mcode-mcp
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@mcode-mcprefactor the auth module in /repo to use async/await"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
mcode-mcp
MCP server that delegates coding tasks to your locally installed
MiniMax Code CLI (mcode,
npm package @minimax-ai/code).
It wraps the real mcode binary instead of bundling its own copy of the agent,
so every call inherits your MiniMax login, models and ~/.minimax config.
This is not the MiniMax M3 API provider in Pi, and not mmx-cli.
Sibling of pi-cli-mcp, qwen-cli-mcp, kimi-cli-mcp and grok-code-mcp — same architecture, same principles, MiniMax Code behind the wheel. Design: SPEC.md. Behaviour: CHANGELOG.md.
Verified against MiniMax Code 0.3.11.
Install
npx -y mcode-mcp # no install
npm install -g mcode-mcp # or globalRequires Node ≥ 22 and a working mcode on PATH (npm i -g @minimax-ai/code).
MiniMax Code itself needs Node >=22.19 <23 or >=24 <27, and its native
SQLite module must match that Node ABI. If mcode refuses to start, point the
adapter at the CLI and a matching Node without changing global PATH:
export MCODE_MCP_BIN=/path/to/@minimax-ai/code/cli.js
export MCODE_MCP_WRAP=/path/to/nodeMCODE_MCP_WRAP is a command prefix (no shell interpolation). The process is
spawned as node cli.js <args…>.
Claude Code
claude mcp add-json mcode -s user '{
"type": "stdio",
"command": "npx",
"args": ["-y", "mcode-mcp"],
"timeout": 3600000
}'Any other MCP client
{
"mcpServers": {
"mcode": { "command": "npx", "args": ["-y", "mcode-mcp"] }
}
}Keep the server name short (mcode): it becomes part of the tool names your
model sees.
Related MCP server: Cursor Delegate
Tools
Tool | Purpose |
| Start a session. Returns |
| Continue a finished or interrupted session — including one killed by a timeout. |
| List what |
| Deliver into a turn executing right now ( |
| List turns executing right now that |
| List known sessions started through this server, newest first. |
| Read-only native transcript ( |
mcode
Argument | Notes |
| Required. Must be self-contained — mcode cannot see your conversation. |
| Absolute path; defaults to this server's cwd. Passed as |
|
|
|
|
| ACP-only session mode: |
| ACP-only |
|
|
| Wall clock for this run. Off unless you set it. Print also forwards |
Not supported (honest error, not a fake flag): follow_up on mcode_send,
effort, allowed_tools, system_prompt_append, permission=ask.
mcode({
prompt: "Read and execute the prompt: /abs/path/prompt.md",
cwd: "/abs/path/to/repo",
model: "minimax_oauth/MiniMax-M2.5"
})
// later:
mcode_reply({
session: "<id from the prefix>",
prompt: "Now check the error paths of those call sites."
})Default permission is
full. Delegation is only useful when the delegate can act. Headlesssmartcan stop withINTERACTION_NOT_AVAILABLEif Runtime asks a question. ACPsession/cancelis how a running turn is aborted; there is no documented mid-turn follow-up queue, somcode_sendfollow_uperrors instead of pretending to queue.
What comes back
Only mcode's final result plus aggregate stats — never the transcript, thinking, tool arguments or raw stdout.
A timed-out or cancelled run still returns [session: <id>] and
[session-key: mcode:<id>] when mcode named the session. Resume it with
mcode_reply; do not treat the deadline as a lost session.
mcode_history
Read-only snapshot of the native transcript. Does not prompt mcode.
mcode_history({ session: "<id from the prefix>" })Source: <MINIMAX_DATA_DIR|~/.minimax>/v2/sessions/YYYY/MM/DD/<time>-session_<base64(id)>/messages.jsonl.
Items are user / assistant / tool / gap. Thinking and image binaries are
omitted. Pass cursor from the previous page to continue; include_tools: false
hides tool calls/results but still advances the cursor.
Source
git clone https://github.com/minmax/mcode-mcp.git
cd mcode-mcp
npm ci
npm testAvailable Tools
7 toolsmcodeADestructive
Start a NEW task in the local MiniMax Code agent (mcode) — a separate CLI coding agent with its own file/shell tools and its own context window. Blocks until mcode settles, then returns only its final result plus stats, prefixed [session: ] and [session-key: mcode:]; continue that session later with mcode_reply.
Caution: with permission 'full' (the server default) mcode edits files and runs shell commands as your user inside cwd without asking.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | No | Usually omit to use this server's cwd. If set, must be an absolute path (relative is rejected). mcode works and edits here. | |
| mode | No | ACP session/set_mode: 'default' or 'plan'. Print/exec has no session mode flag — plan on print is rejected. | |
| model | No | Model as MiniMax Code expects it: provider/model, e.g. 'minimax_oauth/MiniMax-M2.5'. Defaults to mcode's own default. mcode_models lists what provider list --json reported. | |
| prompt | Yes | The complete task. mcode cannot see this conversation, so include everything it needs: file paths, goal, constraints, expected output format. | |
| transport | No | Usually omit. The default 'acp' keeps mcode up (`mcode acp`) so a running turn can be aborted or steered with mcode_send. 'print' is mcode exec --output-format stream-json: one process per turn that cannot be reached while it works. | |
| permission | No | Headless --permission: 'smart' (auto routine, ask when needed), 'full' (bypassPermissions), 'off'. Server default is full. ACP maps smart→auto and full→bypassPermissions. 'off' is exec-only; ACP rejects it. 'ask' is not a headless option. | |
| timeout_ms | No | Usually omit — there is no server default deadline. A run killed at the deadline is not lost: it still returns its session id and is resumable with mcode_reply. Print also forwards --timeout <N>ms. | |
| thinking_effort | No | ACP-only session/set_config_option id=thinkingEffort. Values are model-dependent; print has no equivalent flag. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes beyond the annotations by warning about the default 'full' permission that edits files and runs shell commands without asking. It also discloses that the tool blocks until mcode settles and returns only the final result plus stats with session prefixes. These details are not present in the annotations (which only have destructiveHint=true) and provide critical behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is somewhat long but well-structured: it leads with the core purpose, then explains the return format and continuation, and ends with a caution. It front-loads the most important information (new task) and avoids redundancy. The caution is useful but adds length; overall it is efficient for the complexity of the tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a complex tool with 8 parameters and no output schema, the description provides essential context: return format (session id and session-key prefixes), blocking behavior, timeout handling (run killed still returns session id), and permission implications. It also explains the transport modes and model parameter. It lacks some details about the output stats structure, but overall it covers the key aspects an agent needs to call and interpret the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all 8 parameters are already documented. The description does add a small amount of context (e.g., that mcode cannot see the conversation and that cwd is usually omitted), but these are also present in the schema's parameter descriptions. The description does not significantly enhance parameter meaning beyond what the schema provides, so a baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Start') and resource ('a NEW task in the local MiniMax Code agent'), and clearly differentiates from siblings by stating this starts a new task while continuing later is done with mcode_reply. It also distinguishes from other mcode tools (models, running, send, etc.) by focusing on task initiation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states when to use this tool (start a new task) and implies when not to (for continuing a session, use mcode_reply). It also gives context about the separate CLI agent and its own context window, which helps the agent decide when this tool is appropriate. However, it doesn't explicitly list alternatives for other scenarios (e.g., checking running sessions).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
mcode_historyARead-onlyIdempotent
Read a bounded snapshot of a MiniMax Code session's visible conversation from the native messages.jsonl under ~/.minimax/v2/sessions. Does not send anything into the run, does not take the session lock, and does not wait for mcode to finish. Returns JSON: session, state (active if this process is running it, otherwise unknown), items (user / assistant / tool / gap), an opaque cursor to resume even at the current EOF, has_more, truncated_tail. Thinking and image binaries are omitted. Caps: limit (default 50, max 200), max_chars per item (default 4000, max 16000), and 100000 chars on the whole JSON page.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max items to return (default 50, max 200). | |
| cursor | No | Opaque resume token from a previous mcode_history call for this same session and transcript. Omit to read from the start. | |
| session | Yes | Session id from [session: <id>] or mcode_sessions / mcode_running. | |
| max_chars | No | Max characters per item text (default 4000, max 16000). | |
| include_tools | No | Include tool calls/results (default true). Filtered tool lines still advance the cursor. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnly and idempotent annotations, the description adds useful behavioral detail: no run-side effects, no lock, no waiting, exact JSON fields returned, omitted content, and precise caps. This is meaningful behavioral context that annotations alone would not convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The definition is dense but concise: it front-loads the purpose and safety properties, then gives the return shape and caps. Every sentence carries information, and there is no filler or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema present, the description properly returns to the return shape (session, state, items, cursor, hasMore, truncatedTail), caps, and omissions. That is enough for an agent to decide when and how to invoke the tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is already high, but the description goes further by explaining the cursor can resume at current EOF, note that filtered tool lines still advance the cursor, and the whole-page 100,000-character cap. These details give an agent a more accurate mental model of pagination and limits.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb and resource: 'Read a bounded snapshot of a MiniMax Code session's visible conversation from the native messages.jsonl'. It clearly differentiates itself from sibling tools by stating that it does not send anything into the run, does not take the session lock, and does not wait for mcode to finish.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives clear context for when to use it: when an agent needs a non-blocking, read-only view of past conversation without interfering with the run. However, it does not name sibling tools explicitly or provide formal when-not-to-use alternatives, so it stops short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
mcode_modelsARead-onlyIdempotent
List what this MiniMax Code installation reports via mcode provider list --json. Use it to pick a model value for mcode / mcode_reply. Starts no task. Official OAuth providers may list zero models even when a default model is configured.
| Name | Required | Description | Default |
|---|---|---|---|
| search | No | Optional substring filter on provider or model id. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, openWorldHint, idempotentHint, and destructiveHint=false, so the safety profile is covered. The description adds valuable behavioral context beyond annotations: it starts no task and may report zero models even when a default model is configured, which prevents misinterpretation of results.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three tight sentences with no filler. The first sentence states the mechanism, the second states the purpose, and the third states a critical caveat. Every sentence earns its place and key information is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple list tool with one optional parameter, no output schema, and annotations covering safety, the description is complete. It tells the agent what command is run, how to use the result, that no task is started, and how to interpret an empty result from OAuth providers.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% for the single optional `search` parameter, so the schema already documents its meaning. The description does not add parameter-level detail, but it also does not need to; the baseline of 3 applies because the schema carries the param semantics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('List what this MiniMax Code installation reports via `mcode provider list --json`') and clear resource (models). It also distinguishes itself from siblings by explicitly saying it is used to pick a `model` value for `mcode` / `mcode_reply`, and clarifies that it 'Starts no task.'
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear usage context: use this tool to select a `model` value for `mcode` / `mcode_reply`. It also provides a useful exclusion ('Starts no task') and a caveat about official OAuth providers listing zero models. It does not explicitly name sibling alternatives, but the intended use is well established.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
mcode_replyADestructive
Send a new turn to an existing mcode session that is not executing right now — including one that timed out or was cancelled: the session survives in MiniMax Code's own store, so resume it here instead of restarting with mcode. Survives restarts of this server. For a turn still running under 'acp', use mcode_send instead.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | No | Absolute path override. Defaults to the directory where the session started. | |
| mode | No | ACP session/set_mode: 'default' or 'plan'. Print/exec has no session mode flag — plan on print is rejected. | |
| model | No | Model as MiniMax Code expects it: provider/model, e.g. 'minimax_oauth/MiniMax-M2.5'. Defaults to mcode's own default. mcode_models lists what provider list --json reported. | |
| prompt | Yes | Follow-up message for this session. | |
| session | Yes | Session id from a [session: <id>] prefix, or from mcode_sessions. | |
| transport | No | Usually omit. The default 'acp' keeps mcode up (`mcode acp`) so a running turn can be aborted or steered with mcode_send. 'print' is mcode exec --output-format stream-json: one process per turn that cannot be reached while it works. | |
| permission | No | Headless --permission: 'smart' (auto routine, ask when needed), 'full' (bypassPermissions), 'off'. Server default is full. ACP maps smart→auto and full→bypassPermissions. 'off' is exec-only; ACP rejects it. 'ask' is not a headless option. | |
| timeout_ms | No | Usually omit — there is no server default deadline. A run killed at the deadline is not lost: it still returns its session id and is resumable with mcode_reply. Print also forwards --timeout <N>ms. | |
| thinking_effort | No | ACP-only session/set_config_option id=thinkingEffort. Values are model-dependent; print has no equivalent flag. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already signal mutating and destructive behavior, so the description only needs to add context beyond that. It does so by disclosing that sessions survive in MiniMax Code's store, survive server restarts, and are resumable even after timeouts or cancellation. This gives the agent meaningful behavioral expectations without contradicting the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description packs the core action, persistence semantics, and sibling routing into two sentences without fluff. It front-loads the main purpose and only then adds the critical 'not executing' constraint and alternative-tool guidance. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 9 parameters, no output schema, and several sibling tools, the description covers the essential selection logic and persistence behavior well. It does not explain return values or how the response arrives, but the absence of an output schema lowers that burden. It could slightly expand on side effects or output expectations, but overall it is largely complete for invoking the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description itself adds little parameter-level detail, but that is acceptable because the schema already explains all 9 parameters, including enums and semantics for transport, permission, mode, and timeout. The description's main contribution is tool-selection context rather than parameter explanation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a clear verb and resource: 'Send a new turn to an existing mcode session that is not executing right now.' It also explicitly differentiates from siblings, naming both mcode_send for running turns and `mcode` for restarting sessions. This makes the tool's purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit when-to-use context: use when a session is not executing, including timed-out or cancelled sessions, and use mcode_send instead for a turn still running under 'acp'. It also advises resuming rather than restarting with `mcode`, providing a clear decision rule relative to alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
mcode_runningARead-onlyIdempotent
List mcode turns executing at this moment — the ones mcode_send can reach — with session id, working directory, elapsed time, and messages already sent in. Only acp-transport runs appear. For past sessions use mcode_sessions.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and idempotentHint, so safety profile is covered. The description adds meaningful behavioral context: this is a live snapshot filter limited to acp-transport runs and reachable by mcode_send, plus which fields are included.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the core purpose and scope, followed by the key exclusion and routing to sibling. No redundant wording.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a parameterless, read-only listing tool, the description fully enables correct selection and invocation. It states the relevant filter, the returned fields, and the sibling for past data, with output schema not needed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Tool has zero parameters and schema covers all of them, so the description has no parameter burden. Baseline 4 applies since no parameter ambiguity exists.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description uses specific verb 'List' with clear resource 'mcode turns executing at this moment' and explicitly bounds scope to 'the ones mcode_send can reach' and 'Only acp-transport runs appear'. This distinguishes it from siblings like mcode_sessions without opening schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly tells when to use: current executing turns, and names the alternative 'For past sessions use mcode_sessions'. The 'Only acp-transport runs appear' exclusion clarifies a key selection condition.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
mcode_sendADestructive
Deliver a message into an mcode turn that is executing right now. Works only on runs started with transport 'acp' — a session that already finished takes mcode_reply, not mcode_send. follow_up is unsupported: MiniMax Code ACP does not document a mid-turn queue. steer cancels the current turn and submits the message as a new prompt. mcode_running lists reachable sessions.
| Name | Required | Description | Default |
|---|---|---|---|
| command | No | 'abort' (default) cancels the current turn via ACP session/cancel; 'steer' cancels and immediately submits the message as a new user turn. 'follow_up' is rejected. | |
| message | No | Text to deliver. Required for 'steer', ignored by 'abort'. | |
| session | Yes | Session id of the running turn (see mcode_running). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations' destructiveHint=true, the description discloses meaningful behavior: steer cancels the current turn and submits the message as a new prompt, follow_up is rejected because MiniMax Code ACP has no documented mid-turn queue, and sessions that already finished require a different tool. This gives the agent a clear mental model of side effects and constraints without contradicting annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded, starting with the core action before moving into constraints, unsupported behavior, and related-tool pointers. Every sentence carries necessary information and there is no filler or repetition of schema details.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the three parameters, no output schema, and destructive annotations, the description covers the key operational context: when the tool is valid, what happens with each command mode, and how to discover sessions. It does not describe the return value, but for a message-delivery/cancel tool this is a minor gap rather than a blocking one.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already covers all three parameters with 100% description coverage, so the baseline is 3. The description adds value by clarifying that message is required for steer and ignored by abort, and that session refers to a running turn listed by mcode_running. This goes slightly beyond the schema without repeating its details.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's action: 'Deliver a message into an mcode turn that is executing right now.' It also distinguishes itself from the sibling mcode_reply by noting that finished sessions should use mcode_reply, not mcode_send. This makes the purpose immediately disambiguated.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit when-to-use context: only for runs started with transport 'acp' and only while the turn is executing. It also names the alternative for finished sessions (mcode_reply) and directs users to mcode_running for reachable sessions. This is strong, actionable guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
mcode_sessionsARead-onlyIdempotent
List all mcode sessions started through this server, newest first — running or finished, including runs that timed out. Each row gives the session id, when it last ran, cwd, remembered transport, and model. Use it to recover an id for mcode_reply. For turns still executing (mcode_send targets), use mcode_running.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the read-only safety profile is covered. The description adds sorting, inclusion of running/finished/timed-out sessions, and enumerates the returned fields, which is useful behavioral context beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three compact sentences; the key scope and ordering come first, the returned fields second, and usage guidance last. Every clause adds information with no repetition of annotations or schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a no-parameter read-only listing tool, it fully states scope, ordering, return-row content, and how the result should be used. It even handles the only likely ambiguity by routing executing turns to mcode_running, so nothing an agent needs to invoke it correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters and schema coverage is 100% for the empty schema, so there is no parameter description burden. The baseline for zero-parameter tools applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('List') and identifies the exact resource ('mcode sessions started through this server'), including ordering ('newest first') and scope. It also distinguishes itself from the sibling mcode_running, so an agent can select it confidently.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly instructs when to use it: to recover a session id for mcode_reply. It also names the alternative tool (mcode_running) for currently executing turns, so the main exclusion case is clearly covered.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
7 tool updates
v0.1.0- First observed
mcode - First observed
mcode_history - First observed
mcode_models - First observed
mcode_reply - First observed
mcode_running - First observed
mcode_send - First observed
mcode_sessions
TDQS
Scored across 7 tools
Each tool targets a distinct action—start, reply, send, list running, list all, list models, read history—and the descriptions explicitly cross-reference each other to clarify boundaries. However, mcode_reply vs mcode_send and mcode_running vs mcode_sessions still require careful reading to distinguish.
All tools share the mcode_ prefix, but the suffixes are inconsistent: verbs (reply, send), gerunds (running), and nouns (models, sessions, history), plus the bare mcode for the primary action. There is no uniform verb_noun pattern.
Seven tools cover the full lifecycle of interacting with a local coding agent without redundancy. The count feels well-scoped for the stated purpose.
The toolset covers starting, resuming, interrupting, listing, and inspecting mcode sessions, including model discovery. A few optional operations like an explicit stop/terminate endpoint are absent, but core workflows are complete.
Maintenance
Related MCP Connectors
Source-checked CLI guides and model-aware planning for Claude Code, Codex, and Grok Build.
Develop, manage, and debug Railway projects, services, and deployments from within agents.
No-data MCP handoff for local Claude Code to Codex harness moves. $49 lifetime.
Operate Linux, macOS and Windows from your LLM. Every action runs through an auditable allowlist.
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceEnables Codex to delegate bounded coding tasks to MiMo Code through a shared local daemon, supporting task boundaries, Git Worktrees, and a collaborative review workflow.3MIT
- AlicenseAqualityAmaintenanceEnables MCP clients like Claude Code and Codex to delegate coding tasks to Cursor's CLI agent, which implements changes in the workspace and returns clean, structured results for review.3421 npm4MIT
- AlicenseAqualityCmaintenanceEnables Codex to delegate coding tasks to an OpenCode CLI locally, returning structured results such as exit codes, session summaries, tool calls, and git diffs.2MIT
- AlicenseNot gradedqualityAmaintenanceLets Codex delegate coding and repository work to an installed Claude Code CLI with permission-aware inspect/write access, model and effort selection, resumable and cloud-attached sessions, and durable synchronous or asynchronous jobs.MIT