Vox MCP
Allows sending prompts to Google Gemini models (e.g., gemini-2.5-pro) via the Gemini API, with optional file and image context.
Allows sending prompts to local Ollama models by configuring a custom API endpoint.
Allows sending prompts to OpenAI models (e.g., GPT-5, o3, o4-mini) via the OpenAI API.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Vox MCPchat with gemini: what is dark matter?"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Vox MCP
Multi-model AI gateway for MCP clients.
Why
MCP clients like Claude Code, Claude Desktop, and Cursor are locked to their host model. Vox gives them access to every other model — Gemini, GPT, Grok, DeepSeek, Kimi, or your local Ollama — through a single chat tool.
The design is deliberately minimal: prompts go to providers unmodified, responses come back unmodified. No system prompt injection. No response formatting. No behavioral directives. The only value Vox adds is routing and conversation memory — everything else is pure passthrough.
Related MCP server: 1mcpserver
What it does
Send a prompt, optionally attach files or images, pick a model (or let the agent pick), and get back the model's raw response. Conversation threads persist in memory via continuation_id for multi-turn exchanges across any provider — start a thread with Gemini, continue it with GPT. Threads are shadow-persisted to disk as JSONL for durability and can be exported as Markdown.
3 tools:
Tool | Description |
| Send prompts to any configured AI model with optional file/image context |
| Show available models, aliases, and capabilities |
| Export conversation threads as JSON or Markdown |
8 providers:
Provider | Env Variable | Example Models |
Google Gemini |
| gemini-2.5-pro |
OpenAI |
| gpt-5.1, gpt-5, o3, o4-mini |
Anthropic |
| claude-opus-4-8, claude-sonnet-5, claude-haiku-4-5 |
xAI |
| grok-4.5, grok-4.3 |
DeepSeek |
| deepseek-v4-pro |
Moonshot (Kimi) |
| kimi-k2.6 |
OpenRouter |
| Any OpenRouter model |
Custom |
| Ollama, vLLM, LM Studio, etc. |
Quick start
git clone https://github.com/linxule/vox-mcp.git
cd vox-mcp
cp .env.example .env
# Edit .env — add at least one API key
uv sync
uv run python server.pyMCP client configuration
Vox runs as a stdio MCP server. Each client needs to know how to launch it.
Replace /path/to/vox-mcp with the absolute path to your cloned repo.
Claude Code (CLI)
claude mcp add vox-mcp \
-e GEMINI_API_KEY=your-key-here \
-- uv run --directory /path/to/vox-mcp python server.pyOr add to .mcp.json in your project root:
{
"mcpServers": {
"vox-mcp": {
"command": "uv",
"args": ["run", "--directory", "/path/to/vox-mcp", "python", "server.py"],
"env": {
"GEMINI_API_KEY": "your-key-here"
}
}
}
}Claude Desktop
Add to claude_desktop_config.json:
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"vox-mcp": {
"command": "uv",
"args": ["run", "--directory", "/path/to/vox-mcp", "python", "server.py"],
"env": {
"GEMINI_API_KEY": "your-key-here"
}
}
}
}Cursor
Add to .cursor/mcp.json (project) or ~/.cursor/mcp.json (global):
{
"mcpServers": {
"vox-mcp": {
"command": "uv",
"args": ["run", "--directory", "/path/to/vox-mcp", "python", "server.py"],
"env": {
"GEMINI_API_KEY": "your-key-here"
}
}
}
}Windsurf
Add to ~/.codeium/windsurf/mcp_config.json:
{
"mcpServers": {
"vox-mcp": {
"command": "uv",
"args": ["run", "--directory", "/path/to/vox-mcp", "python", "server.py"],
"env": {
"GEMINI_API_KEY": "your-key-here"
}
}
}
}Any MCP client
The canonical stdio configuration:
{
"mcpServers": {
"vox-mcp": {
"command": "uv",
"args": ["run", "--directory", "/path/to/vox-mcp", "python", "server.py"],
"env": {
"GEMINI_API_KEY": "your-key-here"
}
}
}
}Tips:
Paths must be absolute
You only need one API key to start — add more providers later via
.envThe
.envfile in the vox-mcp directory is loaded automatically, so API keys can go there instead of in the client configUse
VOX_FORCE_ENV_OVERRIDE=truein.envif client-passed env vars conflict with your.envvalues
Configuration
Copy .env.example to .env and configure:
API keys — at least one provider key is required
DEFAULT_MODEL—auto(default, agent picks) or a specific model nameModel restrictions —
GOOGLE_ALLOWED_MODELS,OPENAI_ALLOWED_MODELS, etc.CONVERSATION_TIMEOUT_HOURS— thread TTL (default: 24h)MAX_CONVERSATION_TURNS— thread length limit (default: 100)
See .env.example for the full reference.
Development
uv sync
uv run python -c "import server" # smoke test
uv run pytest # run testsSee CONTRIBUTING.md for code style, project structure, and how to add providers.
License
Apache 2.0 — see LICENSE and NOTICE.
Derived from pal-mcp-server by Beehive Innovations.
Available Tools
3 toolschatARead-only
Multi-model AI gateway. Routes prompts to external AI models (Gemini, OpenAI, Anthropic, DeepSeek, Moonshot, xAI, OpenRouter, custom endpoints) with conversation memory. Supports file context embedding, images, and multi-turn threads via continuation_id.
| Name | Required | Description | Default |
|---|---|---|---|
| model | Yes | Currently in auto model selection mode. If no model is provided, you may use the `listmodels` tool to review options and select an appropriate match. The server validates model availability and returns errors for unknown models. Top models: gemini-2.5-pro (score 100, 1.0M ctx, thinking, code-gen); gemini-3.1-pro-preview (score 100, 1.0M ctx, thinking, code-gen); gemini-2.5-flash (score 81, 1.0M ctx, thinking); gemini-2.0-flash (score 66, 1.0M ctx); gemini-2.0-flash-lite (score 56, 1.0M ctx). | |
| images | No | Image paths (absolute) or base64 strings for optional visual context. | |
| prompt | Yes | Your question or task for the external model. Prefer passing code and large content via absolute_file_paths rather than inlining it here. | |
| temperature | No | Optional sampling temperature. If omitted, the model's own default is used (recommended; some reasoning models reject or degrade on a fabricated value). Range is provider-dependent (commonly 0–2); values are clamped per model. | |
| thinking_mode | No | Reasoning depth: minimal, low, medium, high, or max. | |
| continuation_id | No | Unique thread continuation ID for multi-turn conversations. Works across different tools. Reuse the last continuation_id you were given to preserve full conversation context, files, and history across turns. Threads are held in memory and expire after inactivity. | |
| absolute_file_paths | No | Full, absolute file paths to relevant code in order to share with the external model. Accepts both files and directories (directories are expanded recursively). Content is read and embedded into the prompt context. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes beyond the readOnlyHint annotation by disclosing that prompts are routed to external AI models (privacy-relevant), that conversation memory is maintained, and that it supports file context embedding and multi-turn threads. This adds behavioral context not present in the annotation, though it doesn't mention potential rate limits or data retention specifics. No contradiction with the annotation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with 'Multi-model AI gateway,' and each phrase adds value: provider list, memory, file context, images, multi-turn. No fluff or redundancy. The description is tight while covering all key capabilities.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a complex tool with 7 parameters, but the schema carries detailed parameter semantics, so the description only needs a high-level overview. It provides that overview without covering output format or explicit alternatives, yet the sibling names (listmodels, dump_threads) and schema guidance fill those gaps. Slightly more could be said about return behavior, but the description is sufficiently complete for an entry point.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with each parameter already having detailed descriptions (e.g., temperature recommendation, model selection guidance, continuation_id semantics). The description mentions capabilities like file context and multi-turn threads, but these are already reflected in the parameter descriptions, so it adds no net new parameter meaning. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool is a 'Multi-model AI gateway' that 'routes prompts to external AI models,' listing specific providers and capabilities like conversation memory, file context embedding, and multi-turn threads. This distinguishes it from siblings (listmodels, dump_threads) which are about listing models and dumping threads, not running prompts.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied: the tool is for sending prompts to external AI models. However, the description does not explicitly state when to use this tool versus alternatives like listmodels or dump_threads. The schema's model parameter mentions using listmodels when no model is provided, but that guidance is outside the description, so the description itself only offers implied context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
dump_threadsARead-only
Export conversation threads as JSON or Markdown. Threads persist to disk and can be cold-reloaded after memory expiry. Use thread_ids to filter specific threads, format to choose output.
| Name | Required | Description | Default |
|---|---|---|---|
| format | No | Output format: 'markdown' (clean export with YAML frontmatter, written to disk) or 'json' (raw thread data, inline). | markdown |
| thread_ids | No | Filter to specific thread UUIDs. Omit for all active threads. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotation already declares readOnlyHint=true, so the description only needs to add extra behavioral nuance. It does mention thread persistence and cold-reload, which is useful context beyond the annotation, but it does not clarify whether the export writes files to disk (only the schema does for markdown) or describe any side effects. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, with the primary purpose front-loaded. The second sentence is a bit of a run-on ('Use thread_ids to filter specific threads, format to choose output') but is still concise and informative. No wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple two-parameter tool with no required fields and no output schema, the description plus schema covers the main usage: exporting threads with optional filtering and format selection. The persistence/cold-reload note adds valuable context. Could mention the default behavior (all threads) but that is already in the schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with both parameters (format and thread_ids) already documented in detail. The description merely echoes 'Use thread_ids to filter specific threads, format to choose output' without adding new semantic information. Baseline 3 applies since schema carries the load.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description starts with a specific verb and resource: 'Export conversation threads as JSON or Markdown.' It clearly identifies the tool's function and distinguishes it from sibling tools like chat and listmodels, which involve interaction and model listing respectively.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides implicit usage context: 'Threads persist to disk and can be cold-reloaded after memory expiry' suggests using this tool for backup or recovery after memory loss. It does not explicitly name alternatives or exclusions, but the context is clear enough for an agent to infer when this tool is appropriate.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
listmodelsARead-only
Shows which AI model providers are configured, available model names, their aliases and capabilities.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, so the safe-read nature is covered. The description adds useful context about what information is returned (providers, names, aliases, capabilities), but it does not disclose additional behavioral traits such as pagination or formatting.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, concise sentence that front-loads the verb 'Shows' and packs all relevant information about the tool's output without unnecessary words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is simple with no parameters and no output schema, but the description sufficiently covers its purpose and the categories of data it returns. It could be slightly more complete by mentioning that no arguments are required, but that is implicit in the empty input schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so there is nothing for the description to elaborate. The baseline score of 4 applies, as no parameter information is needed.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb 'Shows' and clearly defines the resource: configured AI model providers, available model names, aliases, and capabilities. This clearly distinguishes it from sibling tools like chat and dump_threads.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage—you'd use this tool when you need to see configured models—but it does not provide explicit guidance on when to use it versus alternatives like chat or dump_threads. There is no direct comparison or exclusion.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
3 tool updates
v0.5.0- First observed
chat - First observed
dump_threads - First observed
listmodels
TDQS
Each tool has a clearly distinct purpose: chat for conversation, listmodels for model configuration, and dump_threads for exporting threads. There is no overlap between these actions.
Naming is mixed: 'chat' and 'listmodels' are single compound words, while 'dump_threads' uses an underscore. Using 'list_models' instead of 'listmodels' would improve consistency.
Three tools is slightly on the lean side, but it covers the core functionality of an AI gateway reasonably well. Not too sparse, and each tool earns its place.
The surface covers chat, model listing, and thread export, but lacks a way to list threads without knowing their IDs, and no delete or reset functionality. These are notable gaps for thread management.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Real-time chat hub for AI agents — Claude Code, Cursor, Cline, Codex over MCP or REST.
One memory, every AI: Claude, ChatGPT, Perplexity, Gemini, Cursor, OpenClaw, Hermes, any MCP client.
One MCP endpoint for Claude, GPT & Gemini: 100+ tools + no-code connectors + agent workers.
- QuallaaOAuthcom.quallaa
Talk to your public-facing AI from any MCP client — Claude, ChatGPT, Cursor, Cline, Windsurf.
Related MCP Servers
- AlicenseBqualityFmaintenanceEnables AI assistants to intelligently select and switch between different AI models (OpenAI, Anthropic, etc.) within the same conversation based on task requirements. Provides a unified interface for accessing multiple AI providers through a single MCP tool.126MIT
- AlicenseNot gradedqualityDmaintenanceMCP of MCPs. Automatic discovery and configure MCP servers on your local machine. Integration with Claude and Cursor.53Apache 2.0
- AlicenseNot gradedqualityDmaintenanceEnables real-time communication and shared vector memory between Claude Code, OpenAI Codex CLI, and Google Gemini CLI. It allows different AI platforms to exchange messages, share context, and collaborate through a unified MCP interface.MIT
- FlicenseNot gradedqualityCmaintenanceMulti-cloud MCP server that exposes cloud AI models as tools for AI CLI agents, supporting streaming, conversation history, parallel multi-model queries, and dynamic model discovery.2-
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/linxule/vox-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server