jupyter_ai_tools
jupyter_ai_tools is a Jupyter Server extension that exposes a collection of powerful, agent-friendly tools for interacting with notebooks and Git repositories. It is designed for use by AI personas (like those in Jupyter AI) to programmatically modify notebooks, manage code cells, and interact with version control systems.
✨ Features
This extension provides runtime-discoverable tools compatible with OpenAI-style function calling or MCP tool schemas. These tools can be invoked by agents to:
🧠 Notebook Tools (nb_toolkit)
read_notebook: Read entire notebook contents as markdownread_cell: Read a specific notebook cell by indexadd_cell: Add a new cell to a notebookinsert_cell: Insert a cell at a specific index in the notebookdelete_cell: Remove a cell from the notebookedit_cell: Modify a cell's contentget_cell_id_from_index: Get a cell ID from its one-based number shown in JupyterLabcreate_notebook: Create a new Jupyter notebook
🌀 Git Tools (git_toolkit)
git_clone: Clone a Git repository to a specified pathgit_status: Get the current working tree statusgit_log: View recent commit historygit_pull: Pull changes from remote repositorygit_push: Push local changes to remote branchgit_commit: Commit staged changes with a messagegit_add: Stage files for commit (individually or all)git_get_repo_root: Get the root directory of the Git repository
These tools are ideal for agents that assist users with code editing, version control, or dynamic notebook interaction.
🔧 Creating Collaborative Tools
For developers building AI tools that need collaborative awareness, jupyter_ai_tools provides a collaborative_tool decorator that automatically enables real-time collaboration features.
This decorator enables other users in the same Jupyter environment to see when your AI tool is actively working on shared notebooks, improving the collaborative experience.
from jupyter_ai_tools.utils import collaborative_tool
# Define user information
user_info = {
"name": "Alice",
"color": "var(--jp-collaborator-color1)",
"display_name": "Alice Smith"
}
# Apply collaborative awareness to your tool
@collaborative_tool(user=user_info)
async def my_notebook_tool(file_path: str, content: str):
"""Your tool implementation here"""
# Tool automatically sets user awareness for:
# - Global awareness system (all users can see Alice is active)
# - Notebook-specific awareness (for .ipynb files)
return f"Processed {file_path}"
Requirements
- Jupyter Server
Install
To install the extension, execute:
pip install jupyter_ai_tools
Without a JupyterLab web client
Without a real-time collaboration provider, the notebook tools run in the JupyterLab
frontend through jupyterlab-ai-commands.
The write tools save the notebook after an edit, so the file on disk matches the notebook
in JupyterLab. When the save fails, for example because the file also changed on disk,
the result of the tool has a save_error.
When no JupyterLab tab is open, nothing holds a live model of the notebook, so the
read and write tools (read_notebook, add_cell, insert_cell, delete_cell,
edit_cell, ...) read and edit the notebook file on disk instead. The result of a
write tool then says that the edit went to the file on disk.
run_cell and run_all_cells with a file_path run the cells in a kernel on the
server, and write the outputs to the notebook file on disk. They use the kernel of the
notebook session, and start a session if there is none. JupyterLab connects to the same
kernel when it opens the notebook.
With write_outputs=False, run_cell and run_all_cells run the cells in the kernel of
the notebook and return the outputs, without a change to the notebook. This works with
or without a web client, and with or without RTC. The kernel state changes, but
JupyterLab does not show the run.
A kernel that these tools start keeps running after the run, as a kernel that JupyterLab starts does.
The tools that need the user interface (select_cell, get_active_notebook,
get_active_cell_id, open_file, and run_cell or run_all_cells without a
file_path) return the error of jupyterlab-commands-toolkit, which asks to open
JupyterLab in a web browser.
Uninstall
To remove the extension, execute:
pip uninstall jupyter_ai_tools
Troubleshoot
If you are seeing the frontend extension, but it is not working, check that the server extension is enabled:
jupyter server extension list
Contributing
Development install
# Clone the repo to your local environment
# Change directory to the jupyter_ai_tools directory
# Install package in development mode - will automatically enable
# The server extension.
pip install -e .
You can watch the source directory and run your Jupyter Server-based application at the same time in different terminals to watch for changes in the extension's source and automatically rebuild the extension. For example, when running JupyterLab:
jupyter lab --autoreload
If your extension does not depend a particular frontend, you can run the server directly:
jupyter server --autoreload
Running Tests
Install dependencies:
pip install -e ".[test]"
Development uninstall
pip uninstall jupyter_ai_tools
Packaging the extension
See RELEASE
Metadata
Release files for jupyter-ai-tools 0.8.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| jupyter_ai_tools-0.8.0.tar.gz | 119.2 kB | With provenance | Details for jupyter_ai_tools-0.8.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| jupyter_ai_tools-0.8.0-py3-none-any.whl | Python 3 | none | any | Details for jupyter_ai_tools-0.8.0-py3-none-any.whl |
Total release size: 149.3 kB
Release files / jupyter_ai_tools-0.8.0.tar.gz
| Download URL | jupyter_ai_tools-0.8.0.tar.gz |
|---|---|
| Size | 119.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
e5d5e11b9b75cad68036ce4dfb850f12b2912be964db0a042024818ac6f111b2
|
|
BLAKE2b-256 checksum How to use checksums |
925fa70cd0621860a16360f2d8e86fbf97922cc5d44fab2cf1a4c6c25fb333a3
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.12.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 6, 2026.
Transparency logRelease files / jupyter_ai_tools-0.8.0-py3-none-any.whl
| Download URL | jupyter_ai_tools-0.8.0-py3-none-any.whl |
|---|---|
| Size | 30.1 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
44b62bef0fe5ce1d3377ba81c02b6aa22174234b030bd9f11628ef2f94332f72
|
|
BLAKE2b-256 checksum How to use checksums |
451591ee39bd963c9d8215235050e432b7a3b51e852050d87120429cd604d089
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.12.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 6, 2026.
Transparency logSecurity for jupyter-ai-tools 0.8.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
Both files in this release have been uploaded with provenance metadata.
Attestation for jupyter_ai_tools-0.8.0.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 6, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.