Run read-only Antigravity exploration task
explore_taskDelegate a read-only exploration and diagnosis task to the Antigravity CLI, blocking until the headless run exits. Get answers and summaries without file changes, with a git-based audit.
Instructions
Delegate a fast read-only exploration and diagnosis task to the Antigravity (agy) CLI and block until the headless run exits (synchronous; the tool call IS the wait). Defaults: mode plan (read-only), effort low; the mode preset is fixed, so callers cannot weaken the read-only posture. Produces answers and summaries without modifying files. Returns the same report as general_task, including the git-based files_touched/scope_violations audit. Headless runs auto-DENY tool requests that would prompt instead of hanging (surfaced in denied_actions); permission to allow them is granted by the user via permissions.allow rules in their own Antigravity settings.json (e.g. command()), which this server never edits. auto_approve is the expert full-auto switch (--dangerously-skip-permissions); pair it with sandbox when granting it.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | No | Working directory for the delegated task (project the sub-agent operates on). Defaults to the server's cwd. | |
| agent | No | Antigravity agent profile to use (see list_agents) | |
| model | No | Model for the task, e.g. gemini-3.8-flash-medium, claude-opus-5-5-high (see list_models) | |
| effort | No | Reasoning effort for the task | |
| prompt | Yes | Full, self-contained task description for the sub-agent. Include all needed context and file paths. | |
| project | No | Antigravity project ID or name for the task | |
| sandbox | No | Run the task with Antigravity's terminal sandbox flag enabled (--sandbox) | |
| add_dirs | No | Extra directories to add to the task's workspace (--add-dir, repeatable) | |
| edit_scope | No | Give the sub-agent an edit boundary (files and directories relative to cwd, or absolute). Out-of-scope changes are surfaced in the result's files_touched/scope_violations audit; it is an audit-and-replay control, not a sandbox — the CLI writes files itself. | |
| timeout_ms | No | Idle timeout for the run in ms (0..3600000; 0 disables the idle kill for this run). Resets on every stdout/stderr chunk from the child; kicks in after this much child silence and kills the child (SIGTERM, then SIGKILL after 5s). Default: 900000 (AGY_MCP_IDLE_TIMEOUT_MS). | |
| auto_approve | No | Expert switch: pass --dangerously-skip-permissions so headless runs stop auto-denying gated tools. Pair it with sandbox when granting it. Allowed by this server. | |
| conversation_id | No | Existing agy conversation ID to continue/resume instead of starting a new conversation. Returned by previous task results. |