Skip to main content
Glama
Sign In
godkiller-mcp

godkiller-mcp

by taurus42119-stack
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Local

The problem everyone feels

AI coding agents are loud and optimistic.

  • They type “Fixed! All done.” while tests still fail.

  • They dump fat JSON into context until the model forgets the goal — and your token bill climbs.

  • They skip /plan, edit twenty files, and call it a day.

  • Chat becomes the source of truth. Disk never gets a vote.

GODKILLER flips that.
If it isn’t proven on disk, it isn’t done.

Related MCP server: Architect-to-Product (A2P)

Who it’s for

Developers, AI engineers, and power users who run agents hard — and refuse to trust the chat bubble.

Pain

Without GODKILLER

With GODKILLER

Fake completion

“All done!” / “All green” in chat

claim_done blocked until verify + evidence land

Token bloat

Schema / dump floods every turn

Compact payloads by default

Skipped ritual

Plan → edit → vibes

Phase gates · illegal jumps die

Blind edits

Multi-file rush, no blast

edit_safe · blast · hollow · fault probe

Why people install it

Proof over promises

Chat vibes don’t open the gate. Sealed evidence on disk does.

Phase kernel that actually bites

gk_route puts the agent on a real pipeline:

Mode

Job

/ask

Read-only. Answers with citations.

/plan

Spec first. No silent “just ship it.”

/debug

Repro + hypotheses before the fix.

/ultradeep

One file · think → plan → edit.

/view

Study patterns. Don’t paste a whole repo as done.

/verify

Disk proof → then claim_done.

One MCP. Full surface.

Code · scan · browser · guard · memory · handoff — facades in one place.
Pair specialty MCPs as brains. GODKILLER is the judge.

The flex

The model proposes. GODKILLER disposes.

goal → mode → plan → search/blast → gated edit
    → disk verify → hollow → probe → exit → claim_done | blocked

How to use

Do this

Once (machine)

pip install godkiller-mcp · add MCP server · set GODKILLER_SEAL_KEY (docs/SEAL_KEY.md)

Once per project

godkiller-bootstrap --workspace . · reload the IDE

Every task

gk_mode.activate → /plan → /ultradeep Phase N → set_paths → end_turn → /verify → claim_done

Full lock (optional)

Prove deny/allow, then GODKILLER_WRITE_GUARD_PROVEN=1 — docs/WRITE_GUARD_HOOKS.md

godkiller-bootstrap writes .agents/AGENTS.md, .agents/PROMPTS.md (copy-paste prompts), and portable write-guard hooks. Do not commit godkiller-write-guard.local.cmd / .local.sh (machine pin).

Ship write turns: one set_paths per turn (default max 1 path); gk_guard.end_turn before the next Phase. Ultradeep allowlists the current file only.
Mode pin: /ask /view /verify deny native app Write; /plan only .agents/plans/.

MCP gates gk_* only. Native Write stays free until PreToolUse is wired. Details: docs/HOST_VS_MCP.md.

60-second install

pip install godkiller-mcp
python -c "import secrets; print(secrets.token_hex(32))"

Drop into your MCP host config:

{
  "mcpServers": {
    "godkiller": {
      "command": "godkiller-mcp",
      "env": {
        "GODKILLER_PROFILE": "ship",
        "GODKILLER_WORKSPACE": "/absolute/path/to/your/project",
        "GODKILLER_HOME": "/absolute/path/to/your/project/.godkiller-session",
        "GODKILLER_SEAL_KEY": "REPLACE_WITH_64_HEX",
        "GODKILLER_SEAL_REQUIRE_ENV": "1"
      }
    }
  }
}

Alternate entry: python -m godkiller_mcp.server
From source: pip install "git+https://github.com/taurus42119-stack/godkiller-mcp.git"

Modes ship inside the package — a full .agents/workflows tree is not required.
One GODKILLER_HOME per concurrent host.

Ship tip: wire host PreToolUse → godkiller-write-guard, then set GODKILLER_WRITE_GUARD_PROVEN=1 only after a live deny/allow test.
Until that hook is real, native Write can still bypass MCP tools.
Details: docs/WRITE_GUARD_HOOKS.md · docs/HOST_VS_MCP.md · docs/SEAL_KEY.md

Intensity (honest)

You installed

What you actually get

MCP only

Judge on the gk_* path. Native IDE Write is free.

+ .agents/AGENTS.md

Soft standing orders. Agents can still skip.

+ host write-guard (opt-in)

Native Write/Edit blocked unless allowlisted.

We do not ship a hostile filesystem lock inside MCP. Full lock is your PreToolUse hook — see docs/WRITE_GUARD_HOOKS.md.

Try this

After MCP is live:

  1. Call gk_meta.status — if it fails, stop. Don’t invent that the kernel is up.

  2. /plan a real feature. Watch phase gates bite.

  3. Fix with blast_radius → edit_safe — not chat “I searched.”

  4. Finish with gk_verify.exit → gk_phase.claim_done.

No .godkiller/ state on disk? You didn’t use the kernel. You used vibes.

Tool map

Facade

What it owns

gk_meta

Honesty status · 9-step plan

gk_route

Mode switchboard

gk_task

open · blast · edit_safe

gk_phase

assert · claim_done

gk_evidence

shots · visual_step · critic

gk_verify

bundle · hollow · probe · exit

gk_memory

lessons · marathon

gk_code

map · search · council · swarm

gk_guard

write allowlist for host hooks

gk_scan

heuristic scan

gk_browser

Playwright fallback (prefer chrome-devtools when present)

gk_mode

protocols · skills

gk_handoff

spec / feedback

Agent protocol notes: docs/AGENT_PROTOCOL.md

Star · fork · flex

If this killed a fake “done” for you — star the repo.
Fork it. Wire it. Make your agent earn the win.

Security

SECURITY.md

License

MIT © 2026 GODKILLER Team — LICENSE

Available Tools

13 tools
gk_browserA

Playwright fallback ONLY when chrome-devtools is NOT on the host. If chrome-devtools is listed, returns prefer_chrome_devtools — use that peer first; force_gk_browser=1 to override. Pass action= and optional args={}. 7 actions; unknown action returns allowed list (saves schema tokens).

Inputs: action (required), args. Returns: result

gk_codeB

Code intel helpers (map/search/read). council/swarm/pipeline/self_heal = best-effort, not magic fix or formal proof. Pass action= and optional args={}. 21 actions; unknown action returns allowed list (saves schema tokens).

Inputs: action (required), args. Returns: result

gk_evidenceC

Evidence: submit, capture_shot, visual_critic, visual_step (~10-shot QA), visual_sequence, screenshot, journey, inspect_image. Pass action= and optional args={}. 8 actions; unknown action returns allowed list (saves schema tokens).

Inputs: action (required), args. Returns: result

gk_guardA

Write allowlist for host PreToolUse. set_paths arms ONE turn (ship default max 1 path); end_turn clears it. Ultradeep syncs current file only — never the whole queue. Blocks native Write only when the host hook is wired. Pass action= and optional args={}. 3 actions; unknown action returns allowed list (saves schema tokens).

Inputs: action (required), args. Returns: result

gk_handoffC

Spec/feedback handoff gates. Pass action= and optional args={}. 4 actions; unknown action returns allowed list (saves schema tokens).

Inputs: action (required), args. Returns: result

gk_memoryC

Workflow memory graph: lessons, marathon, query_graph, what_blocked, upsert_episode. Pass action= and optional args={}. 12 actions; unknown action returns allowed list (saves schema tokens).

Inputs: action (required), args. Returns: result

gk_metaB

Honesty status (disk MCP configs + real facades) + secrets key listing + 9-step plan template/validate. Pass action= and optional args={}. 4 actions; unknown action returns allowed list (saves schema tokens).

Inputs: action (required), args. Returns: result

gk_modeB

Modes/protocols/skills + ultradeep/view + debug_engine (static scan + token heuristics — not a live debugger) + tool_propose (search≠install) + plan_refute wake. Pass action= and optional args={}. 29 actions; unknown action returns allowed list (saves schema tokens).

Inputs: action (required), args. Returns: result

gk_phaseA

Phase machine: assert, claim_done, rubric. Blocks illegal Antigravity phase skips. Pass action= and optional args={}. 3 actions; unknown action returns allowed list (saves schema tokens).

Inputs: action (required), args. Returns: result

gk_routeA

Classify intent into /ask|/plan|/debug|/ultradeep|/view|/verify. Pass action= and optional args={}. 1 actions; unknown action returns allowed list (saves schema tokens).

Inputs: action (required), args. Returns: result

gk_scanA

Best-effort regex CWE heuristics (signal, not a pro audit); optional semgrep CLI. Pass action= and optional args={}. 2 actions; unknown action returns allowed list (saves schema tokens).

Inputs: action (required), args. Returns: result

gk_taskC

Task lifecycle: open, hypothesize, graph, policy, blast_radius, edit_safe, failing_slice. Pass action= and optional args={}. 7 actions; unknown action returns allowed list (saves schema tokens).

Inputs: action (required), args. Returns: result

gk_verifyA

Verification: bundle, exit (short stage_board), soak, probe, loop_*, competitor, compare, ladder. Pass action= and optional args={}. 11 actions; unknown action returns allowed list (saves schema tokens).

Inputs: action (required), args. Returns: result

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    A3.5/5.0

    Scored across 13 tools

    Disambiguation5/5

    Each tool maps to a distinct functional domain (code, guard, scan, route, task, phase, evidence, verify, memory, browser, mode, handoff, meta). The action namespaces are clearly separated, so an agent can reliably select the right tool for a given task. No two tools appear to do the same thing.

    Naming Consistency5/5

    All tools follow a consistent gk_<noun> pattern with lowercase snake_case. The shared prefix and simple noun suffixes make the hierarchy predictable and easy to remember.

    Tool Count5/5

    With 13 tools, the server is well within the recommended range. The broad domains are logically partitioned, and the action subcommands are packed inside each tool without exploding the tool list.

    Completeness5/5

    The toolset covers the major phases of a coding workflow: code observation, security scanning, task tracking, verification, evidence, memory, browsing, mode management, and meta/honesty. No critical gaps are apparent for its stated purpose of aiding complex development processes.

    Maintenance

    ActivityInactive
    ResponsivenessNo recent community issues

    Resources

    Related MCP Connectors

    Related MCP Servers

    • Deslopify

      veroxsity
      -
      license
      Not graded
      quality
      Not graded
      maintenance
      A universal MCP server that acts as a code quality gate for AI assistants, providing pre-generation guidance, post-generation review, and root cause analysis to improve code quality.
      -

    • worker-mcp

      noosxe
      A
      license
      A
      quality
      B
      maintenance
      MCP server that enables a coordinator AI agent to spawn, control, and supervise local coding agents with interactive gating for high-risk operations.
      10
      10 npm
      MIT