Permissions

The app needs no special permission (no Accessibility, no Full Disk Access).

Folder access. It runs git inside each vault. If a vault lives in a protected location (Documents, Desktop, iCloud Drive, a removable volume), macOS asks once whether ObsidianVaultGitWatcher may access it. Allow it, or the vault shows an error.
Pushing uses your normal git setup (SSH keys, the macOS keychain credential helper, a token in your git config). The app never sees or stores credentials. If git push works in Terminal for that folder, it works in the app.
Notifications. The banners ("Committed and pushed", banner-style reminders) are posted through AppleScript; macOS may list them under Script Editor in Notification settings.
Launch at login installs ~/Library/LaunchAgents/com.roypadina.obsidian-vault-git-watcher.plist. macOS shows it in System Settings → General → Login Items & Extensions as a background item.

Navigation Menu