colab-mcp
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@colab-mcplist the files in my Colab environment"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Colab MCP (Enhanced Fork)
An MCP server for controlling Google Colab from any AI coding agent. This fork fixes the bugs in the official repo that block real day-to-day use and restores features Google removed upstream.
Why This Fork?
Three concrete dolores that the official googlecolab/colab-mcp doesn't solve — and that this fork does:
Invisible tools (#54, #67, #69) — only
open_colab_browser_connectionappears in most MCP clients (Claude Code, Codex, Kiro IDE). The notebook tools rely onnotifications/tools/list_changed, which these clients ignore. Withoutget_cellsin particular, the bridge is effectively write-only: an agent can add cells but can't read state back."Disconnected from the local Colab MCP server" (#84) — orphaned servers from prior Claude Code sessions hold ports that your browser tab still points at. Reconnecting from the tab silently fails.
No programmatic GPU control — Google removed the
--enable-runtimefeature entirely. You can't assign T4 / L4 / A100 without clicking in the browser.
This fork fixes all three. All 9 tools (1 connection + 7 notebook + 1 GPU control) appear immediately, stale servers are auto-detected and clean-uppable, and GPUs are assignable from a single tool call.
Demo coming soon:
docs/demo.gif(TODO — short asciinema ofchange_runtime→add_code_cell→run_code_cell).
Related MCP server: colab-mcp
What's Different
Feature | Official | This Fork |
Notebook tools visible at startup | No (needs browser + list_changed) | Yes (pre-registered, works with any client) |
| Removed | Working via OAuth |
OAuth token caching | N/A | Yes (authorize once, cached forever) |
Windows compatibility | Port 53919 blocked | Fixed (port 8085) |
ColabClient initialization | N/A | Fixed (Prod() env argument) |
Stale-server detection / cleanup | None — silent "Disconnected" |
|
Available Tools
Tool | Requires Browser | Requires OAuth | Description |
| Yes | Assign GPU: T4, L4, A100, or NONE | |
| Yes | Connect to a Colab notebook in your browser | |
| Yes | Add a code cell to the notebook | |
| Yes | Add a markdown cell | |
| Yes | Read current notebook state (cells, IDs, contents, outputs) | |
| Yes | Execute a code cell by | |
| Yes | Edit an existing cell by | |
| Yes | Delete a cell by | |
| Yes | Move a cell to a new position by |
Note:
execute_cellwas renamed torun_code_cellin 2026-06-16 to match the browser-side handler name. Pass acellId(fromadd_code_cellorget_cells) — the oldcellIndexfallback was removed.
Quick Start (Without OAuth)
If you just want the notebook tools (no change_runtime):
1. Install uv
# Windows (PowerShell)
powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"
# Mac/Linux
curl -LsSf https://astral.sh/uv/install.sh | shImportant: Do NOT use pip install uv — that version lacks required features.
2. Clone this repo
git clone https://github.com/SebastianGilPinzon/colab-mcp.git3. Configure your MCP client
Add to your .mcp.json (Claude Code, Cursor, etc.):
{
"mcpServers": {
"colab-proxy-mcp": {
"command": "uv",
"args": ["run", "--directory", "/path/to/colab-mcp", "colab-mcp"],
"timeout": 30000
}
}
}4. Use it
Restart your editor / reload window
All 8 tools should appear immediately (
open_colab_browser_connection+ 7 notebook tools)Call
open_colab_browser_connection— a Colab notebook opens in your browserUse
add_code_cell,run_code_cell,get_cells, etc. to control the notebook
Full Setup (With OAuth + GPU Control)
This enables the change_runtime tool, which lets your agent assign GPUs without you touching the browser.
1. Create OAuth Credentials
You need a Google Cloud project with OAuth configured. This is a one-time setup (~5 minutes):
Create a GCP project (or use an existing one):
gcloud projects create colab-mcp-oauth --name="Colab MCP OAuth"Configure OAuth consent screen:
Go to OAuth consent screen
Select "External" > Create
App name:
Colab MCP, add your email as support + developer contactSave through all steps
Add yourself as test user:
On the consent screen page > "Test users" > Add your Google email
Create OAuth client ID:
Go to Credentials
Create Credentials > OAuth client ID > Desktop app
Download the JSON file
Save it somewhere safe (e.g.,
~/.config/colab-oauth.json)
Note: OAuth Client IDs can only be created via the Cloud Console web UI. There is no CLI or API for this.
2. Configure MCP with OAuth
{
"mcpServers": {
"colab-proxy-mcp": {
"command": "uv",
"args": [
"run", "--directory", "/path/to/colab-mcp",
"colab-mcp",
"--client-oauth-config", "/path/to/colab-oauth.json"
],
"timeout": 30000
}
}
}3. Authorize (first time only)
The first time the server starts, it opens your browser for Google OAuth consent. Sign in, click Allow, done. The token is cached at ~/.colab-mcp-auth-token.json and auto-refreshes — you won't be asked again.
4. Use it
Agent: change_runtime(accelerator="T4")
> Runtime changed to T4. Endpoint: gpu-t4-s-xxx
Agent: open_colab_browser_connection()
> Connected. Available notebook tools: add_code_cell, add_text_cell, get_cells, run_code_cell, update_cell, delete_cell, move_cell
Agent: add_code_cell(code="!nvidia-smi")
> {"cellId": "abc123", ...}
Agent: run_code_cell(cellId="abc123")
> Tesla T4, 15GB memory...
Agent: get_cells()
> [{"cellId": "abc123", "code": "!nvidia-smi", "outputs": [...]}]CLI Reference
Once installed (via uv run or uvx git+https://github.com/SebastianGilPinzon/colab-mcp), the colab-mcp command supports these flags:
Flag | Description |
(none) | Start the MCP server (default — reads/writes JSON-RPC on stdin/stdout) |
| Write logs to |
| Enable the runtime proxy that exposes browser-based notebook tools. On by default |
| Path to OAuth client-secrets JSON. Enables the |
| Print every currently-running |
| Terminate every running |
The server maintains a tiny registry at %LOCALAPPDATA%\colab-mcp\registry.json (Windows) or ~/.colab-mcp/registry.json (macOS/Linux). Each running instance writes a {pid, port, host, started_at} entry on startup and removes it on clean shutdown. Stale entries from crashed processes are pruned automatically the next time colab-mcp starts.
Troubleshooting
Tools don't appear after setup
Make sure you're using this fork, not the official repo
Only define
colab-proxy-mcpin ONE.mcp.jsonfile (not both global and project — dual definitions spawn two server instances and one dies silently)Restart your editor after changing
.mcp.json
change_runtime returns "Runtime API not initialized"
Check that
--client-oauth-configis in your.mcp.jsonargsCheck that the OAuth JSON file exists at the specified path
Look at the server logs for the specific error:
# Find the latest log ls -t $TMPDIR/colab-mcp-logs-*/colab-mcp.*.log | head -1 | xargs catA healthy log shows:
INFO:Colab API client readyIf you see
WARNING:Failed to initialize Colab API client, check the error message
Windows: Port blocked error (WinError 10013)
Already fixed in this fork (changed to port 8085). If you still hit it, edit src/colab_mcp/auth.py and change OAUTH_SERVER_PORT to any open port.
OAuth says "Access denied"
Add your Google email as a test user in Cloud Console > OAuth consent screen > Test users.
Browser opens but connection times out
Make sure you have a Colab notebook open in the browser tab that opened. Click "Connect" if prompted.
Chrome reused an old Colab tab pointing at a dead port
Chrome dedupes tabs by URL canonical (ignoring the #fragment), so when an old Colab tab is still open with a fragment pointing at a previous server's port, calling open_colab_browser_connection again may silently focus the old tab instead of opening a fresh one. The old tab shows "Disconnected from the local Colab MCP server" and the new server times out.
This fork mitigates that by appending the current port as a query param (?p=<port>) to the Colab URL, so each server instance produces a unique URL that Chrome can't dedupe. If you still hit it after upgrading:
Close every
colab.research.google.comtab in your browser.Retry
open_colab_browser_connection— it will open a fresh tab pointed at the live server.
Chrome silently blocks every connection attempt after one previous "Block"
If Chrome shows "Disconnected from the local Colab MCP server" on every attempt — including immediately after the page loads, with no permission prompt — and the server logs only stream ends after 0 bytes (TCP opens then closes without any HTTP request), the most likely cause is that you previously clicked "Block" on the Local Network Access prompt for colab.research.google.com. Chrome remembers that choice per site and never asks again — every WebSocket attempt is silently cancelled before the handshake. Edge / Firefox / other Chromium profiles are unaffected.
Fix (Chrome):
Open
chrome://settings/content/siteDetails?site=https%3A%2F%2Fcolab.research.google.comFind "Access other devices on the network" / "Acceder a otros dispositivos en la red" / Insecure content
Change from Block to Ask
Reload the Colab tab and accept the prompt when it appears.
Quickest reset (clears all Colab site permissions):
Open
https://colab.research.google.comClick the lock icon next to the URL
Click "Reset permissions" / "Restablecer permisos"
Reload and try again.
This was reproduced and root-caused with a manual E2E test (scripts/manual_browser_test.py): Edge connected on first attempt, Chrome timed out indefinitely until the per-site permission was reset.
Chrome asks for "Permission to access other services and apps on this device" (or Colab says "Disconnected")
When the Colab tab loads, Chrome shows a permission prompt:
colab.research.google.com wants — Permission to access other services and apps on this device
Click Allow. If you block it, the WebSocket connection from the Colab tab to your local colab-mcp server is blocked, the tab shows "Disconnected from the local Colab MCP server", and open_colab_browser_connection will time out.
This prompt is Chrome's Local Network Access policy: a public site (https://colab.research.google.com) is asking to talk to a resource on your local network (ws://localhost:<port> where colab-mcp is listening). Chrome blocks this by default and asks the user. The "other service" in the prompt is your own colab-mcp server running on your machine — not external access. The connection is scoped to a one-time token in the URL fragment (#mcpProxyToken=...), so even on the same machine other processes can't piggy-back on it.
Chrome remembers the choice per-site, so you only need to allow it once for colab.research.google.com.
"Disconnected from the local Colab MCP server" — IPv4/IPv6 dual-stack bind (root cause)
If you saw this message on the official googlecolab/colab-mcp and assumed it was an orphaned-server issue, the actual root cause is different — and is fixed in this fork.
With host="localhost" + port=0, the websockets library binds two sockets on different ephemeral ports (one for IPv6 ::1 and one for IPv4 127.0.0.1), then reports only one of them as the "server port". The Colab tab opens ws://localhost:<reported-port>, Chrome resolves localhost to either address family, and connects to a port with no listener in 50% of cases. The TCP connection drops with stream ends after 0 bytes server-side, the Colab tab shows "Disconnected from the local Colab MCP server" instantly, and the user waits 60s for a generic timeout.
This fork forces IPv4-only (host="127.0.0.1") so there is exactly one socket on exactly one port, and asserts this invariant at startup (raising RuntimeError if a future change re-introduces the dual-bind). See websocket_server.py and the tests test_single_socket_single_port / test_default_host_is_ipv4.
Orphaned colab-mcp processes (separate issue)
If a Colab tab in your browser shows "Disconnected from the local Colab MCP server" and re-clicking Connect doesn't help, the cause is almost always one or more orphaned colab-mcp processes from previous Claude Code sessions. Each instance picks a random ephemeral port, but your Colab tab only remembers the port from the URL fragment used when it first opened — when that server dies (or you spawn a new Claude Code session with a new server on a different port), the tab keeps trying to reach a dead address.
This fork ships with built-in diagnostics. Run any of these from a regular shell (not from inside Claude Code, which is itself running an MCP instance):
# Show every colab-mcp server currently registered as running
uv run --directory /path/to/colab-mcp colab-mcp --list-running
# Terminate orphaned colab-mcp servers, then exit
uv run --directory /path/to/colab-mcp colab-mcp --kill-staleThe server writes a small registry file at %LOCALAPPDATA%\colab-mcp\registry.json (Windows) or ~/.colab-mcp/registry.json (macOS/Linux) listing pid + port for each running instance. On every startup it prunes dead entries automatically, and on clean shutdown it removes its own. If open_colab_browser_connection times out from inside Claude Code, the new error message also includes the ports + pids of any peer servers so you can identify which one your browser tab is actually pointed at.
After cleaning up, re-run open_colab_browser_connection — it will open a fresh Colab tab pointed at the current (only) server's port + token.
Fixes upstream issue #84.
Compatibility
Tested with:
Claude Code (VS Code extension + CLI)
Should work with any MCP client that supports the standard tool protocol (Cursor, Windsurf, Codex, etc.)
Supported platforms:
Windows 10/11
macOS
Linux
Changes from Upstream
This fork is based on googlecolab/colab-mcp with these changes:
f70c00dRegister notebook tools directly on the FastMCP server at startup (fixes invisible tools)cae498bAddchange_runtimetool with OAuth for programmatic GPU assignment440e3bcFixColabClientinitialization (missingProd()env arg) + change OAuth port to 8085 for Windowse66ee69Match real Colab API signatures (language param, cellId, run_code_cell)stale-server detection Process registry +
--list-running/--kill-staleflags + clearer timeout diagnostics — fixes upstream #84 "Disconnected from the local Colab MCP server"full 7-tool notebook surface — pre-register
get_cells,delete_cell,move_cell(previously missing) and renameexecute_cell→run_code_cellto match the browser-side handler. Closes upstream #69.
Google does not accept external contributions to the official repo, so these fixes live here.
Verified fixes (accepted in upstream discussions)
#67 → answered — invisible-tools fix (this fork's pre-registration approach was accepted by the upstream community as the working solution).
#69 — follow-up on
get_cellsand the remaining missing stubs — addressed in this fork on 2026-06-16.#84 — "Disconnected from the local Colab MCP server" — addressed via the stale-server registry +
--kill-staleCLI.
License
Apache 2.0 (same as upstream)
⭐ If this fork saved you time, a star helps others find it.
Available Tools
9 toolsadd_code_cellB
Add a new code cell to the Colab notebook. Requires an active browser connection via open_colab_browser_connection.
| Name | Required | Description | Default |
|---|---|---|---|
| code | No | ||
| language | No | python | |
| cellIndex | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses the browser connection requirement, but it omits key behavioral traits such as how cellIndex affects insertion position, whether the cell is executed, or any side effects on existing cells. This lack of detail could mislead an agent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two concise sentences: the first states the action and the second states a prerequisite. It is front-loaded, with no unnecessary words or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With three parameters, no schema descriptions, and no annotations, the description is too sparse. It explains the core action and prerequisite but does not elaborate on parameter roles, return values, or mutating behavior, making it incomplete for an agent to use confidently.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has 0% description coverage for its three parameters (code, language, cellIndex), and the description does not mention any of them. The agent receives no guidance on how to populate these parameters, leaving a significant gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description "Add a new code cell to the Colab notebook" uses a specific verb (Add) and resource (code cell in Colab notebook), clearly distinguishing it from siblings like add_text_cell, run_code_cell, and get_cells. It leaves no ambiguity about what the tool does.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states the prerequisite "Requires an active browser connection via open_colab_browser_connection," which is a clear usage condition. However, it does not mention alternatives or when not to use this tool, though the purpose is self-evident within the sibling context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
add_text_cellA
Add a new text/markdown cell to the Colab notebook. Requires an active browser connection via open_colab_browser_connection.
| Name | Required | Description | Default |
|---|---|---|---|
| content | No | ||
| cellIndex | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden of behavioral disclosure. It adds one useful behavioral trait (requires a browser connection), but does not disclose what happens if the connection is missing, the return value, or side effects beyond the obvious 'add' action.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is exceptionally brief and front-loaded: two sentences, both directly useful, with no filler or repetition of schema details.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with only two optional parameters and simple semantics, the description covers the core purpose and a key prerequisite. However, it omits details about cellIndex behavior (e.g., what -1 means) and potential error conditions, making it minimally complete but not fully self-sufficient.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has two parameters with 0% schema description coverage, so the description must compensate. However, it provides no information about 'content' or 'cellIndex', leaving the agent to infer their meaning from the parameter names alone. This is insufficient for ambiguity resolution.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function with a specific verb ('Add') and resource ('a new text/markdown cell'), and distinguishes it from the sibling tool add_code_cell by specifying 'text/markdown'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides a clear operational prerequisite (requires an active browser connection via open_colab_browser_connection), giving context for when the tool can be used. However, it does not explicitly mention alternatives or exclusions, such as comparing with add_code_cell.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
change_runtimeA
Change the Colab runtime to use a specific GPU accelerator. Valid values: NONE, T4, L4, A100. Requires OAuth setup (first time opens browser for consent).
| Name | Required | Description | Default |
|---|---|---|---|
| accelerator | No | T4 |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Without annotations, the description carries the transparency burden. It discloses a key behavioral trait: OAuth setup requiring browser consent on first use. It also states valid values for the accelerator parameter. While it doesn't mention potential side effects like runtime restarts, the disclosed traits are significant for a tool of this scope.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise, with two sentences that front-load the purpose and then provide essential details (valid values and OAuth requirement). Every sentence earns its place without redundancy or fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple single-parameter tool with an output schema, the description is complete. It covers what the tool does, the parameter's valid values, and the auth prerequisite. The existence of an output schema means return values need not be explained. No major gaps are present.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema provides only a string parameter with a default, lacking enum constraints. The description adds crucial semantic value by listing valid values (NONE, T4, L4, A100), directly compensating for the schema's low coverage. This makes the parameter meaning explicit and actionable.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: changing the Colab runtime to a specific GPU accelerator. The verb 'change' and resource 'Colab runtime' are specific, and listing valid values further clarifies the action. This distinguishes it from sibling tools which handle cell operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context for when to use the tool (changing GPU accelerator) and mentions a prerequisite (OAuth setup). However, it does not explicitly mention alternatives or exclusions, though the sibling tools are unrelated to runtime management, making the purpose self-explanatory.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
delete_cellB
Delete a cell from the Colab notebook by cellId. Requires an active browser connection via open_colab_browser_connection.
| Name | Required | Description | Default |
|---|---|---|---|
| cellId | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It mentions the connection requirement but does not disclose whether deletion is permanent, what happens if the cellId is invalid, or any side effects, which is a significant gap for a destructive operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the action, and contains no redundant words. Every sentence adds value: the first states the action, the second states a necessary condition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple one-parameter tool, the description covers the basic action and a prerequisite, but it lacks context about error handling, permanence, and what happens if the cell does not exist. The absence of behavioral detail leaves the description only minimally viable.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has one parameter, cellId, with no description. The description merely repeats 'by cellId' without adding meaning about format, constraints, or the default empty value. Since schema coverage is 0%, the description does not compensate at all.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action (delete), the target (a cell from the Colab notebook), and the identifier used (cellId). This unambiguously distinguishes it from sibling tools like add_code_cell, update_cell, or move_cell.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states a prerequisite: an active browser connection via open_colab_browser_connection. This gives clear context for when the tool can be used, though it does not mention exclusions or alternative tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_cellsA
Read the current notebook state: list of cells with their IDs, contents, and outputs. Essential for iterative work (write -> run -> read -> adjust). Requires an active browser connection via open_colab_browser_connection.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must convey behavioral traits. It clearly indicates a read-only operation ('Read the current notebook state') and lists what is returned. It also discloses the dependency on an active browser connection, which is important for the agent to know.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loading the core purpose and then adding a usage hint and prerequisite. Every sentence adds value, with no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (0 parameters, no annotations), the description covers the essential aspects: what it does, what it returns, when to use it, and a critical prerequisite. The output schema likely details the return structure, so the description adequately completes the picture.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has zero parameters, so the description has no parameter burden. It provides context that the tool returns a list of cells, which is the key information for this read operation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Read the current notebook state: list of cells with their IDs, contents, and outputs' with a specific verb and resource. This distinguishes it from sibling tools like add_code_cell, run_code_cell, which are mutation operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly says 'Essential for iterative work (write -> run -> read -> adjust)', indicating when this tool should be used. It also mentions the prerequisite of an active browser connection via open_colab_browser_connection, giving clear usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
move_cellA
Move a cell to a new position in the Colab notebook by cellId and target index. Requires an active browser connection via open_colab_browser_connection.
| Name | Required | Description | Default |
|---|---|---|---|
| cellId | No | ||
| cellIndex | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It discloses the prerequisite and the basic operation, but does not mention side effects on other cells, index bounds, or error behavior. It lacks detailed behavioral disclosure expected from a mutation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single efficient sentence that front-loads the purpose and follows with a necessary prerequisite. No wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple move operation with an output schema available, the description covers the key action and prerequisite. It omits edge-case behavior (e.g., invalid cellId) and index interpretation, but overall is reasonably complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description maps both parameters (cellId and target index) to their roles, compensating for the 0% schema coverage. However, it does not explain defaults or validate index semantics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action (Move a cell), the resource (Colab notebook), and the method (by cellId and target index), distinguishing it from sibling tools like add/delete/update/run.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description mentions a prerequisite (requires an active browser connection) but does not explicitly compare with alternatives or state when not to use it. Usage is implied rather than explicitly guided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
open_colab_browser_connectionA
Opens a connection to a Google Colab browser session and unlocks notebook editing tools. Returns whether the connection attempt succeeded.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It discloses the main action (opens connection) and the return value (whether success), but does not explain potential side effects, idempotency, authentication needs, or what 'unlocks' entails in terms of session persistence. This is a moderate level of transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the primary action, and contains no redundant or filler information. Every word adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple tool with no parameters and a clear purpose, the description covers the action and return value. The lack of explicit ordering relative to siblings is a minor gap, but 'unlocks notebook editing tools' provides adequate context for an agent to infer usage.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the baseline is 4. The description does not need to clarify parameter meanings, and the empty schema already fully covers the parameter list.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb 'opens' and names the resource 'connection to a Google Colab browser session', with an explicit effect 'unlocks notebook editing tools'. This clearly distinguishes it from sibling tools like add_code_cell or run_code_cell, which are editing operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'unlocks notebook editing tools' implies this should be called before using editing tools, providing clear contextual guidance. However, it does not explicitly state when not to use it or mention alternatives, so it falls short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
run_code_cellA
Execute a code cell in the Colab notebook by cellId (from add_code_cell or get_cells). Requires an active browser connection via open_colab_browser_connection.
| Name | Required | Description | Default |
|---|---|---|---|
| cellId | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It discloses a key behavioral dependency (active browser connection) and the source of cellId, but it does not describe execution behavior such as whether the cell runs synchronously, what happens on error, or whether output is returned. This is partially transparent but leaves room for ambiguity.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loads the main purpose, and wastes no words. The prerequisite is a separate concise sentence. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple one-parameter tool with an output schema, the description covers the essential context: what to pass, where the ID comes from, and the required connection. It lacks details on execution semantics, but given the output schema exists and the low complexity, it is reasonably complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It does add meaning by explaining that cellId is a code cell identifier obtained from add_code_cell or get_cells, which is useful. However, it does not clarify whether cellId is required or what happens with the default empty string, so it is not fully explicit.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Execute a code cell') and the resource ('in the Colab notebook by cellId'), which is specific and distinct from sibling tools like add_code_cell or update_cell. It also adds context that the cellId comes from add_code_cell or get_cells, removing ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides a clear prerequisite: 'Requires an active browser connection via open_colab_browser_connection.' It implies the tool is for running existing cells and not for creating/editing them, but it does not explicitly mention alternatives or exclusions. Still, the context is clear enough for an agent to decide when to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
update_cellB
Update the contents of an existing cell in the Colab notebook. Requires an active browser connection via open_colab_browser_connection.
| Name | Required | Description | Default |
|---|---|---|---|
| cellId | No | ||
| content | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full responsibility for behavioral disclosure. It mentions the browser connection requirement but does not explain that updating overwrites existing content, whether the operation is reversible, or what the response contains. This is a significant gap for a mutation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences long, front-loaded with the primary purpose, and provides only essential extra context (the browser connection requirement). No unnecessary words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity, the description is minimally adequate: it states the purpose and a key requirement. However, it omits details about parameter formats and expected behavior, leaving room for ambiguity. The presence of an output schema reduces the need to explain returns, but the description still lacks completeness for a smooth invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 0% description coverage, and the description does not explain the 'cellId' or 'content' parameters beyond the obvious. It fails to specify how to obtain a cellId or what content format is expected, leaving parameter semantics unclear.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: updating the contents of an existing cell. The verb 'update' and resource 'cell' are specific, and this distinguishes it from siblings like add_cell, delete_cell, and run_code_cell.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage for modifying existing cells and provides a prerequisite (active browser connection), but does not explicitly state when to use this tool over alternatives or when not to use it. That makes usage guidance implicit rather than explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
9 tool updates
v1.1.0- First observed
add_code_cell - First observed
add_text_cell - First observed
change_runtime - First observed
delete_cell - First observed
get_cells - First observed
move_cell - First observed
open_colab_browser_connection - First observed
run_code_cell - First observed
update_cell
TDQS
Scored across 9 tools
Each tool targets a distinct action: connection setup, adding code/text cells, reading cells, running code, updating, deleting, moving cells, and changing runtime. There is no overlap in purpose, and the descriptions clearly differentiate these operations.
All tool names follow a consistent verb_noun snake_case pattern (e.g., add_code_cell, get_cells, delete_cell). The naming is uniform and predictable, making it easy to infer each tool's function.
With 9 tools, the server is well-scoped for Colab notebook management. Each tool covers a necessary operation without redundancy, making the count appropriate for its purpose.
The tool set covers the full lifecycle of notebook editing: connecting, adding cells, reading state, executing, updating, deleting, moving, and changing runtime. There are no obvious missing operations for the stated purpose.
Maintenance
Related MCP Connectors
Connect AI agents to Replynodes over the Model Context Protocol.
Enable secure connectivity between Sentry issues and debugging data, and LLM clients, using a Model Context Protocol (MCP) server.
Create and improve live, shared interactive documents with your agent.
A comprehensive Model Context Protocol (MCP) server that enables AI assistants to interact with yo…
Related MCP Servers
- AlicenseBqualityDmaintenanceAn MCP server that bridges local AI agents to Google Colab notebooks, enabling execution of Python code and interaction with notebook states directly from the agent.1Apache 2.0

colab-mcpofficial
AlicenseAqualityDmaintenanceBridges a local agent to a Colab session in the browser, enabling seamless interaction with Colab from local clients.1943Apache 2.0- AlicenseDqualityBmaintenanceEnables agents to control Google Colab notebooks through a secure, headless WebSocket architecture, allowing cell creation, editing, execution, and inspection without browser automation.133Apache 2.0
- AlicenseNot gradedqualityDmaintenanceEnables AI agents to autonomously manage Google Colab GPU sessions, submit and monitor training jobs, and debug/fix issues via an encrypted tunnel without requiring a browser tab.MIT