Claude and ChatGPT read and write your Obsidian notes on your phone, on the web, and on every computer. One container, with sync, sign-in, and note tools built in.
ProductivityGo · HTMLGitHub @dakotahpOnlineOwner unconfirmed
Have you tried it? One tap is enough. No sign-in needed.
GitHub star growth between the latest completed 8-hour observations
DeepSeek Harness Remote can securely connect a phone or another computer to the computer where you run DeepSeek Harness, so you can continue your work anytime and anywhere, check progress anytime, and continue working.
AI translation
Self-hosted, sharable kanban for humans and agents. One 4.5 MB binary, 4.5 MB of RAM, 10 to 60 tokens per agent reply, starts in 2 ms, zero setup.
Ayakaleaf Pro is a free, open-source, self-hosted Overleaf alternative: Overleaf Community Edition with almost all Server Pro features — track changes, project history, admin panel, SSO, Git-bridge, Z
Independent open-source file toolkit inspired by Tangerine, with added web downloads, QR reading and editing workflows. / Tangerine’den ilham alan, yeni özelliklerle geliştirilen bağımsız açık kaynak
Translation pending
Cloud Obsidian Vault with native Sync, MCP tools, and sign-in. (Works locally, too)
Taken from the repository README
Loading the full README.
Read the full README ↗Cloud Obsidian Vault, ready for Claude and ChatGPT, in one container. Native sync, note tools, and sign-in are all built in, so there is nothing else to set up. (Works locally on your laptop, too.)
One container holds every part an assistant needs to work in your vault:
.trash, and a readiness check that waits for sync.You only need only:
Obsidian has no first-party way to give an agent your vault from a cloud server. Its CLI needs the desktop app to be running and has many idiosyncrasies.
An assistant needs three things at once to work well in a vault, and most other projects give two:
read_file and list_directory.Crystal Cove packs all three into one container. That means:
The same container works in two places, and agents see the same tools in both:
| On your computer | On a server | |
|---|---|---|
| Connects | Claude Code, Cursor, and other MCP clients on that computer | claude.ai, the Claude mobile app, ChatGPT, and coding agents anywhere |
| Address | http://127.0.0.1:8080/ | https://obsidian.example.com/ |
| Sign-in | A token you generate | The built-in sign-in page and your password |
| You need | Docker | Docker, a domain name, and HTTPS (a reverse proxy or tunnel) |
| Good for | Daily agent work where you don't need remote access, in place of a plugin or the Obsidian CLI | Your vault from a phone, and agents that run while your computer is off |
To use Crystal Cove, you copy the docker-compose file to where you will run it, sign into Obsidian Sync, and hook it up to your agents. Accounts with multi-factor authentication and end-to-end encrypted vaults both work.
1. Download the compose file into a new folder:
mkdir crystal-cove && cd crystal-cove
curl -O https://raw.githubusercontent.com/dakotahp/crystal-cove/master/docker-compose.yml
2. Log in to Obsidian Sync. The native Obsidian Sync command asks for your email, password, and MFA code if you have one, then prints a session token:
docker run --rm -it ghcr.io/dakotahp/crystal-cove:latest \
sh -c 'ob login && cat ~/.config/obsidian-headless/auth_token'
Run it on the machine where the container will run. Each login is a separate Obsidian Sync device, and it does not sign out your other devices. If the token stops working, do this step again.
3. Find your vault's name as Obsidian Sync spells it:
docker run --rm -e OBSIDIAN_AUTH_TOKEN=<token from step 2> \
ghcr.io/dakotahp/crystal-cove:latest ob sync-list-remote
The list also shows an ID for each vault. You need only the name.
4. Create a .env file next to docker-compose.yml. There are three secrets, and each comment says what it unlocks:
# Unlocks your Obsidian account: the token from step 2.
OBSIDIAN_AUTH_TOKEN=
# The vault name from step 3.
OBSIDIAN_VAULTS=Personal
# Unlocks an end-to-end encrypted vault. Not your account password.
#OBSIDIAN_VAULT_PASSWORD=
# Unlocks this server for agents that send a token, such as Claude Code.
# Make one with: openssl rand -hex 32
MCP_AUTH_TOKEN=
Is your vault end-to-end encrypted? If you chose an encryption password when you set up Obsidian Sync for it, yes. Set OBSIDIAN_VAULT_PASSWORD, or the container stops with "Password not provided".
Do your vaults have different encryption passwords? OBSIDIAN_VAULT_PASSWORD applies to every vault. To give a vault its own password, write it after the vault name with a colon:
OBSIDIAN_VAULTS=Personal:personal-password,Work:work-password
A vault without its own password uses OBSIDIAN_VAULT_PASSWORD. Because commas separate the vaults and the first colon ends the name, this form has limits: the password cannot contain a comma, the vault name cannot contain a colon, and spaces at the end of the password are removed. If your password breaks one of these rules, change it in Obsidian Sync.
The example file lists every option. Now follow the section for where you run it.
Use this method if you only want to use this on one computer, it is easy to install locally to avoid going through the Obsidian CLI and Desktop app, whether you have both on the computer or not.
1. Start it and wait for the first sync:
docker compose up -d
docker compose logs -f # wait for "Fully synced", then Ctrl-C
curl -s -o /dev/null -w '%{http_code}\n' http://127.0.0.1:8080/ready # 200
The first sync downloads the whole vault into a Docker volume, so a large vault takes a few minutes. If port 8080 is in use, set HOST_PORT in .env to a different port and use that port in these URLs.
2. Connect an agent. For Claude Code:
claude mcp add --scope user --transport http obsidian http://127.0.0.1:8080/ \
--header "Authorization: Bearer $MCP_AUTH_TOKEN"
--scope user makes the vault available in every folder. Do not use --scope project: it writes the token into a .mcp.json file that is meant to be committed. Then claude mcp list shows it as connected.
Other MCP clients take the same URL and Authorization header over "Streamable HTTP".
Stopping: docker compose stop keeps the synced copy for next time. docker compose down -v also deletes it, so the next start syncs from the beginning.
Use this method if you wish to use your vault from a phone, from claude.ai in a browser, or from agents that run while your computer is off. It makes your vault truly available form anywhere, securely. Sign-in is built in. You only need to create a password and a domain with TLS/SSL, and the apps do the rest.
1. Turn on sign-in. Add to .env:
# The address your apps will use. HTTPS, with no path.
MCP_PUBLIC_URL=https://obsidian.example.com
# The password you will login with when you connect your AI service. Minimum of 16 characters required.
MCP_OWNER_PASSWORD=
# The name Obsidian Sync version history shows for edits from the server.
OBSIDIAN_DEVICE_NAME=crystal-cove
2. Give it an HTTPS address. This is the only part the container does give you. It speaks plain HTTP on 127.0.0.1:8080, and tokens travel in a header, so put an HTTPS proxy in front of it. Caddy is easy and recommended, and handles the HTTPS the certificate for you. The only Caddy configuration you'll need is:
obsidian.example.com {
reverse_proxy localhost:8080
}
Traefik, nginx, a platform ingress, or a Cloudflare Tunnel also work. Point them at the port in HOST_PORT if you changed it. Do not set BIND_ADDRESS=0.0.0.0: that exposes the server without HTTPS.
3. Start it and wait for the first sync:
docker compose up -d
docker compose logs -f # wait for "Fully synced", then Ctrl-C
curl -s -o /dev/null -w '%{http_code}\n' https://obsidian.example.com/ready # 200
A 502 means the proxy cannot reach the container. Make sure it points at the same port as HOST_PORT.
4. Connect your assistant.
https://obsidian.example.com/. Leave the client ID and secret empty. A Crystal Cove sign-in page will open and enter your owner password from step 1, and you should return to Claude connected.claude mcp add command as on your computer, with your server's URL.Adjust tool permissions as you see fit. If you intend to use it hands-free, for example in a car, set may need to set all write tools to "Always allow".
Already run an identity provider such as Keycloak or Auth0? Crystal Cove can use it in place of the built-in sign-in. See docs/oauth.md.
Agents get tools that work with notes, not raw files:
read_note, read_notes, get_section, get_frontmatter, list_notes, recent_notes, read_daily_note, daily_note_pathgrep_notes (exact search of names and content, ranked), find_notes (by tags and frontmatter), list_tags, get_links, get_backlinks, unresolved_links, orphanssearch_notes (hybrid search: name, key words and meaning in one ranked list) and related_notes, with MCP_SEMANTIC_SEARCH=truecreate_note, append_note, append_daily_note, prepend_daily_note, edit_note, edit_section, update_frontmatter, move_note (also restores from the trash), move_folder, delete_noteNote deletes are soft by moving the file to the vault's .trash so it will be recoverable. Set MCP_READ_ONLY=true to give agents only the read and find tools. See docs/tools.md for every tool's details.
You can also give agents guidance about your vault, like an AGENTS.md file. Put it in a note called mcp-instructions.md at the vault root. See docs/vault-instructions.md. The advantage of this is to describe your vault if you have a particular organization structure or have certain concepts so the agent's context goes beyond folders with notes.
Started as a fork of Obsidian-Hosted-Mcp by Andrew Morgan.
Obsidian is a trademark of Dynalist Inc. This project is not affiliated with or endorsed by Obsidian; it simply drives the official headless sync client.