code-quorum
This server runs Code Quorum's multi-agent council workflows as MCP tools, letting a Claude Code or Codex host launch independent parallel AI reviews, plans, brainstorms, validations, and research, then await the anonymized synthesis after forming its own answer.
q_plan_start — start a background multi-agent planning run (
job_id), with optional per-agent stances, custom agents, and a per-run Gemini model override.q_brainstorm_start — start a background brainstorming council where each agent proposes 3–5 distinct ideas; supports research seeding, prior-ideas divergence, and grounding passes.
q_validate_start — start a background council that independently reviews a plan file and deliberates across rounds; supports extended 4-round stance rotation, critique mode, verbose output, and custom roles.
q_review_start — start a background multi-agent code review of a diff, working tree, PR, explicit range, or entire codebase; supports scope docs, extended rounds, critique mode, and terse output.
q_research — fetch prior-art digests from arXiv, OpenAlex, Europe PMC, Context7, GitHub, and Hugging Face, with grounded/exploratory modes, source filtering, query guidance, and retry/status advice.
q_await — block until a background council completes and return its rounds markdown; one-shot per job and required before ending a host turn.
Provides research integration for searching scholarly papers and preprints on arXiv.
Provides research integration for searching public GitHub repositories by name, description, and topics, ranked by stars.
Provides research integration for searching public Hugging Face models, ranked by downloads, with term-fallback broadening.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@code-quorumReview the recent changes in the payment module"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
code-quorum
Independent reviews have become an important part of how I use agentic tools. Inspired by similar work, I built Code Quorum for my own use and am sharing it in case others find it useful.
Code Quorum is a macOS multi-agent council for Claude Code and Codex. The active host writes its own review, assessment, or plan while external seats work in parallel. A structural anti-bias gate keeps every perspective independent until the final synthesis.
It can use existing Claude Code, ChatGPT/Codex, and Gemini/Antigravity subscriptions. The OpenCode seat uses OpenRouter, with DeepSeek V4 Flash as its default model. Both CLI hosts are supported, along with Codex in the ChatGPT desktop app and the Code surface in the Claude desktop app.
Host | Default external council |
Claude Code | Codex + Gemini + OpenCode |
Codex | Claude subscription + Gemini + OpenCode |
The host is never also a subprocess seat. The start/await split requires the
host to form its own answer before q_await exposes peer output, and every
council skill calls the blocking completion notification in the same turn as
its start.
External seats are read-only, but read-only does not mean data-local. Review Security and data boundaries before using Code Quorum on private material.
Every repository-reading MCP council start requires an explicit absolute project
cwd. The MCP tools reject an omitted or blank value rather than falling back
to the server's plugin-cache or runtime directory. The host skills supply this
value during normal /q-* and $code-quorum:q-* use. Plan and scope files must
also resolve inside that directory; absolute paths, .. traversal, and symlink
escapes are rejected before their contents are read.
Workflows
The host can select a workflow from a matching plain-language request. Use the forms below to select one explicitly:
Workflow | Claude Code | Codex | Shell |
Plan |
|
|
|
Brainstorm |
|
|
|
Skystorm |
|
| host-only skill |
Validate |
|
|
|
Review |
|
|
|
Research |
|
|
|
Help |
|
| host-only skill |
uv run quorum --help lists the exact shell surface. The main modifiers are:
Option | Effect |
| Two-pass host brainstorm (visionary/pioneer/architect, then analyst/maintainer/skeptic), or validation/review in 4 rounds with stance rotation. |
| Makes later validation/review rounds attack peer positions instead of revising toward agreement. |
| Declares in-bounds, out-of-bounds, and accepted-risk areas for a whole-codebase review. |
| Makes host research hunt for cross-domain analogies instead of direct prior art. |
| Runs brainstorming or skystorm from model priors alone. |
Research sources and credentials
q-research queries all seven sources by default. Repeat --source <name> to
restrict a run. It accepts up to three --query-lane formulations and reports a
Source/lane status table so a strong source cannot hide a collision elsewhere.
Use --purpose methods (default) for balanced all-time and recent OpenAlex
strata, or --purpose currency for the recent five-year stratum only. Literature
sources search every lane; artifact sources (Context7, GitHub, and Hugging Face)
search only the primary lane to avoid redundant results and API traffic. The
per-source result limit stays fixed across lanes, so additional lanes broaden
coverage without growing the digest without bound.
Source | Target | Credential policy |
arXiv ( | Scholarly papers and preprints from arXiv search. | None. |
OpenAlex ( | Methods searches balance all-time relevance/canonical candidates with recent five-year candidates and retain the stratum labels; currency searches use only the recent stratum. Exploratory mode also produces a subfield map. |
|
Europe PMC published ( | Published life-sciences literature, including PubMed/MEDLINE records, reviews, MeSH metadata, and full-text availability. Exact matches have priority; MeSH synonym expansion only backfills a thin exact result set. | None. |
Europe PMC preprints ( | Life-sciences preprints from bioRxiv, medRxiv, Research Square, and similar sources; arXiv records are excluded. | None. |
Context7 ( | High-trust library matches and documentation snippets. |
|
GitHub ( | Public repositories matched by name, description, and topics, then ranked by stars. |
|
Hugging Face ( | Public model IDs and metadata, ranked by downloads. Term-fallback results carry |
|
Code Quorum reads credentials from the process environment and sends tokens only in authorization headers. The generated Codex adapter forwards the named variables but does not store their values in the plugin artifact. OpenAlex is the only source that requires a key for normal use; the others improve reliability or rate limits.
Verify Hugging Face search from a checkout with:
uv run quorum research "sentence embedding" --source huggingface --limit 5
uv run pytest tests/test_research_live.py -m live -k huggingface -qThe CLI check must return model links and a nonzero HuggingFace source count.
The live tests cover direct search, configured-token authentication,
distinctive-term union, and the full research_topic path. Without a token,
the authentication test skips while anonymous checks still run.
Related MCP server: Moderator MCP Server
Requirements
Code Quorum currently supports macOS and requires Python 3.13+, the
uv package manager, and the binaries for the
seats you intend to use. Each seat relies on its own login or key; Code Quorum
does not write credential values into plugin artifacts. Seat CLIs retain their
own authentication and runtime state as described in SECURITY.md.
Seat | Binary | Auth | Cost |
codex | the CLI's own login ( | ChatGPT subscription or metered API key | |
gemini | Google OAuth via | Google AI subscription; metered | |
opencode |
| metered through OpenRouter | |
claude (Codex host only) | the CLI's own claude.ai login | Claude subscription only; API-key routing is stripped |
The Gemini seat depends on the macOS Seatbelt sandbox; Claude uses a read-tool allowlist instead. A Codex host also needs a narrowly scoped LaunchAgent helper for its Claude and Gemini seats. Codex and OpenCode have no Seatbelt dependency but are untested on other platforms.
Install
Clone the stable checkout and configure the seats:
git clone https://github.com/sdewell/code-quorum.git
cd code-quorum
uv sync
agy # complete Google OAuth login, then exit
uv run quorum setup-agy # one-time Gemini seat config
uv run quorum setup-models --host claude # use --host codex for Codex
uv run quorum doctor --host claude # or codex / both
uv run quorum auth-check --seat gemini --host claudedoctor checks binaries, configuration shape, and sandbox readiness. It does
not test live credentials. auth-check runs agy models inside the same
sandbox used by the seat and requires at least one valid model row without
sending a model prompt. A missing or revoked login directs the user back to
interactive agy; Code Quorum never silently changes to a metered API route.
On a Codex host, install and verify the helper from a real terminal before the Codex authentication check:
uv run quorum install-seat-helper-launchagent # --allowed-root <dir> to widen
uv run quorum seat-helper-status
uv run quorum auth-check --seat gemini --host codexEvery MCP workflow permits cwd under ~/Code/~/src/~/.codex/agent-worktrees
(a common agent-worktree location); the Codex helper applies the same roots
before accepting Claude or Gemini requests.
Set CODE_QUORUM_HELPER_ALLOWED_ROOTS or install the helper with repeated
--allowed-root options to use other project roots. Reinstall it from the
updated stable checkout after every Code Quorum upgrade. Incompatible helper
protocols fail closed, and installation from Codex's replaceable plugin cache
is rejected.
Read-only boundaries
Every external seat is read-only and refuses to run if its boundary cannot be applied. Enforcement differs by seat: Codex uses its native read-only sandbox, Claude exposes only read tools, Gemini uses macOS Seatbelt, and OpenCode uses an isolated HOME with restricted permissions.
Gemini's Seatbelt profile denies other home-directory reads, with explicit
exceptions for agy authentication and runtime state. It does not deny readable
paths outside $HOME. Code Quorum provides no universal path fence for Claude,
Codex, or OpenCode. Council material can leave the machine under the user's
configured provider accounts. The full boundary table, data-egress map,
strict-isolation guidance, and credential handling are in
SECURITY.md.
Data and approvals on Codex
Codex treats tool approval, filesystem containment, and authorization to send
material off-machine as separate decisions. A target such as main...HEAD
bounds the prepared review diff; it does not restrict an external seat's
read-only access to the working directory.
When approvals_reviewer = "auto_review" is enabled, a council start may need
explicit authorization naming the payload and recipients. Users who want
unattended access can opt in per tool, but Code Quorum never writes those
approval entries itself.
SECURITY.md contains the one-off authorization example, all six
Codex approval blocks (including the shared q_await tool), project
AGENTS.md guidance, path-confinement limits, and the approval-preserving
update procedure. Review it before enabling unattended workflows.
Configuration
Each seat resolves its model through one ladder, first hit wins: per-run flag
-> environment variable -> the choice recorded by quorum setup-models -> the
shipped pin. Recorded choices never change silently; a seat that cannot honor
one fails loudly while the rest of the council continues.
uv run quorum setup-models --host claude
uv run quorum setup-models --seat codex --model gpt-5.6-terra --effort mediumVariable | Effect |
| default host profile ( |
| Gemini seat model (an id from |
|
|
| OpenCode seat model |
|
|
| Claude seat model and effort |
| Codex seat model and reasoning effort |
OpenCode configuration
The OpenCode seat requires OPENROUTER_API_KEY and does not load your personal
OpenCode configuration. It uses an isolated HOME and rebuilds this generated
configuration before every run. The shipped model is
openrouter/deepseek/deepseek-v4-flash; its OpenRouter chunkTimeout is
90000 milliseconds.
Code Quorum sets OPENCODE_DISABLE_PROJECT_CONFIG=1 and OPENCODE_PURE=1.
The generated council agent permits only Read, glob, and list, denies
shell and mutation tools, blocks .env and .env.*, and permits
.env.example. Failed or empty runs write raw stdout/stderr captures to
~/.cache/code-quorum/opencode-debug unless
CODE_QUORUM_OPENCODE_DEBUG=0 is set. The directory is 0700, capture files
are 0600, prompt text is omitted from command metadata, and only the newest 20
captures are retained. Raw streams can still contain reviewed material. See
ARCHITECTURE.md and SECURITY.md for the full
boundary design.
Disabling a seat
If a live probe fails because a seat is absent or logged out,
quorum setup-models can mark it disabled in models.toml. Disabled seats
are skipped by the default roster and reported by doctor, but an explicit
--agent <seat> request still runs them.
Install as a plugin
Claude Code:
/plugin marketplace add sdewell/code-quorum
/plugin install code-quorum@code-quorumFor the Claude Code CLI, load OPENROUTER_API_KEY and optional research keys
before starting the host. For example:
source ~/.zshrc.local
claudeFor the Claude desktop app, make the keys available to the current macOS login session before opening it:
source ~/.zshrc.local
launchctl setenv OPENROUTER_API_KEY "$OPENROUTER_API_KEY"The launchctl value is inherited by every subsequently launched application until it is unset, logout occurs, or the machine reboots. Start Claude Code, then remove the login-session copy; the already-running app retains its copy for plugin subprocesses:
launchctl unsetenv OPENROUTER_API_KEYAfter installing or upgrading the plugin, or after changing a key, quit Claude Code completely and start a new Claude Code session. A plugin reload can pick up code changes but cannot change the environment inherited by the running host.
The Claude plugin starts its MCP server with
uv run --directory ${CLAUDE_PLUGIN_ROOT} quorum-mcp, so uv and Python 3.13+
must be on PATH.
Codex:
Register the public marketplace and install the plugin:
codex plugin marketplace add sdewell/code-quorum --ref main
codex plugin add code-quorum@code-quorum
codex plugin listFor the ChatGPT desktop app, fully quit and reopen the app after registering the marketplace. Open Plugins, choose Personal, select Code Quorum, and click Install.
After either Codex surface installs the plugin, prepare the stable checkout from a real terminal:
uv sync
uv run quorum install-seat-helper-launchagent
uv run quorum seat-helper-statusThe Codex launcher starts that checkout's prepared .venv directly. MCP
startup therefore does not depend on a writable uv cache, network downloads,
or an environment inside the replaceable plugin directory. For later upgrades,
one command refreshes the checkout, plugin, environment, approvals, and helper:
uv run quorum update-codexFully restart Codex and start a new thread afterward. If an older checkout does
not yet have update-codex, use the one-time legacy sequence in SECURITY.md.
In Codex CLI, open /hooks to review and trust each code-quorum command hook.
Codex skips plugin hooks until each current definition hash is trusted. A
changed definition requires re-review and trust for that changed definition.
The generated launcher recovers standard user and Homebrew binary directories
(~/.local/bin, ~/.opencode/bin, /opt/homebrew/bin, and /usr/local/bin)
for a desktop app with a minimal PATH.
For Codex CLI, source the key environment before launching Codex. For the ChatGPT desktop app, set keys in the current macOS login session:
source ~/.zshrc.local
launchctl setenv OPENROUTER_API_KEY "$OPENROUTER_API_KEY"The value is visible to every subsequently launched application until it is removed. Start Codex, then remove the login-session copy; the running app keeps the value it already inherited:
launchctl unsetenv OPENROUTER_API_KEYAfter a plugin upgrade or key change, fully quit and reopen Codex and start a brand-new Codex thread. Do not resume a thread created before the restart; its tool registry may still refer to the prior plugin process.
For approval-preserving updates, never use codex plugin remove as the normal
path. Follow the verified sequence in SECURITY.md.
Design
ARCHITECTURE.md describes the shared CLI/MCP spine, seat
adapters, round model, anti-bias mechanisms, packaging, and failure boundaries.
The short version: round 1 contains no peer output, later rounds anonymize peers
by stance, and the host does not receive the council matrix until q_await.
Attribution
These projects inspired the workflow shape; no code, prompts, or documentation were copied:
SnakeO/claude-co-commands - independent host work before peer output.
agentic-box/owlex - multi-agent council architecture and cognitive roles.
karpathy/llm-council - anonymized peer review by content rather than model identity.
License
MIT.
Available Tools
6 toolsq_awaitA
Block until the background council run identified by job_id
completes, then return its rounds markdown. One-shot — a job_id
can only be awaited once.
This is the blocking completion notification for every council start. The orchestrating host must not end its turn with a live job outstanding; it calls q_await after its independent work and remains blocked until this tool returns a result or error.
Errors:
job_id not found (expired, already retrieved, or invalid) → ValueError with the reason.
job cancelled by TTL or server shutdown → ValueError.
underlying council error → propagated.
| Name | Required | Description | Default |
|---|---|---|---|
| job_id | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations to rely on, the description carries the full burden and does so thoroughly. It discloses that the tool blocks until completion or error, that it is one-shot (a job_id can only be awaited once), and enumerates all error scenarios (job not found, TTL cancellation, server shutdown, underlying council errors). It also conveys the operational expectation that the host must not end its turn with an outstanding job. This goes far beyond a minimal disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is highly structured: the first sentence delivers the core purpose, the second paragraph provides usage context, and a bulleted list covers errors. Every sentence earns its place; there is no fluff. The information is front-loaded with the most critical fact (blocking behavior) stated immediately.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description fully covers what an agent needs to know to call this tool correctly: it explains the blocking nature, the one-shot constraint, the exact error outcomes, and the return value (rounds markdown). An output schema exists, so detailed return formatting is not required. There is no missing information that would prevent correct invocation or interpretation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single parameter `job_id` has zero schema description, so the description must compensate. It does by explaining that the job_id identifies the background run, and the error section clarifies what happens if the id is invalid (expired, already retrieved, or invalid). It stops short of specifying a format (e.g., UUID), but since a valid id comes from a sibling start tool, this is sufficient for the agent to understand its role.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb ('Block'), a clear resource ('background council run identified by job_id'), and an outcome ('return its rounds markdown'). It distinguishes itself from the sibling start tools (q_plan_start, q_brainstorm_start, etc.) as the blocking completion counterpart, so an agent can immediately tell what this tool does and how it differs from its siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states that this is 'the blocking completion notification for every council start' and gives a clear directive: 'The orchestrating host must not end its turn with a live job outstanding; it calls q_await after its independent work.' It also warns that it is one-shot, leaving no ambiguity about when and how to use it. No alternative tools are mentioned, but the context of siblings being all start tools makes the usage obvious.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
q_brainstorm_startA
Start a q-brainstorm run in the background. Returns {"job_id":
str} immediately. Each agent contributes 3-5 distinct ideas with
rationale, trade-offs, and the cheapest test that would give signal;
no synthesis. Retrieve results by calling q_await with the
returned job_id.
Between the start and the await, the caller is expected to list its own ideas — this is the structural anti-bias gate.
research, when supplied, seeds round 1 with a q_research digest as
EVIDENCE: agents are told to ground their ideas in it, recombine it, or
extend past it. Pass the raw digest markdown (verbatim from q_research) --
never your own summary of it, and never your own ideas; those stay behind
the anti-bias gate. Distinct from prior_ideas, whose do-not-repeat
framing marks content to diverge AWAY from.
prior_ideas, when supplied, seeds a divergence round: the agents are told
the listed ideas are already on the table and must not be repeated -- used
by the --extended flow to push past round 1. Composes with research
(evidence stays evidence; ideas stay do-not-repeat).
grounding, with prior_ideas, runs a validation-guide pass over the
listed ideas instead of diverging past them -- used by q-skystorm
Stage 2.
Optionally assign a cognitive stance per agent via roles, a list
of 'stance:agent' strings (stances: skeptic, architect, security,
maintainer, analyst, neutral, visionary, pioneer). Unassigned agents
use their default stance.
gemini_model, when supplied, runs the gemini seat on that agy model for
this invocation only (an id exactly as printed by agy models, e.g.
'claude-opus-4-6-thinking').
Expected wall-clock to completion: 30s-4min depending on the agents and topic complexity.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | Yes | ||
| host | No | ||
| roles | No | ||
| topic | Yes | ||
| agents | No | ||
| skip_gh | No | ||
| verbose | No | ||
| research | No | ||
| grounding | No | ||
| no_context | No | ||
| prior_ideas | No | ||
| gemini_model | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, and it delivers comprehensively. It discloses the async nature (runs in background, returns job_id immediately), the output format, the expected timing (30s-4min), and the behavioral constraints (agents contribute 3-5 ideas, no synthesis, anti-bias gate). It also explains the semantic difference between research and prior_ideas. No behavioral aspect is left opaque.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is long but well-organized into focused paragraphs. It front-loads the core behavior and return type, then explains each optional parameter and composition. Each paragraph earns its place, but the length is near the upper bound of acceptable. It is structured rather than rambling, so it scores a 4.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity (12 params, no schema coverage, no annotations, and an output schema), the description covers the essential workflow and the most impactful parameters. It explains the anti-bias gate, the difference between research and prior_ideas, and the grounding pass. Missing: descriptions of verbose, skip_gh, no_context, host, and a few error-handling details, but those are minor. It is nearly complete for a working understanding.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description must explain parameters. It does explain the significant ones: research, prior_ideas, grounding, roles, gemini_model. However, it omits explanations for agents, skip_gh, verbose, no_context, host, and even cwd/topic are only implicit. For a tool with 12 parameters, the description adds value but leaves several parameters undocumented, forcing the agent to infer from names alone.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb and resource ('Start a q-brainstorm run'), states the async behavior, and names the sibling tools it complements (q_await, q_research). It clearly distinguishes this from q_plan_start, q_validate_start, etc., and explains the composition with q_research and q_await. An agent can immediately understand what this tool does and how it fits.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit when-to-use guidance: 'Between the start and the await, the caller is expected to list its own ideas — this is the structural anti-bias gate.' It also names alternatives and conditions: 'Distinct from prior_ideas, whose do-not-repeat framing...' and mentions specific flows like '--extended' and 'q-skystorm Stage 2' that select the grounding mode. This is unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
q_plan_startA
Start a q-plan run in the background. Returns {"job_id": str}
immediately. The current host's external seats run in parallel from a
structurally bias-free starting point. Retrieve results by
calling q_await with the returned job_id.
Between the start and the await, the caller is expected to form its own plan — this is the structural anti-bias gate.
Optionally assign a cognitive stance per agent via roles, a list
of 'stance:agent' strings (stances: skeptic, architect, security,
maintainer, analyst, neutral, visionary, pioneer). Unassigned agents
use their default stance.
gemini_model, when supplied, runs the gemini seat on that agy model for
this invocation only -- an id exactly as printed by agy models, e.g.
'claude-opus-4-6-thinking' to get a Claude answer from the same AI Pro
plan when Gemini quota is tight or a different perspective is wanted.
Expected wall-clock to completion: 30s-4min depending on the agents and codebase size.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | Yes | ||
| host | No | ||
| task | Yes | ||
| roles | No | ||
| agents | No | ||
| skip_gh | No | ||
| verbose | No | ||
| no_context | No | ||
| gemini_model | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden. It discloses background execution, immediate return, parallel seats, bias-free starting point, the anti-bias gate, optional role assignment, gemini_model substitution, and expected wall-clock time. It does not explicitly state side effects or permissions, but the behavior is largely transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a coherent paragraph with clear sections: execution model, the anti-bias gate, roles, gemini_model, and timing. It is somewhat verbose (e.g., 'structurally bias-free') but every sentence adds useful information and is appropriately front-loaded with the core behavior.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 9 parameters, no annotations, and an output schema, the description covers the high-level workflow and two parameters but omits critical invocation details like the meaning of 'cwd', 'task', 'host', 'agents', 'skip_gh', and 'no_context'. An agent would struggle to invoke it correctly without further documentation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description explains 'roles' (format and defaults) and 'gemini_model' (format and purpose), but ignores the other 7 parameters including required ones like 'task' and 'cwd'. With 0% schema description coverage, the description must compensate, but it covers only about 22% of parameters, leaving most ambiguous.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool starts a q-plan run in the background, returns a job_id immediately, and explains the anti-bias gate. It is distinct from siblings like q_brainstorm_start or q_validate_start by its explicit focus on structural anti-bias and the background execution model.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives concrete workflow guidance: start the run, then call q_await with the job_id, and it emphasizes the anti-bias gate as a reason to use this tool. However, it does not explicitly say when not to use it or contrast with alternative start tools like q_brainstorm_start.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
q_researchA
Fetch prior art for a topic from arXiv + OpenAlex + Europe PMC (papers), Context7 (library docs), GitHub (repos), and HuggingFace (models), and return a markdown digest.
Europe PMC covers the life-sciences preprint tier arXiv does not carry -- bioRxiv, medRxiv, Research Square -- so it is the source that earns its slot on biology/medicine topics and returns 0 on pure-software ones. Its hits are labelled by preprint server ("bioRxiv") and are NOT peer-reviewed; weigh them accordingly.
Not subject to the council's anti-bias gate -- this is external prior art,
not peer output. Call it during the own-work window of a q_brainstorm
or q-skystorm run to ground the synthesis. sources defaults to all
six; pass a subset like ["arxiv", "openalex"] to restrict it.
Query shaping matters: pass a query that is SHORT and distinctive --
short is not the same as generic. Anchor it in 2+ domain-specific terms (the
field PLUS the specific method/concept), never a bare common word ('data',
'model', 'network') or a token that doubles as an author surname -- those
keyword-match unrelated work (author names, generic surveys, stray docs) and
return non-zero but OFF-TOPIC noise -- sanity-check that returned titles
belong to your domain, and if they are off-topic the query was too generic:
re-anchor with more domain context and call q_research again rather than
leaning on them. (This same-domain check assumes you want grounding in
your own field -- if you are deliberately hunting cross-domain structural
analogies instead, judge a hit by structural kinship to the problem, not
literal subject-matter overlap; an off-domain hit is then the find, not
noise.) Not a full paragraph either. Per source: arXiv parses
topic as a boolean field -- a long/diffuse query loose-matches to
famous-but-irrelevant papers, and boolean punctuation (parens, AND/OR,
quotes) triggers a 400; OpenAlex tolerates prose but length dilutes
relevance to generic surveys; Context7 wants a library/topic name and will
keyword-match off-topic repos; GitHub/HuggingFace are popularity-ranked
artifact searches that whiff on non-software/non-ML topics. The digest's
per-source count footer shows which sources whiffed -- rework and retry
those, unless the 0 is domain-legitimate (GitHub/HuggingFace on a
non-software topic, Europe PMC on a non-biology one, Context7 on a topic
with no matching library), which is a real answer, not a gap to close.
Treat every other digest result as provisional until it earns trust: a 0 that is NOT one of the domain-legitimate cases above is not automatically "no prior art" either (it may just be a bad query), and non-zero hits that read scattered or off-topic are not evidence -- both are a signal to reframe (sharper domain anchor, fewer/different terms) and retry, not something to build a conclusion on.
Failed sources are reported inline under 'Sources unavailable' rather than failing the call -- each with a retry hint, and the right move differs by error. An errored source is almost never a dead backend: an arXiv error (400) means YOUR query is too long or has boolean punctuation, so shorten it to a few keywords, strip operators, and call q_research again; a 401/403 or an OpenAlex 503 is a CONFIG case, not a flake -- the key was rejected, or OpenAlex is load-shedding anonymous search, so a bare retry just loops (set the source's key -- OPENALEX_API_KEY is free -- or lean on the other sources and say so); only a plain timeout/flake is transient and worth retrying as-is. Do NOT report a source unavailable, and do NOT fall back on your own knowledge, until a reworked retry has ALSO failed -- treating the first error as terminal is the failure to avoid. Bounded by per-request timeouts (~10-15s each); the GitHub and HuggingFace backends fan out one request per distinctive query term (up to 4), run sequentially, so those two sources' wall-clock can reach a few times that.
The digest OPENS with a deterministic Research status: line -- OK,
RETRY-RECOMMENDED (USUALLY with a server-suggested shorter query to resubmit
verbatim, shown as · try: "..."; when it is ABSENT the detail text says what
to do, and the two absent cases differ -- a backend/infrastructure failure
says RETRY THE SAME query, while an un-shortenable query says RE-ANCHOR with
different domain terms), CONFIG (a key/anonymous-access problem no retry
fixes), or (in exploratory mode) LOW-OVERLAP. Act on it before anything else:
on RETRY-RECOMMENDED, resubmit the suggested query if one is given, else
follow the detail (retry the same query on an infrastructure failure, or
re-anchor with different domain-specific terms if it cannot be shortened) --
before concluding "no prior art". Mechanically-fixable failures (arXiv 400, a
transient flake) are already retried inside the tool -- a repaired source
shows a ↻ note, so a first-attempt error you never see was handled, not
hidden.
mode is 'grounded' (default; brainstorm -- home-domain grounding, where a
low-overlap result is a defect the verdict flags RETRY-RECOMMENDED) or
'exploratory' (skystorm -- a deliberate cross-domain method pivot, where low
overlap is expected and reported as LOW-OVERLAP without forcing a retry).
Exploratory mode also adds a ### Field map section (the OpenAlex
subfield distribution for the query) showing which fields the method
actually spans -- the skystorm topology readout. Query discipline is
identical in both modes; only the low-overlap interpretation differs.
| Name | Required | Description | Default |
|---|---|---|---|
| mode | No | grounded | |
| limit | No | ||
| topic | Yes | ||
| sources | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden, and it excels. It discloses internal retries ('Mechanically-fixable failures ... are already retried inside the tool'), error handling ('Failed sources are reported inline under 'Sources unavailable' rather than failing the call'), response format (markdown digest with a 'Research status:' line), per-source behaviors, and the distinction between domain-legitimate zero results and gaps. This level of transparency exceeds typical tool descriptions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very long but well-organized, front-loading the core purpose and then progressing into usage, error handling, and modes. Each paragraph serves a distinct function, yet some sections (e.g., the extended discussion of same-domain vs cross-domain checks) are arguably more detailed than necessary for an agent to invoke the tool. It is concise relative to its complexity but could be tightened without losing value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers every aspect an agent needs: what it returns (markdown digest, status line), how to interpret results (RETRY-RECOMMENDED, CONFIG, LOW-OVERLAP), error handling with specific retry guidance, per-source whiffing logic, mode differences, and query-shaping best practices. Even with an output schema (not shown), this description is entirely self-sufficient given the tool's complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Despite 0% schema coverage, the description explains the `topic` (query shaping), `sources` (defaults, subset pass), and `mode` (grounded vs exploratory) parameters in depth. However, the `limit` parameter is never mentioned – its purpose and effect on output are not explained. Since the schema provides no help, this is a noticeable gap, though the description compensates well for the other three parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a precise verb and resource: 'Fetch prior art for a topic from arXiv + OpenAlex + Europe PMC (papers), Context7 (library docs), GitHub (repos), and HuggingFace (models), and return a markdown digest.' This clearly distinguishes the tool from its siblings (planning, brainstorming, validation, review, await) by focusing on external prior-art retrieval. No ambiguity about what the tool does.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit when-to-use instructions: 'Call it during the own-work window of a `q_brainstorm` or `q-skystorm` run to ground the synthesis.' It also provides query-shaping rules, mode interpretation ('grounded' vs 'exploratory'), error-handling strategies, and when not to trust results. Since there are no sibling research tools, it doesn't contrast with alternatives, but it provides rich contextual guidance on exactly when and how to use the tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
q_review_startA
Start a q-review run in the background. Returns {"job_id": str}
immediately. Each agent independently reviews real code changes, then
converges across rounds. Round 1 is structurally bias-free; later rounds
embed each agent's own prior plus peers' priors so sustained agreement
becomes visible. Retrieve results by calling q_await with the returned
job_id.
Between the start and the await, the caller is expected to form its own code review of the diff — this is the structural anti-bias gate.
target selects what to review (default: branch vs main, committed +
uncommitted). 'working' = uncommitted tracked changes only; 'pr:N' or a
github PR URL = an open PR (title/body orient the review); 'A..B'/'A...B'
= an explicit range; 'all' = the whole codebase (agents read cwd — pair
with scope_path). An empty diff (other than 'all') short-circuits: the
job returns a 'nothing to review' message without running the council.
scope_path, when supplied, points at a scope doc declaring what is
in/out-of-scope and which risks are accepted; it is embedded verbatim so
the council does not converge on out-of-bounds findings.
extended runs 4 rounds with a stance rotation at round 3 (agents swap
stances and re-examine all priors); the default is 2 rounds with no
rotation. mode is 'revise' (agents soften/strengthen in light of peers)
or 'critique' (agents attack peer points).
verbose defaults to false: the council writes terse output (no padding,
path:line over pasted code, and later rounds collapse each still-held
finding to one HELD line while preserving the agreement count). Set true
only when you want the full unabridged deliberation — a much larger matrix.
Optionally assign stances per agent via roles, a list of 'stance:agent'
strings (stances: skeptic, architect, security, maintainer, analyst,
neutral, visionary, pioneer).
gemini_model, when supplied, runs the gemini seat on that agy model for
this invocation only (an id exactly as printed by agy models, e.g.
'claude-opus-4-6-thinking').
Expected wall-clock to completion: 1-8min default; 4-15min when extended=true. Pick extended deliberately.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | Yes | ||
| host | No | ||
| mode | No | revise | |
| roles | No | ||
| agents | No | ||
| target | No | ||
| skip_gh | No | ||
| verbose | No | ||
| extended | No | ||
| no_context | No | ||
| scope_path | No | ||
| gemini_model | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden and it delivers richly. It discloses that the call returns immediately instead of blocking (async job), gives expected wall-clock timing (1-8min default, 4-15min extended), spells out the empty-diff short-circuit that returns a 'nothing to review' message without running the council, details verbose output behavior (HELD lines, agreement counts), and explains the stance rotation at round 3 for extended mode. This far exceeds baseline behavioral disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is long, but every paragraph earns its place for a 12-parameter async background tool. It is front-loaded with purpose and the return contract, then flows logically through the anti-bias gate, target values, scope, execution modes, output verbosity, and timing. The final timing note is a genuine value-add. It could be tightened slightly, but the length is justified by complexity rather than padding.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool of this complexity — 12 params, async behavior, background execution, no annotations, 0% schema coverage — the description is remarkably complete, covering the workflow, the caller's required participation (anti-bias gate), short-circuit behavior, per-parameter semantics, and timing expectations. The output schema exists so return values need no further explanation, and job_id is already surfaced. The only completeness gap is the five undocumented parameters (agents, skip_gh, no_context, host, cwd) that the description leaves to the schema, which is empty.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate — and it does for the majority. target gets a detailed breakdown of every value ('working', 'pr:N'/URL, 'A..B'/'A...B', 'all', default branch-vs-main), and scope_path, extended, mode, verbose, roles, and gemini_model are each explained. However, five of the twelve parameters (cwd, host, agents, skip_gh, no_context) are not touched in the description and, with zero schema descriptions, remain entirely undocumented — a real gap for a tool where agents and skip_gh likely matter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The opening line states a specific verb and resource — "Start a q-review run in the background. Returns {"job_id": str} immediately" — and explains the mechanism (independent agent review then convergence across rounds). This clearly distinguishes a review tool from its siblings q_plan_start, q_brainstorm_start, and q_validate_start, which by naming convention cover different activities. No ambiguity about what this tool does.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives strong usage context: it is for reviewing real code changes, and it explicitly routes retrieval to a sibling — "Retrieve results by calling `q_await` with the returned job_id" — which orients the agent within the family of q_* tools. It also defines the structural anti-bias gate the caller must pass between start and await. However, it never explicitly states when NOT to use this tool versus q_validate_start or the other review siblings; exclusions are implied rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
q_validate_startA
Start a q-validate run in the background. Returns {"job_id":
str} immediately. Each agent independently reviews the plan file,
then deliberates across rounds. Round 1 is structurally bias-free;
later rounds embed each agent's own prior plus peers' priors.
Retrieve results by calling q_await with the returned job_id.
Between the start and the await, the caller is expected to form its own review — this is the structural anti-bias gate.
extended runs 4 rounds with a stance rotation at round 3 (agents
swap stances and re-examine all priors); the default is 2 rounds
with no rotation. mode is 'revise' (agents soften/strengthen in
light of peers) or 'critique' (agents attack peer points).
verbose defaults to false: the council writes terse output (no padding,
path:line over pasted code, later rounds omit restating unchanged points).
Set true only for the full unabridged deliberation — a much larger matrix.
Optionally assign stances per agent via roles, a list of
'stance:agent' strings (stances: skeptic, architect, security,
maintainer, analyst, neutral, visionary, pioneer).
gemini_model, when supplied, runs the gemini seat on that agy model for
this invocation only (an id exactly as printed by agy models, e.g.
'claude-opus-4-6-thinking').
Expected wall-clock to completion: 1-8min default; 4-15min when extended=true. Pick extended deliberately.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | Yes | ||
| host | No | ||
| mode | No | revise | |
| roles | No | ||
| agents | No | ||
| skip_gh | No | ||
| verbose | No | ||
| extended | No | ||
| plan_path | Yes | ||
| no_context | No | ||
| gemini_model | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It comprehensively explains the background execution, immediate return of job_id, the bias-free first round and later rounds embedding priors, the extended mode's 4 rounds and stance rotation, the verbose output toggle, and the gemini_model override for this invocation. It also discloses expected wall-clock times and the anti-bias gate expectation, making the tool's behavior highly transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is detailed but well-structured, front-loading the core behavior and return value before diving into options. It uses clear paragraphs and imperative sentences that earn their place. While somewhat long, the length is justified by the tool's complexity, and it could be slightly more concise without losing essential information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (11 parameters, no schema descriptions), the description covers the main workflow and several key parameters, and provides expected wall-clock times. However, it omits explanations for critical parameters like plan_path and cwd, and does not clarify the exact output format beyond job_id (though q_await likely handles results). The description is strong on purpose and behavior but incomplete in parameter coverage, so it is not fully complete for an agent to confidently invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate for parameter documentation. It explains extended, mode, verbose, roles, and gemini_model in detail, but leaves essential parameters like plan_path, cwd, host, agents, skip_gh, and no_context unexplained. The required plan_path is only referred to generically as 'plan file', which is insufficient for an agent to know exactly what to provide. The description only partially covers the 11 parameters, making parameter semantics incomplete.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it starts a q-validate run in the background and returns a job_id immediately. It describes the process of agents reviewing the plan file and deliberating, which distinguishes it from sibling tools like q_plan_start, q_brainstorm_start, and q_review_start. The tool's purpose is unambiguous and specific.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit guidance on retrieving results via q_await with the returned job_id and explains the structural anti-bias gate that the caller should form its own review between start and await. It also advises when to use extended mode ('Pick extended deliberately') and explains the default vs extended rounds. However, it does not explicitly contrast this tool with sibling start tools, relying on tool names for differentiation.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
6 tool updates
v0.0.63- First observed
q_await - First observed
q_brainstorm_start - First observed
q_plan_start - First observed
q_research - First observed
q_review_start - First observed
q_validate_start
TDQS
Each tool has a clearly distinct function: planning, brainstorming, validation, code review, research, and result retrieval. There is no overlap in purpose; descriptions reinforce the boundaries.
All tools follow a uniform 'q_' prefix with an action verb (plan_start, brainstorm_start, validate_start, review_start, research, await). The two non-start tools still share the prefix and verb style, making the pattern predictable.
Six tools is well-scoped for a code-quality council suite: four distinct run types plus research and a blocking retrieval. Each tool earns its place without redundancy or bloat.
The core lifecycle (start runs, retrieve results) is fully covered, and research supports the workflow. Minor gaps exist—no job-listing or cancellation tool—but agents can work around them by awaiting each job, so the surface remains practical.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
- ParleyOAuthdev.weldra
Coordination hub for AI coding agents: message teammates, ask humans, audit every event.
Multi-LLM council: 25+ frontier models in parallel, consensus scoring, verdict-first code review.
Shared control plane for AI coding agents — tasks, memory, decisions, file locks. 12 tools.
AI work orchestration for plans, tasks, teams, and coding-agent dispatch.
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceEnables AI coding agents to read each other's conversation history read-only and sanitized, so you can continue work across different tools without re-explaining context.MIT
- FlicenseNot gradedqualityBmaintenanceAllows users to manage multiple remote AI coding agents from a single Claude Code session, with a controlled execution model where operations require moderator approval.-
- AlicenseNot gradedqualityAmaintenanceEnables multi-model LLM council reviews and parallel sidecar conversations within Claude, allowing Claude to orchestrate structured reviews from various AI models and fold their responses back into the session.1,7212MIT
- AlicenseNot gradedqualityAmaintenanceEnables coding agents to perform workspace-confined file operations, read-only Git inspection, and structured shell commands, while requiring out-of-band human approval for mutations and external executions and maintaining an audit trail.3MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/sdewell/code-quorum'
If you have feedback or need assistance with the MCP directory API, please join our Discord server