mcp-cli-tools
Allows AI agents to run code reviews, security audits, and workspace-aware analysis using OpenAI Codex CLI models (e.g., GPT-5.5, GPT-5.4).
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@mcp-cli-toolsReview my uncommitted changes"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
mcp-cli-tools
MCP server that gives AI coding agents (Claude Code, Cursor, Cline, etc.) safe access to multiple AI models through Antigravity CLI and OpenAI Codex CLI.
Think of it as a local Fugu-style orchestrator: your AI agent can consult Gemini, GPT, and other models mid-conversation, compare answers, ask for adversarial review, and run scoped code reviews without leaving the editor.
What it does
Tool | Backend | Capability |
| Antigravity CLI ( | Fugu-style single entry point: fast routing or ultra workflow with subtasks, |
| Antigravity CLI ( | Ask one external model for a second opinion |
| Antigravity CLI ( | Ask 2-4 models in parallel and synthesize agreement/disagreement |
| Antigravity CLI ( | Ask a model to attack a proposal, plan, or implementation idea |
| OpenAI Codex CLI | Run scoped code review on uncommitted changes, a base branch, or a commit |
| OpenAI Codex CLI | Run a security-focused Codex review prompt |
| Antigravity CLI ( | Compatibility wrapper with safe subcommands only |
| OpenAI Codex CLI | Compatibility wrapper for |
Your AI agent gains the ability to:
Get a second opinion from a different model family
Use a single Fugu-style tool that hides routing, decomposition, worker calls, and final synthesis
Compare multiple external answers in one tool call
Run code reviews via Codex without leaving the conversation
Do adversarial verification (one model checks another's work)
Route by expertise — Gemini for analysis, GPT for code review
Receive structured metadata for each call: command, cwd, exit code, timeout, duration, stdout, stderr
Related MCP server: agent-intern
Prerequisites
Antigravity CLI installed as
agyOpenAI Codex CLI installed as
codexNode.js 18+
Install
git clone https://github.com/Marcelo-Henry/mcp-cli-tools.git
cd mcp-cli-tools
npm install
npm run buildConfigure in Claude Code
Add to ~/.claude/settings.json under mcpServers:
{
"mcpServers": {
"cli-tools": {
"command": "node",
"args": ["/path/to/mcp-cli-tools/dist/index.js"]
}
}
}Usage
fugu_orchestrate
Use this as the main entry point when you want behavior closest to Fugu/Fugu-Ultra.
Fast mode selects one worker for lower latency:
fugu_orchestrate(
task: "Explain this TypeScript error and suggest the smallest fix",
mode: "fast",
effort: "standard",
cwd: "/path/to/repo"
)Ultra mode builds and executes a workflow with model_id, subtasks, access_list, critique, and synthesis:
fugu_orchestrate(
task: "Create a local task dashboard from scratch with persistence, tests, and a polished UI",
mode: "ultra",
effort: "max",
sharedMemoryKey: "taskpulse",
cwd: "/path/to/repo"
)Restrict the worker pool when privacy, cost, or compliance matters:
fugu_orchestrate(
task: "Analyze this architecture",
mode: "ultra",
excludeModels: ["gpt-oss-120b"]
)
fugu_orchestrateis a local deterministic orchestration layer inspired by the public Fugu/Fugu-Ultra workflow shape. It is not Sakana's learned orchestrator model.
consult_model
Ask one external model:
consult_model(prompt: "Analyze this architecture", model: "gemini-3.1-pro", cwd: "/path/to/repo")compare_models
Ask multiple models in parallel:
compare_models(
prompt: "Which migration strategy is safest for this repo?",
models: ["gemini-3.5-flash", "gemini-3.1-pro"]
)adversarial_check
Ask an external model to find flaws in a proposal:
adversarial_check(
proposal: "Move all orchestration policy into CLAUDE.md",
context: "MCP server for Claude Code + GPT/Gemini collaboration"
)review_workspace
Review uncommitted changes:
review_workspace(scope: "uncommitted", cwd: "/path/to/repo")Review against a branch:
review_workspace(scope: "base", base: "main", cwd: "/path/to/repo")Review a commit:
review_workspace(scope: "commit", commit: "abc123", cwd: "/path/to/repo")security_audit
Run a security-focused review:
security_audit(instructions: "Focus on command execution and path traversal", cwd: "/path/to/repo")Compatibility tools
run_antigravity and run_codex remain available for existing Claude rules, but they are intentionally narrower now.
run_antigravity
Query any model available in Antigravity CLI:
run_antigravity(promptContext: "Analyze this architecture", model: "gemini-3.1-pro")List available models:
run_antigravity(subcommand: "models")Run safe subcommands:
run_antigravity(subcommand: "help")
run_antigravity(subcommand: "changelog")Allowed subcommands are models, help, and changelog. Plugin/install/update operations are blocked by design.
run_codex
Review uncommitted changes:
run_codex(action: "review", flags: ["--uncommitted"], cwd: "/path/to/repo")Review with a specific prompt:
run_codex(action: "review", prompt: "Focus on security vulnerabilities")Review against a branch:
run_codex(action: "review", flags: ["--base", "main"], cwd: "/path/to/repo")Use a specific model:
run_codex(action: "review", prompt: "Audit this code", model: "gpt-5", cwd: "/path/to/repo")Notes:
prompteflagssão mutuamente exclusivos e agora são validados pelo MCP.Use
cwdquando o comando depender do contexto de um repositório específico.
actionagora aceita apenasreview.
flagsaceita apenas--uncommitted,--base,--commit,--titlee--strict-config.
Error handling
Os tools retornam:
comando executado
cwdusadoexit_codeduration_msstdoutestderrstructuredContentcom metadata da chamada
Se o processo sair com código diferente de zero, receber sinal ou estourar timeout, o resultado é marcado como erro no protocolo MCP.
Available Models
Via Antigravity
Model | Best for |
| Fast exploration, brainstorming (default) |
| Deep analysis, architecture, large context |
| Independent perspective, diverse opinion |
Via Codex
Codex models depend on your local Codex CLI configuration. Pass the model explicitly when needed:
review_workspace(scope: "uncommitted", model: "gpt-5", cwd: "/path/to/repo")
security_audit(model: "gpt-5", cwd: "/path/to/repo")Making your AI agent orchestrate automatically
Add orchestration rules to your global ~/.claude/CLAUDE.md to make Claude Code call these tools proactively. See ORCHESTRATION.md for a full guide with triggers and patterns.
License
MIT
Available Tools
8 toolsadversarial_checkA
Pede a um modelo externo para atacar uma proposta, plano ou solucao e apontar falhas concretas.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | No | Diretorio de execucao do comando. | |
| model | No | Modelo Antigravity que fara a critica. | gemini-3.1-pro |
| context | No | Contexto adicional que o revisor externo precisa saber. | |
| proposal | Yes | Solucao, plano ou decisao a ser atacada criticamente. | |
| timeoutMs | No | Timeout da chamada em milissegundos. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must carry the full transparency burden; it only reveals that an external model is asked to attack the proposal. Side effects, external-call costs/failures, return format, and permissions/requirements are left unspecified, which is a thin disclosure for a networked tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence, front-loaded with the exact action and target, with no filler or repeated schema content. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description clearly states the core function and gives a hint of the output ('apontar falhas concretas'), but with no output schema and no annotations it leaves out return structure, behavior/usage caveats, and failure-handling context. It is minimally complete but has clear gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already covers all five parameters with descriptions, so the baseline 3 applies. The tool description adds no additional parameter-level meaning beyond restating the proposal as 'proposta, plano ou solucao'.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Pede... atacar') and names the resource ('proposta, plano ou solucao') with a clear outcome ('apontar falhas concretas'). The external-model/adversarial angle distinguishes it from siblings like review_workspace or security_audit.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The intended use is implied by the purpose—adversarial critique of a proposal by an external model—but there is no explicit guidance about when to choose this over siblings like consult_model or review_workspace. No when-not-to-use or alternative recommendations are provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
compare_modelsA
Envia a mesma pergunta para 2-4 modelos Antigravity em paralelo para second opinion, consenso ou divergencia.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | No | Diretorio de execucao do comando. | |
| models | No | ||
| prompt | Yes | Pergunta completa a enviar para todos os modelos. | |
| timeoutMs | No | Timeout por modelo em milissegundos. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses the parallel execution and model count range, which is helpful, but omits details like potential costs, timeout behavior, or result aggregation, leaving some behavioral aspects unclear.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, focused sentence that front-loads the core action and purpose, with no filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has no output schema and no annotations, yet the description provides only the basic purpose. It does not clarify what the user should expect as output or how to interpret consensus/divergence, which is a notable gap for a comparison tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 75%, so most parameters are already described. The description's mention of '2-4 modelos' reinforces the models bound but adds no new semantic detail beyond the schema's minItems/maxItems.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action (sends the same question), the resource (2-4 Antigravity models in parallel), and the purpose (second opinion, consensus or divergence). This distinguishes it from siblings like run_antigravity or consult_model, which likely handle single-model interactions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use the tool by mentioning 'second opinion, consenso ou divergencia', signaling it is for scenarios needing multiple perspectives. However, it does not explicitly name alternative tools or provide exclusion criteria, so it falls short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
consult_modelA
Consulta um modelo externo via Antigravity em modo nao interativo e retorna texto bruto mais metadata estruturada.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | No | Diretorio de execucao do comando. | |
| model | No | Modelo Antigravity a consultar. | gemini-3.5-flash |
| prompt | Yes | Pergunta completa para o modelo externo. | |
| timeoutMs | No | Timeout da chamada em milissegundos. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It discloses non-interactive execution and the output format (raw text + structured metadata), which is valuable. However, it does not mention potential side effects like network calls, cost, or failure modes, so transparency is incomplete. Score 3.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, front-loaded sentence that efficiently conveys the action, mode, and output. There is no wasted wording, so it earns a 5 for conciseness and structure.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has moderate complexity (4 parameters, 1 required, no output schema, no annotations). The description gives a high-level overview but lacks specifics about the metadata structure and parameter interactions. It is adequate but not fully comprehensive, so score 3.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema provides descriptions for 100% of the parameters, so the baseline is 3. The description itself does not add parameter semantics beyond the schema, so it appropriately stays at the baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Consulta um modelo externo via Antigravity em modo nao interativo e retorna texto bruto mais metadata estruturada' clearly states the tool's purpose: it consults an external model via Antigravity in non-interactive mode and returns raw text plus structured metadata. This specific verb+resource+scope distinguishes it from siblings like run_antigravity (which may be interactive) and run_codex.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context: this tool is for non-interactive consultation of an external model via Antigravity. It implies usage but does not explicitly name alternatives or when-not-to-use compared to siblings, so it lacks exclusions. This earns a 4.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
fugu_orchestrateB
Executa uma orquestracao local estilo Fugu: modo fast seleciona um worker; modo ultra cria workflow com model_id, subtasks, access_list, memoria compartilhada e sintese.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | No | Diretorio de execucao dos workers. | |
| mode | No | fast seleciona um worker; ultra executa workflow multiagente. | ultra |
| task | Yes | Tarefa completa que deve ser roteada ou decomposta. | |
| effort | No | Profundidade do workflow em modo ultra. | high |
| timeoutMs | No | Timeout por worker em milissegundos. | |
| workerPool | No | Modelos Antigravity permitidos para workers. | |
| excludeModels | No | Modelos a excluir do pool por privacidade, custo ou compliance. | |
| sharedMemoryKey | No | Chave de memoria compartilhada em processo para workflows relacionados. | |
| includeRawOutputs | No | Inclui stdout bruto de cada worker no structuredContent. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the burden of explaining side effects and runtime behavior. It mentions local execution and shared memory, but omits details about disk writes, network calls, rate limits, or the final synthesis result. The description gives a high-level overview but lacks depth for a tool that likely manages multiple workers and shared state.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that packs the key mode distinction. It is front-loaded and contains no filler, making it concise and easy to read.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite the tool's complexity (9 parameters, two enums, no output schema), the description gives only a brief overview. It does not explain return value shape, error scenarios, or how the workflow synthesis is structured. The description leaves many operational details unaddressed, making it incomplete for such a feature-rich tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 100% parameter descriptions, so the baseline is 3. The description adds a little extra meaning by linking 'memoria compartilhada' to shared memory and 'sintese' to synthesis, but it also introduces terms like 'model_id', 'subtasks', and 'access_list' that are not present in the schema, which could confuse. Overall, the schema already does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool executes a Fugu-style local orchestration with two modes (fast and ultra). It differentiates the modes, and the verb 'Executa' plus the resource 'orquestracao local estilo Fugu' identifies the purpose. It does not explicitly contrast with sibling tools, but the orchestration role is distinct enough.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description conveys that fast mode selects a worker and ultra mode creates a multi-agent workflow, giving some guidance on when to use each mode. However, it provides no explicit exclusions or alternatives, and does not discuss prerequisites or integration context relative to sibling tools like run_antigravity or compare_models.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
review_workspaceA
Executa codex review em um escopo seguro: alteracoes uncommitted, diff contra base ou commit especifico.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | No | Repositorio alvo. | |
| base | No | Branch base quando scope=base. | |
| model | No | Modelo a usar no Codex. | |
| scope | No | Escopo seguro da revisao. | uncommitted |
| title | No | Titulo opcional para o resumo do review. | |
| commit | No | SHA quando scope=commit. | |
| timeoutMs | No | Timeout da chamada em milissegundos. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It states 'escopo seguro' (safe scope), implying a non-destructive review of workspace changes, but it does not disclose return value, side effects, prerequisites, or any resource implications. This is adequate but incomplete.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that is front-loaded with the core action and immediately explains the safe scope options. There is no filler or redundant content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 7 parameters, no output schema, and no annotations, the one-sentence description captures the essential purpose and scope modes but omits expected return details and operational prerequisites. This is minimally viable but leaves clear gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema provides descriptions for all 7 parameters, giving 100% coverage, so the baseline is 3. The description mentions the three scope modes, echoing the schema's 'scope' parameter, but does not add meaningful detail beyond what the schema already documents for each parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool executes 'codex review' with a specific safe scope (uncommitted, base diff, or commit). The verb 'Executa' and resource 'codex review' are specific, and it differentiates itself from sibling tools like run_codex by focusing on safe workspace review rather than general codex execution.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context on when to use the tool by listing the supported scopes (uncommitted, base, commit), which signals appropriate use cases. However, it does not explicitly name alternatives or exclusions relative to sibling tools, so it earns a 4 rather than a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
run_antigravityA
Compatibilidade: executa apenas consultas seguras da Antigravity CLI. Para prompts, prefira consult_model ou compare_models.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | No | Diretorio de execucao do comando. | |
| args | No | Argumentos posicionais seguros para subcomandos permitidos. | |
| model | No | Modelo a usar no modo prompt. | |
| timeoutMs | No | Timeout da chamada em milissegundos. | |
| subcommand | No | Subcomando seguro: models, help ou changelog. | |
| promptContext | No | Prompt a enviar ao agy (usa modo --print automaticamente). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the transparency burden. It discloses that only safe queries are executed, implying read-only behavior, but doesn't detail authentication, state changes, or error behaviors. The 'safe queries only' statement adds some context, but more would be expected.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise at two sentences and immediately states its scope. However, the opening 'Compatibilidade:' is an odd label rather than an action verb, which slightly reduces clarity, but overall it is compact and to the point.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given six parameters, no output schema, and no annotations, the description is too sparse. It does not explain return values, how cwd/args are handled, or what the subcommands (models, help, changelog) output. It covers the tool's basic intent but lacks sufficient behavioral and operational detail for a complex tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all parameters are documented within the schema. The tool description adds no additional parameter semantics beyond the schema, which is the baseline for high coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states it executes safe queries from the Antigravity CLI, which is a specific verb+resource. It distinguishes itself by explicitly mentioning that prompt-related tasks should use consult_model or compare_models, though it does not list the exact safe subcommands.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit guidance: use this for safe queries, and for prompts prefer consult_model or compare_models. This clearly defines when to use the tool versus alternatives, satisfying the dimension fully.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
run_codexA
Compatibilidade: executa apenas codex review com flags seguras. Para workflows novos, prefira review_workspace ou security_audit.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | No | Diretorio de execucao do comando. | |
| flags | No | Flags seguras de codex review: --uncommitted, --base, --commit, --title, --strict-config. | |
| model | No | Modelo a usar no Codex. | |
| action | No | Apenas review e permitido por seguranca. | review |
| prompt | No | Instrucoes customizadas. Nao combine com flags. | |
| timeoutMs | No | Timeout da chamada em milissegundos. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the behavioral transparency burden. It discloses the safety constraint (only safe codex review flags), which is useful, but does not mention side effects, permissions, return behavior, failure modes, or other behavioral traits beyond the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the core compatibility statement and an actionable alternative. There is no redundancy or filler; every word contributes to meaning.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the rich schema and clear scope limitation, the description is contextually complete for a compatibility wrapper. It explains the narrow use case and directs new workflows to alternatives, though it omits some operational details like result format or required environment, which are less critical here.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the schema fully documents all parameters. The description adds no parameter-specific semantics beyond what the schema already provides, such as the safe flags or the 'action' constraint.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: 'executa apenas codex review com flags seguras' (runs only codex review with safe flags). It identifies the specific verb, resource, and scope, and distinguishes it from siblings by restricting to codex review and pointing to alternatives.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says to prefer 'review_workspace ou security_audit' for new workflows, providing clear when-to-use guidance and named alternatives. This directly helps an agent choose the correct tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
security_auditC
Executa uma auditoria de seguranca via codex review com prompt especializado.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | No | Repositorio alvo. | |
| model | No | Modelo a usar no Codex. | |
| timeoutMs | No | Timeout da chamada em milissegundos. | |
| instructions | No | Foco adicional da auditoria. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description must disclose behavioral traits. It only mentions the use of codex review, but fails to state whether the audit modifies files, requires permissions, or what the output/return behavior is.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single concise, front-loaded sentence that avoids fluff. While it under-specifies context, it is structurally efficient and easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no annotations, no output schema, and only a minimal description, the tool lacks important contextual information. Users cannot tell what to expect in return, when to use it, or what side effects may occur.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
All four parameters have schema descriptions covering 100% of properties. The tool description does not add any additional parameter semantics beyond the schema, so the baseline of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific action: running a security audit via codex review with a specialized prompt. This distinguishes it from sibling tools like run_codex or review_workspace, though it does not elaborate on the audit's exact scope or outputs.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance on when to use this tool versus alternatives. No mention of appropriate contexts, prerequisites, or exclusions relative to sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
8 tool updates
v1.0.0- First observed
adversarial_check - First observed
compare_models - First observed
consult_model - First observed
fugu_orchestrate - First observed
review_workspace - First observed
run_antigravity - First observed
run_codex - First observed
security_audit
TDQS
Several tools overlap in functionality: run_antigravity and consult_model both query Antigravity, while run_codex overlaps with review_workspace and security_audit. The descriptions explicitly say to prefer other tools for new workflows, creating confusing boundaries.
Most tools follow verb_noun (run_antigravity, consult_model, compare_models, review_workspace), but security_audit, adversarial_check, and fugu_orchestrate break the pattern with noun_noun, adjective_noun, and noun_verb structures. All are lowercase snake_case, so it remains readable.
With 8 tools, the set is well-scoped for an AI CLI toolkit covering model queries, comparisons, reviews, audits, and orchestration. Each tool addresses a distinct workflow area, and the count is within the ideal range.
The toolkit covers core workflows: model consultation, comparison, adversarial checking, code review, security audit, and orchestration. Minor gaps exist, such as no tool for listing available models or directly executing code, but the primary surface is solid.
Maintenance
Related MCP Connectors
Hosted MCP server connecting claude.ai, ChatGPT and other AI apps to your own computer
An MCP server that gives your AI access to the source code and docs of all public github repos
Driflyte MCP server which lets AI assistants query topic-specific knowledge from web and GitHub.
Use AI models for chat, image, and video generation from Claude Code and other MCP hosts.
Related MCP Servers
- AlicenseAqualityAmaintenanceAn MCP server that lets Claude Code consult stronger AI models (o3, Gemini 2.5 Pro, DeepSeek Reasoner) when you need deeper analysis on complex problems.1102132MIT
- AlicenseAqualityAmaintenanceAn MCP server that bridges Claude Code with Antigravity CLI using a Swarm Agent architecture to optimize local development workflows and minimize LLM token costs. Includes a web UI for monitoring agent workflows.2122MIT
- AlicenseNot gradedqualityDmaintenanceA multi-agent MCP server that enables AI coding agents (Claude Code, Codex CLI, Gemini CLI) to communicate with each other.MIT

MCP Rubber Duckofficial
AlicenseAqualityBmaintenanceAn MCP server that bridges multiple LLMs (OpenAI-compatible APIs and CLI coding agents) for collaborative debugging and diverse AI perspectives.122945MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/Marcelo-Henry/mcp-cli-tools'
If you have feedback or need assistance with the MCP directory API, please join our Discord server