Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

~alter mcp-ollama

NPM · @TRUEALTER/MCP-OLLAMA · SCANNED SEP 20

Wraps local Ollama models so bulk generation runs on your own hardware, not a paid API.

+3 this week 88 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security98
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 31 of 95 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency100
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to true-alter/mcp-ollama). View diagnostics → Pass
  • Clear OSI-approved license (Apache-2.0).Pass
  • Actively maintained (last published 16 days ago).Pass
  • Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability72
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 1711 tokens (~171/item across 10 items; 10 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management57
  • Stability observed for 17 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 10 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 10 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

How do I install the ~alter mcp-ollama server?

~alter mcp-ollama runs locally as an npm package, launched with npx -y @truealter/mcp-ollama. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · @truealter/mcp-ollama

# add to Claude Code
claude mcp add true-alter-mcp-ollama -- npx -y @truealter/mcp-ollama
// .cursor/mcp.json
{
  "mcpServers": {
    "true-alter-mcp-ollama": {
      "command": "npx",
      "args": [
        "-y",
        "@truealter/mcp-ollama"
      ]
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "true-alter-mcp-ollama": {
      "command": "npx",
      "args": [
        "-y",
        "@truealter/mcp-ollama"
      ]
    }
  }
}
# add to Codex CLI
codex mcp add true-alter-mcp-ollama -- npx -y @truealter/mcp-ollama
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "true-alter-mcp-ollama": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@truealter/mcp-ollama"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add true-alter-mcp-ollama --command npx --arg -y --arg @truealter/mcp-ollama
# ~/.hermes/config.yaml
mcp_servers:
  true-alter-mcp-ollama:
    command: "npx"
    args: ["-y", "@truealter/mcp-ollama"]
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "true-alter-mcp-ollama": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "@truealter/mcp-ollama"
      ]
    }
  }
}
# add to Vellum
assistant mcp add true-alter-mcp-ollama -t stdio -c npx -a -y @truealter/mcp-ollama
// mcp.json
{
  "mcpServers": {
    "true-alter-mcp-ollama": {
      "command": "npx",
      "args": [
        "-y",
        "@truealter/mcp-ollama"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 19 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 50 to 53. That category is still filling its 30-day observation window: 15 days of observed history at the previous scan, 16 at this one. The score rises as the window fills, whether or not the server changes.

  • 17 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.

  • 14 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.

  • 12 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.

  • 10 Sept 26 +4
    • Stability: unverified → 0.23 functional
  • 3 Sept 26 80

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 20 Sept 2026 · Analysed npm/@truealter/mcp-ollama@0.2.1

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem npm
Reason Verified
Discovered via Registry attestation endpoint
Source repo true-alter/mcp-ollama
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/true-alter/mcp-ollama/.github/workflows/release.yml@refs/tags/v0.2.1
Rekor log index 2695828792
Predicate type https://slsa.dev/provenance/v1
Subject digest sha512:bcd06036f2d377157621c9d02c189a4d4d8c3b3c575b50b3b151b29bb61f9abc4c8d96c5c42a8ac32d3cb1a283777c82f88bb54dc72065f94059f21af

Background: How many MCP packages publish verified provenance →

Dependencies 95 packages
Packages resolved 95
Stale 31
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 10 exposed · ~1,711 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
local_analyze ~164

Extract structured information from text locally. Use this for classification, entity extraction, tagging, pattern recognition, or any task that transforms unstructured text into structured output. Good for: categorising issues, extracting names/dates/amounts, tagging content, parsing semi-structured data, sentiment analysis.

NameTypeReqDescription
contentstringyesThe text to analyse
modelstringOllama model to use (default: hermes3:8b)
output_formatstringDesired output structure (e.g., 'JSON array', 'markdown table', 'key: value pairs')
taskstringyesWhat to extract or analyse (e.g., 'extract all API endpoints mentioned', 'classify the sentiment', 'list all named entities')

No output schema declared.

No examples provided.

local_code ~274

Code-aware local generation. Claude reads source code with Read/Grep (free), then delegates the TEXT GENERATION to local - docstrings, test stubs, explanations, type annotations, inline comments, or review feedback. This is the primary tool for reducing API token usage on code tasks. Claude orchestrates (decides what code to read, what task to perform), but the actual generation happens locally at zero API cost. Accepts up to ~12K tokens of code context (16K model context minus overhead). For larger contexts, break into focused chunks (one function, one class).

NameTypeReqDescription
codestringyesSource code to work with - a function, class, module, or diff
contextstringAdditional context: file path, project conventions, what the function is used for, etc.
languagestringyesProgramming language (e.g., 'python', 'typescript')
modelstringOllama model to use (default: hermes3:8b)
taskstringyesWhat to generate: docstring (generate docstring), test (generate test stub), explain (explain the code), review (style/pattern review - NOT security), types (add type annotations), comments (add inli…

No output schema declared.

No examples provided.

local_diff ~165

Analyse a git diff locally. Use this for generating commit messages, PR descriptions, changelog entries, or understanding what changed in a diff. Claude runs `git diff` (free), passes the output here for text generation. Particularly valuable for large diffs that would consume many API tokens if processed by Opus/Sonnet directly.

NameTypeReqDescription
diffstringyesThe git diff output
modelstringOllama model to use (default: hermes3:8b)
stylestringStyle conventions (e.g., 'imperative mood, 72 char subject')
taskstringyesWhat to generate: commit-message, pr-description, changelog (categorised entries), summary (what changed), impact (what might break)

No output schema declared.

No examples provided.

local_draft ~156

Draft text locally - commit messages, PR descriptions, docstrings, changelog entries, documentation sections, or any formulaic text that follows a template or convention. Saves Opus tokens on boilerplate generation.

NameTypeReqDescription
contextstringyesThe context/input the draft should be based on (e.g., diff output, function code, change description)
modelstringOllama model to use (default: hermes3:8b)
stylestringStyle guide or conventions to follow (e.g., 'imperative mood, max 72 chars subject line')
taskstringyesWhat to draft (e.g., 'commit message for these changes', 'docstring for this function')

No output schema declared.

No examples provided.

local_generate ~193

General-purpose local LLM generation. Delegates work to a local Ollama model to save tokens. Use this when the task is bulk text processing that doesn't require Opus-level reasoning: summarising documents, explaining code for docs, generating boilerplate, reformatting content, translating, etc. The local model (default: hermes3:8b) runs on the user's hardware - zero API cost, ~40 tok/s on a decent GPU.

NameTypeReqDescription
max_tokensnumberMax tokens to generate (default: 2048)
modelstringOllama model to use (default: hermes3:8b)
promptstringyesThe prompt / task for the local model
systemstringSystem prompt to set context/role (optional)
temperaturenumberSampling temperature 0-2 (default: 0.3)

No output schema declared.

No examples provided.

local_models ~33

List all models available in the local Ollama instance. Use this to check what models are loaded and available for delegation.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

local_pull ~126

Pull/download a model into Ollama from the registry, or import a local GGUF file. Use this to make additional models available for delegation. For GGUF files, create an Ollama Modelfile first, then use 'ollama create'. This tool handles registry pulls (e.g., 'qwen2.5:14b', 'deepseek-r1:8b').

NameTypeReqDescription
modelstringyesModel to pull (e.g., 'qwen2.5:14b', 'mistral-nemo', 'deepseek-r1:8b')

No output schema declared.

No examples provided.

local_summarize ~175

Summarise long text locally. Use this instead of having Opus process large blocks of text when you only need a summary. Feed in file contents, docs, logs, or any bulk text and get a concise summary back. Particularly valuable for: large file contents, documentation, log output, meeting notes, long git diffs, error traces.

NameTypeReqDescription
contentstringyesThe text to summarise
focusstringWhat to focus on in the summary (e.g., 'security issues', 'API changes', 'key decisions')
formatstringOutput format (default: bullets)
max_tokensnumberMax tokens to generate (default: 1024)
modelstringOllama model to use (default: hermes3:8b)

No output schema declared.

No examples provided.

local_transform ~168

Perform mechanical code transformations locally. These are pattern-based transforms that don't require architectural understanding - the kind of work that burns API tokens for no good reason. Use this for: converting between formats, renaming patterns, migrating syntax, generating boilerplate from examples, etc.

NameTypeReqDescription
inputstringyesThe input code or text to transform
languagestringTarget programming language
modelstringOllama model to use (default: hermes3:8b)
transformstringyesWhat transformation to apply (e.g., 'convert class component to functional React component', 'convert these SQL queries to SQLAlchemy ORM', 'rename all instances of oldName to newName and update refe…

No output schema declared.

No examples provided.

local_vision ~257

Have a local vision model SEE a rendered image (screenshot of a UI) and report what is literally on screen - for zero API cost. local_analyze is TEXT-ONLY; this is the multimodal path. It REPORTS (is the main content populated or blank/error, what regions exist, any illegible/clipped text, what the eye lands on first). It does NOT rank severity, judge on-brand, or greenlight a change - a local vision model reads pixels well but ranks badly, so keep the judgment on the calling model. Modes: 'see' (full structural report), 'emptystate' (populated-vs-degraded data check), 'legibility' (readability faults). Feed near-full-resolution PNGs; downscaling below ~1280px wide makes the model hallucinate data presence.

NameTypeReqDescription
contextstringOne line: what this surface is meant to be
imagesarrayyesAbsolute path(s) to rendered PNG/JPG screenshot file(s) to look at
modestringReporting rubric (default: see)
modelstringVision model to use (default: qwen2.5vl:7b)

No output schema declared.

No examples provided.

Common questions

What is the ~alter mcp-ollama server?

~alter mcp-ollama is listed in the public MCP registry as io.github.true-alter/mcp-ollama. Wraps local Ollama models so bulk generation runs on your own hardware, not a paid API. This page covers its npm package (@truealter/mcp-ollama).

Is the ~alter mcp-ollama server safe to use?

~alter mcp-ollama scores 88 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the ~alter mcp-ollama server expose?

~alter mcp-ollama exposes 10 tools: local_generate, local_summarize, local_analyze, local_draft, local_code, and 5 more. Their descriptions and schemas cost roughly 1,711 tokens of context every time the server is loaded.

Is the ~alter mcp-ollama server still maintained?

~alter mcp-ollama is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the ~alter mcp-ollama server under?

~alter mcp-ollama declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.