sol-luna-orchestrator
This server lets an OpenAI Codex supervisor delegate bounded coding tasks to Luna workers under strict scope, compute, and verification controls, while keeping the parent in charge of architecture and final judgement.
Delegate a single task to one Luna worker with objective, acceptance criteria, verification commands, change intent, and optional automatic repair.
Delegate batches of tasks in sequential mode for dependent/shared-state work or parallel mode for isolated, independent seams in separate worktrees.
Continue an eligible task once, using an opaque continuation reference and a bounded instruction while keeping the original contract immutable.
Run a routing preflight to get cheap advisory guidance on whether delegation is structurally sound and economically sensible.
Explore repositories/APIs/docs with a read-only, disposable Luna worker that returns provenance-marked findings without implementing anything.
Enforce safety and policy through server-enforced compute limits, allowed/forbidden files, scope reconciliation, conflict detection, and authoritative verification reruns.
Keep supervision compact via text-only verified handoffs, while rich evidence and diagnostics remain available for review when things fail.
Provides tools for orchestrating OpenAI Codex agents, allowing a supervising agent to delegate bounded implementation tasks to isolated worker threads with enforced file scopes, parallel worktrees, and verification of results.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@sol-luna-orchestratorDelegate fixing the failing tests in auth, payments, and search in parallel."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
sol-luna-orchestrator
Bounded delegation for OpenAI Codex. Sol remains the supervisor and architect; Luna workers execute well-defined tasks and cannot delegate further. The runtime admits compute under operator policy, checks observed changes against declared scope, isolates parallel work, and independently verifies outcomes.
For each task, the supervisor can stay solo or use one worker, dependent workers in sequence, or independent workers in parallel.
Quick start
Prerequisites: Node.js 22.12 or newer and a logged-in OpenAI Codex CLI.
Any compatible parent model may supervise.
npm install -g sol-luna-orchestrator
sol-luna-orchestrator init
sol-luna-orchestrator doctorOpen Codex and work normally. It can discover the orchestrator and decide whether delegation is useful; you do not need to select workers or call MCP tools yourself. For clone installs, platform requirements, and advanced setup, see Configuration.
The most useful CLI commands are init to register or reconcile the server,
doctor to diagnose setup, status for a runtime summary, and activity for
recent orchestration activity. See Configuration for
the remaining lifecycle commands and options.
Related MCP server: Codex Gemini Delegator V2
How it works
Codex parent
|
+--> stay solo
+--> optional read-only explore or routing preflight
+--> bounded contract: scope + intent + acceptance + verification
|
+--> one Luna worker
+--> sequential workers sharing workspace state
+--> parallel workers in isolated worktrees
|
v
observed edits + authoritative verification
|
v
thin verified handoff, evidence, or next actionThe parent chooses the execution shape. A user-owned compute policy bounds the worker model, effort, count, and concurrency; adaptive routing may recommend solo, single, sequential, or parallel execution but never widens that policy. The orchestrator reconciles worker claims with observed changes and reruns the declared checks, including a final deduplicated batch check after integration. See discovery and adaptive routing for the fresh-session setup and routing guidance.
Features
Capability | What it provides |
Adaptive orchestration | Solo, single, sequential, or parallel execution, with semantic routing and operator-bounded model, effort, worker-count, and concurrency policy. |
Isolated parallel execution | Independent workers use separate worktrees, bounded concurrency, conservative integration, and conflict and scope checks; sequential tasks can share state. |
Authoritative verification | Observed changes and independently rerun checks determine trust, including final workspace verification after batch integration. |
Bounded repair and recovery | Evidence can authorize one eligible task-local repair or one bounded parallel recovery attempt, without uncontrolled retry chains. |
Continuations and next actions | Eligible work can resume under its original contract, while single-use handoffs preserve only execution authority earned from authoritative evidence. |
Context lifecycle management | Model-facing context and routine results stay compact while authoritative evidence, diagnostics, and execution lineage remain available for review. |
Read-only exploration and portable context | Optional exploration runs in a read-only disposable surface; cross-session handoffs carry informational history without importing execution authority. |
Observability and diagnostics | Structured activity, execution evidence, status, and diagnostic tooling make orchestration inspectable without exposing task prompts in the activity stream. |
MCP surface
The normal parent process registers exactly five MCP tools:
delegate_task- run one bounded task.delegate_tasks- run sequential or parallel task batches.continue_task- resume an eligible task with an explicit follow-up.routing_preflight- after cheap bounded structural inspection, classify concrete candidate leaves and ask for advisory routing guidance.explore- investigate an admitted scope without changing it.
Worker processes register no MCP tools and cannot recurse into delegation. The workflow coordinator and cross-session handoff helpers are programmatic APIs, not additional MCP tools. Cross-session handoff data is informational: it does not grant authority, retry permission, continuation rights, or a wider compute policy.
Safety
Delegated work runs under server-enforced compute policy and declared-scope controls; parallel workers use isolated worktrees, and the runtime detects and reports scope or integration conflicts. These are guardrails, not an absolute sandbox: workers write real files, and some execution runs with the operator's permissions. Read Security for the threat model and limitations.
Benchmark status
V2 is historical architecture evidence, documented in bench/RESULTS.md. Benchmark V3 used the frozen methodology and completed 36/36 valid runs against the v0.11.0 production baseline: both Solo Medium and Adaptive Medium passed all nine tasks across two repetitions, but Adaptive delegated zero workers and was slower and more expensive overall. The two-repetition result is directional, not statistically significant. It motivated the post-V3 routing corrections intended for v0.12.0; those corrections have not been evaluated by another full campaign, so no v0.12.0 performance improvement is claimed.
Documentation
Configuration - requirements, setup, policies, and platform details.
Security - threat model and trust boundaries.
Observability - activity, result surfaces, and privacy semantics.
Troubleshooting - diagnosis and recovery.
Supervisor rules - delegation, effort, contracts, and review policy.
Roadmap - future priorities and constraints.
Changelog - shipped release history.
Contributing - development and release workflow.
Contributing
Bug reports and pull requests are welcome. Start with Contributing.
License
MIT, see LICENSE.
Available Tools
5 toolscontinue_taskContinue an eligible Luna taskA
Continue ONE eligible task once in the same Luna Codex thread with an opaque single-use continuationReference and one bounded instruction. The original objective, allowedFiles, forbiddenFiles, changeIntent, acceptance, and verification contract remain immutable; no widening fields exist. Luna cannot delegate, and continuation never starts automatic repair. Verification, scope checks, and evidence reconciliation run again. handoff is default; compact/full are compatibility modes. While pending with no meaningful new state, remain silent; do not narrate waiting or polling. Report only a result, error, cancellation, timeout, or actionable state change.
| Name | Required | Description | Default |
|---|---|---|---|
| instruction | Yes | ||
| resultDetail | No | handoff | |
| continuationReference | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden and does so thoroughly. It discloses immutability of the original contract, no widening fields, no delegation, no automatic repair, re-running of verification/scope/evidence checks, resultDetail mode semantics, silence while pending, and the allowed report outcomes. This is exceptional transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but every clause earns its place, covering action, constraints, mutation semantics, verification behavior, output modes, and communication protocol. The primary action is front-loaded in the first sentence, and the rest provides necessary behavioral guardrails without fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no annotations, no output schema, and the subtle semantics of continuation, the description is remarkably complete. It explains eligibility constraints, single-use token behavior, immutability, what will not happen, what checks rerun, mode defaults, and when to stay silent versus report. There is little an agent would need to infer on its own.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It adds real semantics for the key parameters: 'opaque single-use continuationReference', 'one bounded instruction', and 'handoff is default; compact/full are compatibility modes' for resultDetail. It does not provide exhaustive per-parameter descriptions, but what it adds is meaningful and sufficient for invocation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb ('Continue'), a specific resource ('ONE eligible task'), and critical constraints ('once in the same Luna Codex thread', 'opaque single-use continuationReference'). It is clearly distinguished from siblings by explicitly noting 'Luna cannot delegate', so an agent can tell it apart from delegate_task/delegate_tasks.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly states the context for use: continuing an existing task in the same thread with a continuation reference. It provides exclusions such as 'Luna cannot delegate' and 'continuation never starts automatic repair', which helps differentiate from delegation and repair workflows. It does not name the exact alternative tool names, but the usage context is strong.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
delegate_taskDelegate a bounded task to a Luna workerA
Delegate ONE substantial, bounded executable seam to gpt-5.6-luna; no second seam is required. Keep small, simple, or tightly coupled work solo. Tasks may be implementation, tests, bug fixing, refactoring, investigation, or chores. The parent owns architecture, decomposition, unresolved design, sequencing, interfaces, scope, acceptance, and final judgement. Luna owns scoped exploration, implementation, verification, and bounded repair; it cannot see the conversation or delegate.
Provide a self-contained objective, effortReason, acceptanceCriteria, verificationCommands, changeIntent, and honest scopes; add a concise activityLabel when safe and only repository-unavailable context. automaticRepair permits at most one conservative same-thread repair. Results include one evidence-derived failureDecision; parent owns nonautomatic actions. resultDetail=handoff is the default.
The runtime reruns declared checks and reconciles observed edits. A clean PASS returns a text-only VERIFIED_COMPLETE handoff: finish without rereading worker-owned files or rerunning passed checks unless a listed risk changes architecture. FAILED/BLOCKED, untrustworthy, discrepant, scope-violating, refused/skipped, or runtime-error results expand with evidence. Worker claims are not authoritative.
Delegate only when ownership, isolation, context, verification, latency, coordination risk, quality, and current parent-conditional credit economics beat fixed overhead; raw tokens are not credit cost and no saving is guaranteed. While pending with no meaningful new state, remain silent; do not narrate waiting or polling. Report only a result, error, cancellation, timeout, or actionable state change.
| Name | Required | Description | Default |
|---|---|---|---|
| effort | No | high | |
| context | No | ||
| objective | Yes | ||
| allowedFiles | No | ||
| changeIntent | No | required | |
| effortReason | Yes | ||
| resultDetail | No | handoff | |
| taskCategory | No | ||
| activityLabel | No | ||
| computePolicy | No | Optional per-call compute envelope. Narrows this installation's operator-owned baseline only and can never widen it. Omit to use the baseline. | |
| contextCapsule | No | ||
| forbiddenFiles | No | ||
| timeoutSeconds | No | ||
| automaticRepair | No | ||
| handoffReference | No | ||
| previousAttempts | No | ||
| routingPreflight | No | Optional advisory routing declaration. Solo advice never blocks execution; declarations gate: every surface refuses empty seams, parallel also refuses mutable sharedState, shared-core coreOverlap, or tasks > seams. "unknown" biases advice solo, never refuses. | |
| workingDirectory | No | ||
| acceptanceCriteria | Yes | ||
| verificationCommands | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full behavioral disclosure burden and does so thoroughly. It reveals that the worker cannot see the conversation or delegate, automaticRepair allows at most one conservative same-thread repair, the runtime reruns declared checks and reconciles edits, PASS returns a text-only VERIFIED_COMPLETE handoff, and failure/blocked results expand with evidence. It also states worker claims are not authoritative and the parent owns nonautomatic actions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is long but every sentence earns its place for a 20-parameter delegation tool. It is front-loaded with the core contract, then proceeds through submission requirements, runtime behavior, and agent etiquette. There is no filler and no repetition of schema enums.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no output schema, the description explains result types, handoff behavior, failure expansion, and verification semantics well. It covers when to delegate and what the worker can and cannot do. It is slightly less complete on explicit routing among sibling tools and on a few top-level parameters, but overall it gives an agent enough to invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is only 10%, but the description compensates for the most important parameters: it tells the agent to provide a self-contained objective, effortReason, acceptanceCriteria, verificationCommands, changeIntent, and honest scopes; it clarifies activityLabel should be concise and only for repository-unavailable context; and it explains the behavior of automaticRepair and the default resultDetail=handoff. Some parameters such as contextCapsule, previousAttempts, and timeoutSeconds are left to schema inference, which keeps this from a 5.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: 'Delegate ONE substantial, bounded executable seam to gpt-5.6-luna.' It also distinguishes itself from sibling tools by emphasizing this is a single-seam delegation, not a multi-seam or parallel operation, and lists allowed task categories. The parent/worker ownership split further clarifies what this tool is for.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit when-to-use and when-not-to-use guidance: 'Keep small, simple, or tightly coupled work solo' and 'Delegate only when ownership, isolation, context, verification, latency, coordination risk, quality, and current parent-conditional credit economics beat fixed overhead.' It also tells the agent to remain silent while pending and to report only meaningful state changes. This is strong operational guidance, even though it does not name sibling tools explicitly.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
delegate_tasksDelegate several tasks to Luna workersA
Delegate a batch intended for two or more owned seams to gpt-5.6-luna; one task remains accepted for compatibility, but prefer delegate_task when no scheduling is needed. Use sequential for dependencies/shared workspace state and parallel only for genuinely independent disjoint declared scopes. Do not create artificial seams. At most 12 tasks are accepted and at most 3 run concurrently; the rest queue. Each task needs a self-contained contract and a concise activityLabel when a safe label exists. The parent owns architecture/interfaces and exceptional judgement; Luna owns exploration, implementation, verification, and repair. automaticRepair is one bounded task-local turn.
Parallel same-file edits prevent automatic integration. allowOverlappingScopes:true only accepts the declared overlap; it is not a write sandbox and does not permit same-file integration. integrate=false skips copying and retention follows operator policy. Partial outcomes remain visible. automaticRecovery defaults true: at most one evidence-eligible timeout continuation or exact process-exit retry; a counter alone never authorizes retry. Repair precedes recovery and neither nests. Successes, cancellation, scope/security/evidence failures, refused checks, discrepancies, and conflicts are never retried. Successful streams survive sibling failure.
After integration, deterministic code reruns the deduplicated union of declared checks in the final workspace. completionState=verified-complete means all seams, integration, and final checks passed; the default text-only handoff then tells the parent to finish without rereading files or rerunning checks. Any failure/refusal/conflict returns rich evidence for targeted diagnosis. resultDetail is one batch-level compatibility choice. More workers are not automatically cheaper; raw tokens are not credit cost and savings depend on the parent and task mix. While pending with no meaningful new state, remain silent; do not narrate waiting or polling. Report only a result, error, cancellation, timeout, or actionable state change.
| Name | Required | Description | Default |
|---|---|---|---|
| mode | Yes | ||
| tasks | Yes | ||
| integrate | No | ||
| resultDetail | No | handoff | |
| computePolicy | No | Optional per-call compute envelope. Narrows this installation's operator-owned baseline only and can never widen it. Omit to use the baseline. | |
| routingPreflight | No | Optional advisory routing declaration. Solo advice never blocks execution; declarations gate: every surface refuses empty seams, parallel also refuses mutable sharedState, shared-core coreOverlap, or tasks > seams. "unknown" biases advice solo, never refuses. | |
| workingDirectory | No | ||
| automaticRecovery | No | ||
| allowOverlappingScopes | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It goes far beyond a basic summary by specifying concurrency limits, queueing, retry rules, automaticRecovery defaults, repair scope, integration behavior, completionState semantics, and reporting etiquette. This is exceptional transparency for a complex tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is long and dense, but the tool is genuinely complex and nearly every sentence adds an operational constraint or decision rule. It is grouped into thematic paragraphs and front-loaded with the primary purpose, but it is still a wall of text rather than a structured, skimmable format.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity, absence of annotations, and absence of output schema, this description is remarkably complete. It covers selection criteria, operational limits, concurrency and queueing, integration and overlap semantics, retry and recovery behavior, failure handling, result semantics, and even reporting etiquette. An agent has enough context to decide when to call it and how to configure a valid batch.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is only 22%, so the description must compensate, and it does. It explains the behavioral meaning of allowOverlappingScopes:true, integrate=false, resultDetail, automaticRepair, automaticRecovery, and sequential/parallel mode, which the bare schema enums do not provide. It also gives practical guidance like requiring self-contained contracts and concise activityLabels.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: delegate a batch to Luna workers. It also differentiates from the sibling tool delegate_task by explaining that a single task is accepted for compatibility but delegate_task is preferred when no scheduling is needed.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says when to prefer delegate_task, and gives clear rules for choosing sequential vs parallel: sequential for dependencies/shared state, parallel only for independent disjoint scopes. It also forbids artificial seams, leaving no ambiguity about when this tool is appropriate.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
exploreExplore repository, API, or documentation with LunaA
Explicitly explore an admitted repository, API, or documentation scope with gpt-5.6-luna; fixed read-only disposable execution returns provenance-marked worker claims, runtime facts, inferences, and unknowns. Implements nothing, cannot delegate, and is never automatic.
| Name | Required | Description | Default |
|---|---|---|---|
| scope | Yes | ||
| effort | No | high | |
| target | Yes | ||
| context | No | ||
| questions | No | ||
| effortReason | Yes | ||
| resultDetail | No | handoff | |
| activityLabel | No | ||
| computePolicy | No | Optional per-call compute envelope. Narrows this installation's operator-owned baseline only and can never widen it. Omit to use the baseline. | |
| contextCapsule | No | ||
| forbiddenFiles | No | ||
| timeoutSeconds | No | ||
| workingDirectory | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does so unusually well. It discloses that execution is 'fixed read-only disposable,' that it returns 'provenance-marked worker claims, runtime facts, inferences, and unknowns,' and that it 'implements nothing, cannot delegate, and is never automatic.' This gives an agent a clear safety and side-effect profile.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two efficient sentences with zero filler. Purpose and scope are front-loaded, followed immediately by behavioral disclosures and exclusions. Every clause adds information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a complex tool — 13 parameters, nested objects, no output schema, and no annotations — so the description alone is insufficient for correct invocation. It explains the high-level behavior well but does not clarify target vs scope, effortReason requirements, resultDetail choices, computePolicy, or output structure. An agent could select the tool but would struggle to call it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is only 8%, and the description barely compensates: 'repository, API, or documentation scope' hints at target/scope, but the 13 parameters — including required effortReason — receive no meaningful explanation. The schema itself has no descriptions for most properties, so an agent lacks essential parameter semantics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb and object phrase: 'Explicitly explore an admitted repository, API, or documentation scope' — so an agent knows exactly what the tool acts on. It also differentiates from siblings by adding 'Implements nothing, cannot delegate, and is never automatic,' which separates it from delegate_task and routing_preflight. This goes beyond a generic restatement.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The opening clause gives clear usage context: use this for explicit exploration of an admitted scope. The additonal exclusions — 'cannot delegate' and 'never automatic' — tell an agent when not to expect delegation or autonimous routing. Alternatives are not explicitly named, but the behavior boundaries are strong enough to guide tool selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
routing_preflightCheck cheaply whether delegating is worth itA
Cheap deterministic check of whether delegating is structurally sound and economically sensible, before any repository exploration. Declare the ownership seams you are considering and what they share; leave a field "unknown" when you do not know, which biases the advice toward solo without ever refusing. Creates no worker, batch, worktree, or thread, refuses nothing, and returns route (solo | either | delegation-plausible), the deciding signals, and structural parallel eligibility. Advisory only and never required: the parent owns sequential vs parallel, worker count, effort, and the final decision, and choosing zero workers afterwards is a normal successful outcome. either means fixed delegation overhead needs explicit justification, otherwise stay solo.
| Name | Required | Description | Default |
|---|---|---|---|
| seams | Yes | ||
| seamSize | No | unknown | |
| coreOverlap | No | unknown | |
| integration | No | unknown | |
| sharedState | No | unknown | |
| verification | No | unknown |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden. It explicitly states 'Creates no worker, batch, worktree, or thread, refuses nothing' – clearly disclosing side-effect-free behavior. It describes the return values (route, deciding signals, structural parallel eligibility) and explains how unknown inputs bias results toward solo. The advisory and non-required nature is also disclosed, giving the agent complete understanding of behavioral traits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the core purpose in the first sentence. It then flows naturally from usage timing to input guidance to output and interpretation. It is three sentences but dense, with each clause earning its place. Slightly verbose with multiple embedded clauses, but still well-structured and avoids fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having 6 parameters and no output schema, the description covers all essential aspects: what the tool does, when to use it, its side-effect-free nature, the input guidance (include seams, mark unknowns), the output format (route, deciding signals, eligibility), and how to interpret results (either requires justification). An agent has enough information to call it correctly without further lookup.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It provides a high-level hint: 'Declare the ownership seams you are considering and what they share' – this loosely maps to seams and sharedState/coreOverlap. It also advises leaving fields 'unknown' when unsure. However, it does not explain the semantic meaning of seamSize, integration, or verification individually, leaving some parameters under-documented. The description adds some value but does not fully compensate for the schema gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with 'Cheap deterministic check of whether delegating is structurally sound and economically sensible, before any repository exploration.' This is a specific verb (check) and resource (delegating) with a clear scope and timing. It distinguishes itself from siblings like delegate_task by explicitly stating it creates no worker/batch/worktree/thread, making it clear it is a preflight rather than an execution tool.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description states it is used 'before any repository exploration' and is 'advisory only and never required', clarifying it is a precursor to actual delegation. It also explains when the output suggests staying solo vs. delegating ('either means fixed delegation overhead needs explicit justification, otherwise stay solo'). However, it does not explicitly name sibling tools or state 'use delegate_task instead when you are ready to execute', so the contrast with alternatives is implied rather than explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
TDQS
The single, batch, continuation, preflight, and exploration tools have distinct purposes, but delegate_task and delegate_tasks overlap at the single-task boundary; the descriptions explicitly resolve this by directing single tasks to delegate_task.
Most names follow snake_case verb_object style (delegate_task, deegate_tasks, continue_task), but routing_preflight is noun-leading and explore is a bare verb, breaking the otherwise predictable pattern.
Five tools cover the core orchestration surface without redundancy: single delegation, batch delegation, continuation, preflight routing, and read-only exploration. The count feels intentionally scoped and appropriate.
Core lifecycle operations are covered: delegate, batch, continue, preflight, and explore. Minor gaps exist such as no explicit status/cancel/list tooling, but the parent-owned model makes these nonessential and workable.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
A paid remote MCP for OpenAI Codex agent coordination MCP, built to return verdicts, receipts, usage
Nifty's MCP server — exposes tasks, projects, messages, and files as tools for AI agents.
An MCP server that gives your AI access to the source code and docs of all public github repos
ArcAgent MCP server for bounty discovery, workspace execution, and verified coding submissions.
Related MCP Servers
- AlicenseAqualityCmaintenanceA local MCP server that lets Claude delegate scoped work to Codex with structured results and guardrails, supporting planning, code review, build, reverse engineering, and long-running background tasks.11MIT
- AlicenseAqualityBmaintenanceAn MCP server that lets OpenAI Codex delegate tasks to Google Gemini agents as isolated background workers, with Git worktree isolation, loop detection, and security boundary enforcement.71MIT
- AlicenseNot gradedqualityBmaintenanceMCP server that lets Codex supervise Claude Code or DeepSeek Harness as workers in isolated Git worktrees, with a bridge_run/bridge_respond/bridge_apply workflow for task delegation and safe cherry-pick integration.13MIT
- AlicenseAqualityCmaintenanceAn MCP server that splits coding work between ChatGPT web (planning, review) and Codex CLI (implementation), enabling agentic workflows over a local repo with risk-gated execution and safety rails.423MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/mahadansar/sol-luna-orchestrator'
If you have feedback or need assistance with the MCP directory API, please join our Discord server