pi-delegate-mcp
██████╗ ██╗ ██████╗ ███████╗██╗ ███████╗ ██████╗ █████╗ ████████╗███████╗
██╔══██╗██║ ██╔══██╗██╔════╝██║ ██╔════╝██╔════╝ ██╔══██╗╚══██╔══╝██╔════╝
██████╔╝██║ ██║ ██║█████╗ ██║ █████╗ ██║ ███╗███████║ ██║ █████╗
██╔═══╝ ██║ ██║ ██║██╔══╝ ██║ ██╔══╝ ██║ ██║██╔══██║ ██║ ██╔══╝
██║ ██║ ██████╔╝███████╗███████╗███████╗╚██████╔╝██║ ██║ ██║ ███████╗
╚═╝ ╚═╝ ╚═════╝ ╚══════╝╚══════╝╚══════╝ ╚═════╝ ╚═╝ ╚═╝ ╚═╝ ╚══════╝
███╗ ███╗ ██████╗██████╗
████╗ ████║██╔════╝██╔══██╗
██╔████╔██║██║ ██████╔╝
██║╚██╔╝██║██║ ██╔═══╝
██║ ╚═╝ ██║╚██████╗██║
╚═╝ ╚═╝ ╚═════╝╚═╝
MCP-сервер, который предоставляет кодинг-агента pi как делегируемого, управляемого работника.
Направьте на него Claude Code (или любой MCP-хост) и делегируйте работу любому из ~38 провайдеров pi (DeepSeek, Grok, GLM, Kimi, Qwen, Codex, OpenRouter, локальный llama.cpp) — контекст субагента останется за пределами вашего основного диалога.
Для чего это нужно
Ваша основная среда работает на дорогой модели с контекстным окном, которое вам дорого. Многое из того, что она делает, не требует этой модели и активно вредит контексту: поиск по репозиторию всех мест вызова, чтение файла на 2000 строк ради ответа на один вопрос, аудит того, что осталось после рефакторинга.
Передайте эту работу делегату:
Стоимость. Черновая работа выполняется на DeepSeek, GLM, Kimi, Qwen или локальном llama.cpp. Вы платите по ценам передовых моделей только за те рассуждения, которые действительно в них нуждаются.
Контекст. Делегат читает файлы за свой счёт и возвращает результат. Прочитанные им 200 КБ никогда не попадают в ваш диалог.
Радиус поражения. Делегаты по умолчанию доступны только на чтение (
read, grep, find, ls), что обеспечивается при создании сессии. Дешёвая модель, выполняющая исследовательскую работу, не может коснуться вашего дерева, если вы явно не разрешите ей это.
Делегат — это всегда агент pi. Codex, Grok, DeepSeek и остальные поставляют модель под ним; это не обёртка над их CLI.
Related MCP server: SubagentBridge
Почему pi, а не opencode или CLI-обёртка?
Делегатом можно управлять, только если открыты два канала: вы должны иметь возможность перенаправить его в середине задачи, а он — задать вам вопрос и блокироваться, пока вы не ответите. Большинство способов управления кодинг-агентом из другой программы закрывают оба канала.
| opencode SDK | этот сервер | |
Работает в том же процессе | нет (подпроцесс) | нет (HTTP-клиент к | да ( |
Перенаправление текущего хода | нет | только |
|
Агент может задать вам вопрос | нет ( | нет в session API |
|
Модель для каждого вызова | нет | да | аргумент |
pi -p и --mode json устанавливают ctx.hasUI = false. Делегат, запущенный таким образом, является
fire-and-forget по построению: он не может задать вопрос, и вы не можете его перенаправить.
opencode SDK — это типизированный клиент для отдельного серверного процесса: createOpencode()
запускает opencode serve и общается с ним по HTTP. Чистый дизайн, но это означает второй процесс,
за которым нужно следить, а поверхность сессии, которую он предоставляет (prompt, abort, revert,
messages), не имеет управления посреди хода и не даёт агенту возможности спросить вызывающую сторону.
pi поставляет createAgentSession как встраиваемую библиотеку. Этот сервер держит объект сессии
в своём процессе, так что session.steer() может доставить сообщение после текущего вызова инструмента
и до следующего вызова модели, а синтетический uiContext перехватывает вопросы агента и паркует их
до answer. Никаких внешних процессов не запускается; ни за чем не нужно следить.
* Вопросы исходят от расширений pi, поэтому этот канал открыт только для делегатов, запущенных
с extensions: true. См. Веб-поиск и другие инструменты расширений.
(В таблице сравнивается канал делегирования, а не песочница; у opencode есть собственная конфигурация прав. См. Только чтение по умолчанию о том, что этот сервер обеспечивает, а что нет.)
Инструменты
Инструмент | Назначение |
| Вызывайте первым. Сообщает о доступных моделях, разрешённых инструментах и о том, как управлять делегатом. Любой другой инструмент отказывается работать, пока |
| Делегирование в фоне. Немедленно возвращает |
| Массовый запуск до 10 делегатов одним вызовом. Проверяется как пакет, поэтому ничего не запустится, если одна задача плохая. |
| Делегирование с ожиданием завершения. Только для быстрых вопросов. |
| Состояние, ходы, использованные инструменты, последний текст и ожидающие вопросы. |
| Перенаправление работающего агента. Сообщение доставляется после его текущего вызова инструмента. |
| Дать завершившему работу делегату ещё один ход. Он сохраняет всё, что прочитал, поэтому вам не нужно заново объяснять задачу. |
| Ответ на вопрос, обнаруженный |
| Остановить сессию; частичный вывод остаётся читаемым. |
| Список моделей, которые может использовать этот делегат. |
| Список сессий, работающих и завершённых. Фильтр по |
| Удалить завершённую сессию из истории, освободив её id. |
Установка
Требуется Node.js 22.19+ и рабочая установка pi, в которой вы хотя бы раз вошли
(pi, затем /login).
Claude Code
claude mcp add pi -e PI_DELEGATE_MODEL=openrouter/stealth/ox-alpha -- npx -y pi-delegate-mcpЛюбой MCP-хост через .mcp.json
{
"mcpServers": {
"pi": {
"command": "npx",
"args": ["-y", "pi-delegate-mcp"],
"env": { "PI_DELEGATE_MODEL": "openrouter/stealth/ox-alpha" },
"timeout": 1800000
}
}
}npx разрешает пакет при каждом запуске. Чтобы зафиксировать версию, установите глобально и вызывайте
бинарник напрямую:
npm install -g pi-delegate-mcp{ "mcpServers": { "pi": { "command": "pi-delegate-mcp", "timeout": 1800000 } } }Держите ключ сервера коротким, поскольку он добавляется префиксом к имени каждого инструмента
(mcp__pi__spawn).
Из исходников
git clone https://github.com/howznguyen/pi-delegate-mcp && cd pi-delegate-mcp
npm install && npm run build && npm linkПервый запуск
Попросите агента делегировать что-нибудь. Он один раз вызовет init, чтобы узнать, что доступно этому
серверу, а затем spawn:
{ "id": "audit-01", "label": "who still imports onnxruntime",
"prompt": "Search this repo for anything still importing onnxruntime and list the files.",
"cwd": "/path/to/repo" }{ "sessionId": "audit-01", "state": "running", "model": "opencode-go/deepseek-v4-flash",
"activeTools": ["read", "grep", "find", "ls"] }spawn возвращается немедленно. Опрашивайте его через status, чтобы получить упорядоченный след
инструментов и ответ, или через sessions, когда в полёте несколько делегатов. Если init падает,
он точно сообщает, чего не хватает: pi не установлен, ни один провайдер не авторизован или область
моделей не соответствует ничему.
Названия моделей в примерах ниже приведены для иллюстрации. Выполните models, чтобы увидеть, чего
на самом деле может достичь ваша установка pi.
Прослеживаемость
spawn и run оба принимают ваш собственный id и произвольный текстовый label:
{
"id": "search-audit-01",
"label": "what ONNX removal left behind",
"prompt": "...",
"model": "opencode-go/deepseek-v4-flash"
}Id имеют формат [A-Za-z0-9._:-], длину 1–64 символа, должны начинаться с буквы или цифры и быть
уникальными среди живых сессий. Если не указан, генерируется UUID.
Завершённые сессии остаются читаемыми через status и sessions вместо исчезновения, так что вы
можете вернуться и проверить, что делегат на самом деле делал. Сохраняются PI_DELEGATE_HISTORY
последних завершённых сессий (по умолчанию 50); forget удаляет одну досрочно.
status возвращает упорядоченный след toolCalls: каждый инструмент, который запускал делегат,
с аргументами и временем. Добавьте verbose: true, чтобы получить id вызовов и результаты:
{
"seq": 1,
"id": "call_467b4bb4…",
"name": "bash",
"state": "ok",
"ms": 10,
"args": "{\"command\":\"echo hello-trace\"}",
"result": "hello-trace\n"
}Аргументы и результаты обрезаются (PI_DELEGATE_TRACE_ARGS, PI_DELEGATE_TRACE_RESULT), а длина
отброшенного записывается, чтобы одно read большого файла не затопило ваш контекст.
Как дать делегату ещё один ход
Завершивший работу делегат не отработан. pi хранит его сессию в памяти, поэтому follow_up повторно
обращается к тому же агенту, и всё, что он уже прочитал, остаётся в контексте:
{ "sessionId": "search-audit-01", "prompt": "Now check whether the build files reference it too" }{ "sessionId": "search-audit-01", "state": "running", "turnsSoFar": 1 }Делегат продолжает с того места, где остановился. Он по-прежнему держит файлы, прочитанные на первом ходе, поэтому второй вопрос стоит один вызов модели, а не новую сессию, заново читающую репозиторий.
Это дешёвый способ поговорить с делегатом. Запуск нового означает повторное объяснение задачи и оплату повторного чтения тех же файлов, а ответ приходит без всех рассуждений, которые к нему привели.
follow_up отказывает делегату, который всё ещё работает, потому что перенаправление посреди задачи —
это задача steer. Эти два инструмента не взаимозаменяемы: steer доставляет сообщение между вызовами
инструментов работающего агента, follow_up начинает новый ход на завершённом.
Веерный запуск
spawn_batch запускает целый пакет одним вызовом. Задачи наследуют пакетные model, cwd, tools
и extensions и переопределяют их по отдельности там, где нужно:
{
"idPrefix": "audit",
"model": "opencode-go/deepseek-v4-flash",
"cwd": "/repo",
"tools": ["ls"],
"tasks": [
{ "prompt": "What still imports onnxruntime?", "label": "imports" },
{ "prompt": "Which build files still reference ONNX?", "label": "build" },
{
"prompt": "Any ONNX model files left on disk?",
"label": "artifacts",
"model": "opencode-go/ox-alpha-free"
}
]
}Это даёт им имена audit-01, audit-02, audit-03 и возвращается за несколько миллисекунд, поскольку
запуск делегата не ждёт его размышлений.
Пакет проверяется до запуска чего-либо: формат id, дубликаты id внутри пакета, уже живые id, запрещённые инструменты и каждое имя модели. Одна плохая задача приводит к ошибке вызова, и ничего не запускается. Наполовину выполненный веерный запуск — худший исход, потому что вы платите за делегатов, которые запустились, и всё равно должны выяснить, какие не запустились.
Опрашивайте весь пакет одним вызовом sessions, а не по одному status на делегата. Переходите на status
только для того делегата, которого действительно хотите прочитать. steer и abort остаются
посессионными.
Выбор модели для каждого вызова
model в любом вызове переопределяет PI_DELEGATE_MODEL. Нераспознаваемое имя — это жёсткая ошибка,
а не тихий откат к модели по умолчанию, потому что тихий откат — это как вы в итоге платите за модель,
которую не заказывали.
Какие имена распознаются, решает собственная область enabledModels pi, которую этот сервер
обеспечивает, а не просто отображает:
opencode-go/deepseek-v4-flash -> ok (listed in enabledModels)
opencode-go/glm-5.3 -> refused (out of scope)
knowns-hub/claude-opus -> ok (custom provider, see below)Пользовательские провайдеры обходят область. Любая модель, обслуживаемая провайдером, объявленным
в ~/.pi/agent/models.json, предлагается, даже если enabledModels не называет её, на том основании,
что ручное объявление провайдера уже является намерением его использовать. Вот почему список может быть
гораздо длиннее enabledModels: три записи в области плюс два пользовательских провайдера легко могут
означать пятнадцать предлагаемых моделей. init явно сообщает об этом в models.scopeNote, когда это
применимо.
Два переключателя меняют это:
Эффект | |
| Соблюдать |
| Отключить область полностью. Любая аутентифицированная модель доступна. |
Выполните models, чтобы увидеть, что реально доступно при текущей настройке.
Строка состояния
Claude Code разрешает ровно одну команду statusLine, поэтому pi-delegate-statusline оборачивает
то, что вы уже запускаете, и добавляет сегмент с делегатами этого рабочего пространства:
{
"statusLine": {
"type": "command",
"command": "PI_DELEGATE_STATUSLINE_WRAP=ccstatusline pi-delegate-statusline",
"refreshInterval": 10
}
}Удалите PI_DELEGATE_STATUSLINE_WRAP, чтобы выводить только сегмент pi.
π ▸ audit engine·t1·12s audit index·t2·8s running, with turn counts and elapsed time
π ▸ migrate·t7·3m04s ?1 waiting one delegate is blocked on a question
π ✓2 finished, nothing runningКакие делегаты относятся к какой сессии
Фильтрации по каталогу недостаточно: две сессии Claude Code, открытые в одном репозитории, показывали бы делегатов друг друга. Вместо этого атрибуция использует родословную процессов.
MCP-хост порождает один сервер на сессию, поэтому сервер записывает process.ppid — pid хоста. Строка
состояния, порождённая тем же хостом, проходит по собственной родословной и оставляет только те файлы
состояния, чей hostPid она в ней находит. Один репозиторий, две сессии — никаких пересечений. Каталог
остаётся фильтром-запасным вариантом для файлов состояния, записанных до появления этой возможности.
Состояние хранится в $XDG_STATE_HOME/pi-delegate-mcp/<pid>.json (для перемещения используется PI_DELEGATE_STATE_DIR). Файлы удаляются, когда процесс завершился, и только по ESRCH, поскольку EPERM означает, что процесс жив под другим пользователем. Серверы также завершаются сами, когда закрывается stdin или исчезает pid хоста, так что хост, умирающий без закрытия транспорта, не оставляет после себя ничего.
Только чтение по умолчанию
Инструменты ограничиваются набором read, grep, find, ls при создании сессии. Всё остальное отклоняется ещё до создания сессии.
Чтобы расширить этот набор, перечислите дополнительные инструменты на сервере:
"env": { "PI_DELEGATE_ALLOW_TOOLS": "bash" }или PI_DELEGATE_ALLOW_WRITE=1, чтобы разрешить всё.
bash — это не компромисс. pi не имеет системы разрешений, поэтому делегат, имеющий bash, может записывать файлы, удалять их и выходить в сеть независимо от того, есть ли write и edit в его списке. Отказ от этих двух при разрешении bash фиксирует ваше намерение; он ничего не обеспечивает. Запросы разрешений и хуки Claude Code никогда не видят того, что делает pi. Если вам нужна настоящая граница, запускайте этот сервер в контейнере.
Веб-поиск и другие инструменты расширений
Собственные инструменты pi — это read, grep, find, ls, bash, powershell, write, edit. Среди них нет ни поиска, ни загрузки. Они появляются из расширений pi, которые регистрируют собственные инструменты, и делегат может их использовать.
Укажите extensions: true в вызове и разрешите имена инструментов на сервере:
"env": { "PI_DELEGATE_ALLOW_TOOLS": "web_search,fetch_content" }{ "prompt": "Find the current Node LTS version and tell me just the number",
"extensions": true, "tools": ["read", "grep", "find", "ls", "web_search"] }{ "seq": 1, "name": "web_search", "state": "ok", "ms": 2568,
"args": "{\"query\":\"latest stable Node.js LTS version\",\"numResults\":5}" }Именно так вы даёте делегату доступ к сети без передачи ему bash. web_search умеет только искать, и он проходит через тот же список разрешений, что и любой другой инструмент, поэтому режим только для чтения по умолчанию не меняется для вызовов, которые его не запрашивают.
Какие инструменты существуют, зависит от того, что установил пользователь, запускающий сервер. pi-web-access предоставляет web_search, fetch_content, source_check и get_search_content. pi-mcp-adapter связывает MCP-серверы из ~/.pi/agent/mcp.json и предоставляет их как mcp. У pi нет собственного MCP-клиента, поэтому это расширение — единственный путь к нему.
extensions: true доверяет всем установленным расширениям, а не только тому, которое вы хотели. Они загружаются как набор, работают с полными привилегиями процесса этого сервера, а некоторые открывают сокеты и таймеры, которые переживают сессию. Включайте его по вызову, для тех делегатов, которым это нужно, а не оставляйте включённым по умолчанию. Это также стоит реального времени запуска, поэтому оно выключено, пока не запрошено.
Конфигурация
Переменная окружения | По умолчанию | Значение |
| стандартная для pi | Модель, используемая, когда в вызове не указан |
| не задана | Список дополнительных разрешённых инструментов через запятую, например |
| не задана |
|
|
| Завершённые сессии, сохраняемые для просмотра |
|
| Максимальное число символов аргументов инструмента, сохраняемых в трассировке |
|
| Максимальное число символов результатов инструмента, сохраняемых в трассировке |
|
| Потолок количества задач на один вызов |
|
| Выше этого значения |
| каталог состояния XDG | Где публикуется состояние статусной строки |
| не задана | Команда статусной строки, которую нужно обернуть и к которой нужно дописывать |
| не задана | Файл, в который при каждом рендере статусной строки добавляется метка времени, для отладки |
|
| Интервал уведомлений о прогрессе во время |
| не задана |
|
| не задана |
|
|
| Откуда читаются |
Долго выполняющаяся работа
MCP TypeScript SDK по умолчанию использует 60-секундный тайм-аут запроса, который реальная задача превысит. Три защиты в порядке предпочтения:
Используйте
spawn+status. Ничто не блокируется, поэтому тайм-аут не применяется.runотправляет периодические уведомления о прогрессе, которые сбрасывают тайм-аут хоста.Поднимите потолок с помощью
"timeout"в.mcp.jsonилиMCP_TOOL_TIMEOUTв окружении.
CLAUDE_AUTO_BACKGROUND_TASKS=1 заставляет Claude Code переводить длинные MCP-вызовы в фоновый режим примерно через ~2 минуты. Учтите, что уведомления о прогрессе отбрасываются после перевода вызова в фоновый режим, поэтому выбирайте (1) или (3), а не оба.
Аутентификация
Сервер не обрабатывает учётные данные. pi аутентифицируется из ~/.pi/agent/auth.json, затем из переменных окружения. MCP-хосты часто запускают серверы с урезанным окружением, поэтому предпочитайте auth.json (запустите pi один раз и выполните /login) экспорту ключей в профиле оболочки.
Разработка
npm install
npm run build # tsc, src/*.ts -> dist/
npm run typecheck # tsc --noEmit, strict
npm run test:ci # offline: boots the server over stdio and lists its tools
npm test # full suite: needs a logged-in pi, makes real model callstest:ci — это то, что запускает CI и на что опирается prepublishOnly, потому что ему не нужны учётные данные и сеть. npm test запускает реальных делегатов против реальных провайдеров, поэтому это стоит денег и работает только там, где выполнен вход в pi.
Путь | Что там находится |
| Все переменные окружения, читаемые в одном месте |
| Список разрешённых инструментов и шлюз, который его обеспечивает |
| Карта сессий, занятие id, вытеснение истории |
| По одному модулю на группу MCP-инструментов |
| Всё, что взаимодействует с pi SDK |
| Публикация файла состояния и бинарный файл статусной строки |
Релизы управляются тегами. npm version patch && git push --follow-tags запускает сборку и тесты, а затем публикует через OIDC trusted publishing, поэтому нигде в репозитории не хранится npm-токен.
Сообщения о проблемах (issues) и pull request'ы приветствуются. Если вы сообщаете о делегате, который вёл себя некорректно, полезно приложить трассировку toolCalls из status с verbose: true.
Аналоги
abatilo/pi-mcp-bridge идёт более простым путём: запускает pi --mode json -p --session-id <uuid> и позволяет pi сохранять сессии на диске, так что мост вообще не хранит состояние. Элегантно и стоит прочтения. Чтобы достичь этого, он жертвует управлением, вопросами и контролем над инструментами.
Лицензия
MIT
Available Tools
12 toolsabortA
Stop a running pi session. Partial output stays readable via status.
| Name | Required | Description | Default |
|---|---|---|---|
| sessionId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses that partial output remains readable after abort, which is a useful behavioral detail beyond the simple action. It does not detail other side effects, but for a simple abort tool this is adequate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is one clear sentence with an additional clause. It is front-loaded with the main action and adds a relevant detail. No wasted words, though it could be slightly more structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the simplicity of the tool (one param, no output schema), the description covers the core action and a key consequence. However, it lacks details on error conditions, idempotency, or what 'running' means precisely. Acceptable but not comprehensive.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description does not explain the sessionId parameter at all. The agent must infer that sessionId refers to the ID of the session to abort. With low coverage, the description should compensate, but it does not.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States the specific action 'Stop a running pi session' with a clear resource (pi session). It distinguishes from siblings like run, status, and spawn by focusing on termination. The verb 'abort' is reinforced by the description.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implies when to use (to stop a running session) but does not explicitly contrast with alternatives. However, it does mention that 'Partial output stays readable via status', which hints at using status afterwards. No explicit when-not to use, but the mention of status provides some context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
answerA
Answer a question raised by a pi agent. Get requestId from status. Only pi extensions can ask, so questions appear only for delegates spawned with extensions: true; the MCP adapter's tool-approval and elicitation prompts are the usual source. A delegate waiting on one is blocked until you answer it.
| Name | Required | Description | Default |
|---|---|---|---|
| value | Yes | Chosen option, text, or boolean for a confirm | |
| requestId | Yes | ||
| sessionId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, and it does disclose a critical behavioral trait: 'A delegate waiting on one is blocked until you answer it,' i.e. this call has a real unblocking side effect. It also explains the origin of requests (MCP adapter tool-approval and elicitation prompts), which helps an agent recognize legitimate questions. It omits permission/auth requirements for the caller and what a successful answer returns.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three tight sentences, front-loaded with the core purpose and immediately followed by the operational detail (where to get requestId). No filler or restatement of the tool name. Slightly dense mid-sentence clause, but nothing wasted.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 3-required-param, no-output-schema tool with no annotations, the description covers purpose, prerequisite lookup, source of requests, and the blocking consequence. The main remaining gap is that `sessionId` is never explained and there is no statement of what a valid answer looks like beyond the schema's `value` types.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is only 33% (only `value` is described), so the description must compensate. It does add genuine meaning for `requestId` by pointing to `status` as its source. However, `sessionId` is left entirely unexplained in both schema and description, so the compensation is partial.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb+resource ('Answer a question raised by a pi agent') that is clearly distinct from siblings like status, spawn, or steer. It scopes the tool to a narrow case (questions from pi extensions), so an agent can tell it apart from generic session tools. It stops just short of 5 because it never characterizes what an 'answer' does downstream beyond unblocking the caller.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives a clear prerequisite chain: get `requestId` from `status`, and questions only exist for delegates spawned with `extensions: true`. That effectively tells the agent the condition under which this tool is callable. It doesn't state a when-not-to-use or name a fallback tool if no question is pending, so it falls short of explicit exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
follow_upA
Send another prompt to a delegate that has already finished, keeping everything it read and said. Use this instead of spawning a fresh delegate and re-explaining the task: the session still holds its own context, which yours never had to absorb. Returns immediately; poll with status as usual. For a delegate that is still working, use steer instead.
| Name | Required | Description | Default |
|---|---|---|---|
| prompt | Yes | The next turn for this delegate | |
| sessionId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Given no annotations, the description carries the full burden. It discloses context preservation, immediate return (non-blocking), and the need to poll with `status`. It also states the pre‑condition (delegate finished). It doesn't cover error cases or side effects explicitly, but for this tool the key behaviors are well communicated.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences pack purpose, usage, alternatives, and behavior with zero filler. The primary instruction (use for finished delegates) is front-loaded, and each clause serves a purpose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple 2-parameter tool without an output schema, the description covers the essential workflow: when to use, what it does, and how to obtain results (poll via `status`). Minor gaps like error handling or repeated follow‑ups are not critical for an agent to call it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema documents the `prompt` parameter, but `sessionId` is left undocumented. The description does not add explicit meaning for `sessionId` beyond the name and context. With 50% schema coverage, this is borderline; the description could have compensated by explaining that `sessionId` identifies the finished delegate session.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clear action (send another prompt) targeted at a specific resource (a finished delegate) while preserving context. Explicitly distinguishes from spawn and steer, making the tool's purpose unambiguous even among many siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides direct guidance to use this instead of spawning a fresh delegate, and explicitly directs to `steer` for a working delegate. The when-to-use and when-not-to-use conditions are spelled out, leaving no ambiguity.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
forgetA
Drop a finished session from the review history, freeing its id for reuse.
| Name | Required | Description | Default |
|---|---|---|---|
| sessionId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It clearly discloses the destructive effect ('Drop'), the target ('review history'), and the side effect ('freeing its id for reuse'). It does not mention irreversibility or error behavior, but the core behavior is transparent and specific.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, front-loaded sentence with no filler. Every word contributes meaning, and the most important action ('Drop') comes first.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter tool with no output schema, the description states the operation, the constraint (finished session), and the outcome (id reuse). It could have pointed to sessions for finding sessionId or to abort for running sessions, but nothing critical is missing for selecting and invoking the tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema gives no description for sessionId, so the description adds meaning by tying it to a finished session's id and explaining the reuse consequence. It does not explicitly name the parameter or explain where to find sessionId, but the parameter name plus the description make the intent clear.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Drop') and resource ('finished session from the review history'), and clarifies the consequence ('freeing its id for reuse'). It also distinguishes itself from abort by specifying the session must be finished.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies this is for finished sessions only, which separates it from running-session tools like abort. However, it never explicitly names an alternative or states when not to use this tool, leaving some routing inferred rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
initA
READ THIS FIRST. Reports what this server can reach and how to drive it: permitted tools, the default model, models available per provider, and the recipes for delegating. Every other tool refuses until this has been called once.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | No | Repository you intend to delegate in; picks up its project-local pi model scope | |
| models | No | Substring to filter the model list, e.g. "deepseek" |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, and it discloses the most important behavior: all other tools refuse until init runs. It also makes clear this is a reporting/discovery call, implying read-only use, though it does not explicitly address repeated-call safety or side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences front-load the critical directive and include the refusal behavior without any filler. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a discovery tool with two optional parameters and no output schema, the description sufficiently lists what the agent will learn (reachable tools, default model, provider models, delegation recipes) and the prerequisite behavior, making it complete enough to call correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description does not add meaning beyond the schema's existing explanations for cwd and models, though its mention of model listing aligns with the models parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Reports') and names concrete resources: permitted tools, default model, provider models, and delegation recipes. It clearly positions init as the mandatory discovery/entry-point tool, distinguishing it from siblings like models, which only list models.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit ordering guidance: 'READ THIS FIRST' and 'Every other tool refuses until this has been called once.' This tells an agent exactly when to call init and that no sibling can substitute for it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
modelsA
List models this delegate may use: pi's own scoped set plus any custom provider. Use to pick a model value.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | No | Picks up a project-local pi model scope | |
| filter | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses the list scope (pi's scoped set plus custom providers) but does not mention side effects (none expected), output format, or ordering. For a read-only listing tool this is adequate but not rich; it does not contradict any structured data.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two succinct sentences. The main purpose and usage are front-loaded, with no filler or redundant wording. Every phrase earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple listing tool with two parameters and no output schema, this description covers the core purpose and usage. However, the `filter` parameter is left undocumented, and the description does not mention the return format or any caveats, leaving some operational details unspecified.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is only 50%: `cwd` has a description but `filter` does not. The tool description adds no meaning for `filter` or `cwd` beyond the schema, so the undocumented parameter remains unexplained. It fails to compensate for the schema gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'List models this delegate may use' with a specific verb and resource. It also specifies the scope ('pi's own scoped set plus any custom provider'), which distinguishes it from the sibling command-like tools (init, run, etc.) that perform actions rather than listings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says 'Use to pick a `model` value', giving clear context for when to invoke it. It does not mention when not to use it or name alternatives, but given the sibling set are mostly action-oriented commands, the guidance is sufficient for selecting it correctly.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
runA
Delegate a task to a pi agent and wait for the final answer. Blocks until done. Prefer spawn for long work; this is for quick questions.
| Name | Required | Description | Default |
|---|---|---|---|
| id | No | Your own session id for traceability, e.g. "search-audit-01". 1-64 chars of [A-Za-z0-9._:-], must start alphanumeric, must not already be in use. Defaults to a UUID. | |
| cwd | No | Working directory for the agent | |
| label | No | Free-text note shown in `sessions`, e.g. what this delegate is for | |
| model | No | Model as "provider/modelId", e.g. "openrouter/stealth/ox-alpha" | |
| tools | No | Tool allowlist for this delegate. [] disables all tools. Omit for defaults: read, grep, find, ls. Permitted on this server: read, grep, find, ls. | |
| prompt | Yes | The task for the pi agent | |
| extensions | No | Load pi extensions for this delegate. Off by default; they add startup cost and can misbehave. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, and it discloses the most consequential trait: the call blocks until the delegate finishes, and it returns the final answer. It does not cover failure/timeout behavior, cost, or isolation of the delegate, which leaves some gaps for an unattended blocking call.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences, zero waste, and the blocking constraint plus the routing guidance are front-loaded. Every sentence conveys a decision-relevant fact.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 7-parameter delegation tool with full schema coverage and no output schema, the description supplies the missing return semantics ('final answer') and the blocking contract, which the schema cannot express. Minor gap: no mention of what happens on delegate failure or timeout.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all seven parameters (including id, tools allowlist, extensions, model) are already documented in the schema. The description adds no syntax or format meaning beyond that, so the baseline of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource ('Delegate a task to a pi agent') and clarifies the interaction model ('wait for the final answer'), then explicitly differentiates itself from the `spawn` sibling. An agent can distinguish this from spawn, spawn_batch, and follow_up without opening any schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Names the alternative (`spawn`) and the exact condition that selects it ('long work') versus the condition for this tool ('quick questions'). This is an explicit when/when-not/alternative statement, which is the top of the scale.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sessionsA
List pi sessions held by this server, running and finished. Finished ones stay readable for review until evicted (keeps the newest 50).
| Name | Required | Description | Default |
|---|---|---|---|
| state | No | Filter by state: starting, running, done, aborted, error | |
| verbose | No | Include full text and tool calls |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It does disclose that finished sessions remain readable until evicted and keeps the newest 50, which is useful behavioral context. However, it does not mention any authentication requirements, rate limits, or the exact return format (e.g., whether it returns summaries or raw session objects). For a non-destructive list operation, this is partial transparency but not exhaustive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two tight sentences. The first states the core purpose, and the second adds a relevant retention policy. No fluff or redundancy; every word earns its place. It is front-loaded with the primary action and scope, making it easy for an agent to quickly grasp the tool's function.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the low complexity (2 optional params, no output schema, no annotations), the description covers the essential aspects: what it lists, the state scope, and retention behavior. It does not explicitly describe the output format, but for a list tool this is often inferable. The lack of an output schema is partially offset by the clear description of the tool's behavior, making it adequately complete for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with both 'state' and 'verbose' already documented. The description adds no new parameter-specific detail beyond what the schema provides—it references 'running and finished' which maps to a subset of state values, but this is already inferred from the schema's enum-like description. Since the schema carries the parameter semantics, the description's contribution is minimal, aligning with the baseline of 3.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description begins with a specific verb and resource: 'List pi sessions held by this server, running and finished.' It clearly identifies the tool as a listing operation for sessions, and the mention of 'running and finished' distinguishes it from siblings like 'status' which likely targets a single session. The purpose is unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage for listing sessions but does not explicitly contrast it with alternatives such as 'status' or 'forget'. No when-to-use/when-not-to-use guidance is provided, relying on the agent to infer when this tool is appropriate based on the action of listing. The retention note hints at review use cases, but no explicit routing to siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
spawnA
Delegate a task to a pi agent running in the background. Returns a sessionId immediately, so nothing blocks. Poll with status, redirect with steer, answer its questions with answer. Use this for anything that might take more than a minute.
| Name | Required | Description | Default |
|---|---|---|---|
| id | No | Your own session id for traceability, e.g. "search-audit-01". 1-64 chars of [A-Za-z0-9._:-], must start alphanumeric, must not already be in use. Defaults to a UUID. | |
| cwd | No | Working directory for the agent | |
| label | No | Free-text note shown in `sessions`, e.g. what this delegate is for | |
| model | No | Model as "provider/modelId", e.g. "openrouter/stealth/ox-alpha" | |
| tools | No | Tool allowlist for this delegate. [] disables all tools. Omit for defaults: read, grep, find, ls. Permitted on this server: read, grep, find, ls. | |
| prompt | Yes | The task for the pi agent | |
| extensions | No | Load pi extensions for this delegate. Off by default; they add startup cost and can misbehave. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations present, the description carries the burden and delivers the single most important trait: it returns a sessionId immediately and nothing blocks, so the agent knows not to expect an inline result. It omits other behavioral context such as permissions, session lifetime/cleanup (handled by `forget`/`abort`), and failure behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences, front-loaded with the core action and followed by the async contract and lifecycle routing. No filler; every sentence carries actionable information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 7-parameter, no-output-schema tool this covers what an agent most needs: the async contract and the follow-up tools for polling, steering and answering. Residual gaps are minor – return payload shape beyond sessionId and failure/timeout behavior are unstated.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already explains id, cwd, label, model, tools and extensions in detail. The description adds no parameter-level meaning beyond that (e.g. it never mentions the tools allowlist or model override), so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource: "Delegate a task to a pi agent running in the background," which is unambiguous. It implicitly separates itself from `run` via the timing heuristic ("more than a minute"), but never names `run` or `spawn_batch` explicitly, so sibling differentiation is inferred rather than stated.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives an explicit when-to-use rule ("anything that might take more than a minute") and then routes the agent through the full lifecycle: poll with `status`, redirect with `steer`, answer questions with `answer`. This is exactly the alternative-naming guidance an agent needs to pick and follow this tool correctly.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
spawn_batchA
Fan out several delegates in one call. Each task inherits the batch-level model, cwd, tools and extensions unless it overrides them. The whole batch is validated before any delegate starts, so a bad model name or a duplicate id fails everything instead of leaving half a fan-out running. Poll the result with sessions, which reports all of them at once, rather than one status per delegate.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | No | Default working directory for every task in this batch | |
| model | No | Default model for every task in this batch | |
| tasks | Yes | 1 to 10 delegates to start | |
| tools | No | Default tool allowlist for every task in this batch | |
| idPrefix | No | Names the tasks `<prefix>-01`, `<prefix>-02`, ... e.g. "audit" gives "audit-01" | |
| extensions | No | Default extensions setting for every task in this batch |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description fully covers behavioral traits: whole-batch validation before any start, failure semantics for bad model or duplicate id, and inheritance/override rules. It discloses key outcomes and edge-case behavior, though it does not mention async execution or session cleanup.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no filler. The core purpose and key behavior are front-loaded; the polling guidance is a natural close. Every clause serves a purpose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema and no annotations, the description covers purpose, validation, inheritance, and polling—enough for correct invocation. Minor gaps like precise return format are covered by the `sessions` reference, so it is nearly complete for the complexity level.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with descriptions for all 6 parameters, so baseline is 3. The description adds meaningful semantics beyond the schema: it explains how batch-level defaults are overridden per task, clarifies the idPrefix format, and states the validation impact on parameters. This elevates it above the baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action: 'Fan out several delegates in one call.' It specifies the resource (delegates) and the batch nature, distinguishing it from the single-delegate spawn. The inheritance and validation details further clarify its exact role.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly advises polling with `sessions` instead of per-delegate `status`, giving concrete guidance on expected follow-up. It implies batch use case but does not explicitly contrast with `spawn` for single-delegate scenarios, leaving some room for inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
statusA
Check a background pi session. Returns state, turn count, tools used, latest text, and any pending questions the agent is waiting on. A non-empty questions array means it is blocked until you call answer. toolCalls traces every tool the delegate ran, in order.
| Name | Required | Description | Default |
|---|---|---|---|
| verbose | No | Include tool results and call ids in the trace | |
| sessionId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It discloses the return contents (state, turn count, tools, latest text, pending questions) and explains the blocking semantics of the 'questions' array. It also notes that 'toolCalls' traces every tool run in order, adding behavioral depth beyond the tool name. It doesn't mention side effects, but 'check' implies read-only behavior, and the description sufficiently covers operational behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and well-structured: two sentences plus a note. It front-loads the purpose, then details the return fields and the blocking condition. Every sentence carries useful information with no fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the absence of an output schema, the description adequately explains what the call returns and how to interpret the 'questions' array. It also clarifies the nature of 'toolCalls'. Minor omissions like error behavior for invalid sessions are not critical for a status-checking tool, so it feels complete enough for an agent to call it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is only 50%: only 'verbose' has a description; 'sessionId' is undocumented. The tool description does not mention either parameter, failing to compensate for the uncovered 'sessionId'. It doesn't explain what constitutes a valid sessionId or how 'verbose' changes the output beyond the schema's minimal hint. With low coverage and no description support, this is a significant gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a clear verb ('Check') and a specific resource ('background pi session'), and enumerates exactly what it returns (state, turn count, tools used, latest text, pending questions). This distinguishes it from siblings like 'sessions' (which likely lists sessions) and 'answer' (which handles questions). The purpose is unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives actionable guidance on how to interpret the result: a non-empty 'questions' array means the agent is blocked and must call 'answer'. However, it does not explicitly state when to use this tool versus alternatives (e.g., 'sessions' for listing all sessions, or 'steer' for modifying a session). The when-to-use context is implied but not contrasted with siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
steerA
Redirect a running pi agent mid-task. The message lands after its current tool call finishes, before the next model call. Use this instead of aborting when the agent is going the wrong way.
| Name | Required | Description | Default |
|---|---|---|---|
| message | Yes | ||
| sessionId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description bears the full burden of behavioral disclosure. It transparently explains the timing of when the message lands, which is a key behavioral trait. It does not mention error cases or lack of side effects, but for a simple steering action this is reasonably transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, concise, and front-loaded with the core action and timing. Every word adds value without unnecessary detail.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple tool with no annotations and no output schema, the description covers the primary use case and timing behavior. It lacks details on error handling or edge cases, but given the low complexity, it is fairly complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0% and the description does not explain the parameters at all. While 'sessionId' and 'message' are somewhat self-explanatory by name, the description fails to indicate which parameter identifies the agent or what the message content should be. The description should have compensated for the lack of schema documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('redirect') on a specific resource ('running pi agent') and adds timing context (after current tool call, before next model call). It explicitly contrasts with the sibling 'abort', making the purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit guidance: use this instead of aborting when the agent is going the wrong way. This clearly tells the agent when to choose this tool over a direct alternative, leaving no ambiguity.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
3 tool updates
v0.1.1- Changed
answer2 fields changed- removed
Input schema / properties / value / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "boolean" - } -] - added
Input schema / properties / value / typeAdded value: +[ + "string", + "boolean" +]
- Changed
run1 field changed- changed
Input schema / properties / tools / descriptionPrevious value: -"Tool allowlist for this delegate. Default: read, grep, find, ls. Permitted on this server: read, grep, find, ls."New value: +"Tool allowlist for this delegate. [] disables all tools. Omit for defaults: read, grep, find, ls. Permitted on this server: read, grep, find, ls."
- Changed
spawn1 field changed- changed
Input schema / properties / tools / descriptionPrevious value: -"Tool allowlist for this delegate. Default: read, grep, find, ls. Permitted on this server: read, grep, find, ls."New value: +"Tool allowlist for this delegate. [] disables all tools. Omit for defaults: read, grep, find, ls. Permitted on this server: read, grep, find, ls."
12 tool updates
v0.1.0- First observed
abort - First observed
answer - First observed
follow_up - First observed
forget - First observed
init - First observed
models - First observed
run - First observed
sessions - First observed
spawn - First observed
spawn_batch - First observed
status - First observed
steer
TDQS
Scored across 12 tools
Each tool targets a distinct state or action, and the three delegation entry points (spawn/run/spawn_batch) are explicitly differentiated by blocking behavior and fan-out. The message-sending trio (answer/steer/follow_up) is clearly disambiguated by delegate state, and descriptions even cross-reference each other (spawn vs steer vs follow_up).
Most names are concise lowercase verbs (spawn, run, steer, abort, forget, init) with a consistent compound pattern for spawn_batch/spawn variants. The deviation is noun-style list tools (sessions, models) and the short 'init', which break a strict verb convention but remain readable and predictable.
12 tools map cleanly onto the delegation lifecycle: launch (spawn/run/spawn_batch), monitor (status/sessions), interact (steer/follow_up/answer), stop (abort), and housekeeping (forget/models/init). Each earns its place with no redundant or filler tools.
The surface covers the full delegate lifecycle including batch fan-out, mid-task redirection, post-completion follow-up, Q&A unblocking, and cleanup. Minor gaps exist (e.g. no dedicated blocking wait-for-completion on a spawned session, no explicit per-provider model-filtering view), but agents can work around these via status/run.
Maintenance
Related MCP Connectors
- AgentdaOAuthcom.myagentda
Agent-native task management: your AI agent is the interface. Delegate to anyone by email.
Hand tasks, bugs and finished work to AI coding agents, and get back a write-up with evidence.
- ParleyOAuthdev.weldra
Coordination hub for AI coding agents: message teammates, ask humans, audit every event.
Build agents to automate any background task. Works with your ChatGPT/Claude subscription.
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceEnables Hermes agents to delegate bounded coding tasks to persistent oh-my-pi sessions with isolated git worktrees, live steering, and durable follow-ups, requiring explicit user confirmation before each task.AGPL 3.0
- AlicenseCqualityAmaintenanceEnables a primary agent in Antigravity IDE to delegate coding tasks to background subagents across multiple model backends, with crash recovery, process cleanup, and human-in-the-loop approval for destructive actions.20MIT
- AlicenseAqualityCmaintenanceEnables an orchestrator like Claude Code to hand coding work off to Cursor SDK agents, run as detached background jobs that survive the session and can be listed, inspected, steered, resumed, or stopped. Agents are asynchronous and reusable across follow-up turns, letting expensive frontier models delegate cheaply without blocking or paying to read the results.7MIT
- AlicenseNot gradedqualityAmaintenanceEnables a coding agent such as Codex or Claude Code to delegate work to a local Pi coding-agent session, including second-opinion reviews, bulk reading kept out of the main context, and follow-up turns that retain context. Operators control what is possible by defining workspace and execution-profile aliases in a local config file, so clients cannot choose directories, models, providers, or permission levels themselves.658 npm1MIT