Loading...
pip install jupyterlab==4.4.1 jupyter-collaboration==4.0.2 jupyter-mcp-tools>=0.1.4 ipykernel{
"mcpServers": {
"jupyter": {
"command": "uvx",
"args": ["jupyter-mcp-server@latest"],
"env": {
"JUPYTER_URL": "http://localhost:8888",
"JUPYTER_TOKEN": "MY_TOKEN",
"ALLOW_IMG_OUTPUT": "true"
}
}
}
}list_filesLists files and directories within the Jupyter server's file system.
Read-only operation.
list_kernelsLists available and running kernel sessions on the Jupyter server.
Read-only operation.
use_notebookConnects to, creates, or switches between Jupyter notebooks.
Manages notebook access, but doesn't directly modify content.
list_notebooksLists all notebooks available on the Jupyter server and their status.
Read-only operation.
restart_notebookRestarts the kernel for a specific managed notebook.
Can interrupt running processes, but doesn't modify data.
read_notebookReads the source content of notebook cells.
Read-only operation.
read_cellReads the full content (metadata, source, outputs) of a single cell.
Read-only operation.
insert_cellInserts a new code or markdown cell at a specified position.
Adds content to the notebook, but requires explicit execution.
delete_cellDeletes a cell at a specified index.
Removes content from the notebook.
overwrite_cell_sourceOverwrites the source code of an existing cell.
Modifies existing code, potentially introducing malicious content.
execute_cellExecutes a cell with timeout, supporting multimodal output.
Executes arbitrary code within the Jupyter kernel.
insert_execute_code_cellInserts a new code cell and executes it in one step.
Executes arbitrary code immediately upon insertion.
execute_codeExecutes code directly in the kernel, supporting magic and shell commands.
Executes arbitrary code directly in the kernel, bypassing cell structure.
notebook_run-all-cellsExecutes all cells in the current notebook sequentially.
Executes all code in the notebook, potentially triggering unintended actions.
notebook_get-selected-cellGets information about the currently selected cell.
Read-only operation.
connect_to_jupyterConnects to a Jupyter server dynamically without restarting the MCP server.
Allows switching servers, potentially connecting to untrusted sources.
unuse_notebookDisconnects from a specific notebook and releases its resources.
Releases resources but doesn't modify the notebook.
The Jupyter MCP Server provides powerful tools for interacting with Jupyter notebooks, but its safety depends heavily on proper configuration and access control. It is relatively safe in read-only scenarios, but risky if write access is granted without careful consideration of the potential for malicious code execution.