codex-claude-agent-mcp
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@codex-claude-agent-mcpFix the flaky auth test in src/auth.test.ts; acceptance: tests pass, no new deps"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
点将台
Codex × Claude Code 多智能体编排器
让 Codex 做主脑,让 Claude Code 做执行单元。 自动判断任务、派发执行、独立审查,最后由 Codex 验收。
点将台是一套本地 STDIO MCP + 编排 Skill:上游 Agent 负责产品、架构和高难 决策,把范围明确的实现、排错、重构、测试、算法、迁移及数据/模型工作交给执行 Agent;独立 Reviewer 检查实质变更,最后由上游 Agent 验收用户目标。
当前实现是 Codex → Claude Code。它同时也是可迁移的“主脑 Agent → MCP → 执行 Agent / Reviewer”模板;更换编排端或执行端时,按 AGENT_PORTING.md 先审计目标能力,再替换对应适配层。
任务判断由编排 Skill 或上游 Agent 完成。MCP 保持轻量和确定性,只负责调度、 权限、会话、按要求启动 Review,以及返回结构化结果。
功能与用途
能力分工:高判断任务留给主脑,明确且可验证的工作包交给执行 Agent。
工程执行:覆盖功能实现、Bug 根因排查、重构、测试、算法、迁移和建模工作。
连续会话:保存并确认 execution session,可带反馈恢复原执行上下文。
独立审查:Reviewer 使用全新只读会话,不修改代码、不混入执行会话。
批量编排:支持独立 Job 的有界并发和确定性 execute → review 流程。
临时授权:项目权限绑定单个 Job;续跑和审查不能切换或扩大目录。
可靠恢复:SQLite 保存状态;超时或结果丢失后可查询并安全决定续跑。
可迁移架构:保留工作流核心,按目标 Agent 能力更换客户端规则或 Runner。
Codex(主脑 / MCP Client)
│ stdin / stdout(STDIO MCP)
▼
点将台 MCP(本地子进程)
├── Claude 执行会话(读取、修改、运行验证)
└── Claude 审查会话(全新、只读、PASS/FAIL)Related MCP server: cc-in-codex
MCP 工具
工具 | 用途 |
| 让执行 Agent 完成明确任务并返回 execution session;不自动 Review。 |
| 用全新只读会话按 acceptance 独立判定 PASS/FAIL。 |
| 把反馈送回原 execution session 继续修复。 |
| 按要求执行 execute → 可选 review。 |
| 有界并发运行多个互相独立的 Job。 |
| 查询持久化状态,用于超时或结果丢失后的恢复。 |
| 检查 Server、SDK、CLI 与缓冲配置;不调用执行 Agent。 |
Server 在启动执行或审查前分配 UUID,只有执行端回报相同 session 后才允许续跑。
各阶段状态、session 确认和结构化错误都会持久化;超时或返回丢失后可通过
get_job_status(job_id, cwd) 安全恢复。
任务级项目授权
execute_task、review_task、run_job 以及 run_jobs 中的每个 JobSpec 都可
接收 project_root。Codex 必须显式传入可信的活动 workspace root,MCP 不会
根据自身进程 cwd 猜测。
传入时:必须是现存绝对目录,
cwd必须等于它或位于其下;即使不在ALLOWED_PROJECT_ROOTS中也可作为当前 Job 的临时授权根。省略时:继续按
ALLOWED_PROJECT_ROOTS长期可信目录校验。continue_task没有project_root参数,只能继承已保存的根、cwd和 session。已存在 Job 的
review_task只能继承或精确匹配原根,不能新增、切换或扩大授权。
确定性规则(规范 §6、§11)
review=false:只执行,不审查。review=true且 acceptance 非空:execute → 全新 review → 合并结果。review=true但 acceptance 为空:在调用 CC 前返回REVIEW_REQUIRES_ACCEPTANCE。MCP 不生成验收标准、不拆任务,也不自行决定是否 Review。
执行者负责与风险相称的验证;Bug 触发或根因不清时先复现并按同一条件复验, 已有可靠失败测试或明确错误证据时不强制造复现。
Reviewer 仅使用 Read/Grep/Glob,检查代码、逻辑和执行证据;证据不足时指出执行者 需要补充的针对性验证。
快速安装
需要 Python 3.13+ 和 uv。完整中文步骤见 INSTALL.md。
git clone https://github.com/zjgxkj/codex-claude-agent-mcp.git
cd codex-claude-agent-mcp
uv syncRun the test suite (uses a fake runner — no Claude API calls):
uv run pytestCodex STDIO MCP configuration (Windows)
Add one of the following to your Codex MCP config. Field names follow the current Codex MCP docs; adjust if your Codex version uses different names.
Option A — use the project's venv directly (recommended on Windows)
[mcp_servers.codex-claude-agent]
command = 'D:\path\to\codex-claude-agent-mcp\.venv\Scripts\python.exe'
args = ['-m', 'codex_claude_agent_mcp']
enabled = true
startup_timeout_sec = 30
tool_timeout_sec = 7200
[mcp_servers.codex-claude-agent.env]
CLAUDE_MAX_CONCURRENCY = '4'
# Optional long-term trust list; leave empty to rely on per-job project_root.
ALLOWED_PROJECT_ROOTS = 'D:\projects'Option B — installed console script
uv tool install . # or: pipx install .[mcp_servers.codex-claude-agent]
command = "codex-claude-agent-mcp"
enabled = true
startup_timeout_sec = 30
tool_timeout_sec = 7200
[mcp_servers.codex-claude-agent.env]
ALLOWED_PROJECT_ROOTS = 'D:\projects'
ALLOWED_PROJECT_ROOTSis optional: it is a long-term trust list, not a startup requirement. Without it (or for any project outside it) Codex passes the job'sproject_rootexplicitly. Windows uses;between roots.
Configuration (environment variables)
Variable | Default | Meaning |
|
| Max concurrent Claude sessions per MCP process. |
|
| Default per-task timeout. |
|
| Hard ceiling for |
|
| SQLite state path (shared across processes). |
| (empty = none) | Optional |
| (empty = allow any) | Comma-separated allowed model overrides. |
| (bundled) | Path to the Claude Code CLI executable. |
|
| Max bytes buffered per streamed SDK JSON line (default SDK limit is 1 MiB, which large tool_result payloads can exceed). |
|
| stderr log level. |
Concurrency caveat (spec §13.2)
The concurrency limit is per MCP server process. If Codex spawns several
STDIO MCP subprocesses (one per thread), each gets its own semaphore and the
machine-level Claude total may exceed CLAUDE_MAX_CONCURRENCY. Claude API rate
limits still apply. A global cross-process limit is an explicit non-goal for v1.
stdout / stderr discipline (spec §5)
stdout carries only MCP protocol messages (newline-delimited JSON-RPC).
All logs, diagnostics, tracebacks, and startup messages go to stderr.
Claude SDK subprocess output is captured by the runner and returned as structured tool results — it is never piped raw to stdout.
Process model (spec §4)
One launched MCP server handles many sequential tool calls over the same stdin/stdout connection. It is not restarted per call.
Multiple Codex threads may produce multiple independent MCP subprocesses. The implementation remains correct when several run at once (multi-process-safe SQLite: WAL,
busy_timeout,BEGIN IMMEDIATE,UNIQUE(job_id)).Review and resume operations atomically claim their job state, preventing two MCP processes from mutating the same job lifecycle at once.
A cancelled client request becomes stage
INCOMPLETEwith a persistedCANCELLEDerror instead of remaining in an active state.Claude session subprocesses are separate from MCP server processes and do not count toward "MCP server" count.
Architecture
src/codex_claude_agent_mcp/
├── __init__.py # version + main() entrypoint
├── __main__.py # `python -m codex_claude_agent_mcp`
├── server.py # FastMCP server, 7 tools, core logic
├── config.py # env config + cwd/model/timeout validation
├── models.py # Pydantic tool input/result models
├── scheduler.py # per-process asyncio.Semaphore
├── claude_runner.py # ClaudeRunner ABC + RealClaudeRunner + FakeClaudeRunner
├── session_store.py # multi-process-safe SQLite store
├── errors.py # structured error codes + MCPError
└── logging.py # stderr logger with pid markerThe server depends only on the ClaudeRunner ABC, so tests use
FakeClaudeRunner and never call the real Claude API.
Error model (spec §18)
Every result carries an optional error field (null on success). Errors are
structured, never raw tracebacks:
{"code": "REVIEW_REQUIRES_ACCEPTANCE", "message": "...", "retryable": false, "details": {}}Codes: INVALID_ARGUMENT, REVIEW_REQUIRES_ACCEPTANCE, INVALID_CWD,
CLAUDE_SESSION_ERROR, CLAUDE_AUTH_ERROR, CLAUDE_BILLING_ERROR,
CLAUDE_PROVIDER_ERROR, CLAUDE_PROTOCOL_ERROR, RATE_LIMITED, TASK_TIMEOUT,
SESSION_NOT_FOUND, SESSION_MISMATCH, JOB_CONTEXT_MISMATCH,
JOB_STATE_CONFLICT, CANCELLED, STATE_STORE_ERROR, INTERNAL_ERROR.
Safety invariants
A persisted
job_idis permanently bound to its original task, acceptance criteria, resolved working directory, and (when supplied) itsproject_root. Review rejects any mismatch; the root is not writable through the store.continue_taskresumes only the execution session stored for that exact job after Claude confirmed it, and inherits that job'sproject_root; it has no root input of its own.A review of an existing job can only inherit or exactly match the stored root. Only a review-only new job may establish one.
Execution is limited to Read/Grep/Glob/Edit/Write/Bash; web access, nested agents, and notebook editing are denied. Review remains read-only.
project_root/ALLOWED_PROJECT_ROOTSarecwd/start-directory gates. They are not an operating-system sandbox: execution Bash commands still run with the MCP process account's permissions. Use narrow roots and run only on trusted code.Claude result payloads use Agent SDK JSON Schema structured output and are validated before being returned to Codex.
Optional Codex orchestration skill
The repository includes skills/codex-sol-claude-orchestrator/SKILL.md.
Copy that directory to ~/.codex/skills/ if you want Codex to apply the
delegation workflow automatically. It is intentionally separate from MCP
server installation.
其他 MCP Client
Server 本身不绑定 Codex 可执行程序。其他 Agent 只要支持本地 STDIO MCP 和结构化
Tool Result,也可以使用;客户端必须为新 Job 提供可信 project_root,并负责安排
task、review 和 resume。更换主脑或执行端时见
AGENT_PORTING.md。
Status: v0.3 hardened
See CODEX_CLAUDE_AGENT_MCP_SPEC.md §25 for the full checklist. All v1 items are
implemented and covered by deterministic tests (tests/), including session
recovery, provider/protocol classification, lifecycle, concurrency, migrations,
and STDIO protocol cleanliness. Tests never call the paid Claude API.
License
Licensed under the Non-Commercial Reciprocal Source License 1.0: non-commercial use only, attribution required, and distributed, derived, or network-served Covered Works must publish their Corresponding Source under the same license. Commercial use requires separate prior written permission.
Because commercial use is prohibited, this is a source-available license, not an OSI-approved open-source license.
Official references
MCP Specification: https://modelcontextprotocol.io/specification/
MCP Python SDK: https://py.sdk.modelcontextprotocol.io/
Claude Agent SDK: https://code.claude.com/docs/en/agent-sdk/overview
OpenAI Codex MCP: https://developers.openai.com/codex/mcp
Available Tools
7 toolscontinue_taskC
Resume this job's CC-1 session with feedback; inherits the job's root.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | Yes | ||
| model | No | ||
| effort | No | ||
| job_id | Yes | ||
| feedback | Yes | ||
| timeout_sec | No | ||
| execution_session_id | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| error | No | |
| job_id | Yes | |
| status | No | |
| summary | No | |
| validation | No | |
| files_changed | No | |
| execution_completed | No | |
| execution_session_id | No | |
| execution_session_confirmed | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It adds one useful fact ('inherits the job's root'), but says nothing about permissions, side effects, timeout behavior, or what the required feedback does to the session.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with no wasted words, but its extreme brevity is under-specification rather than efficiency. It is appropriately terse in form yet too sparse for the tool's complexity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need not be explained. However, for a 7-parameter, 4-required tool with no annotations and 0% schema coverage, the description leaves the agent without the semantics needed to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% across 7 parameters, including required ones like job_id, execution_session_id, feedback, and cwd. The description documents none of them — not the meaning of 'feedback', the model/effort defaults, or the timeout behavior — so it fails to compensate for the coverage gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The verb+resource ('Resume this job's CC-1 session') is present, but 'CC-1 session' is undefined jargon and nothing distinguishes it from siblings like execute_task, run_job, or run_jobs. An agent can guess this continues an existing job rather than starting one, but the purpose remains vague.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no statement of when to use this tool versus execute_task, run_job, or review_task, and no prerequisites are given. The only hint is the word 'Resume', which implies continuing an existing session but never says so explicitly or names the alternative.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
execute_taskC
Run one CC task without review; only a confirmed session is resumable.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | Yes | ||
| task | Yes | ||
| model | No | ||
| effort | No | ||
| job_id | Yes | ||
| acceptance | No | ||
| timeout_sec | No | ||
| project_root | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| error | No | |
| job_id | Yes | |
| status | No | |
| summary | No | |
| validation | No | |
| files_changed | No | |
| execution_completed | No | |
| execution_session_id | No | |
| execution_session_confirmed | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full disclosure burden. It does reveal two behaviors: no review step runs, and resumability requires a confirmed session. But for an executor tool it omits critical context such as side effects, permissions, whether commands are destructive, timeout behavior, and what 'confirmed session' means. The disclosure is far short of what a safe invocation requires.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with no filler; the key qualifier ('without review') and the resumability condition come early. It is efficient, though arguably under-sized for an eight-parameter tool, which is penalized in other dimensions rather than here.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With eight parameters, no annotations, and 0% schema description coverage, this description is too thin. An output schema exists so return values need not be explained, but the description still omits parameter meaning, selection criteria, and behavioral constraints. It is not complete enough for an agent to invoke the tool correctly without external context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% (only project_root carries a description), and the description supplies nothing about the eight parameters: job_id, task, cwd, model, effort, acceptance, timeout_sec, or project_root. Required vs optional, the effort enum, and the trusted-root constraint of project_root are left entirely to the schema, with no compensating explanation. With high parameter count and zero coverage, this is a severe gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a verb and resource ('Run one CC task') and adds a scoping qualifier ('without review'), so the general action is clear. However, 'CC task' is unexplained jargon, and the description does not distinguish this tool from close siblings like run_job, run_jobs, or review_task beyond the vague 'without review' contrast. An agent cannot confidently tell which of the run/review tools to pick from this text alone.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit when-to-use or when-not-to-use guidance. 'Without review' faintly implies an alternative to review_task and 'only a confirmed session is resumable' hints at a resumption precondition, but neither names a sibling nor states a selection rule. The agent must infer routing from tool names.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_job_statusC
Read persisted job state (sessions, stage statuses); no CC call.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | Yes | ||
| job_id | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| error | No | |
| found | No | |
| job_id | Yes | |
| status | No | |
| created_at | No | |
| updated_at | No | |
| review_error | No | |
| review_status | No | |
| review_summary | No | |
| execution_error | No | |
| execution_status | No | |
| execution_summary | No | |
| review_session_id | No | |
| execution_session_id | No | |
| review_session_confirmed | No | |
| execution_session_confirmed | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden. It does disclose that this reads persisted state and makes 'no CC call,' which suggests a side-effect-free read, but it omits permissions, side effects, and other operational constraints.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single front-loaded sentence with no filler. However, the phrase 'no CC call' is cryptic and would benefit from clarification rather than being left as unexplained shorthand.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need not be explained. But with no annotations, 0% schema description coverage, and two required parameters, the description is too sparse to fully guide correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description does not explain either required parameter. The meaning of job_id is somewhat implied by 'job state,' but cwd is never addressed, so the description adds no useful parameter semantics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: read persisted job state, including sessions and stage statuses. It distinguishes the operation from executing a job, though it does not mention sibling tools by name.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit guidance on when to use this tool versus run_job, run_jobs, or the other task-related siblings. The read-only framing implies inspection, but conditions and alternatives are absent.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
pingB
Return pid/version, SDK/CLI metadata, buffer size; no CC call.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| ok | No | |
| pid | No | |
| version | No | |
| cli_path | No | |
| cli_version | No | |
| sdk_version | No | |
| max_buffer_size | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, and it does disclose one meaningful trait: routing to ping does not trigger a CC call, so it is side-effect-free and cheap. It does not say whether it is safe to call at any frequency, whether it requires the server to be running, or what it does not touch.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single short line with the returned fields front-loaded before the 'no CC call' qualifier. It is efficient, though the abbreviations ('CC', 'SDK/CLI metadata') are terse enough to be slightly ambiguous to an agent unfamiliar with the codebase.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need no prose, and there are no parameters to document. For a zero-arg diagnostic tool the description supplies what is needed to call it correctly; only the missing usage routing and the cryptic 'CC' abbreviation hold it below 5.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so per the rubric the baseline is 4. There is nothing for the description to disambiguate on the input side, and it correctly says nothing extra about arguments.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names the concrete payload (pid/version, SDK/CLI metadata, buffer size), so an agent can infer this is a lightweight diagnostic/health probe. But the phrasing is telegraphic, and it never distinguishes this from siblings like get_job_status or execute_task, whose names give no hint that ping is the cheap liveness check.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit when-to-use guidance. The trailing 'no CC call' implies a cheap probe that avoids a model invocation, which is a usable hint, but the description never states when to prefer ping over get_job_status or the run/execute tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
review_taskC
Fresh Read/Grep/Glob-only CC review; acceptance is required; never repairs.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | Yes | ||
| model | No | ||
| job_id | Yes | ||
| acceptance | Yes | ||
| timeout_sec | No | ||
| project_root | No | ||
| original_task | Yes | ||
| execution_summary | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| error | No | |
| job_id | Yes | |
| status | No | |
| summary | No | |
| evidence | No | |
| unmet_criteria | No | |
| review_completed | No | |
| review_session_id | No | |
| review_session_confirmed | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, and it does disclose two real behavioral traits: the reviewer is restricted to Read/Grep/Glob (read-only, cannot mutate) and it will never repair issues found. That is meaningful. It omits other behavioral facts an agent needs, such as the trust/permission model, timeout behavior, and what the review returns.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The single semicolon-delimited clause is front-loaded and waste-free, but it is under-specified rather than concise for a tool with 8 parameters and no annotations. The brevity is efficient but leaves core meaning unstated.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists so return values need not be explained, but for an 8-parameter, 4-required task-review tool with zero annotations and 0% schema coverage, the description is far too thin. Required inputs beyond 'acceptance', the meaning of 'fresh' context, and the relationship to sibling task tools are all missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% across 8 parameters (4 required), so the description must compensate and largely does not. It covers only 'acceptance' ('acceptance is required'); job_id, original_task, cwd, model, timeout_sec, project_root, and execution_summary get no explanation of format or role. Only project_root carries an inline schema description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a verb (review) and a constraint set (Read/Grep/Glob-only, fresh context, never repairs), which hints at a read-only code review task. However, 'CC' is unexplained jargon and the description never names the resource being reviewed (a job/task) or distinguishes itself from siblings like execute_task or run_job beyond the word 'review'. An agent must infer quite a bit.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The sentence 'acceptance is required; never repairs' states a precondition and a hard limitation but gives no when-to-use guidance relative to siblings (execute_task, continue_task, run_job). Nothing tells the agent when to choose review_task over running or continuing a task.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
run_jobD
Execute; if review=true and acceptance is nonempty, add a fresh review.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | Yes | ||
| task | Yes | ||
| model | No | ||
| effort | No | ||
| job_id | Yes | ||
| review | No | ||
| acceptance | No | ||
| timeout_sec | No | ||
| project_root | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| error | No | |
| job_id | Yes | |
| review | No | |
| status | No | |
| execution | Yes | |
| review_status | No | |
| execution_status | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden. It reveals one conditional behavior, that review=true with nonempty acceptance adds a fresh review, but omits execution semantics, timeout behavior, trust requirements, side effects, and what 'Execute' actually mutates.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The single sentence has no filler, but it is under-specified for a nine-parameter execution tool and reads like a fragment. Brevity here reflects missing content rather than disciplined concision.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no annotations, nine parameters, and 0% schema description coverage, the description is not complete enough for correct invocation. It omits usage context, parameter meanings, side effects, and safety constraints; the output schema does not offset those gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% across 9 parameters. The description references review and acceptance only in one conditional and says nothing about job_id, task, cwd, model, effort, timeout_sec, or project_root, so it fails to compensate for the schema gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with 'Execute' but never names the resource or what is being executed. It does not distinguish run_job from siblings such as execute_task, run_jobs, or review_task, leaving the object of the verb to be inferred from the tool name alone.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance on when to use run_job versus execute_task, review_task, continue_task, or run_jobs. The review/acceptance conditional describes a behavior, not selection criteria or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
run_jobsC
Run an already-independent job batch with bounded concurrency.
| Name | Required | Description | Default |
|---|---|---|---|
| jobs | Yes | ||
| max_concurrency | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| error | No | |
| results | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. 'bounded concurrency' alludes to the concurrency limit, but nothing is said about error/partial-failure behavior, timeouts (timeout_sec defaults to 3600), isolation, or side effects of actually executing tasks.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single tight sentence with the operation front-loaded and no filler. It is efficient, though its brevity reflects under-specification rather than disciplined conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need not be described. But for a tool that accepts a nested array of job specs and spawns execution, the description omits concurrency defaults, per-job timeout behavior, failure semantics, and permissions, which is inadequate given zero annotations.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% across both top-level params and the nested JobSpec fields. The description only obliquely maps to max_concurrency ('bounded concurrency') and job independence, leaving task, cwd, model, effort, review, acceptance, timeout_sec, and project_root undocumented.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Run') and resource ('job batch'), and 'batch' implicitly contrasts with the singular sibling run_job. However, it never names the alternative tool, so differentiation requires inference from the term 'batch'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
'already-independent' hints at a constraint (do not batch dependent jobs) but never states when to use run_jobs versus run_job, execute_task, or continue_task. No explicit context or exclusions are provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
7 tool updates
v0.3.0- First observed
continue_task - First observed
execute_task - First observed
get_job_status - First observed
ping - First observed
review_task - First observed
run_job - First observed
run_jobs
TDQS
Scored across 7 tools
execute_task and run_job both serve as execution entry points with overlapping purposes, and run_job can also incorporate review, blurring boundaries with review_task. Descriptions hint at differences (review option, scope) but the job vs task distinction is not defined, leaving room for misselection.
Mostly consistent snake_case verb_noun (execute_task, review_task, continue_task, run_job, run_jobs, get_job_status), but ping breaks the pattern and run/execute verbs are used interchangeably for similar actions. Still readable and predictable overall.
7 tools is well-scoped for an orchestration server covering health check, single/batch execution, review, session continuation, and status. Each tool has a distinct role without excessive surface area.
Core lifecycle is covered: start tasks/jobs, review, continue sessions, check status, and batch runs. However, missing cancellation/abort and job listing operations are notable gaps that could hinder cleanup or discovery in longer workflows.
Maintenance
Related MCP Connectors
A paid remote MCP for OpenAI Codex agent coordination MCP, built to return verdicts, receipts, usage
No-data MCP handoff for local Claude Code to Codex harness moves. $49 lifetime.
Paid remote MCP for Claude Code skill update gate MCP, structured receipts, audit logs, and reviewer
A paid remote MCP for OpenAI Codex harness MCP, built to return verdicts, receipts, usage logs, and
Related MCP Servers
- AlicenseAqualityDmaintenanceEnables Claude Code to delegate tasks to OpenAI's Codex CLI (GPT-5.4) with structured execution traces, parallel execution, session persistence, and adversarial code review.15MIT
- AlicenseBqualityDmaintenanceEnables Codex to manage a local Claude Code companion through MCP, implementing a dual-agent workflow where Codex handles reasoning and review while Claude Code performs engineering tasks.181MIT
- AlicenseAqualityCmaintenanceEnables Codex to delegate long-running work to Claude Code via blocking MCP calls, with tools for model discovery, run, and resume without polling.3MIT
- AlicenseNot gradedqualityBmaintenanceEnables Codex to delegate tasks to interactive Claude Code sessions as role-controlled subagents for exploration, code review, and implementation, using the existing Claude Code installation on macOS.MIT