frontier-orchestrator
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@frontier-orchestratorDelegate creating the user registration API to Codex."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Frontier Orchestrator — Multi-Agent Orchestration for Claude Code
Frontier Orchestrator is a Model Context Protocol (MCP) server and Claude Code skill that turns Claude into the lead engineer of a multi-agent team. Claude decomposes tasks, defines cross-stack contracts, and verifies results — while delegating:
Backend work (APIs, databases, migrations, auth, infrastructure, security, backend tests) to OpenAI Codex
Frontend and design work (UI, UX, components, styling, accessibility, animation, client state) to Kimi Code
Tooling and mechanical maintenance (build configuration, dependency upgrades, CI, release automation, generated boilerplate, repository transformations, test/lint cleanup) to Grok Build
Each specialist runs as a sandboxed subprocess in your repository, receives a role-scoped brief with explicit file ownership and acceptance criteria, and reports back in a structured format that Claude reviews before anything reaches you.
Why multi-agent orchestration?
Frontier coding agents have different strengths. Instead of asking one model to do everything, Frontier Orchestrator routes each part of a full-stack task to the agent best suited for it — with enforced coordination discipline so agents never trample each other's changes:
Domain-first routing — backend behavior goes to Codex, frontend and UX behavior goes to Kimi, and only domain-neutral tooling or mechanical maintenance goes to Grok unless you explicitly override routing. Grok is never selected solely because it is faster.
Workspace mutation guard — two specialists cannot edit overlapping directories at the same time unless Claude explicitly certifies their file scopes are disjoint.
Contract-first sequencing — for an unknown cross-stack interface, Codex analyzes the backend contract first; Kimi builds against the accepted contract. A frontend task can never silently invent a backend API.
Read-only modes —
analyzeandreviewdelegations run the specialist CLI in a read-only sandbox; onlyimplementmay edit the workspace.
Related MCP server: Landlord
How it works
flowchart LR
U[You] --> C[Claude Code<br/>lead engineer]
C -->|delegate_backend| M[frontier-orchestrator<br/>MCP server]
C -->|delegate_frontend| M
C -->|delegate_build| M
M -->|codex exec<br/>sandboxed| X[OpenAI Codex<br/>backend specialist]
M -->|kimi --print<br/>sandboxed| K[Kimi Code<br/>frontend specialist]
M -->|grok -p<br/>sandboxed| G[Grok Build<br/>tooling/maintenance specialist]
X --> M
K --> M
G --> M
M -->|structured JSON result| C
C -->|reviewed, integrated,<br/>verified result| UThe MCP server exposes four tools:
Tool | Purpose |
| Check that the Codex, Kimi, and Grok CLIs are installed and report versions |
| Send a bounded backend task to Codex ( |
| Send a bounded design/frontend task to Kimi ( |
| Send domain-neutral tooling or mechanical maintenance to Grok Build ( |
Each delegation takes a structured request — task, mode, context, file_scope, acceptance_criteria, optional model override, and a hard timeout_seconds — and returns JSON with the specialist's final message, exit code, duration, and diagnostics on failure.
The companion orchestrate-specialists skill (in .claude/skills/) teaches Claude the domain-first routing rules, backend-first and frontend-first sequencing patterns, Grok's tooling and maintenance boundary, parallelization preconditions, and guardrails (see routing-contract.md).
Quick start
Requirements: Node.js 20+, Claude Code, and authenticated codex, kimi, and grok CLIs for the specialists you intend to use. A missing optional CLI only makes that specialist unavailable.
git clone https://github.com/luckeyfaraday/frontier-orchestrator.git
cd frontier-orchestrator
npm install
npm run buildLaunch Claude Code from this repository. Claude discovers the project-scoped .mcp.json and the skill automatically. Approve the MCP server when prompted, then run:
/orchestrate-specialistsVerify the connection with /mcp or:
claude mcp get frontier-orchestratorUse from any project
Install the MCP server at user scope:
npm install && npm run build && npm link
claude mcp add --scope user frontier-orchestrator -- frontier-orchestratorCopy the skill to user scope:
mkdir -p ~/.claude/skills
cp -R .claude/skills/orchestrate-specialists ~/.claude/skills/Restart Claude Code after changing MCP configuration.
Example delegation
A typical full-stack feature flows like this:
Claude inspects the repo and writes acceptance criteria plus file scopes for each side.
delegate_backendwithmode: analyze— Codex proposes the API contract.Claude normalizes the contract and passes it to Kimi.
delegate_backendanddelegate_frontendwithmode: implement— run sequentially, or in parallel only when file scopes are disjoint (allow_concurrent_mutation: true). Separate domain-neutral tooling or mechanical maintenance can go todelegate_build; a stable application contract does not transfer backend or frontend ownership to Grok.Claude inspects every changed file, runs the integrated checks, fixes small integration defects, and reports one unified result.
Configuration
The server inherits existing Codex, Kimi, and Grok authentication from their CLIs. All settings are environment variables:
Environment variable | Default | Purpose |
|
| Base workspace for relative paths |
| project root | Additional allowed roots, separated by the platform path delimiter |
|
| Codex executable or absolute path |
|
| Kimi executable or absolute path |
|
| Grok executable or absolute path |
|
| Maximum simultaneous specialist processes |
|
| Per-stream child output retained in memory |
|
| Maximum specialist text returned to Claude |
Implementation calls are serialized per working directory unless Claude explicitly sets allow_concurrent_mutation: true. The skill only permits that when file scopes are disjoint and the cross-stack contract is stable.
FAQ
What is Frontier Orchestrator? A local stdio MCP server plus a Claude Code skill that lets Claude orchestrate OpenAI Codex, Kimi Code, and Grok Build as specialists — Codex for backend engineering, Kimi for design and frontend, and Grok for domain-neutral tooling and mechanical maintenance — while Claude remains responsible for decomposition, contracts, review, and integration.
How is this different from Claude Code subagents? Subagents run more instances of Claude. Frontier Orchestrator routes work to different frontier models by domain and workload strength, wrapped in file-scope and mutation guardrails, with Claude reviewing everything before completion.
Does it need API keys?
No keys of its own. It shells out to the codex, kimi, and grok CLIs and inherits whatever authentication those CLIs already have.
Can specialists run in parallel?
Yes, up to FRONTIER_MAX_CONCURRENCY processes — but workspace mutations are serialized per directory unless Claude explicitly certifies disjoint file scopes.
Is it safe to let specialists edit my repo?
analyze and review modes are read-only. implement uses each provider's workspace-editing mode and instructs every specialist to stay inside its declared file scope; Claude inspects all diffs before presenting completion.
Troubleshooting
LLM not setfrom Kimi means no provider/model is configured. Runkimi login, complete the browser authorization and model selection, then retry.Authentication errors from Grok mean its CLI session is unavailable or expired. Run
grok login, then confirm the account's available models withgrok models.A project-scoped MCP server appears as pending until you open Claude Code in the repository and approve
.mcp.json.specialist_statuschecks executable availability and versions; a real delegation is the definitive authentication/configuration check.
Development
npm run check # typecheck
npm test # build + node --testSource layout: src/index.ts (MCP server and tools), src/specialists.ts (Codex, Kimi, and Grok CLI invocations and specialist prompts), src/coordinator.ts (concurrency gate and workspace mutation guard), src/config.ts (environment configuration and path allow-listing), src/process.ts (subprocess lifecycle).
License
MIT © luckeyfaraday
Available Tools
4 toolsdelegate_backendDelegate backend work to CodexADestructive
Delegate backend, API, database, auth, infrastructure, security, performance, or backend-test work to Codex. Use analyze/review for read-only work and implement for edits.
| Name | Required | Description | Default |
|---|---|---|---|
| mode | No | Analyze/review are read-only; implement may edit the workspace. | implement |
| task | Yes | Concrete, self-contained specialist task. | |
| model | No | Optional provider-specific model override. | |
| context | No | Relevant architectural context, interfaces, decisions, and constraints. | |
| file_scope | No | Files or directories this specialist owns for this task. | |
| timeout_seconds | No | Hard timeout for the specialist CLI process. | |
| working_directory | No | Directory relative to the Claude project root, or an allowed absolute path. | . |
| acceptance_criteria | No | Observable conditions the specialist should satisfy. | |
| allow_concurrent_mutation | No | Allow simultaneous edits in one workspace only when file scopes are known not to overlap. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true and readOnlyHint=false, so the agent knows this can modify the workspace. The description adds the mode distinction (analyze/review read-only vs implement edits), which is useful behavioral context. However, it doesn't disclose side effects like parallel risk, workspace mutations beyond targeted files, or concurrency behavior that a destructive tool might warrant.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, zero filler. The first sentence states purpose and scope; the second adds the crucial read-only vs. edit mode guidance. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a delegation tool with 9 parameters and a destructiveHint, no output schema. The description explains purpose and mode but doesn't cover interaction with same-domain sibling tools or failure/partial-success behavior. Given the schema richly documents all 9 parameters and the description covers the core behavioral distinction (read-only vs edit), it's adequate but not comprehensive.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with detailed parameter descriptions, so baseline is 3. The description adds value by explaining the domain-appropriate use of the tool and the mode semantics (read-only vs edits), reinforcing the 'mode' parameter's behavioral meaning beyond its schema description. It complements rather than repeats the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Delegate') with a clear resource ('backend, API, database, auth, infrastructure, security, performance, or backend-test work to Codex'). It clearly distinguishes from siblings by listing the backend domains, and the closest sibling (delegate_frontend) is differentiated by the explicit domain list.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear guidance on when to use this tool ('Delegate backend...work') and distinguishes read-only vs. editing modes ('Use analyze/review for read-only work and implement for edits'). It lacks explicit 'when NOT to use' exclusions or named alternatives beyond the domain itself, but the mode guidance is valuable context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
delegate_buildDelegate tooling and maintenance work to Grok BuildADestructive
Delegate domain-neutral build tooling, dependency or toolchain upgrades, CI and release automation, mechanical repository-wide transformations, generated boilerplate, or test and lint cleanup to Grok Build. Backend behavior belongs to Codex and frontend or UX behavior belongs to Kimi unless the user explicitly overrides routing. Never choose Grok solely for speed. Use analyze/review for read-only work and implement for edits.
| Name | Required | Description | Default |
|---|---|---|---|
| mode | No | Analyze/review are read-only; implement may edit the workspace. | implement |
| task | Yes | Concrete, self-contained specialist task. | |
| model | No | Optional provider-specific model override. | |
| context | No | Relevant architectural context, interfaces, decisions, and constraints. | |
| file_scope | No | Files or directories this specialist owns for this task. | |
| timeout_seconds | No | Hard timeout for the specialist CLI process. | |
| working_directory | No | Directory relative to the Claude project root, or an allowed absolute path. | . |
| acceptance_criteria | No | Observable conditions the specialist should satisfy. | |
| allow_concurrent_mutation | No | Allow simultaneous edits in one workspace only when file scopes are known not to overlap. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true and readOnlyHint=false, so the safety profile is known. The description adds value by spelling out the routing behavior (backend→Codex, frontend→Kimi), the 'never for speed' caveat, and the mode-dependent editing semantics. It also flags the possibility of 'mechanical repository-wide transformations,' which implies potentially broad changes. No contradictions with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four tight sentences, each earning its place. The first sentence front-loads the purpose with a verb and resource, followed by explicit routing rules, a caution, and mode semantics. No fluff, perfect density.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 9 parameters, strong annotations, and sibling tools, the description covers all key aspects: purpose, routing, when-not-to-use, and mode distinctions. The only omission is a description of what this tool returns or how to check results, but the presence of a sibling tool 'specialist_status' likely covers monitoring. For a delegation tool, this is nearly complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so every parameter already has a description. The tool description goes slightly beyond the schema by giving examples of what belongs in 'task' (dependency upgrades, CI automation, lint cleanup), which helps the agent form a task. This is marginal added value, so the baseline of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a clear directive: 'Delegate domain-neutral build tooling, dependency or toolchain upgrades, CI and release automation, mechanical repository-wide transformations, generated boilerplate, or test and lint cleanup to Grok Build.' This specifies the exact resource (Grok Build) and enumerates concrete task domains. It also explicitly differentiates from sibling tools by assigning backend work to Codex and frontend/UX work to Kimi, making the division of responsibilities unmistakable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit when-to-use guidance: list of accepted task types. It also gives exclusions: 'Backend behavior belongs to Codex and frontend or UX behavior belongs to Kimi unless the user explicitly overrides routing.' A strong caution, 'Never choose Grok solely for speed,' and mode guidance ('Use analyze/review for read-only work and implement for edits') round out comprehensive usage instructions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
delegate_frontendDelegate frontend and design work to KimiADestructive
Delegate product design, UX, visual systems, components, styling, accessibility, responsive behavior, animation, client state, or frontend-test work to Kimi. Use analyze/review for read-only work and implement for edits.
| Name | Required | Description | Default |
|---|---|---|---|
| mode | No | Analyze/review are read-only; implement may edit the workspace. | implement |
| task | Yes | Concrete, self-contained specialist task. | |
| model | No | Optional provider-specific model override. | |
| context | No | Relevant architectural context, interfaces, decisions, and constraints. | |
| file_scope | No | Files or directories this specialist owns for this task. | |
| timeout_seconds | No | Hard timeout for the specialist CLI process. | |
| working_directory | No | Directory relative to the Claude project root, or an allowed absolute path. | . |
| acceptance_criteria | No | Observable conditions the specialist should satisfy. | |
| allow_concurrent_mutation | No | Allow simultaneous edits in one workspace only when file scopes are known not to overlap. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare destructiveHint=true and readOnlyHint=false, and the description reinforces this by distinguishing read-only modes (analyze/review) from implement which 'may edit the workspace.' The description adds valuable context about the mode-dependent mutation behavior that goes beyond the raw annotation flags, clarifying that not all invocations are destructive. This is a meaningful addition though the safety profile is partially covered by annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single focused paragraph that front-loads the purpose and enumerates domains concisely. The mode guidance is packed efficiently. It could arguably be slightly tighter, but every sentence earns its place and there is no fluff or repetition. Slightly below perfect due to the long enumeration, but appropriately sized for a complex delegation tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (9 parameters, delegation semantics, mutation risk) and the absence of an output schema, the description does a solid job covering purpose, safety, and mode selection. The 100% schema coverage handles parameter documentation. The main gap is the absence of guidance on structuring tasks or what success looks like, but acceptance_criteria parameter provides an observable-contract mechanism. Adequately complete for a delegation tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and all parameters have descriptions in the schema, so the baseline is 3. The description adds value by clarifying the analyze/review/implement mode distinction and its behavioral implications, which enriches understanding of the mode parameter beyond its schema description. The task and scope fields are self-explanatory, but no substantial additional semantics are needed given the schema's completeness.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses specific verbs ('delegate') plus comprehensive resource enumeration (product design, UX, visual systems, components, styling, accessibility, responsive behavior, animation, client state, frontend-test). It clearly distinguishes from sibling delegate_backend (backend specialization) by listing frontend-specific domains. The 'analyze/review vs implement' split adds meaningful scope.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly instructs when to use which mode: 'Use analyze/review for read-only work and implement for edits.' This gives clear contextual guidance. Combined with the mode enum in the schema and sibling specialization contrast (backend), the when-to-use guidance is strong and actionable.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
specialist_statusCheck specialist availabilityARead-onlyIdempotent
Check whether the configured Codex, Kimi, and Grok CLIs are available. This does not verify account authentication.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, covering the safety profile. The description adds the valuable nuance about not verifying authentication, which is not evident from annotations or schema. However, it doesn't disclose the return format or what a failure looks like, though with zero params and a simple check, this is reasonably adequate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, zero waste. First sentence states the core purpose; second sentence names a critical limitation. Every element earns its place and the information is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter, simple status check with complete annotations and 100% schema coverage, the description is essentially complete. It names the tools checked, clarifies what it doesn't verify, and fits naturally with sibling delegate tools. The only minor gap is not describing the output format, but that's a modest concern given no output schema is provided.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so there is nothing for the description to explain. Per the rubric, 0 params = baseline 4, and the description earns a 5 by explicitly naming the three CLIs checked and adding context about what is NOT covered (authentication), providing more than the schema could.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states 'Check whether the configured Codex, Kimi, and Grok CLIs are available' with a specific verb (Check) and resource (CLI availability). It goes beyond a bare statement by explicitly naming the three CLIs, which distinguishes it from the sibling delegate tools that perform delegation actions rather than status checks.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clarifies it does NOT verify account authentication, which is a useful exclusion that tells the agent when this tool is not sufficient. It implies this is a pre-flight check before delegating work, given the sibling tools are delegate_backend/delegate_frontend. A clear when-not is provided via the authentication disclaimer.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
4 tool updates
v0.1.0- First observed
delegate_backend - First observed
delegate_build - First observed
delegate_frontend - First observed
specialist_status
TDQS
Each tool has a clearly distinct purpose: specialist_status checks CLI availability, while delegate_backend, delegate_frontend, and delegate_build target different domains (backend, frontend, build). The descriptions explicitly state boundaries for each delegation tool, so there is no overlap.
The three delegate tools follow a consistent 'delegate_<domain>' pattern, but specialist_status diverges by using a noun-based name instead of a verb. This is a minor deviation that does not cause confusion.
Four tools is well-scoped for an orchestrator that delegates to three specialist CLIs and checks their availability. Each tool earns its place and there is no unnecessary bloat.
The tool surface covers status checking and delegation for all three specialist domains (Codex, Kimi, Grok Build), including read-only and implementation modes. No significant gaps are apparent for the stated purpose.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
MCP server for AI agents to plan, verify, and deploy Cloudflare-native apps.
Control plane for autonomous software labor. Agents claim objectives over MCP with audit trail.
Real-time chat hub for AI agents — Claude Code, Cursor, Cline, Codex over MCP or REST.
Related MCP Servers
- AlicenseAqualityDmaintenanceMCP server orchestrating local CLI agents (Claude Code, OpenAI Codex, Google Gemini) for cross-validation, second opinions, and persona-driven prompting.18MIT
- FlicenseAqualityDmaintenanceAn MCP server that orchestrates parallel Claude agent sessions by decomposing natural-language tasks into contract-bound tenants with structured outputs and validation, all running over stdio.5-
- AlicenseAqualityBmaintenanceMCP server that spawns autonomous Claude Code agents in GitHub repos, enabling task delegation with persistent state, multi-step workflows, and job monitoring.47942Apache 2.0
- FlicenseNot gradedqualityCmaintenanceMulti-model agent orchestration MCP server that enables plan-code-review-deliver pipelines with configurable providers and models.-
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/luckeyfaraday/frontier-orchestrator'
If you have feedback or need assistance with the MCP directory API, please join our Discord server