# Llm Tools Mcp

> Connect to MCP servers right from your shell. Plugin for simonw/llm.

- **Type:** MCP server
- **Install:** `agentstack add mcp-virtuslab-llm-tools-mcp`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [VirtusLab](https://agentstack.voostack.com/s/virtuslab)
- **Installs:** 0
- **Category:** [AI & ML](https://agentstack.voostack.com/c/ai-and-ml)
- **Latest version:** 0.1.0
- **License:** Apache-2.0
- **Upstream author:** [VirtusLab](https://github.com/VirtusLab)
- **Source:** https://github.com/VirtusLab/llm-tools-mcp
- **Website:** https://pypi.org/project/llm-tools-mcp/

## Install

```sh
agentstack add mcp-virtuslab-llm-tools-mcp
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# `llm-tools-mcp`

**Connect to MCP servers right from your shell. Plugin for [llm](https://github.com/simonw/llm) (by [@simonw](https://github.com/simonw)).**

[](https://pypi.org/project/llm-tools-mcp/)
[](https://github.com/VirtusLab/llm-tools-mcp/releases)
[](https://github.com/VirtusLab/llm-tools-mcp/actions/workflows/test.yml)
[](https://github.com/VirtusLab/llm-tools-mcp/blob/main/LICENSE)

> [!Note]
> Current focus: [Authorization #4](https://github.com/VirtusLab/llm-tools-mcp/issues/4)

## Installation

Install this plugin in the same environment as [LLM](https://llm.datasette.io/):

```bash
llm install llm-tools-mcp
```
## Usage

> [!WARNING]
> It's recommended to use the `--ta` flag and approve each tool execution.

1. Create `mcp.json` file in `~/.llm-tools-mcp`.

   Example file:

   ```json
   {
     "mcpServers": {
       "filesystem": {
         "command": "npx",
         "args": [
           "-y",
           "@modelcontextprotocol/server-filesystem",
           "~/demo"
         ]
       }
     }
   }
   ```
    
2. List available tools.
   > [!WARNING]
   > `llm tools` is not implemented for dynamic toolboxes ([see this](https://github.com/simonw/llm/issues/1111#issuecomment-2992280193)), 
   > so tools loaded as part of MCP won't be visible. 

   ```sh
   llm tools list
   ```

3. Run `llm` with tools.

   ```sh
   llm --ta -T MCP "what files are in the demo directory? show me contents of one of the files (any)"
   ```

### Other examples

**Dynamically change your MCP config:**

```sh
llm --ta -T 'MCP("/path/to/custom/mcp.json")' "your prompt here"
```

## Development

### Now (to be verified)

- Sync dependencies: `uv sync --all-extras`
- Run linters / type checker: `./check.sh`
- Run tests: `./test.sh`
- Run end to end tests: `./e2e/e2e-docker.sh`

## To Do

- [x] Release alpha version
- [x] support all transports
  - [x] streamable http
  - [x] sse
  - [x] stdio
- [ ] Build a solid test suite
  - [x] test config file validation
  - [x] test sse with dummy server
  - [x] test stdio with dummy server
  - [x] test http streamable with dummy server ([see #1](https://github.com/Virtuslab/llm-tools-mcp/issues/1))
  - [x] manual test for sse with real server
  - [x] manual test for stdio with real server
  - [x] manual test for http streamable with real server
- [x] Redirect `stdout`/`stderr` from the MCP SDK to a file or designated location
- [ ] Reuse stdio connections
- [x] **Support non-stdio MCP servers**
- [ ] Handle tool name conflicts (prefix with mcp server name?)
- [ ] Gather feedback on the `~/.llm-tools-mcp` directory naming
- [x] Improve failure handling:
  - [x] When connecting to an MCP server fails
  - [x] When `mcp.json` is malformed
- [ ] Improve this README:
  - [ ] Add more detail in the [Development](#development) section (mention `uv`?)

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [VirtusLab](https://github.com/VirtusLab)
- **Source:** [VirtusLab/llm-tools-mcp](https://github.com/VirtusLab/llm-tools-mcp)
- **License:** Apache-2.0
- **Homepage:** https://pypi.org/project/llm-tools-mcp/

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-virtuslab-llm-tools-mcp
- Seller: https://agentstack.voostack.com/s/virtuslab
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.