Skip to main content
Glama
zjgxkj
by zjgxkj

点将台

Codex × Claude Code 多智能体编排器

让 Codex 做主脑,让 Claude Code 做执行单元。 自动判断任务、派发执行、独立审查,最后由 Codex 验收。

点将台是一套本地 STDIO MCP + 编排 Skill:上游 Agent 负责产品、架构和高难 决策,把范围明确的实现、排错、重构、测试、算法、迁移及数据/模型工作交给执行 Agent;独立 Reviewer 检查实质变更,最后由上游 Agent 验收用户目标。

当前实现是 Codex → Claude Code。它同时也是可迁移的“主脑 Agent → MCP → 执行 Agent / Reviewer”模板;更换编排端或执行端时,按 AGENT_PORTING.md 先审计目标能力,再替换对应适配层。

任务判断由编排 Skill 或上游 Agent 完成。MCP 保持轻量和确定性,只负责调度、 权限、会话、按要求启动 Review,以及返回结构化结果。

功能与用途

  • 能力分工:高判断任务留给主脑,明确且可验证的工作包交给执行 Agent。

  • 工程执行:覆盖功能实现、Bug 根因排查、重构、测试、算法、迁移和建模工作。

  • 连续会话:保存并确认 execution session,可带反馈恢复原执行上下文。

  • 独立审查:Reviewer 使用全新只读会话,不修改代码、不混入执行会话。

  • 批量编排:支持独立 Job 的有界并发和确定性 execute → review 流程。

  • 临时授权:项目权限绑定单个 Job;续跑和审查不能切换或扩大目录。

  • 可靠恢复:SQLite 保存状态;超时或结果丢失后可查询并安全决定续跑。

  • 可迁移架构:保留工作流核心,按目标 Agent 能力更换客户端规则或 Runner。

Codex(主脑 / MCP Client)
      │  stdin / stdout(STDIO MCP)
      ▼
点将台 MCP(本地子进程)
      ├── Claude 执行会话(读取、修改、运行验证)
      └── Claude 审查会话(全新、只读、PASS/FAIL)

Related MCP server: cc-in-codex

MCP 工具

工具

用途

execute_task

让执行 Agent 完成明确任务并返回 execution session;不自动 Review。

review_task

用全新只读会话按 acceptance 独立判定 PASS/FAIL。

continue_task

把反馈送回原 execution session 继续修复。

run_job

按要求执行 execute → 可选 review。

run_jobs

有界并发运行多个互相独立的 Job。

get_job_status

查询持久化状态,用于超时或结果丢失后的恢复。

ping

检查 Server、SDK、CLI 与缓冲配置;不调用执行 Agent。

Server 在启动执行或审查前分配 UUID,只有执行端回报相同 session 后才允许续跑。 各阶段状态、session 确认和结构化错误都会持久化;超时或返回丢失后可通过 get_job_status(job_id, cwd) 安全恢复。

任务级项目授权

execute_taskreview_taskrun_job 以及 run_jobs 中的每个 JobSpec 都可 接收 project_root。Codex 必须显式传入可信的活动 workspace root,MCP 不会 根据自身进程 cwd 猜测。

  • 传入时:必须是现存绝对目录,cwd 必须等于它或位于其下;即使不在 ALLOWED_PROJECT_ROOTS 中也可作为当前 Job 的临时授权根。

  • 省略时:继续按 ALLOWED_PROJECT_ROOTS 长期可信目录校验。

  • continue_task 没有 project_root 参数,只能继承已保存的根、cwd 和 session。

  • 已存在 Job 的 review_task 只能继承或精确匹配原根,不能新增、切换或扩大授权。

确定性规则(规范 §6、§11)

  • review=false:只执行,不审查。

  • review=true 且 acceptance 非空:execute → 全新 review → 合并结果。

  • review=true 但 acceptance 为空:在调用 CC 前返回 REVIEW_REQUIRES_ACCEPTANCE

  • MCP 不生成验收标准、不拆任务,也不自行决定是否 Review。

  • 执行者负责与风险相称的验证;Bug 触发或根因不清时先复现并按同一条件复验, 已有可靠失败测试或明确错误证据时不强制造复现。

  • Reviewer 仅使用 Read/Grep/Glob,检查代码、逻辑和执行证据;证据不足时指出执行者 需要补充的针对性验证。

快速安装

需要 Python 3.13+ 和 uv。完整中文步骤见 INSTALL.md

git clone https://github.com/zjgxkj/codex-claude-agent-mcp.git
cd codex-claude-agent-mcp
uv sync

Run the test suite (uses a fake runner — no Claude API calls):

uv run pytest

Codex STDIO MCP configuration (Windows)

Add one of the following to your Codex MCP config. Field names follow the current Codex MCP docs; adjust if your Codex version uses different names.

[mcp_servers.codex-claude-agent]
command = 'D:\path\to\codex-claude-agent-mcp\.venv\Scripts\python.exe'
args = ['-m', 'codex_claude_agent_mcp']
enabled = true
startup_timeout_sec = 30
tool_timeout_sec = 7200

[mcp_servers.codex-claude-agent.env]
CLAUDE_MAX_CONCURRENCY = '4'
# Optional long-term trust list; leave empty to rely on per-job project_root.
ALLOWED_PROJECT_ROOTS = 'D:\projects'

Option B — installed console script

uv tool install .          # or: pipx install .
[mcp_servers.codex-claude-agent]
command = "codex-claude-agent-mcp"
enabled = true
startup_timeout_sec = 30
tool_timeout_sec = 7200

[mcp_servers.codex-claude-agent.env]
ALLOWED_PROJECT_ROOTS = 'D:\projects'

ALLOWED_PROJECT_ROOTS is optional: it is a long-term trust list, not a startup requirement. Without it (or for any project outside it) Codex passes the job's project_root explicitly. Windows uses ; between roots.

Configuration (environment variables)

Variable

Default

Meaning

CLAUDE_MAX_CONCURRENCY

4

Max concurrent Claude sessions per MCP process.

DEFAULT_TASK_TIMEOUT_SEC

3600

Default per-task timeout.

MAX_TASK_TIMEOUT_SEC

7200

Hard ceiling for timeout_sec.

CODEX_CLAUDE_AGENT_MCP_DB_PATH

~/.codex-claude-agent-mcp/state.db

SQLite state path (shared across processes).

ALLOWED_PROJECT_ROOTS

(empty = none)

Optional ;-separated (Windows) / :-separated (POSIX) long-term cwd roots. Empty grants nothing; per-job project_root authorizes the rest.

ALLOWED_MODELS

(empty = allow any)

Comma-separated allowed model overrides.

CLAUDE_CLI_PATH

(bundled)

Path to the Claude Code CLI executable.

CLAUDE_SDK_MAX_BUFFER_SIZE

20971520 (20 MiB)

Max bytes buffered per streamed SDK JSON line (default SDK limit is 1 MiB, which large tool_result payloads can exceed).

CODEX_CLAUDE_AGENT_MCP_LOG_LEVEL

INFO

stderr log level.

Concurrency caveat (spec §13.2)

The concurrency limit is per MCP server process. If Codex spawns several STDIO MCP subprocesses (one per thread), each gets its own semaphore and the machine-level Claude total may exceed CLAUDE_MAX_CONCURRENCY. Claude API rate limits still apply. A global cross-process limit is an explicit non-goal for v1.

stdout / stderr discipline (spec §5)

  • stdout carries only MCP protocol messages (newline-delimited JSON-RPC).

  • All logs, diagnostics, tracebacks, and startup messages go to stderr.

  • Claude SDK subprocess output is captured by the runner and returned as structured tool results — it is never piped raw to stdout.

Process model (spec §4)

  • One launched MCP server handles many sequential tool calls over the same stdin/stdout connection. It is not restarted per call.

  • Multiple Codex threads may produce multiple independent MCP subprocesses. The implementation remains correct when several run at once (multi-process-safe SQLite: WAL, busy_timeout, BEGIN IMMEDIATE, UNIQUE(job_id)).

  • Review and resume operations atomically claim their job state, preventing two MCP processes from mutating the same job lifecycle at once.

  • A cancelled client request becomes stage INCOMPLETE with a persisted CANCELLED error instead of remaining in an active state.

  • Claude session subprocesses are separate from MCP server processes and do not count toward "MCP server" count.

Architecture

src/codex_claude_agent_mcp/
├── __init__.py        # version + main() entrypoint
├── __main__.py        # `python -m codex_claude_agent_mcp`
├── server.py          # FastMCP server, 7 tools, core logic
├── config.py          # env config + cwd/model/timeout validation
├── models.py          # Pydantic tool input/result models
├── scheduler.py       # per-process asyncio.Semaphore
├── claude_runner.py   # ClaudeRunner ABC + RealClaudeRunner + FakeClaudeRunner
├── session_store.py   # multi-process-safe SQLite store
├── errors.py          # structured error codes + MCPError
└── logging.py         # stderr logger with pid marker

The server depends only on the ClaudeRunner ABC, so tests use FakeClaudeRunner and never call the real Claude API.

Error model (spec §18)

Every result carries an optional error field (null on success). Errors are structured, never raw tracebacks:

{"code": "REVIEW_REQUIRES_ACCEPTANCE", "message": "...", "retryable": false, "details": {}}

Codes: INVALID_ARGUMENT, REVIEW_REQUIRES_ACCEPTANCE, INVALID_CWD, CLAUDE_SESSION_ERROR, CLAUDE_AUTH_ERROR, CLAUDE_BILLING_ERROR, CLAUDE_PROVIDER_ERROR, CLAUDE_PROTOCOL_ERROR, RATE_LIMITED, TASK_TIMEOUT, SESSION_NOT_FOUND, SESSION_MISMATCH, JOB_CONTEXT_MISMATCH, JOB_STATE_CONFLICT, CANCELLED, STATE_STORE_ERROR, INTERNAL_ERROR.

Safety invariants

  • A persisted job_id is permanently bound to its original task, acceptance criteria, resolved working directory, and (when supplied) its project_root. Review rejects any mismatch; the root is not writable through the store.

  • continue_task resumes only the execution session stored for that exact job after Claude confirmed it, and inherits that job's project_root; it has no root input of its own.

  • A review of an existing job can only inherit or exactly match the stored root. Only a review-only new job may establish one.

  • Execution is limited to Read/Grep/Glob/Edit/Write/Bash; web access, nested agents, and notebook editing are denied. Review remains read-only.

  • project_root / ALLOWED_PROJECT_ROOTS are cwd/start-directory gates. They are not an operating-system sandbox: execution Bash commands still run with the MCP process account's permissions. Use narrow roots and run only on trusted code.

  • Claude result payloads use Agent SDK JSON Schema structured output and are validated before being returned to Codex.

Optional Codex orchestration skill

The repository includes skills/codex-sol-claude-orchestrator/SKILL.md. Copy that directory to ~/.codex/skills/ if you want Codex to apply the delegation workflow automatically. It is intentionally separate from MCP server installation.

其他 MCP Client

Server 本身不绑定 Codex 可执行程序。其他 Agent 只要支持本地 STDIO MCP 和结构化 Tool Result,也可以使用;客户端必须为新 Job 提供可信 project_root,并负责安排 task、review 和 resume。更换主脑或执行端时见 AGENT_PORTING.md

Status: v0.3 hardened

See CODEX_CLAUDE_AGENT_MCP_SPEC.md §25 for the full checklist. All v1 items are implemented and covered by deterministic tests (tests/), including session recovery, provider/protocol classification, lifecycle, concurrency, migrations, and STDIO protocol cleanliness. Tests never call the paid Claude API.

License

Licensed under the Non-Commercial Reciprocal Source License 1.0: non-commercial use only, attribution required, and distributed, derived, or network-served Covered Works must publish their Corresponding Source under the same license. Commercial use requires separate prior written permission.

Because commercial use is prohibited, this is a source-available license, not an OSI-approved open-source license.

Official references

Available Tools

7 tools
continue_taskC

Resume this job's CC-1 session with feedback; inherits the job's root.

ParametersJSON Schema
NameRequiredDescriptionDefault
cwdYes
modelNo
effortNo
job_idYes
feedbackYes
timeout_secNo
execution_session_idYes

Output Schema

ParametersJSON Schema
NameRequiredDescription
errorNo
job_idYes
statusNo
summaryNo
validationNo
files_changedNo
execution_completedNo
execution_session_idNo
execution_session_confirmedNo

TDQS

C2.2/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure. It adds one useful fact ('inherits the job's root'), but says nothing about permissions, side effects, timeout behavior, or what the required feedback does to the session.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with no wasted words, but its extreme brevity is under-specification rather than efficiency. It is appropriately terse in form yet too sparse for the tool's complexity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be explained. However, for a 7-parameter, 4-required tool with no annotations and 0% schema coverage, the description leaves the agent without the semantics needed to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% across 7 parameters, including required ones like job_id, execution_session_id, feedback, and cwd. The description documents none of them — not the meaning of 'feedback', the model/effort defaults, or the timeout behavior — so it fails to compensate for the coverage gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The verb+resource ('Resume this job's CC-1 session') is present, but 'CC-1 session' is undefined jargon and nothing distinguishes it from siblings like execute_task, run_job, or run_jobs. An agent can guess this continues an existing job rather than starting one, but the purpose remains vague.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no statement of when to use this tool versus execute_task, run_job, or review_task, and no prerequisites are given. The only hint is the word 'Resume', which implies continuing an existing session but never says so explicitly or names the alternative.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

execute_taskC

Run one CC task without review; only a confirmed session is resumable.

ParametersJSON Schema
NameRequiredDescriptionDefault
cwdYes
taskYes
modelNo
effortNo
job_idYes
acceptanceNo
timeout_secNo
project_rootNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
errorNo
job_idYes
statusNo
summaryNo
validationNo
files_changedNo
execution_completedNo
execution_session_idNo
execution_session_confirmedNo

TDQS

C2.3/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full disclosure burden. It does reveal two behaviors: no review step runs, and resumability requires a confirmed session. But for an executor tool it omits critical context such as side effects, permissions, whether commands are destructive, timeout behavior, and what 'confirmed session' means. The disclosure is far short of what a safe invocation requires.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with no filler; the key qualifier ('without review') and the resumability condition come early. It is efficient, though arguably under-sized for an eight-parameter tool, which is penalized in other dimensions rather than here.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With eight parameters, no annotations, and 0% schema description coverage, this description is too thin. An output schema exists so return values need not be explained, but the description still omits parameter meaning, selection criteria, and behavioral constraints. It is not complete enough for an agent to invoke the tool correctly without external context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% (only project_root carries a description), and the description supplies nothing about the eight parameters: job_id, task, cwd, model, effort, acceptance, timeout_sec, or project_root. Required vs optional, the effort enum, and the trusted-root constraint of project_root are left entirely to the schema, with no compensating explanation. With high parameter count and zero coverage, this is a severe gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a verb and resource ('Run one CC task') and adds a scoping qualifier ('without review'), so the general action is clear. However, 'CC task' is unexplained jargon, and the description does not distinguish this tool from close siblings like run_job, run_jobs, or review_task beyond the vague 'without review' contrast. An agent cannot confidently tell which of the run/review tools to pick from this text alone.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit when-to-use or when-not-to-use guidance. 'Without review' faintly implies an alternative to review_task and 'only a confirmed session is resumable' hints at a resumption precondition, but neither names a sibling nor states a selection rule. The agent must infer routing from tool names.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_job_statusC

Read persisted job state (sessions, stage statuses); no CC call.

ParametersJSON Schema
NameRequiredDescriptionDefault
cwdYes
job_idYes

Output Schema

ParametersJSON Schema
NameRequiredDescription
errorNo
foundNo
job_idYes
statusNo
created_atNo
updated_atNo
review_errorNo
review_statusNo
review_summaryNo
execution_errorNo
execution_statusNo
execution_summaryNo
review_session_idNo
execution_session_idNo
review_session_confirmedNo
execution_session_confirmedNo

TDQS

C2.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full behavioral burden. It does disclose that this reads persisted state and makes 'no CC call,' which suggests a side-effect-free read, but it omits permissions, side effects, and other operational constraints.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single front-loaded sentence with no filler. However, the phrase 'no CC call' is cryptic and would benefit from clarification rather than being left as unexplained shorthand.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be explained. But with no annotations, 0% schema description coverage, and two required parameters, the description is too sparse to fully guide correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description does not explain either required parameter. The meaning of job_id is somewhat implied by 'job state,' but cwd is never addressed, so the description adds no useful parameter semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: read persisted job state, including sessions and stage statuses. It distinguishes the operation from executing a job, though it does not mention sibling tools by name.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit guidance on when to use this tool versus run_job, run_jobs, or the other task-related siblings. The read-only framing implies inspection, but conditions and alternatives are absent.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

pingB

Return pid/version, SDK/CLI metadata, buffer size; no CC call.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

Output Schema

ParametersJSON Schema
NameRequiredDescription
okNo
pidNo
versionNo
cli_pathNo
cli_versionNo
sdk_versionNo
max_buffer_sizeNo

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden, and it does disclose one meaningful trait: routing to ping does not trigger a CC call, so it is side-effect-free and cheap. It does not say whether it is safe to call at any frequency, whether it requires the server to be running, or what it does not touch.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single short line with the returned fields front-loaded before the 'no CC call' qualifier. It is efficient, though the abbreviations ('CC', 'SDK/CLI metadata') are terse enough to be slightly ambiguous to an agent unfamiliar with the codebase.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need no prose, and there are no parameters to document. For a zero-arg diagnostic tool the description supplies what is needed to call it correctly; only the missing usage routing and the cryptic 'CC' abbreviation hold it below 5.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so per the rubric the baseline is 4. There is nothing for the description to disambiguate on the input side, and it correctly says nothing extra about arguments.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names the concrete payload (pid/version, SDK/CLI metadata, buffer size), so an agent can infer this is a lightweight diagnostic/health probe. But the phrasing is telegraphic, and it never distinguishes this from siblings like get_job_status or execute_task, whose names give no hint that ping is the cheap liveness check.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit when-to-use guidance. The trailing 'no CC call' implies a cheap probe that avoids a model invocation, which is a usable hint, but the description never states when to prefer ping over get_job_status or the run/execute tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

review_taskC

Fresh Read/Grep/Glob-only CC review; acceptance is required; never repairs.

ParametersJSON Schema
NameRequiredDescriptionDefault
cwdYes
modelNo
job_idYes
acceptanceYes
timeout_secNo
project_rootNo
original_taskYes
execution_summaryNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
errorNo
job_idYes
statusNo
summaryNo
evidenceNo
unmet_criteriaNo
review_completedNo
review_session_idNo
review_session_confirmedNo

TDQS

C2.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden, and it does disclose two real behavioral traits: the reviewer is restricted to Read/Grep/Glob (read-only, cannot mutate) and it will never repair issues found. That is meaningful. It omits other behavioral facts an agent needs, such as the trust/permission model, timeout behavior, and what the review returns.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The single semicolon-delimited clause is front-loaded and waste-free, but it is under-specified rather than concise for a tool with 8 parameters and no annotations. The brevity is efficient but leaves core meaning unstated.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists so return values need not be explained, but for an 8-parameter, 4-required task-review tool with zero annotations and 0% schema coverage, the description is far too thin. Required inputs beyond 'acceptance', the meaning of 'fresh' context, and the relationship to sibling task tools are all missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% across 8 parameters (4 required), so the description must compensate and largely does not. It covers only 'acceptance' ('acceptance is required'); job_id, original_task, cwd, model, timeout_sec, project_root, and execution_summary get no explanation of format or role. Only project_root carries an inline schema description.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a verb (review) and a constraint set (Read/Grep/Glob-only, fresh context, never repairs), which hints at a read-only code review task. However, 'CC' is unexplained jargon and the description never names the resource being reviewed (a job/task) or distinguishes itself from siblings like execute_task or run_job beyond the word 'review'. An agent must infer quite a bit.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The sentence 'acceptance is required; never repairs' states a precondition and a hard limitation but gives no when-to-use guidance relative to siblings (execute_task, continue_task, run_job). Nothing tells the agent when to choose review_task over running or continuing a task.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

run_jobD

Execute; if review=true and acceptance is nonempty, add a fresh review.

ParametersJSON Schema
NameRequiredDescriptionDefault
cwdYes
taskYes
modelNo
effortNo
job_idYes
reviewNo
acceptanceNo
timeout_secNo
project_rootNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
errorNo
job_idYes
reviewNo
statusNo
executionYes
review_statusNo
execution_statusNo

TDQS

D1.7/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full behavioral burden. It reveals one conditional behavior, that review=true with nonempty acceptance adds a fresh review, but omits execution semantics, timeout behavior, trust requirements, side effects, and what 'Execute' actually mutates.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The single sentence has no filler, but it is under-specified for a nine-parameter execution tool and reads like a fragment. Brevity here reflects missing content rather than disciplined concision.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no annotations, nine parameters, and 0% schema description coverage, the description is not complete enough for correct invocation. It omits usage context, parameter meanings, side effects, and safety constraints; the output schema does not offset those gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% across 9 parameters. The description references review and acceptance only in one conditional and says nothing about job_id, task, cwd, model, effort, timeout_sec, or project_root, so it fails to compensate for the schema gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose2/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with 'Execute' but never names the resource or what is being executed. It does not distinguish run_job from siblings such as execute_task, run_jobs, or review_task, leaving the object of the verb to be inferred from the tool name alone.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use run_job versus execute_task, review_task, continue_task, or run_jobs. The review/acceptance conditional describes a behavior, not selection criteria or exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

run_jobsC

Run an already-independent job batch with bounded concurrency.

ParametersJSON Schema
NameRequiredDescriptionDefault
jobsYes
max_concurrencyNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
errorNo
resultsNo

TDQS

C2.7/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. 'bounded concurrency' alludes to the concurrency limit, but nothing is said about error/partial-failure behavior, timeouts (timeout_sec defaults to 3600), isolation, or side effects of actually executing tasks.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single tight sentence with the operation front-loaded and no filler. It is efficient, though its brevity reflects under-specification rather than disciplined conciseness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be described. But for a tool that accepts a nested array of job specs and spawns execution, the description omits concurrency defaults, per-job timeout behavior, failure semantics, and permissions, which is inadequate given zero annotations.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% across both top-level params and the nested JobSpec fields. The description only obliquely maps to max_concurrency ('bounded concurrency') and job independence, leaving task, cwd, model, effort, review, acceptance, timeout_sec, and project_root undocumented.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Run') and resource ('job batch'), and 'batch' implicitly contrasts with the singular sibling run_job. However, it never names the alternative tool, so differentiation requires inference from the term 'batch'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'already-independent' hints at a constraint (do not batch dependent jobs) but never states when to use run_jobs versus run_job, execute_task, or continue_task. No explicit context or exclusions are provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 7 tool updatesv0.3.0
    • First observedcontinue_task
    • First observedexecute_task
    • First observedget_job_status
    • First observedping
    • First observedreview_task
    • First observedrun_job
    • First observedrun_jobs

TDQS

C2.7/5.0

Scored across 7 tools

Disambiguation3/5

execute_task and run_job both serve as execution entry points with overlapping purposes, and run_job can also incorporate review, blurring boundaries with review_task. Descriptions hint at differences (review option, scope) but the job vs task distinction is not defined, leaving room for misselection.

Naming Consistency4/5

Mostly consistent snake_case verb_noun (execute_task, review_task, continue_task, run_job, run_jobs, get_job_status), but ping breaks the pattern and run/execute verbs are used interchangeably for similar actions. Still readable and predictable overall.

Tool Count5/5

7 tools is well-scoped for an orchestration server covering health check, single/batch execution, review, session continuation, and status. Each tool has a distinct role without excessive surface area.

Completeness4/5

Core lifecycle is covered: start tasks/jobs, review, continue sessions, check status, and batch runs. However, missing cancellation/abort and job listing operations are notable gaps that could hinder cleanup or discovery in longer workflows.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers