Skip to main content

🦙 Ollama MCP Server (Python)

Supercharge your AI assistant with local LLM access — run powerful AI models on your own computer, no internet required.

Python Poetry MCP PyPI License: MIT

A Python MCP server that exposes your local Ollama models as tools for AI assistants like Windsurf, VS Code, Claude Desktop, and more.

Links
Docs Full documentation
PyPI mcp-ollama-python
VS Code UI Companion extension: mcp-ollama-extension · docs · Marketplace

Ecosystem

These two repositories work together:

┌─────────────────────────────────────┐
│  mcp-ollama-extension (VS Code)     │  ← start/stop, models UI, logs
│  https://github.com/pblagoje/       │
│       mcp-ollama-extension          │
└─────────────────┬───────────────────┘
                  │ stdio / MCP
┌─────────────────▼───────────────────┐
│  mcp-ollama-python (this repo)      │  ← MCP tools for Ollama
│  https://github.com/pblagoje/       │
│       mcp-ollama-python             │
└─────────────────┬───────────────────┘
                  │ HTTP :11434
┌─────────────────▼───────────────────┐
│  Ollama                             │
└─────────────────────────────────────┘
  • This package is the MCP server (required). Install with pip install mcp-ollama-python.
  • MCP Ollama Manager is the optional VS Code UI to manage that server. Prefer it if you use VS Code and want status bar controls, model sidebar, and log viewing without editing JSON by hand.

You can also wire this server into any MCP client (Windsurf, Cursor, Claude Desktop, etc.) without the extension — see Quick Start below.


What It Does

Connect your local LLMs to any MCP-compatible AI assistant. No cloud APIs needed.

Tool What it does
ollama_chat Chat with any local model (multi-turn, tool-calling)
ollama_generate Generate text completions
ollama_embed Create vector embeddings
ollama_list List installed models
ollama_show Inspect model details
ollama_pull Download new models
ollama_delete Remove models
ollama_ps List running models

Quick Start

Prerequisites: Python 3.10+, Ollama running locally

pip install mcp-ollama-python
  1. Install MCP Ollama Manager from the Marketplace
  2. Ensure mcp-ollama-python is installed (the extension can offer Install Now if missing)
  3. Command Palette → MCP Ollama: Configure Server → MCP Ollama: Start Server

Details: extension docs · repo

Option B — Any MCP client (Windsurf / VS Code MCP / Cursor / …)

Add to your MCP config (e.g. mcp_config.json):

{
  "mcpServers": {
    "ollama": {
      "command": "py",
      "args": ["-m", "mcp_ollama_python"],
      "disabled": false
    }
  }
}

Restart your editor — done. Your AI assistant can now use local Ollama models.

Try It

Type in your AI assistant's chat:

MCP Tool: ollama / ollama_chat — Use model llama3.1 and explain quantum computing

Key Features

  • 🔧 8 MCP tools — Full Ollama SDK access
  • 🔄 Hot-swap architecture — Drop a file in tools/, it's auto-discovered
  • 🎯 Type-safe — Pydantic models throughout
  • 🚀 Lightweight — Minimal dependencies, fast startup
  • 🔌 Universal — Works with any MCP client

Documentation

Guide Description
Installation Setup and prerequisites
Available Tools All tools with examples
Configuration Environment variables, model config
Windsurf Integration Complete Windsurf setup guide
VS Code Integration VS Code setup + companion extension
Architecture How it works, adding tools
Server Control Start/stop/manage the server
Interactive Manager Menu-driven management UI
Development Contributing, code quality
Security Threat model, host validation, opt-in execute

Security (v1.0.8)

  • ollama_execute is opt-in — set OLLAMA_EXECUTE_ENABLED=1; shell/bash removed
  • OLLAMA_HOST validation — loopback by default; set OLLAMA_ALLOW_REMOTE_HOST=1 for LAN/remote Ollama
  • No HTTP redirects — reduces SSRF risk toward internal endpoints

Details: docs/SECURITY.md

Changelog

1.0.8

  • Security hardening: host validation, execute tool gating, env allowlist, input limits
  • Fixed __version__ mismatch with package version
  • Added tests/test_security.py and docs/SECURITY.md
Project Role Links
mcp-ollama-extension VS Code UI for this server GitHub · Docs · Marketplace
Ollama Local LLM runtime ollama.ai

License

MIT


Made with ❤️ using Python, Poetry, and Ollama

Metadata

Release files for mcp-ollama-python 1.0.9

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for mcp-ollama-python 1.0.9
File Size Uploaded Provenance
mcp_ollama_python-1.0.9.tar.gz 39.9 kB With provenance Details

Built distribution (wheel)

Table of built distributions (wheels) for mcp-ollama-python 1.0.9
File Interpreter ABI Platform
mcp_ollama_python-1.0.9-py3-none-any.whl Python 3 none any Details

Total release size: 91.0 kB

Release files / mcp_ollama_python-1.0.9.tar.gz

Download URL mcp_ollama_python-1.0.9.tar.gz
Size 39.9 kB
Tags Source
SHA-256 checksum
How to use checksums
ea8c95064574f0cf043137949b27bfc6bd189f99710f1cdae1fa2671315e7429
BLAKE2b-256 checksum
How to use checksums
433cdf50142a632631fa9aa551393d91e7c803e451b2dd620ba89428da33f056
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Aug 22, 2026.

Transparency log

Release files / mcp_ollama_python-1.0.9-py3-none-any.whl

Download URL mcp_ollama_python-1.0.9-py3-none-any.whl
Size 51.1 kB
Tags Python 3
SHA-256 checksum
How to use checksums
8ad354e83955b1c9167e3e9bcf7d27f35a390233c01c3e344a448f2a6000bd3c
BLAKE2b-256 checksum
How to use checksums
63fc16793099b16f7d6db0eba8510128ead530d9a8a94decd50d97a189939ba6
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Aug 22, 2026.

Transparency log

Security for mcp-ollama-python 1.0.9

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for mcp_ollama_python-1.0.9.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Aug 22, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page