Bidirectional MCP integration for AI agent systems - Connect Codex CLI, Claude CLI, and Gemini CLI with Agent Zero
Critical gaps across all dimensions. Tool definitions are severely underdeveloped: descriptions are present but generic (avg ~80 chars, well below 194-char baseline); input schemas lack parameter descriptions entirely; no output schemas documented; no error handling guidance; no tool annotations. The server acts as a bridge to external agents (Agent Zero, Claude, Codex) but exposes their capabilities without proper abstraction or LLM-optimized wrapping. Source code provided is incomplete (agent_zero_mcp_stdio.py truncated), preventing full verification of implementation. Naming is acceptable (verb-noun pattern) but parameter documentation is absent.
Request Claude to review code for bugs, security issues, and best practices.
Send a query to Claude CLI for analysis, reasoning, code review, or complex problem solving.
Run a Codex coding session. Codex will analyze, plan, and execute the task with full access to the local filesystem.
Continue a Codex conversation by providing the conversation ID and next prompt.
Submit a coding task to Codex CLI.
Send a message to Agent Zero AI assistant. Agent Zero can execute commands, write code, browse web, manage files in its isolated Linux environment.
No parameter descriptions in any tool schema. All 6 tools define input parameters (message, prompt, context, code, language, focus, conversationId, task, model, cwd) with types but zero descriptions. LLMs cannot infer parameter semantics from names alone.
No output schemas documented for any tool. Callers cannot know what fields to expect, preventing downstream tool chaining and forcing LLMs to guess response structure.
No error handling guidance. Tools provide no recovery hints, error classification, or actionable messages. An LLM receiving a failure has no guidance on retry, user escalation, or next steps.
Inferred effective spec: <=2025-11-25.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 43 | <=2025-11-25 | v2 |
No tool annotations (readOnlyHint, destructiveHint, idempotentHint). Tools marked WRITE risk (send_message, codex, codex_reply, codex_task) lack explicit destructive hints; READ_ONLY tools lack readOnlyHint. Agents cannot reason about safety.
Generic, short descriptions (30 - 45 chars). E.g., 'Send a message to Agent Zero AI assistant' lacks context on when to use vs alternatives, prerequisites, or expected outcomes. Baseline is 194 chars; these are 60% below.