ollama_pull_model · Ollama-Omega MCP: Risk & Policy

WHAT IT DOES

What ollama_pull_model does on Ollama-Omega

AI agents use ollama_pull_model to create or update resources in Ollama-Omega — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Ollama-Omega environment.

WHY IT NEEDS A POLICY

Why ollama_pull_model needs a policy

This tool writes data to the local machine by downloading a model. It creates new files on disk but does not execute code, delete data, or involve financial transactions. Misuse could involve pulling large or malicious models, consuming significant disk space and bandwidth, hence medium severity.

From the tool's definition Download a model from the Ollama library to the local machine

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

ollama_pull_model Rate-limited

ollama_pull_model stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "ollama_pull_model": {
      "limits": [
        {
          "counter": "ollama_pull_model_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Ollama-Omega, so you can run agents against it safely.

FAQ

Questions about ollama_pull_model

What does the ollama_pull_model tool do? +

Download a model from the Ollama library to the local machine. It is categorised as a Write tool in the Ollama-Omega MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on ollama_pull_model? +

Register the Ollama-Omega MCP server in PolicyLayer and add a rule for ollama_pull_model: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Ollama-Omega. Nothing to install.

What risk level is ollama_pull_model? +

ollama_pull_model is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit ollama_pull_model? +

Yes. Add a rate_limit block to the ollama_pull_model rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block ollama_pull_model completely? +

Set action: deny in the PolicyLayer policy for ollama_pull_model. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides ollama_pull_model? +

ollama_pull_model is provided by the Ollama-Omega MCP server (vrtxomega/ollama-omega). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.