Local REST API with MCP
Unlock your automation needs by interacting with your notes over a secure REST API.
The above warnings are based on limited information and might not always be accurate.
Data
| ID | obsidian-local-rest-api |
| Author | Adam Coddington |
| Minimum Obsidian Version | 1.4.0 |
| Official Release Date | 2022-02-05 |
| Last update | 2026-07-11 |
Last Refresh
Obsidian Stats last refreshed the data behind this page on Jul 13, 2026.
| Community plugin snapshot | Jul 13, 2026 |
| Repository clone | last successful checkout Jul 13, 2026 |
| Release acquisition | release metadata checked Jul 13, 2026; latest main.js acquired |
Quick Links
Changes
| Date | Changed Property | Old Value | New Value |
|---|---|---|---|
| 2022-02-05 | Plugin Added | ||
| 2026-05-12 | author | Adam Coddington | coddingtonbear |
| 2026-05-15 | name | Local REST API | Local REST API & MCP Server |
| 2026-05-16 | author | coddingtonbear | Adam Coddington |
| 2026-05-27 | Plugin Removed | ||
| 2026-05-27 | Plugin Re-Added | ||
| 2026-05-27 | name | Local REST API & MCP Server | Local REST API with MCP |
Repository Data
| License | MIT in package.json MIT in LICENSE file |
| Package Manager | npm |
| Uses Typescript | Yes |
| Installed Bundlers | esbuild |
| Installed Testing Frameworks | Jest |
| Has Test Files | Yes |
Latest Release main.js Size | 3.84 MB |
| Detected ES Version | ES2020 |
| Probably Minified | No |
| main.js API Findings | 12 disclosures |
| Uses BRAT beta releases | No |
| Dependencies | @modelcontextprotocol/sdk, @types/response-time, cors, express, glob-to-regexp, json-logic-js, markdown-patch, matcher, mime-types, minimatch, node-forge, obsidian-daily-notes-interface, obsidian-dataview, query-string, response-time, uuid |
| Dev Dependencies | @eslint/js, @types/cors, @types/express, @types/glob-to-regexp, @types/jest, @types/mime-types, @types/node, @types/node-forge, @types/supertest, @types/uuid, esbuild, eslint, eslint-plugin-obsidianmd, jest, obsidian, supertest, ts-jest, tslib, typescript, typescript-eslint, zod |
main.js API Findings
These conservative findings come from static analysis of the latest release main.js. The table includes warnings and high-confidence informational findings; lower-confidence informational findings are omitted to reduce false positives. Warnings indicate usage of potentially risky APIs, but such APIs can be used safely if handled with care.
| Disclosure | Detected From |
|---|---|
| Adapter File Access | Uses adapter-level vault filesystem APIs |
| Dynamic Code Or Remote Code | Evaluates dynamic code or injects scripts |
| Full Vault Access | Enumerates vault files |
| Global Handlers Or Timers | Registers events, DOM handlers, or intervals |
| Metadata Access | Reads Obsidian metadata cache |
| Network Access | Uses Node HTTP modules |
| Node Filesystem Access | Uses direct Node filesystem-related modules |
| Note Content Access | Reads vault files |
| Private Network Access | References localhost or private-network addresses |
| Process Or Shell Access | Uses Node process or subprocess APIs |
| Vault File Write | Renames, deletes, trashes, or copies vault files, Writes vault files |
| Worker Usage | Uses Worker APIs |
| Finding | Type | Confidence | Evidence |
|---|---|---|---|
| Evaluates dynamic code or injects scripts | Warning | High | Function (3), dynamic_code:function_constructor (1) |
| Uses direct Node filesystem-related modules | Warning | High | buffer (7), fs (9), path (12), stream (6) |
| Uses Node process or subprocess APIs | Warning | High | process.env (33) |
| References localhost or private-network addresses | Warning | Medium | 0.0.0.0 (2), 127.0.0.1 (9) |
| Renames, deletes, trashes, or copies vault files | Warning | High | app.fileManager.renameFile (1) |
| Uses persistent browser storage | Info | High | localStorage (4) |
| Uses Worker APIs | Info | High | Worker (2) |
| Registers events, DOM handlers, or intervals | Info | High | setTimeout (6) |
| Reads Obsidian metadata cache | Info | High | app.metadataCache.getFileCache (5), app.metadataCache (11), app.metadataCache.resolvedLinks (2) |
| References URLs or constructs URL objects | Info | High | http:// (18), https:// (32), URL (6) |
| Uses Node HTTP modules | Info | High | http (6), https (1) |
| Persists plugin settings or data | Info | High | this.loadData (1), this.saveData (1) |
| Registers plugin settings UI | Info | High | this.addSettingTab (1), Setting (21), obsidian.Setting (21) |
| Accesses Obsidian vault APIs | Info | High | app.vault (34) |
| Enumerates vault files | Info | High | app.vault.getFiles (2), app.vault.getMarkdownFiles (3) |
| Opens or creates files through workspace or file manager APIs | Info | High | app.workspace.openLinkText (1) |
| Reads vault files | Info | High | app.vault.cachedRead (2), app.vault.read (3) |
| References Obsidian URI links | Info | High | obsidian:// (3) |
| Uses adapter-level vault filesystem APIs | Info | High | app.vault.adapter (15) |
| Writes vault files | Info | High | app.vault.createFolder (3) |
| Accesses Obsidian workspace APIs | Info | High | app.workspace (7) |
| Accesses the active file or editor | Info | High | app.workspace.getActiveFile (5) |
The above data may not be accurate and contain errors. For more information refer to the page about data collection.
Lines of Code
The plugin has a total of 8510 lines of code. The following chart shows the lines of code split by programming language.
Downloads
The following chart shows the total number of downloads of the plugin over time. The second chart shows the delta of downloads per week, which is the number of new downloads per week. New version releases are marked with vertical lines.
Version History
| Version | Release Date | Note |
|---|---|---|
| 1.0.1 | 2022-01-27 | Released while not listed |
| 1.0.2 | 2022-01-28 | Released while not listed |
| 1.0.3 | 2022-01-28 | Released while not listed |
| 1.0.4 | 2022-01-28 | Released while not listed |
| 1.0.5 | 2022-01-30 | Released while not listed |
| 1.0.8 | 2022-01-31 | Released while not listed |
| 1.0.9 | 2022-01-31 | Released while not listed |
| 1.0.10 | 2022-02-06 | None |
| 1.0.11 | 2022-02-07 | None |
| 1.0.12 | 2022-02-07 | None |
| 1.1.0 | 2022-02-11 | None |
| 1.2.0 | 2022-02-24 | None |
| 1.2.1 | 2022-02-25 | None |
| 1.3.0 | 2022-02-26 | None |
| 1.3.1 | 2022-02-26 | None |
| 1.3.4 | 2022-04-26 | None |
| 1.3.5 | 2022-04-26 | None |
| 1.3.9 | 2022-05-29 | None |
| 1.4.0 | 2022-10-31 | None |
| 1.5.1 | 2022-11-06 | None |
| 1.5.2 | 2023-01-08 | None |
| 1.6.0 | 2023-06-16 | None |
| 1.6.1 | 2023-06-16 | None |
| 2.0.3 | 2023-12-24 | None |
| 2.0.4 | 2023-12-29 | None |
| 2.0.6 | 2024-01-30 | None |
| 2.1.0 | 2024-02-13 | None |
| 2.1.1 | 2024-02-17 | None |
| 2.2.0 | 2024-03-06 | None |
| 2.2.1 | 2024-03-06 | None |
| 2.2.2 | 2024-03-06 | None |
| 2.3.0 | 2024-03-08 | None |
| 2.4.1 | 2024-06-17 | None |
| 2.4.3 | 2024-06-19 | None |
| 2.5.4 | 2024-08-01 | None |
| 3.0.1 | 2024-11-17 | None |
| 3.0.2 | 2024-11-17 | None |
| 3.0.3 | 2024-11-19 | None |
| 3.0.4 | 2024-11-19 | None |
| 3.0.5 | 2025-03-09 | None |
| 3.0.6 | 2025-03-09 | None |
| 3.1.0 | 2025-03-17 | None |
| 3.2.0 | 2025-05-25 | None |
| 3.3.0 | 2026-01-08 | None |
| 3.4.0 | 2026-01-11 | None |
| 3.4.1 | 2026-01-11 | None |
| 3.4.2 | 2026-01-13 | None |
| 3.4.3 | 2026-02-07 | None |
| 3.4.4 | 2026-02-22 | None |
| 3.4.5 | 2026-03-07 | None |
| 3.4.6 | 2026-03-07 | None |
| 3.5.0 | 2026-03-19 | None |
| 3.6.0 | 2026-04-06 | None |
| 3.6.1 | 2026-04-09 | None |
| 3.6.2 | 2026-05-06 | None |
| 4.0.0 | 2026-05-15 | None |
| 4.0.1 | 2026-05-16 | None |
| 4.0.2 | 2026-05-17 | None |
| 4.0.3 | 2026-05-21 | None |
| 4.1.0 | 2026-05-22 | None |
| 4.1.1 | 2026-05-27 | None |
| 4.1.2 | 2026-05-29 | None |
| 4.1.3 | 2026-06-04 | None |
| 4.1.4 | 2026-07-10 | None |
| 4.1.5 | 2026-07-11 | None |
| 4.1.6 | 2026-07-11 | None |
| 4.1.7 | 2026-07-11 | None |
Blacklisted versions are versions that are known to cause major issues or contain security concerns and have thus been blacklisted by the Obsidian team. Obsidian will disable plugins on startup whose installed version is blacklisted. Released while not listed versions happened outside the period where the plugin was present in the community plugin list and are excluded from aggregate release statistics.