MCP bridges that let Claude Code delegate to the GitHub Copilot CLI, OpenAI Codex CLI, and Antigravity CLI (Gemini). Includes copilot-bridge, codex-bridge, consult-bridge, and consult-cli.
Three tools with complete input schemas and descriptions. Tool names follow verb_noun pattern (copilot_exec, codex_exec, consult). Descriptions are detailed (150-400 chars) and explain WHEN to use each tool. However, output schemas are entirely undocumented, LLMs cannot plan downstream calls or extract structured data. Parameter descriptions are present but lack format constraints (e.g., no regex for cwd paths, no min/max for timeout). Error handling is present in implementation but not declared in tool definitions. Security considerations (sandbox modes, read-only defaults) are well-documented in descriptions but no permission gates or audit trail patterns visible.
Delegate a task to the OpenAI Codex CLI via `codex exec`, non-interactive and sandboxed read-only by default. Returns Codex's final message. Use it for a cross-model second opinion or Codex-specific strengths. Only pass sandbox='workspace-write' when you actually intend Codex to edit files under `cwd`.
Consult a panel of external models. Default mode 'all' runs GitHub Copilot CLI, OpenAI Codex CLI, and the Antigravity CLI (Gemini) IN PARALLEL and returns every successful answer labeled by engine — use it for cross-model second opinions where perspective diversity matters. Mode 'first' is a sequential fallback chain (copilot -> codex -> agy) returning the first success — cheaper, use for routine questions or when quotas are tight. All engines run read-only/restrictive in `cwd`. Failures (quota, auth, timeout) are reported in the footer, never fatal unless every engine fails.
Delegate a task to the GitHub Copilot CLI, headless and non-interactive, with restrictive tool permissions (no file writes; only read/search/git-gh shell commands are auto-approved). Returns Copilot's stdout. Use it for a cross-model second opinion or Copilot-specific strengths. It can read and search files under `cwd` but cannot modify them.
No output schemas documented. LLMs cannot infer what fields to expect from tool responses, forcing unstructured parsing and preventing downstream tool chaining.
Parameter 'cwd' lacks format constraints. No validation that it is an absolute path, no min/max length, no regex pattern. LLMs may pass relative paths or invalid values.
Timeout and output limits are environment-variable-configurable but not exposed as tool parameters. Agents cannot adjust these per-call; all calls use server defaults.
Error handling is implemented in code (timeouts, auth failures, partial output) but not declared in tool descriptions. LLMs do not know which errors are retryable or what recovery steps to take.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 59 | 2026-07-28+ | v2 |
consult tool's 'order' parameter accepts an array but description does not clarify whether order matters in 'all' mode (parallel) vs 'first' mode (sequential). Ambiguous semantics.