obsidian-mcp-server/changelog/3.1.x/3.1.10.md

MCP server for Obsidian vaults — read, write, search, and surgically edit notes, tags, and frontmatter via the Local REST API plugin. STDIO or Streamable HTTP.

---
summary: "Server-level `instructions` on `initialize` surfaces deployment-specific orientation (path policy, read-only mode, command-palette toggle) to spec-compliant clients. Framework bump to `@cyanheads/mcp-ts-core ^0.9.1`."
breaking: false
security: false
---

# 3.1.10 — 2026-05-16

## Added

- **`buildInstructions()` in `src/index.ts`** — composes the server-level `instructions` string sent on every `initialize`. Always emits a baseline orientation paragraph (tool prefix, path addressing, tag hierarchy with parent roll-up), then layers in deployment-specific sections when active: read-only mode, scoped `OBSIDIAN_READ_PATHS` / `OBSIDIAN_WRITE_PATHS`, and the opt-in command-palette pair. The conditional lines mirror the same scope strings used by `path_forbidden` error data so a client sees consistent guidance whether it reads `initialize.instructions` or an error response.

## Changed

- **`@cyanheads/mcp-ts-core` `^0.8.20 → ^0.9.1`** — adopts `createApp({ instructions })` (new in 0.9.0). Definition linting is now build-time only; `schema-format-portability` is on by default (error-level). See the framework's [0.9.x changelog](https://github.com/cyanheads/mcp-ts-core/tree/main/changelog/0.9.x) for the full set.
- **`undici` `^8.2.0 → ^8.3.0`**, **`@types/node` `^25.6.2 → ^25.8.0`** — routine refresh.
- **`scripts/devcheck.ts`** — `bun outdated` markdown-row parser fixed. Splits on `|` start at index `[1]` (leading empty cell), and the trailing `(dev|peer|prod|optional)` workspace-type marker is stripped before the allowlist lookup so bare package names match.
- **Changelog tooling** — summary soft cap raised 250 → 350 chars across `changelog/template.md`, `scripts/build-changelog.ts` (`SUMMARY_MAX_LENGTH`), and the CLAUDE.md authoring section. CLAUDE.md also picks up the `security: false` frontmatter field and the `🛡️ Security` badge note.
- **Synced 8 skills** from `node_modules/@cyanheads/mcp-ts-core/skills/`: `add-tool` 2.8→2.9, `api-errors` 1.5→1.6, `api-linter` 1.2→1.3, `api-workers` 1.3→1.4, `design-mcp-server` 2.10→2.11, `field-test` 2.3→2.4, `polish-docs-meta` 1.7→1.8, `tool-defs-analysis` 1.1→1.2. Mirrored into the agent directory.
- **README** — new Features bullet for server-level `instructions`. `OTEL_ENABLED` env-var row now links to the framework's [telemetry docs](https://github.com/cyanheads/mcp-ts-core/tree/main/docs/telemetry).