools are hidden and server metadata omits file tool references. · LOG_DIR=Directory for log files that survive container re-creation. The container's own log is always written but discarded when the container is recreated; date-stamped files under LOG_DIR persist on the data volume. Default: /data/logs (remote image), $STORAGE_ROOT/data/logs (single-volume mode), none (local image). none keeps only the container log. · LOG_LEVEL=Logging verbosity. · LOG_RETENTION_DAYS=Days to keep log files before automatic cleanup on startup; only applies when LOG_DIR is a path. · MAX_FILE_BYTES=Largest file vault_read_file will read, in bytes. Reading a larger file returns an error instead of content. · MAX_IMAGE_OUTPUT_BYTES=Byte budget for images returned by vault_read_file, in binary bytes before base64 encoding. Images exceeding the budget are downscaled/recompressed server-side to fit; raise for clients that accept larger tool responses. · MAX_PDF_RENDER_PAGES=Maximum PDF pages to render as images when raw: true is set on vault_read_file. The per-page byte budget is MAX_IMAGE_OUTPUT_BYTES divided evenly across the rendered pages. · MCP_AUTH_TOKEN=Bearer token for MCP client authentication. Must match the Authorization header sent by clients. Generate with: openssl rand -hex 32 · MEMORY_DIR=Vault folder for structured memory files (About Me-style notes). Memory tools are hidden when MEMORY_ENABLED is false, but this value still feeds the defaults for PROTECTED_PATHS and ORPHAN_EXCLUDE_FOLDERS. · MEMORY_ENABLED=Enable or disable the structured memory layer. When false, memory tools are hidden, bootstrap is skipped, and server metadata omits memory references. · ORPHAN_EXCLUDE_FOLDERS=Comma-separated vault folder names excluded from vault_find_orphans. Default: the daily notes folder, "Templates", and MEMORY_DIR. DAILY_NOTES_FOLDER wins; otherwise .obsidian/daily-notes.json is read per query (fallback "Daily Notes"). When set, replaces the defaults entirely. Set to a comma (,) to exclude nothing; an empty value uses the defaults. · PROTECTED_PATHS=Comma-separated vault folder names blocked from vault_delete_note and vault_move_note. Default: MEMORY_DIR plus the daily notes folder, read from DAILY_NOTES_FOLDER or .obsidian/daily-notes.json (default Daily Notes). When set, overrides the default entirely. · PUBLIC_URL=Public URL clients use to reach this server. Used as the OAuth issuer URL in discovery metadata. Override when exposing the server outside localhost or on a non-default port. · READONLY_MODE=Run the server read-only: every vault-writing tool is hidden, the memory folder is not auto-created, and server metadata omits write references. · RERANK_MODE=Cross-encoder reranking mode: blended (position-aware score blending after RRF fusion) or none (skip reranking). Only takes effect when EMBEDDING_ENABLED is true. · SERVICE_DOCUMENTATION_URL=Override the OAuth service documentation URL exposed via discovery metadata. · TRUST_FORWARDED_HOPS=How many entries from the end of the RFC 7239 Forwarded header's for= list to count to reach the client IP for OAuth rate limiting and request logs. 0 ignores the header; 1 when the proxy in front writes it (e.g. AWS API Gateway); 2 when a CDN fronts that proxy and is the only way to reach it. · TRUST_PROXY_HOPS=Number of trusted reverse-proxy hops used to derive the client IP from X-Forwarded-For for OAuth rate limiting and request logs. With 0, injected forwarding headers are ignored. · TZ=IANA timezone for timestamps and daily note resolution. · WINDOWS_MODE=Windows bind-mount mode: enables filesystem polling for the file watcher and rename-based moves across the Docker Desktop/WSL2 bridge. Set to true when the vault lives on a Windows drive.
2026-10-07Verbindungswege (Quellstruktur): {"packages":[{"registryType":"oci","identifier":"ghcr.io/aliasunder/vault-cortex:0.54.9","runtimeHint":"docker","transport":"streamable-http","environment":[{"name":"MCP_AUTH_TOKEN","description":"Bearer token for MCP client authentication. Must match the Authorization header sent by clients. Generate with: openssl rand -hex 32","required":true,"secret":true},{"name":"PUBLIC_URL","description":"Public URL clients use to reach this server. Used as the OAuth issuer URL in discovery metadata. Override when exposing the server outside localhost or on a non-default port.","required":false,"secret":false},{"name":"EMBEDDING_ENABLED","description":"Enable or disable the embedding pipeline. When false, no ONNX model is downloaded, no vector tables are created, and search uses FTS5 only.","required":false,"secret":false},{"name":"RERANK_MODE","description":"Cross-encoder reranking mode: blended (position-aware score blending after RRF fusion) or none (skip reranking). Only takes effect when EMBEDDING_ENABLED is true.","required":false,"secret":false},{"name":"WINDOWS_MODE","description":"Windows bind-mount mode: enables filesystem polling for the file watcher and rename-based moves across the Docker Desktop/WSL2 bridge. Set to true when the vault lives on a Windows drive.","required":false,"secret":false},{"name":"MEMORY_ENABLED","description":"Enable or disable the structured memory layer. When false, memory tools are hidden, bootstrap is skipped, and server metadata omits memory references.","required":false,"secret":false},{"name":"FILE_TOOLS_ENABLED","description":"Enable or disable file tools (vault_read_file, vault_list_files). When false, file tools are hidden and server metadata omits file tool references.","required":false,"secret":false},{"name":"READONLY_MODE","description":"Run the server read-only: every vault-writing tool is hidden, the memory folder is not auto-created, and server metadata omits write references.","required":false,"secret":false},{"name":"DISABLED_TOOLS","description":"Hide individual tools by name, comma-separated. Subtractive only — it cannot re-enable a tool another setting hides; an unknown tool name stops the server at startup.","required":false,"secret":false},{"name":"MEMORY_DIR","description":"Vault folder for structured memory files (About Me-style notes). Memory tools are hidden when MEMORY_ENABLED is false, but this value still feeds the defaults for PROTECTED_PATHS and ORPHAN_EXCLUDE_FOLDERS.","required":false,"secret":false},{"name":"DAILY_NOTES_FOLDER","description":"Vault folder for daily notes. Overrides the folder configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"Daily Notes\".","required":false,"secret":false},{"name":"DAILY_NOTES_FORMAT","description":"Filename date format for daily notes (Moment.js tokens). Overrides the format configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"YYYY-MM-DD\".","required":false,"secret":false},{"name":"TRUST_PROXY_HOPS","description":"Number of trusted reverse-proxy hops used to derive the client IP from X-Forwarded-For for OAuth rate limiting and request logs. With 0, injected forwarding headers are ignored.","required":false,"secret":false},{"name":"TRUST_FORWARDED_HOPS","description":"How many entries from the end of the RFC 7239 Forwarded header's for= list to count to reach the client IP for OAuth rate limiting and request logs. 0 ignores the header; 1 when the proxy in front writes it (e.g. AWS API Gateway); 2 when a CDN fronts that proxy and is the only way to reach it.","required":false,"secret":false},{"name":"TZ","description":"IANA timezone for timestamps and daily note resolution.","required":false,"secret":false},{"name":"LOG_LEVEL","description":"Logging verbosity.","required":false,"secret":false},{"name":"LOG_DIR","description":"Directory for log files that survive container re-creation. The container's own log is always written but discarded when the container is recreated; date-stamped files under LOG_DIR persist on the data volume. Default: /data/logs (remote image), $STORAGE_ROOT/data/logs (single-volume mode), none (local image). none keeps only the container log.","format":"filepath","required":false,"secret":false},{"name":"LOG_RETENTION_DAYS","description":"Days to keep log files before automatic cleanup on startup; only applies when LOG_DIR is a path.","format":"number","required":false,"secret":false},{"name":"PROTECTED_PATHS","description":"Comma-separated vault folder names blocked from vault_delete_note and vault_move_note. Default: MEMORY_DIR plus the daily notes folder, read from DAILY_NOTES_FOLDER or .obsidian/daily-notes.json (default Daily Notes). When set, overrides the default entirely.","required":false,"secret":false},{"name":"ORPHAN_EXCLUDE_FOLDERS","description":"Comma-separated vault folder names excluded from vault_find_orphans. Default: DAILY_NOTES_FOLDER (else \"Daily Notes\"), \"Templates\", MEMORY_DIR.","required":false,"secret":false},{"name":"SERVICE_DOCUMENTATION_URL","description":"Override the OAuth service documentation URL exposed via discovery metadata.","required":false,"secret":false},{"name":"MAX_FILE_BYTES","description":"Largest file vault_read_file will read, in bytes. Reading a larger file returns an error instead of content.","format":"number","required":false,"secret":false},{"name":"MAX_IMAGE_OUTPUT_BYTES","description":"Byte budget for images returned by vault_read_file, in binary bytes before base64 encoding. Images exceeding the budget are downscaled/recompressed server-side to fit; raise for clients that accept larger tool responses.","format":"number","required":false,"secret":false},{"name":"MAX_PDF_RENDER_PAGES","description":"Maximum PDF pages to render as images when raw: true is set on vault_read_file. The per-page byte budget is MAX_IMAGE_OUTPUT_BYTES divided evenly across the rendered pages.","format":"number","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]} → {"packages":[{"registryType":"oci","identifier":"ghcr.io/aliasunder/vault-cortex:0.54.10","runtimeHint":"docker","transport":"streamable-http","environment":[{"name":"MCP_AUTH_TOKEN","description":"Bearer token for MCP client authentication. Must match the Authorization header sent by clients. Generate with: openssl rand -hex 32","required":true,"secret":true},{"name":"PUBLIC_URL","description":"Public URL clients use to reach this server. Used as the OAuth issuer URL in discovery metadata. Override when exposing the server outside localhost or on a non-default port.","required":false,"secret":false},{"name":"EMBEDDING_ENABLED","description":"Enable or disable the embedding pipeline. When false, no ONNX model is downloaded, no vector tables are created, and search uses FTS5 only.","required":false,"secret":false},{"name":"RERANK_MODE","description":"Cross-encoder reranking mode: blended (position-aware score blending after RRF fusion) or none (skip reranking). Only takes effect when EMBEDDING_ENABLED is true.","required":false,"secret":false},{"name":"WINDOWS_MODE","description":"Windows bind-mount mode: enables filesystem polling for the file watcher and rename-based moves across the Docker Desktop/WSL2 bridge. Set to true when the vault lives on a Windows drive.","required":false,"secret":false},{"name":"MEMORY_ENABLED","description":"Enable or disable the structured memory layer. When false, memory tools are hidden, bootstrap is skipped, and server metadata omits memory references.","required":false,"secret":false},{"name":"FILE_TOOLS_ENABLED","description":"Enable or disable file tools (vault_read_file, vault_list_files). When false, file tools are hidden and server metadata omits file tool references.","required":false,"secret":false},{"name":"READONLY_MODE","description":"Run the server read-only: every vault-writing tool is hidden, the memory folder is not auto-created, and server metadata omits write references.","required":false,"secret":false},{"name":"DISABLED_TOOLS","description":"Hide individual tools by name, comma-separated. Subtractive only — it cannot re-enable a tool another setting hides; an unknown tool name stops the server at startup.","required":false,"secret":false},{"name":"MEMORY_DIR","description":"Vault folder for structured memory files (About Me-style notes). Memory tools are hidden when MEMORY_ENABLED is false, but this value still feeds the defaults for PROTECTED_PATHS and ORPHAN_EXCLUDE_FOLDERS.","required":false,"secret":false},{"name":"DAILY_NOTES_FOLDER","description":"Vault folder for daily notes. Overrides the folder configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"Daily Notes\".","required":false,"secret":false},{"name":"DAILY_NOTES_FORMAT","description":"Filename date format for daily notes (Moment.js tokens). Overrides the format configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"YYYY-MM-DD\".","required":false,"secret":false},{"name":"TRUST_PROXY_HOPS","description":"Number of trusted reverse-proxy hops used to derive the client IP from X-Forwarded-For for OAuth rate limiting and request logs. With 0, injected forwarding headers are ignored.","required":false,"secret":false},{"name":"TRUST_FORWARDED_HOPS","description":"How many entries from the end of the RFC 7239 Forwarded header's for= list to count to reach the client IP for OAuth rate limiting and request logs. 0 ignores the header; 1 when the proxy in front writes it (e.g. AWS API Gateway); 2 when a CDN fronts that proxy and is the only way to reach it.","required":false,"secret":false},{"name":"TZ","description":"IANA timezone for timestamps and daily note resolution.","required":false,"secret":false},{"name":"LOG_LEVEL","description":"Logging verbosity.","required":false,"secret":false},{"name":"LOG_DIR","description":"Directory for log files that survive container re-creation. The container's own log is always written but discarded when the container is recreated; date-stamped files under LOG_DIR persist on the data volume. Default: /data/logs (remote image), $STORAGE_ROOT/data/logs (single-volume mode), none (local image). none keeps only the container log.","format":"filepath","required":false,"secret":false},{"name":"LOG_RETENTION_DAYS","description":"Days to keep log files before automatic cleanup on startup; only applies when LOG_DIR is a path.","format":"number","required":false,"secret":false},{"name":"PROTECTED_PATHS","description":"Comma-separated vault folder names blocked from vault_delete_note and vault_move_note. Default: MEMORY_DIR plus the daily notes folder, read from DAILY_NOTES_FOLDER or .obsidian/daily-notes.json (default Daily Notes). When set, overrides the default entirely.","required":false,"secret":false},{"name":"ORPHAN_EXCLUDE_FOLDERS","description":"Comma-separated vault folder names excluded from vault_find_orphans. Default: the daily notes folder, \"Templates\", and MEMORY_DIR. DAILY_NOTES_FOLDER wins; otherwise .obsidian/daily-notes.json is read per query (fallback \"Daily Notes\"). When set, replaces the defaults entirely. Set to a comma (,) to exclude nothing; an empty value uses the defaults.","required":false,"secret":false},{"name":"SERVICE_DOCUMENTATION_URL","description":"Override the OAuth service documentation URL exposed via discovery metadata.","required":false,"secret":false},{"name":"MAX_FILE_BYTES","description":"Largest file vault_read_file will read, in bytes. Reading a larger file returns an error instead of content.","format":"number","required":false,"secret":false},{"name":"MAX_IMAGE_OUTPUT_BYTES","description":"Byte budget for images returned by vault_read_file, in binary bytes before base64 encoding. Images exceeding the budget are downscaled/recompressed server-side to fit; raise for clients that accept larger tool responses.","format":"number","required":false,"secret":false},{"name":"MAX_PDF_RENDER_PAGES","description":"Maximum PDF pages to render as images when raw: true is set on vault_read_file. The per-page byte budget is MAX_IMAGE_OUTPUT_BYTES divided evenly across the rendered pages.","format":"number","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]}
2026-10-07Paketbezeichner (Rohangabe): ghcr.io/aliasunder/vault-cortex:0.54.9 → ghcr.io/aliasunder/vault-cortex:0.54.10
2026-10-07Paketkoordinate: oci:ghcr.io/aliasunder/vault-cortex:0.54.9 → oci:ghcr.io/aliasunder/vault-cortex:0.54.10
2026-10-06Deklarierte Version: 0.54.8 → 0.54.9
2026-10-06Im Register geändert am (Rohangabe): 2026-10-03 → 2026-10-05
2026-10-06Im Register eingetragen am (Rohangabe): 2026-10-03 → 2026-10-05
2026-10-06Verbindungswege (Quellstruktur): {"packages":[{"registryType":"oci","identifier":"ghcr.io/aliasunder/vault-cortex:0.54.8","runtimeHint":"docker","transport":"streamable-http","environment":[{"name":"MCP_AUTH_TOKEN","description":"Bearer token for MCP client authentication. Must match the Authorization header sent by clients. Generate with: openssl rand -hex 32","required":true,"secret":true},{"name":"PUBLIC_URL","description":"Public URL clients use to reach this server. Used as the OAuth issuer URL in discovery metadata. Override when exposing the server outside localhost or on a non-default port.","required":false,"secret":false},{"name":"EMBEDDING_ENABLED","description":"Enable or disable the embedding pipeline. When false, no ONNX model is downloaded, no vector tables are created, and search uses FTS5 only.","required":false,"secret":false},{"name":"RERANK_MODE","description":"Cross-encoder reranking mode: blended (position-aware score blending after RRF fusion) or none (skip reranking). Only takes effect when EMBEDDING_ENABLED is true.","required":false,"secret":false},{"name":"WINDOWS_MODE","description":"Windows bind-mount mode: enables filesystem polling for the file watcher and rename-based moves across the Docker Desktop/WSL2 bridge. Set to true when the vault lives on a Windows drive.","required":false,"secret":false},{"name":"MEMORY_ENABLED","description":"Enable or disable the structured memory layer. When false, memory tools are hidden, bootstrap is skipped, and server metadata omits memory references.","required":false,"secret":false},{"name":"FILE_TOOLS_ENABLED","description":"Enable or disable file tools (vault_read_file, vault_list_files). When false, file tools are hidden and server metadata omits file tool references.","required":false,"secret":false},{"name":"READONLY_MODE","description":"Run the server read-only: every vault-writing tool is hidden, the memory folder is not auto-created, and server metadata omits write references.","required":false,"secret":false},{"name":"DISABLED_TOOLS","description":"Hide individual tools by name, comma-separated. Subtractive only — it cannot re-enable a tool another setting hides; an unknown tool name stops the server at startup.","required":false,"secret":false},{"name":"MEMORY_DIR","description":"Vault folder for structured memory files (About Me-style notes). Memory tools are hidden when MEMORY_ENABLED is false, but this value still feeds the defaults for PROTECTED_PATHS and ORPHAN_EXCLUDE_FOLDERS.","required":false,"secret":false},{"name":"DAILY_NOTES_FOLDER","description":"Vault folder for daily notes. Overrides the folder configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"Daily Notes\".","required":false,"secret":false},{"name":"DAILY_NOTES_FORMAT","description":"Filename date format for daily notes (Moment.js tokens). Overrides the format configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"YYYY-MM-DD\".","required":false,"secret":false},{"name":"TRUST_PROXY_HOPS","description":"Number of trusted reverse-proxy hops used to derive the client IP from X-Forwarded-For for OAuth rate limiting and request logs. With 0, injected forwarding headers are ignored.","required":false,"secret":false},{"name":"TRUST_FORWARDED_HOPS","description":"How many entries from the end of the RFC 7239 Forwarded header's for= list to count to reach the client IP for OAuth rate limiting and request logs. 0 ignores the header; 1 when the proxy in front writes it (e.g. AWS API Gateway); 2 when a CDN fronts that proxy and is the only way to reach it.","required":false,"secret":false},{"name":"TZ","description":"IANA timezone for timestamps and daily note resolution.","required":false,"secret":false},{"name":"LOG_LEVEL","description":"Logging verbosity.","required":false,"secret":false},{"name":"LOG_DIR","description":"Directory for log files that survive container re-creation. The container's own log is always written but discarded when the container is recreated; date-stamped files under LOG_DIR persist on the data volume. Default: /data/logs (remote image), $STORAGE_ROOT/data/logs (single-volume mode), none (local image). none keeps only the container log.","format":"filepath","required":false,"secret":false},{"name":"LOG_RETENTION_DAYS","description":"Days to keep log files before automatic cleanup on startup; only applies when LOG_DIR is a path.","format":"number","required":false,"secret":false},{"name":"PROTECTED_PATHS","description":"Comma-separated vault folder names blocked from vault_delete_note and vault_move_note. Default: MEMORY_DIR plus the daily notes folder, read from DAILY_NOTES_FOLDER or .obsidian/daily-notes.json (default Daily Notes). When set, overrides the default entirely.","required":false,"secret":false},{"name":"ORPHAN_EXCLUDE_FOLDERS","description":"Comma-separated vault folder names excluded from vault_find_orphans. Default: DAILY_NOTES_FOLDER (else \"Daily Notes\"), \"Templates\", MEMORY_DIR.","required":false,"secret":false},{"name":"SERVICE_DOCUMENTATION_URL","description":"Override the OAuth service documentation URL exposed via discovery metadata.","required":false,"secret":false},{"name":"MAX_FILE_BYTES","description":"Largest file vault_read_file will read, in bytes. Reading a larger file returns an error instead of content.","format":"number","required":false,"secret":false},{"name":"MAX_IMAGE_OUTPUT_BYTES","description":"Byte budget for images returned by vault_read_file, in binary bytes before base64 encoding. Images exceeding the budget are downscaled/recompressed server-side to fit; raise for clients that accept larger tool responses.","format":"number","required":false,"secret":false},{"name":"MAX_PDF_RENDER_PAGES","description":"Maximum PDF pages to render as images when raw: true is set on vault_read_file. The per-page byte budget is MAX_IMAGE_OUTPUT_BYTES divided evenly across the rendered pages.","format":"number","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]} → {"packages":[{"registryType":"oci","identifier":"ghcr.io/aliasunder/vault-cortex:0.54.9","runtimeHint":"docker","transport":"streamable-http","environment":[{"name":"MCP_AUTH_TOKEN","description":"Bearer token for MCP client authentication. Must match the Authorization header sent by clients. Generate with: openssl rand -hex 32","required":true,"secret":true},{"name":"PUBLIC_URL","description":"Public URL clients use to reach this server. Used as the OAuth issuer URL in discovery metadata. Override when exposing the server outside localhost or on a non-default port.","required":false,"secret":false},{"name":"EMBEDDING_ENABLED","description":"Enable or disable the embedding pipeline. When false, no ONNX model is downloaded, no vector tables are created, and search uses FTS5 only.","required":false,"secret":false},{"name":"RERANK_MODE","description":"Cross-encoder reranking mode: blended (position-aware score blending after RRF fusion) or none (skip reranking). Only takes effect when EMBEDDING_ENABLED is true.","required":false,"secret":false},{"name":"WINDOWS_MODE","description":"Windows bind-mount mode: enables filesystem polling for the file watcher and rename-based moves across the Docker Desktop/WSL2 bridge. Set to true when the vault lives on a Windows drive.","required":false,"secret":false},{"name":"MEMORY_ENABLED","description":"Enable or disable the structured memory layer. When false, memory tools are hidden, bootstrap is skipped, and server metadata omits memory references.","required":false,"secret":false},{"name":"FILE_TOOLS_ENABLED","description":"Enable or disable file tools (vault_read_file, vault_list_files). When false, file tools are hidden and server metadata omits file tool references.","required":false,"secret":false},{"name":"READONLY_MODE","description":"Run the server read-only: every vault-writing tool is hidden, the memory folder is not auto-created, and server metadata omits write references.","required":false,"secret":false},{"name":"DISABLED_TOOLS","description":"Hide individual tools by name, comma-separated. Subtractive only — it cannot re-enable a tool another setting hides; an unknown tool name stops the server at startup.","required":false,"secret":false},{"name":"MEMORY_DIR","description":"Vault folder for structured memory files (About Me-style notes). Memory tools are hidden when MEMORY_ENABLED is false, but this value still feeds the defaults for PROTECTED_PATHS and ORPHAN_EXCLUDE_FOLDERS.","required":false,"secret":false},{"name":"DAILY_NOTES_FOLDER","description":"Vault folder for daily notes. Overrides the folder configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"Daily Notes\".","required":false,"secret":false},{"name":"DAILY_NOTES_FORMAT","description":"Filename date format for daily notes (Moment.js tokens). Overrides the format configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"YYYY-MM-DD\".","required":false,"secret":false},{"name":"TRUST_PROXY_HOPS","description":"Number of trusted reverse-proxy hops used to derive the client IP from X-Forwarded-For for OAuth rate limiting and request logs. With 0, injected forwarding headers are ignored.","required":false,"secret":false},{"name":"TRUST_FORWARDED_HOPS","description":"How many entries from the end of the RFC 7239 Forwarded header's for= list to count to reach the client IP for OAuth rate limiting and request logs. 0 ignores the header; 1 when the proxy in front writes it (e.g. AWS API Gateway); 2 when a CDN fronts that proxy and is the only way to reach it.","required":false,"secret":false},{"name":"TZ","description":"IANA timezone for timestamps and daily note resolution.","required":false,"secret":false},{"name":"LOG_LEVEL","description":"Logging verbosity.","required":false,"secret":false},{"name":"LOG_DIR","description":"Directory for log files that survive container re-creation. The container's own log is always written but discarded when the container is recreated; date-stamped files under LOG_DIR persist on the data volume. Default: /data/logs (remote image), $STORAGE_ROOT/data/logs (single-volume mode), none (local image). none keeps only the container log.","format":"filepath","required":false,"secret":false},{"name":"LOG_RETENTION_DAYS","description":"Days to keep log files before automatic cleanup on startup; only applies when LOG_DIR is a path.","format":"number","required":false,"secret":false},{"name":"PROTECTED_PATHS","description":"Comma-separated vault folder names blocked from vault_delete_note and vault_move_note. Default: MEMORY_DIR plus the daily notes folder, read from DAILY_NOTES_FOLDER or .obsidian/daily-notes.json (default Daily Notes). When set, overrides the default entirely.","required":false,"secret":false},{"name":"ORPHAN_EXCLUDE_FOLDERS","description":"Comma-separated vault folder names excluded from vault_find_orphans. Default: DAILY_NOTES_FOLDER (else \"Daily Notes\"), \"Templates\", MEMORY_DIR.","required":false,"secret":false},{"name":"SERVICE_DOCUMENTATION_URL","description":"Override the OAuth service documentation URL exposed via discovery metadata.","required":false,"secret":false},{"name":"MAX_FILE_BYTES","description":"Largest file vault_read_file will read, in bytes. Reading a larger file returns an error instead of content.","format":"number","required":false,"secret":false},{"name":"MAX_IMAGE_OUTPUT_BYTES","description":"Byte budget for images returned by vault_read_file, in binary bytes before base64 encoding. Images exceeding the budget are downscaled/recompressed server-side to fit; raise for clients that accept larger tool responses.","format":"number","required":false,"secret":false},{"name":"MAX_PDF_RENDER_PAGES","description":"Maximum PDF pages to render as images when raw: true is set on vault_read_file. The per-page byte budget is MAX_IMAGE_OUTPUT_BYTES divided evenly across the rendered pages.","format":"number","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]}
2026-10-06Paketbezeichner (Rohangabe): ghcr.io/aliasunder/vault-cortex:0.54.8 → ghcr.io/aliasunder/vault-cortex:0.54.9
2026-10-06Paketkoordinate: oci:ghcr.io/aliasunder/vault-cortex:0.54.8 → oci:ghcr.io/aliasunder/vault-cortex:0.54.9
2026-10-04Deklarierte Version: 0.54.7 → 0.54.8
2026-10-04Im Register geändert am (Rohangabe): 2026-10-01 → 2026-10-03
2026-10-04Im Register eingetragen am (Rohangabe): 2026-10-01 → 2026-10-03
2026-10-04Verbindungswege (Quellstruktur): {"packages":[{"registryType":"oci","identifier":"ghcr.io/aliasunder/vault-cortex:0.54.7","runtimeHint":"docker","transport":"streamable-http","environment":[{"name":"MCP_AUTH_TOKEN","description":"Bearer token for MCP client authentication. Must match the Authorization header sent by clients. Generate with: openssl rand -hex 32","required":true,"secret":true},{"name":"PUBLIC_URL","description":"Public URL clients use to reach this server. Used as the OAuth issuer URL in discovery metadata. Override when exposing the server outside localhost or on a non-default port.","required":false,"secret":false},{"name":"EMBEDDING_ENABLED","description":"Enable or disable the embedding pipeline. When false, no ONNX model is downloaded, no vector tables are created, and search uses FTS5 only.","required":false,"secret":false},{"name":"RERANK_MODE","description":"Cross-encoder reranking mode: blended (position-aware score blending after RRF fusion) or none (skip reranking). Only takes effect when EMBEDDING_ENABLED is true.","required":false,"secret":false},{"name":"WINDOWS_MODE","description":"Windows bind-mount mode: enables filesystem polling for the file watcher and rename-based moves across the Docker Desktop/WSL2 bridge. Set to true when the vault lives on a Windows drive.","required":false,"secret":false},{"name":"MEMORY_ENABLED","description":"Enable or disable the structured memory layer. When false, memory tools are hidden, bootstrap is skipped, and server metadata omits memory references.","required":false,"secret":false},{"name":"FILE_TOOLS_ENABLED","description":"Enable or disable file tools (vault_read_file, vault_list_files). When false, file tools are hidden and server metadata omits file tool references.","required":false,"secret":false},{"name":"READONLY_MODE","description":"Run the server read-only: every vault-writing tool is hidden, the memory folder is not auto-created, and server metadata omits write references.","required":false,"secret":false},{"name":"DISABLED_TOOLS","description":"Hide individual tools by name, comma-separated. Subtractive only — it cannot re-enable a tool another setting hides; an unknown tool name stops the server at startup.","required":false,"secret":false},{"name":"MEMORY_DIR","description":"Vault folder for structured memory files (About Me-style notes). Memory tools are hidden when MEMORY_ENABLED is false, but this value still feeds the defaults for PROTECTED_PATHS and ORPHAN_EXCLUDE_FOLDERS.","required":false,"secret":false},{"name":"DAILY_NOTES_FOLDER","description":"Vault folder for daily notes. Overrides the folder configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"Daily Notes\".","required":false,"secret":false},{"name":"DAILY_NOTES_FORMAT","description":"Filename date format for daily notes (Moment.js tokens). Overrides the format configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"YYYY-MM-DD\".","required":false,"secret":false},{"name":"TRUST_PROXY_HOPS","description":"Number of trusted reverse-proxy hops used to derive the client IP from X-Forwarded-For for OAuth rate limiting and request logs. With 0, injected forwarding headers are ignored.","required":false,"secret":false},{"name":"TRUST_FORWARDED_HOPS","description":"How many entries from the end of the RFC 7239 Forwarded header's for= list to count to reach the client IP for OAuth rate limiting and request logs. 0 ignores the header; 1 when the proxy in front writes it (e.g. AWS API Gateway); 2 when a CDN fronts that proxy and is the only way to reach it.","required":false,"secret":false},{"name":"TZ","description":"IANA timezone for timestamps and daily note resolution.","required":false,"secret":false},{"name":"LOG_LEVEL","description":"Logging verbosity.","required":false,"secret":false},{"name":"LOG_DIR","description":"Directory for log files that survive container re-creation. The container's own log is always written but discarded when the container is recreated; date-stamped files under LOG_DIR persist on the data volume. Default: /data/logs (remote image), $STORAGE_ROOT/data/logs (single-volume mode), none (local image). none keeps only the container log.","format":"filepath","required":false,"secret":false},{"name":"LOG_RETENTION_DAYS","description":"Days to keep log files before automatic cleanup on startup; only applies when LOG_DIR is a path.","format":"number","required":false,"secret":false},{"name":"PROTECTED_PATHS","description":"Comma-separated vault folder names blocked from vault_delete_note and vault_move_note. Default: MEMORY_DIR plus the daily notes folder, read from DAILY_NOTES_FOLDER or .obsidian/daily-notes.json (default Daily Notes). When set, overrides the default entirely.","required":false,"secret":false},{"name":"ORPHAN_EXCLUDE_FOLDERS","description":"Comma-separated vault folder names excluded from vault_find_orphans. Default: DAILY_NOTES_FOLDER (else \"Daily Notes\"), \"Templates\", MEMORY_DIR.","required":false,"secret":false},{"name":"SERVICE_DOCUMENTATION_URL","description":"Override the OAuth service documentation URL exposed via discovery metadata.","required":false,"secret":false},{"name":"MAX_FILE_BYTES","description":"Largest file vault_read_file will read, in bytes. Reading a larger file returns an error instead of content.","format":"number","required":false,"secret":false},{"name":"MAX_IMAGE_OUTPUT_BYTES","description":"Byte budget for images returned by vault_read_file, in binary bytes before base64 encoding. Images exceeding the budget are downscaled/recompressed server-side to fit; raise for clients that accept larger tool responses.","format":"number","required":false,"secret":false},{"name":"MAX_PDF_RENDER_PAGES","description":"Maximum PDF pages to render as images when raw: true is set on vault_read_file. The per-page byte budget is MAX_IMAGE_OUTPUT_BYTES divided evenly across the rendered pages.","format":"number","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]} → {"packages":[{"registryType":"oci","identifier":"ghcr.io/aliasunder/vault-cortex:0.54.8","runtimeHint":"docker","transport":"streamable-http","environment":[{"name":"MCP_AUTH_TOKEN","description":"Bearer token for MCP client authentication. Must match the Authorization header sent by clients. Generate with: openssl rand -hex 32","required":true,"secret":true},{"name":"PUBLIC_URL","description":"Public URL clients use to reach this server. Used as the OAuth issuer URL in discovery metadata. Override when exposing the server outside localhost or on a non-default port.","required":false,"secret":false},{"name":"EMBEDDING_ENABLED","description":"Enable or disable the embedding pipeline. When false, no ONNX model is downloaded, no vector tables are created, and search uses FTS5 only.","required":false,"secret":false},{"name":"RERANK_MODE","description":"Cross-encoder reranking mode: blended (position-aware score blending after RRF fusion) or none (skip reranking). Only takes effect when EMBEDDING_ENABLED is true.","required":false,"secret":false},{"name":"WINDOWS_MODE","description":"Windows bind-mount mode: enables filesystem polling for the file watcher and rename-based moves across the Docker Desktop/WSL2 bridge. Set to true when the vault lives on a Windows drive.","required":false,"secret":false},{"name":"MEMORY_ENABLED","description":"Enable or disable the structured memory layer. When false, memory tools are hidden, bootstrap is skipped, and server metadata omits memory references.","required":false,"secret":false},{"name":"FILE_TOOLS_ENABLED","description":"Enable or disable file tools (vault_read_file, vault_list_files). When false, file tools are hidden and server metadata omits file tool references.","required":false,"secret":false},{"name":"READONLY_MODE","description":"Run the server read-only: every vault-writing tool is hidden, the memory folder is not auto-created, and server metadata omits write references.","required":false,"secret":false},{"name":"DISABLED_TOOLS","description":"Hide individual tools by name, comma-separated. Subtractive only — it cannot re-enable a tool another setting hides; an unknown tool name stops the server at startup.","required":false,"secret":false},{"name":"MEMORY_DIR","description":"Vault folder for structured memory files (About Me-style notes). Memory tools are hidden when MEMORY_ENABLED is false, but this value still feeds the defaults for PROTECTED_PATHS and ORPHAN_EXCLUDE_FOLDERS.","required":false,"secret":false},{"name":"DAILY_NOTES_FOLDER","description":"Vault folder for daily notes. Overrides the folder configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"Daily Notes\".","required":false,"secret":false},{"name":"DAILY_NOTES_FORMAT","description":"Filename date format for daily notes (Moment.js tokens). Overrides the format configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"YYYY-MM-DD\".","required":false,"secret":false},{"name":"TRUST_PROXY_HOPS","description":"Number of trusted reverse-proxy hops used to derive the client IP from X-Forwarded-For for OAuth rate limiting and request logs. With 0, injected forwarding headers are ignored.","required":false,"secret":false},{"name":"TRUST_FORWARDED_HOPS","description":"How many entries from the end of the RFC 7239 Forwarded header's for= list to count to reach the client IP for OAuth rate limiting and request logs. 0 ignores the header; 1 when the proxy in front writes it (e.g. AWS API Gateway); 2 when a CDN fronts that proxy and is the only way to reach it.","required":false,"secret":false},{"name":"TZ","description":"IANA timezone for timestamps and daily note resolution.","required":false,"secret":false},{"name":"LOG_LEVEL","description":"Logging verbosity.","required":false,"secret":false},{"name":"LOG_DIR","description":"Directory for log files that survive container re-creation. The container's own log is always written but discarded when the container is recreated; date-stamped files under LOG_DIR persist on the data volume. Default: /data/logs (remote image), $STORAGE_ROOT/data/logs (single-volume mode), none (local image). none keeps only the container log.","format":"filepath","required":false,"secret":false},{"name":"LOG_RETENTION_DAYS","description":"Days to keep log files before automatic cleanup on startup; only applies when LOG_DIR is a path.","format":"number","required":false,"secret":false},{"name":"PROTECTED_PATHS","description":"Comma-separated vault folder names blocked from vault_delete_note and vault_move_note. Default: MEMORY_DIR plus the daily notes folder, read from DAILY_NOTES_FOLDER or .obsidian/daily-notes.json (default Daily Notes). When set, overrides the default entirely.","required":false,"secret":false},{"name":"ORPHAN_EXCLUDE_FOLDERS","description":"Comma-separated vault folder names excluded from vault_find_orphans. Default: DAILY_NOTES_FOLDER (else \"Daily Notes\"), \"Templates\", MEMORY_DIR.","required":false,"secret":false},{"name":"SERVICE_DOCUMENTATION_URL","description":"Override the OAuth service documentation URL exposed via discovery metadata.","required":false,"secret":false},{"name":"MAX_FILE_BYTES","description":"Largest file vault_read_file will read, in bytes. Reading a larger file returns an error instead of content.","format":"number","required":false,"secret":false},{"name":"MAX_IMAGE_OUTPUT_BYTES","description":"Byte budget for images returned by vault_read_file, in binary bytes before base64 encoding. Images exceeding the budget are downscaled/recompressed server-side to fit; raise for clients that accept larger tool responses.","format":"number","required":false,"secret":false},{"name":"MAX_PDF_RENDER_PAGES","description":"Maximum PDF pages to render as images when raw: true is set on vault_read_file. The per-page byte budget is MAX_IMAGE_OUTPUT_BYTES divided evenly across the rendered pages.","format":"number","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]}
2026-10-04Paketbezeichner (Rohangabe): ghcr.io/aliasunder/vault-cortex:0.54.7 → ghcr.io/aliasunder/vault-cortex:0.54.8
2026-10-04Paketkoordinate: oci:ghcr.io/aliasunder/vault-cortex:0.54.7 → oci:ghcr.io/aliasunder/vault-cortex:0.54.8
2026-10-02Deklarierte Version: 0.54.6 → 0.54.7
2026-10-02Im Register geändert am (Rohangabe): 2026-09-30 → 2026-10-01
2026-10-02Im Register eingetragen am (Rohangabe): 2026-09-30 → 2026-10-01
2026-10-02Verbindungswege (Quellstruktur): {"packages":[{"registryType":"oci","identifier":"ghcr.io/aliasunder/vault-cortex:0.54.6","runtimeHint":"docker","transport":"streamable-http","environment":[{"name":"MCP_AUTH_TOKEN","description":"Bearer token for MCP client authentication. Must match the Authorization header sent by clients. Generate with: openssl rand -hex 32","required":true,"secret":true},{"name":"PUBLIC_URL","description":"Public URL clients use to reach this server. Used as the OAuth issuer URL in discovery metadata. Override when exposing the server outside localhost or on a non-default port.","required":false,"secret":false},{"name":"EMBEDDING_ENABLED","description":"Enable or disable the embedding pipeline. When false, no ONNX model is downloaded, no vector tables are created, and search uses FTS5 only.","required":false,"secret":false},{"name":"RERANK_MODE","description":"Cross-encoder reranking mode: blended (position-aware score blending after RRF fusion) or none (skip reranking). Only takes effect when EMBEDDING_ENABLED is true.","required":false,"secret":false},{"name":"WINDOWS_MODE","description":"Windows bind-mount mode: enables filesystem polling for the file watcher and rename-based moves across the Docker Desktop/WSL2 bridge. Set to true when the vault lives on a Windows drive.","required":false,"secret":false},{"name":"MEMORY_ENABLED","description":"Enable or disable the structured memory layer. When false, memory tools are hidden, bootstrap is skipped, and server metadata omits memory references.","required":false,"secret":false},{"name":"FILE_TOOLS_ENABLED","description":"Enable or disable file tools (vault_read_file, vault_list_files). When false, file tools are hidden and server metadata omits file tool references.","required":false,"secret":false},{"name":"READONLY_MODE","description":"Run the server read-only: every vault-writing tool is hidden, the memory folder is not auto-created, and server metadata omits write references.","required":false,"secret":false},{"name":"DISABLED_TOOLS","description":"Hide individual tools by name, comma-separated. Subtractive only — it cannot re-enable a tool another setting hides; an unknown tool name stops the server at startup.","required":false,"secret":false},{"name":"MEMORY_DIR","description":"Vault folder for structured memory files (About Me-style notes). Memory tools are hidden when MEMORY_ENABLED is false, but this value still feeds the defaults for PROTECTED_PATHS and ORPHAN_EXCLUDE_FOLDERS.","required":false,"secret":false},{"name":"DAILY_NOTES_FOLDER","description":"Vault folder for daily notes. Overrides the folder configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"Daily Notes\".","required":false,"secret":false},{"name":"DAILY_NOTES_FORMAT","description":"Filename date format for daily notes (Moment.js tokens). Overrides the format configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"YYYY-MM-DD\".","required":false,"secret":false},{"name":"TRUST_PROXY_HOPS","description":"Number of trusted reverse-proxy hops used to derive the client IP from X-Forwarded-For for OAuth rate limiting and request logs. With 0, injected forwarding headers are ignored.","required":false,"secret":false},{"name":"TRUST_FORWARDED_HOPS","description":"How many entries from the end of the RFC 7239 Forwarded header's for= list to count to reach the client IP for OAuth rate limiting and request logs. 0 ignores the header; 1 when the proxy in front writes it (e.g. AWS API Gateway); 2 when a CDN fronts that proxy and is the only way to reach it.","required":false,"secret":false},{"name":"TZ","description":"IANA timezone for timestamps and daily note resolution.","required":false,"secret":false},{"name":"LOG_LEVEL","description":"Logging verbosity.","required":false,"secret":false},{"name":"LOG_DIR","description":"Directory for log files that survive container re-creation. The container's own log is always written but discarded when the container is recreated; date-stamped files under LOG_DIR persist on the data volume. Default: /data/logs (remote image), $STORAGE_ROOT/data/logs (single-volume mode), none (local image). none keeps only the container log.","format":"filepath","required":false,"secret":false},{"name":"LOG_RETENTION_DAYS","description":"Days to keep log files before automatic cleanup on startup; only applies when LOG_DIR is a path.","format":"number","required":false,"secret":false},{"name":"PROTECTED_PATHS","description":"Comma-separated vault folder names blocked from vault_delete_note and vault_move_note. Default: MEMORY_DIR plus the daily notes folder, read from DAILY_NOTES_FOLDER or .obsidian/daily-notes.json (default Daily Notes). When set, overrides the default entirely.","required":false,"secret":false},{"name":"ORPHAN_EXCLUDE_FOLDERS","description":"Comma-separated vault folder names excluded from vault_find_orphans. Default: DAILY_NOTES_FOLDER (else \"Daily Notes\"), \"Templates\", MEMORY_DIR.","required":false,"secret":false},{"name":"SERVICE_DOCUMENTATION_URL","description":"Override the OAuth service documentation URL exposed via discovery metadata.","required":false,"secret":false},{"name":"MAX_FILE_BYTES","description":"Largest file vault_read_file will read, in bytes. Reading a larger file returns an error instead of content.","format":"number","required":false,"secret":false},{"name":"MAX_IMAGE_OUTPUT_BYTES","description":"Byte budget for images returned by vault_read_file, in binary bytes before base64 encoding. Images exceeding the budget are downscaled/recompressed server-side to fit; raise for clients that accept larger tool responses.","format":"number","required":false,"secret":false},{"name":"MAX_PDF_RENDER_PAGES","description":"Maximum PDF pages to render as images when raw: true is set on vault_read_file. The per-page byte budget is MAX_IMAGE_OUTPUT_BYTES divided evenly across the rendered pages.","format":"number","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]} → {"packages":[{"registryType":"oci","identifier":"ghcr.io/aliasunder/vault-cortex:0.54.7","runtimeHint":"docker","transport":"streamable-http","environment":[{"name":"MCP_AUTH_TOKEN","description":"Bearer token for MCP client authentication. Must match the Authorization header sent by clients. Generate with: openssl rand -hex 32","required":true,"secret":true},{"name":"PUBLIC_URL","description":"Public URL clients use to reach this server. Used as the OAuth issuer URL in discovery metadata. Override when exposing the server outside localhost or on a non-default port.","required":false,"secret":false},{"name":"EMBEDDING_ENABLED","description":"Enable or disable the embedding pipeline. When false, no ONNX model is downloaded, no vector tables are created, and search uses FTS5 only.","required":false,"secret":false},{"name":"RERANK_MODE","description":"Cross-encoder reranking mode: blended (position-aware score blending after RRF fusion) or none (skip reranking). Only takes effect when EMBEDDING_ENABLED is true.","required":false,"secret":false},{"name":"WINDOWS_MODE","description":"Windows bind-mount mode: enables filesystem polling for the file watcher and rename-based moves across the Docker Desktop/WSL2 bridge. Set to true when the vault lives on a Windows drive.","required":false,"secret":false},{"name":"MEMORY_ENABLED","description":"Enable or disable the structured memory layer. When false, memory tools are hidden, bootstrap is skipped, and server metadata omits memory references.","required":false,"secret":false},{"name":"FILE_TOOLS_ENABLED","description":"Enable or disable file tools (vault_read_file, vault_list_files). When false, file tools are hidden and server metadata omits file tool references.","required":false,"secret":false},{"name":"READONLY_MODE","description":"Run the server read-only: every vault-writing tool is hidden, the memory folder is not auto-created, and server metadata omits write references.","required":false,"secret":false},{"name":"DISABLED_TOOLS","description":"Hide individual tools by name, comma-separated. Subtractive only — it cannot re-enable a tool another setting hides; an unknown tool name stops the server at startup.","required":false,"secret":false},{"name":"MEMORY_DIR","description":"Vault folder for structured memory files (About Me-style notes). Memory tools are hidden when MEMORY_ENABLED is false, but this value still feeds the defaults for PROTECTED_PATHS and ORPHAN_EXCLUDE_FOLDERS.","required":false,"secret":false},{"name":"DAILY_NOTES_FOLDER","description":"Vault folder for daily notes. Overrides the folder configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"Daily Notes\".","required":false,"secret":false},{"name":"DAILY_NOTES_FORMAT","description":"Filename date format for daily notes (Moment.js tokens). Overrides the format configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"YYYY-MM-DD\".","required":false,"secret":false},{"name":"TRUST_PROXY_HOPS","description":"Number of trusted reverse-proxy hops used to derive the client IP from X-Forwarded-For for OAuth rate limiting and request logs. With 0, injected forwarding headers are ignored.","required":false,"secret":false},{"name":"TRUST_FORWARDED_HOPS","description":"How many entries from the end of the RFC 7239 Forwarded header's for= list to count to reach the client IP for OAuth rate limiting and request logs. 0 ignores the header; 1 when the proxy in front writes it (e.g. AWS API Gateway); 2 when a CDN fronts that proxy and is the only way to reach it.","required":false,"secret":false},{"name":"TZ","description":"IANA timezone for timestamps and daily note resolution.","required":false,"secret":false},{"name":"LOG_LEVEL","description":"Logging verbosity.","required":false,"secret":false},{"name":"LOG_DIR","description":"Directory for log files that survive container re-creation. The container's own log is always written but discarded when the container is recreated; date-stamped files under LOG_DIR persist on the data volume. Default: /data/logs (remote image), $STORAGE_ROOT/data/logs (single-volume mode), none (local image). none keeps only the container log.","format":"filepath","required":false,"secret":false},{"name":"LOG_RETENTION_DAYS","description":"Days to keep log files before automatic cleanup on startup; only applies when LOG_DIR is a path.","format":"number","required":false,"secret":false},{"name":"PROTECTED_PATHS","description":"Comma-separated vault folder names blocked from vault_delete_note and vault_move_note. Default: MEMORY_DIR plus the daily notes folder, read from DAILY_NOTES_FOLDER or .obsidian/daily-notes.json (default Daily Notes). When set, overrides the default entirely.","required":false,"secret":false},{"name":"ORPHAN_EXCLUDE_FOLDERS","description":"Comma-separated vault folder names excluded from vault_find_orphans. Default: DAILY_NOTES_FOLDER (else \"Daily Notes\"), \"Templates\", MEMORY_DIR.","required":false,"secret":false},{"name":"SERVICE_DOCUMENTATION_URL","description":"Override the OAuth service documentation URL exposed via discovery metadata.","required":false,"secret":false},{"name":"MAX_FILE_BYTES","description":"Largest file vault_read_file will read, in bytes. Reading a larger file returns an error instead of content.","format":"number","required":false,"secret":false},{"name":"MAX_IMAGE_OUTPUT_BYTES","description":"Byte budget for images returned by vault_read_file, in binary bytes before base64 encoding. Images exceeding the budget are downscaled/recompressed server-side to fit; raise for clients that accept larger tool responses.","format":"number","required":false,"secret":false},{"name":"MAX_PDF_RENDER_PAGES","description":"Maximum PDF pages to render as images when raw: true is set on vault_read_file. The per-page byte budget is MAX_IMAGE_OUTPUT_BYTES divided evenly across the rendered pages.","format":"number","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]}
2026-10-02Paketbezeichner (Rohangabe): ghcr.io/aliasunder/vault-cortex:0.54.6 → ghcr.io/aliasunder/vault-cortex:0.54.7
2026-10-02Paketkoordinate: oci:ghcr.io/aliasunder/vault-cortex:0.54.6 → oci:ghcr.io/aliasunder/vault-cortex:0.54.7
2026-10-01Deklarierte Version: 0.54.5 → 0.54.6
2026-10-01Im Register geändert am (Rohangabe): 2026-09-29 → 2026-09-30
2026-10-01Im Register eingetragen am (Rohangabe): 2026-09-29 → 2026-09-30
2026-10-01Verbindungswege (Quellstruktur): {"packages":[{"registryType":"oci","identifier":"ghcr.io/aliasunder/vault-cortex:0.54.5","runtimeHint":"docker","transport":"streamable-http","environment":[{"name":"MCP_AUTH_TOKEN","description":"Bearer token for MCP client authentication. Must match the Authorization header sent by clients. Generate with: openssl rand -hex 32","required":true,"secret":true},{"name":"PUBLIC_URL","description":"Public URL clients use to reach this server. Used as the OAuth issuer URL in discovery metadata. Override when exposing the server outside localhost or on a non-default port.","required":false,"secret":false},{"name":"EMBEDDING_ENABLED","description":"Enable or disable the embedding pipeline. When false, no ONNX model is downloaded, no vector tables are created, and search uses FTS5 only.","required":false,"secret":false},{"name":"RERANK_MODE","description":"Cross-encoder reranking mode: blended (position-aware score blending after RRF fusion) or none (skip reranking). Only takes effect when EMBEDDING_ENABLED is true.","required":false,"secret":false},{"name":"WINDOWS_MODE","description":"Windows bind-mount mode: enables filesystem polling for the file watcher and rename-based moves across the Docker Desktop/WSL2 bridge. Set to true when the vault lives on a Windows drive.","required":false,"secret":false},{"name":"MEMORY_ENABLED","description":"Enable or disable the structured memory layer. When false, memory tools are hidden, bootstrap is skipped, and server metadata omits memory references.","required":false,"secret":false},{"name":"FILE_TOOLS_ENABLED","description":"Enable or disable file tools (vault_read_file, vault_list_files). When false, file tools are hidden and server metadata omits file tool references.","required":false,"secret":false},{"name":"READONLY_MODE","description":"Run the server read-only: every vault-writing tool is hidden, the memory folder is not auto-created, and server metadata omits write references.","required":false,"secret":false},{"name":"DISABLED_TOOLS","description":"Hide individual tools by name, comma-separated. Subtractive only — it cannot re-enable a tool another setting hides; an unknown tool name stops the server at startup.","required":false,"secret":false},{"name":"MEMORY_DIR","description":"Vault folder for structured memory files (About Me-style notes). Memory tools are hidden when MEMORY_ENABLED is false, but this value still feeds the defaults for PROTECTED_PATHS and ORPHAN_EXCLUDE_FOLDERS.","required":false,"secret":false},{"name":"DAILY_NOTES_FOLDER","description":"Vault folder for daily notes. Overrides the folder configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"Daily Notes\".","required":false,"secret":false},{"name":"DAILY_NOTES_FORMAT","description":"Filename date format for daily notes (Moment.js tokens). Overrides the format configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"YYYY-MM-DD\".","required":false,"secret":false},{"name":"TRUST_PROXY_HOPS","description":"Number of trusted reverse-proxy hops used to derive the client IP from X-Forwarded-For for OAuth rate limiting and request logs. With 0, injected forwarding headers are ignored.","required":false,"secret":false},{"name":"TRUST_FORWARDED_HOPS","description":"How many entries from the end of the RFC 7239 Forwarded header's for= list to count to reach the client IP for OAuth rate limiting and request logs. 0 ignores the header; 1 when the proxy in front writes it (e.g. AWS API Gateway); 2 when a CDN fronts that proxy and is the only way to reach it.","required":false,"secret":false},{"name":"TZ","description":"IANA timezone for timestamps and daily note resolution.","required":false,"secret":false},{"name":"LOG_LEVEL","description":"Logging verbosity.","required":false,"secret":false},{"name":"LOG_DIR","description":"Directory for log files that survive container re-creation. The container's own log is always written but discarded when the container is recreated; date-stamped files under LOG_DIR persist on the data volume. Default: /data/logs (remote image), $STORAGE_ROOT/data/logs (single-volume mode), none (local image). none keeps only the container log.","format":"filepath","required":false,"secret":false},{"name":"LOG_RETENTION_DAYS","description":"Days to keep log files before automatic cleanup on startup; only applies when LOG_DIR is a path.","format":"number","required":false,"secret":false},{"name":"PROTECTED_PATHS","description":"Comma-separated vault folder names blocked from vault_delete_note and vault_move_note. Default: MEMORY_DIR plus the daily notes folder, read from DAILY_NOTES_FOLDER or .obsidian/daily-notes.json (default Daily Notes). When set, overrides the default entirely.","required":false,"secret":false},{"name":"ORPHAN_EXCLUDE_FOLDERS","description":"Comma-separated vault folder names excluded from vault_find_orphans. Default: DAILY_NOTES_FOLDER (else \"Daily Notes\"), \"Templates\", MEMORY_DIR.","required":false,"secret":false},{"name":"SERVICE_DOCUMENTATION_URL","description":"Override the OAuth service documentation URL exposed via discovery metadata.","required":false,"secret":false},{"name":"MAX_FILE_BYTES","description":"Largest file vault_read_file will read, in bytes. Reading a larger file returns an error instead of content.","format":"number","required":false,"secret":false},{"name":"MAX_IMAGE_OUTPUT_BYTES","description":"Byte budget for images returned by vault_read_file, in binary bytes before base64 encoding. Images exceeding the budget are downscaled/recompressed server-side to fit; raise for clients that accept larger tool responses.","format":"number","required":false,"secret":false},{"name":"MAX_PDF_RENDER_PAGES","description":"Maximum PDF pages to render as images when raw: true is set on vault_read_file. The per-page byte budget is MAX_IMAGE_OUTPUT_BYTES divided evenly across the rendered pages.","format":"number","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]} → {"packages":[{"registryType":"oci","identifier":"ghcr.io/aliasunder/vault-cortex:0.54.6","runtimeHint":"docker","transport":"streamable-http","environment":[{"name":"MCP_AUTH_TOKEN","description":"Bearer token for MCP client authentication. Must match the Authorization header sent by clients. Generate with: openssl rand -hex 32","required":true,"secret":true},{"name":"PUBLIC_URL","description":"Public URL clients use to reach this server. Used as the OAuth issuer URL in discovery metadata. Override when exposing the server outside localhost or on a non-default port.","required":false,"secret":false},{"name":"EMBEDDING_ENABLED","description":"Enable or disable the embedding pipeline. When false, no ONNX model is downloaded, no vector tables are created, and search uses FTS5 only.","required":false,"secret":false},{"name":"RERANK_MODE","description":"Cross-encoder reranking mode: blended (position-aware score blending after RRF fusion) or none (skip reranking). Only takes effect when EMBEDDING_ENABLED is true.","required":false,"secret":false},{"name":"WINDOWS_MODE","description":"Windows bind-mount mode: enables filesystem polling for the file watcher and rename-based moves across the Docker Desktop/WSL2 bridge. Set to true when the vault lives on a Windows drive.","required":false,"secret":false},{"name":"MEMORY_ENABLED","description":"Enable or disable the structured memory layer. When false, memory tools are hidden, bootstrap is skipped, and server metadata omits memory references.","required":false,"secret":false},{"name":"FILE_TOOLS_ENABLED","description":"Enable or disable file tools (vault_read_file, vault_list_files). When false, file tools are hidden and server metadata omits file tool references.","required":false,"secret":false},{"name":"READONLY_MODE","description":"Run the server read-only: every vault-writing tool is hidden, the memory folder is not auto-created, and server metadata omits write references.","required":false,"secret":false},{"name":"DISABLED_TOOLS","description":"Hide individual tools by name, comma-separated. Subtractive only — it cannot re-enable a tool another setting hides; an unknown tool name stops the server at startup.","required":false,"secret":false},{"name":"MEMORY_DIR","description":"Vault folder for structured memory files (About Me-style notes). Memory tools are hidden when MEMORY_ENABLED is false, but this value still feeds the defaults for PROTECTED_PATHS and ORPHAN_EXCLUDE_FOLDERS.","required":false,"secret":false},{"name":"DAILY_NOTES_FOLDER","description":"Vault folder for daily notes. Overrides the folder configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"Daily Notes\".","required":false,"secret":false},{"name":"DAILY_NOTES_FORMAT","description":"Filename date format for daily notes (Moment.js tokens). Overrides the format configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"YYYY-MM-DD\".","required":false,"secret":false},{"name":"TRUST_PROXY_HOPS","description":"Number of trusted reverse-proxy hops used to derive the client IP from X-Forwarded-For for OAuth rate limiting and request logs. With 0, injected forwarding headers are ignored.","required":false,"secret":false},{"name":"TRUST_FORWARDED_HOPS","description":"How many entries from the end of the RFC 7239 Forwarded header's for= list to count to reach the client IP for OAuth rate limiting and request logs. 0 ignores the header; 1 when the proxy in front writes it (e.g. AWS API Gateway); 2 when a CDN fronts that proxy and is the only way to reach it.","required":false,"secret":false},{"name":"TZ","description":"IANA timezone for timestamps and daily note resolution.","required":false,"secret":false},{"name":"LOG_LEVEL","description":"Logging verbosity.","required":false,"secret":false},{"name":"LOG_DIR","description":"Directory for log files that survive container re-creation. The container's own log is always written but discarded when the container is recreated; date-stamped files under LOG_DIR persist on the data volume. Default: /data/logs (remote image), $STORAGE_ROOT/data/logs (single-volume mode), none (local image). none keeps only the container log.","format":"filepath","required":false,"secret":false},{"name":"LOG_RETENTION_DAYS","description":"Days to keep log files before automatic cleanup on startup; only applies when LOG_DIR is a path.","format":"number","required":false,"secret":false},{"name":"PROTECTED_PATHS","description":"Comma-separated vault folder names blocked from vault_delete_note and vault_move_note. Default: MEMORY_DIR plus the daily notes folder, read from DAILY_NOTES_FOLDER or .obsidian/daily-notes.json (default Daily Notes). When set, overrides the default entirely.","required":false,"secret":false},{"name":"ORPHAN_EXCLUDE_FOLDERS","description":"Comma-separated vault folder names excluded from vault_find_orphans. Default: DAILY_NOTES_FOLDER (else \"Daily Notes\"), \"Templates\", MEMORY_DIR.","required":false,"secret":false},{"name":"SERVICE_DOCUMENTATION_URL","description":"Override the OAuth service documentation URL exposed via discovery metadata.","required":false,"secret":false},{"name":"MAX_FILE_BYTES","description":"Largest file vault_read_file will read, in bytes. Reading a larger file returns an error instead of content.","format":"number","required":false,"secret":false},{"name":"MAX_IMAGE_OUTPUT_BYTES","description":"Byte budget for images returned by vault_read_file, in binary bytes before base64 encoding. Images exceeding the budget are downscaled/recompressed server-side to fit; raise for clients that accept larger tool responses.","format":"number","required":false,"secret":false},{"name":"MAX_PDF_RENDER_PAGES","description":"Maximum PDF pages to render as images when raw: true is set on vault_read_file. The per-page byte budget is MAX_IMAGE_OUTPUT_BYTES divided evenly across the rendered pages.","format":"number","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]}
2026-10-01Paketbezeichner (Rohangabe): ghcr.io/aliasunder/vault-cortex:0.54.5 → ghcr.io/aliasunder/vault-cortex:0.54.6
2026-10-01Paketkoordinate: oci:ghcr.io/aliasunder/vault-cortex:0.54.5 → oci:ghcr.io/aliasunder/vault-cortex:0.54.6
2026-09-30Deklarierte Version: 0.54.3 → 0.54.5
2026-09-30Im Register geändert am (Rohangabe): 2026-09-26 → 2026-09-29
2026-09-30Im Register eingetragen am (Rohangabe): 2026-09-26 → 2026-09-29
2026-09-30Verbindungswege (Quellstruktur): {"packages":[{"registryType":"oci","identifier":"ghcr.io/aliasunder/vault-cortex:0.54.3","runtimeHint":"docker","transport":"streamable-http","environment":[{"name":"MCP_AUTH_TOKEN","description":"Bearer token for MCP client authentication. Must match the Authorization header sent by clients. Generate with: openssl rand -hex 32","required":true,"secret":true},{"name":"PUBLIC_URL","description":"Public URL clients use to reach this server. Used as the OAuth issuer URL in discovery metadata. Override when exposing the server outside localhost or on a non-default port.","required":false,"secret":false},{"name":"EMBEDDING_ENABLED","description":"Enable or disable the embedding pipeline. When false, no ONNX model is downloaded, no vector tables are created, and search uses FTS5 only.","required":false,"secret":false},{"name":"RERANK_MODE","description":"Cross-encoder reranking mode: blended (position-aware score blending after RRF fusion) or none (skip reranking). Only takes effect when EMBEDDING_ENABLED is true.","required":false,"secret":false},{"name":"WINDOWS_MODE","description":"Windows bind-mount mode: enables filesystem polling for the file watcher and rename-based moves across the Docker Desktop/WSL2 bridge. Set to true when the vault lives on a Windows drive.","required":false,"secret":false},{"name":"MEMORY_ENABLED","description":"Enable or disable the structured memory layer. When false, memory tools are hidden, bootstrap is skipped, and server metadata omits memory references.","required":false,"secret":false},{"name":"FILE_TOOLS_ENABLED","description":"Enable or disable file tools (vault_read_file, vault_list_files). When false, file tools are hidden and server metadata omits file tool references.","required":false,"secret":false},{"name":"READONLY_MODE","description":"Run the server read-only: every vault-writing tool is hidden, the memory folder is not auto-created, and server metadata omits write references.","required":false,"secret":false},{"name":"DISABLED_TOOLS","description":"Hide individual tools by name, comma-separated. Subtractive only — it cannot re-enable a tool another setting hides; an unknown tool name stops the server at startup.","required":false,"secret":false},{"name":"MEMORY_DIR","description":"Vault folder for structured memory files (About Me-style notes). Memory tools are hidden when MEMORY_ENABLED is false, but this value still feeds the defaults for PROTECTED_PATHS and ORPHAN_EXCLUDE_FOLDERS.","required":false,"secret":false},{"name":"DAILY_NOTES_FOLDER","description":"Vault folder for daily notes. Overrides the folder configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"Daily Notes\".","required":false,"secret":false},{"name":"DAILY_NOTES_FORMAT","description":"Filename date format for daily notes (Moment.js tokens). Overrides the format configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"YYYY-MM-DD\".","required":false,"secret":false},{"name":"TRUST_PROXY_HOPS","description":"Number of trusted reverse-proxy hops used to derive the client IP from X-Forwarded-For for OAuth rate limiting and request logs. With 0, injected forwarding headers are ignored.","required":false,"secret":false},{"name":"TRUST_FORWARDED_HOPS","description":"How many entries from the end of the RFC 7239 Forwarded header's for= list to count to reach the client IP for OAuth rate limiting and request logs. 0 ignores the header; 1 when the proxy in front writes it (e.g. AWS API Gateway); 2 when a CDN fronts that proxy and is the only way to reach it.","required":false,"secret":false},{"name":"TZ","description":"IANA timezone for timestamps and daily note resolution.","required":false,"secret":false},{"name":"LOG_LEVEL","description":"Logging verbosity.","required":false,"secret":false},{"name":"LOG_DIR","description":"Directory for log files that survive container re-creation. The container's own log is always written but discarded when the container is recreated; date-stamped files under LOG_DIR persist on the data volume. Default: /data/logs (remote image), $STORAGE_ROOT/data/logs (single-volume mode), none (local image). none keeps only the container log.","format":"filepath","required":false,"secret":false},{"name":"LOG_RETENTION_DAYS","description":"Days to keep log files before automatic cleanup on startup; only applies when LOG_DIR is a path.","format":"number","required":false,"secret":false},{"name":"PROTECTED_PATHS","description":"Comma-separated vault folder names blocked from vault_delete_note and vault_move_note. Default: MEMORY_DIR plus the daily notes folder, read from DAILY_NOTES_FOLDER or .obsidian/daily-notes.json (default Daily Notes). When set, overrides the default entirely.","required":false,"secret":false},{"name":"ORPHAN_EXCLUDE_FOLDERS","description":"Comma-separated vault folder names excluded from vault_find_orphans. Default: DAILY_NOTES_FOLDER (else \"Daily Notes\"), \"Templates\", MEMORY_DIR.","required":false,"secret":false},{"name":"SERVICE_DOCUMENTATION_URL","description":"Override the OAuth service documentation URL exposed via discovery metadata.","required":false,"secret":false},{"name":"MAX_FILE_BYTES","description":"Largest file vault_read_file will read, in bytes. Reading a larger file returns an error instead of content.","format":"number","required":false,"secret":false},{"name":"MAX_IMAGE_OUTPUT_BYTES","description":"Byte budget for images returned by vault_read_file, in binary bytes before base64 encoding. Images exceeding the budget are downscaled/recompressed server-side to fit; raise for clients that accept larger tool responses.","format":"number","required":false,"secret":false},{"name":"MAX_PDF_RENDER_PAGES","description":"Maximum PDF pages to render as images when raw: true is set on vault_read_file. The per-page byte budget is MAX_IMAGE_OUTPUT_BYTES divided evenly across the rendered pages.","format":"number","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]} → {"packages":[{"registryType":"oci","identifier":"ghcr.io/aliasunder/vault-cortex:0.54.5","runtimeHint":"docker","transport":"streamable-http","environment":[{"name":"MCP_AUTH_TOKEN","description":"Bearer token for MCP client authentication. Must match the Authorization header sent by clients. Generate with: openssl rand -hex 32","required":true,"secret":true},{"name":"PUBLIC_URL","description":"Public URL clients use to reach this server. Used as the OAuth issuer URL in discovery metadata. Override when exposing the server outside localhost or on a non-default port.","required":false,"secret":false},{"name":"EMBEDDING_ENABLED","description":"Enable or disable the embedding pipeline. When false, no ONNX model is downloaded, no vector tables are created, and search uses FTS5 only.","required":false,"secret":false},{"name":"RERANK_MODE","description":"Cross-encoder reranking mode: blended (position-aware score blending after RRF fusion) or none (skip reranking). Only takes effect when EMBEDDING_ENABLED is true.","required":false,"secret":false},{"name":"WINDOWS_MODE","description":"Windows bind-mount mode: enables filesystem polling for the file watcher and rename-based moves across the Docker Desktop/WSL2 bridge. Set to true when the vault lives on a Windows drive.","required":false,"secret":false},{"name":"MEMORY_ENABLED","description":"Enable or disable the structured memory layer. When false, memory tools are hidden, bootstrap is skipped, and server metadata omits memory references.","required":false,"secret":false},{"name":"FILE_TOOLS_ENABLED","description":"Enable or disable file tools (vault_read_file, vault_list_files). When false, file tools are hidden and server metadata omits file tool references.","required":false,"secret":false},{"name":"READONLY_MODE","description":"Run the server read-only: every vault-writing tool is hidden, the memory folder is not auto-created, and server metadata omits write references.","required":false,"secret":false},{"name":"DISABLED_TOOLS","description":"Hide individual tools by name, comma-separated. Subtractive only — it cannot re-enable a tool another setting hides; an unknown tool name stops the server at startup.","required":false,"secret":false},{"name":"MEMORY_DIR","description":"Vault folder for structured memory files (About Me-style notes). Memory tools are hidden when MEMORY_ENABLED is false, but this value still feeds the defaults for PROTECTED_PATHS and ORPHAN_EXCLUDE_FOLDERS.","required":false,"secret":false},{"name":"DAILY_NOTES_FOLDER","description":"Vault folder for daily notes. Overrides the folder configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"Daily Notes\".","required":false,"secret":false},{"name":"DAILY_NOTES_FORMAT","description":"Filename date format for daily notes (Moment.js tokens). Overrides the format configured in Obsidian's daily-notes plugin. When unset, read from the vault's .obsidian/daily-notes.json, falling back to \"YYYY-MM-DD\".","required":false,"secret":false},{"name":"TRUST_PROXY_HOPS","description":"Number of trusted reverse-proxy hops used to derive the client IP from X-Forwarded-For for OAuth rate limiting and request logs. With 0, injected forwarding headers are ignored.","required":false,"secret":false},{"name":"TRUST_FORWARDED_HOPS","description":"How many entries from the end of the RFC 7239 Forwarded header's for= list to count to reach the client IP for OAuth rate limiting and request logs. 0 ignores the header; 1 when the proxy in front writes it (e.g. AWS API Gateway); 2 when a CDN fronts that proxy and is the only way to reach it.","required":false,"secret":false},{"name":"TZ","description":"IANA timezone for timestamps and daily note resolution.","required":false,"secret":false},{"name":"LOG_LEVEL","description":"Logging verbosity.","required":false,"secret":false},{"name":"LOG_DIR","description":"Directory for log files that survive container re-creation. The container's own log is always written but discarded when the container is recreated; date-stamped files under LOG_DIR persist on the data volume. Default: /data/logs (remote image), $STORAGE_ROOT/data/logs (single-volume mode), none (local image). none keeps only the container log.","format":"filepath","required":false,"secret":false},{"name":"LOG_RETENTION_DAYS","description":"Days to keep log files before automatic cleanup on startup; only applies when LOG_DIR is a path.","format":"number","required":false,"secret":false},{"name":"PROTECTED_PATHS","description":"Comma-separated vault folder names blocked from vault_delete_note and vault_move_note. Default: MEMORY_DIR plus the daily notes folder, read from DAILY_NOTES_FOLDER or .obsidian/daily-notes.json (default Daily Notes). When set, overrides the default entirely.","required":false,"secret":false},{"name":"ORPHAN_EXCLUDE_FOLDERS","description":"Comma-separated vault folder names excluded from vault_find_orphans. Default: DAILY_NOTES_FOLDER (else \"Daily Notes\"), \"Templates\", MEMORY_DIR.","required":false,"secret":false},{"name":"SERVICE_DOCUMENTATION_URL","description":"Override the OAuth service documentation URL exposed via discovery metadata.","required":false,"secret":false},{"name":"MAX_FILE_BYTES","description":"Largest file vault_read_file will read, in bytes. Reading a larger file returns an error instead of content.","format":"number","required":false,"secret":false},{"name":"MAX_IMAGE_OUTPUT_BYTES","description":"Byte budget for images returned by vault_read_file, in binary bytes before base64 encoding. Images exceeding the budget are downscaled/recompressed server-side to fit; raise for clients that accept larger tool responses.","format":"number","required":false,"secret":false},{"name":"MAX_PDF_RENDER_PAGES","description":"Maximum PDF pages to render as images when raw: true is set on vault_read_file. The per-page byte budget is MAX_IMAGE_OUTPUT_BYTES divided evenly across the rendered pages.","format":"number","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]}
2026-09-30Paketbezeichner (Rohangabe): ghcr.io/aliasunder/vault-cortex:0.54.3 → ghcr.io/aliasunder/vault-cortex:0.54.5
2026-09-30Paketkoordinate: oci:ghcr.io/aliasunder/vault-cortex:0.54.3 → oci:ghcr.io/aliasunder/vault-cortex:0.54.5
2026-09-27Deklarierte Version: 0.54.2 → 0.54.3

Diese Ansicht blättert vorwärts und nennt keine Gesamtzahl: Einzelne Zeilen entfallen erst bei der Ausgabe, wenn ihr Beleg fehlt. Eine gezählte Zahl wäre größer als die gezeigte.

tracevero · https://tracevero.de/mcp/io-github-aliasunder-vault-cortex/aenderungen