io.github.mkXultra/ai-cli-mcp

NPM · AI-CLI-MCP · SCANNED AUG 3

Run Claude, Codex, Gemini, Forge, and OpenCode CLIs through MCP with background jobs

Available components

+28 this week 72 72 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security87

No malware found by supply-chain analysis.Pass
Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.Partial
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency97

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Cryptographically verified build provenance (signed, bound to mkXultra/ai-cli-mcp). View diagnostics → Pass
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 12 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability57

AI-judged instruction clarity (good).Pass
Context-footprint check failed: tool/resource definitions use about 1465 tokens (~162/item across 9 items; 9 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management0

Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · ai-cli-mcp

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add mkxultra-ai-cli-mcp -- npx -y ai-cli-mcp

# add to Codex CLI

codex mcp add mkxultra-ai-cli-mcp -- npx -y ai-cli-mcp

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "mkxultra-ai-cli-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "ai-cli-mcp"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add mkxultra-ai-cli-mcp --command npx --arg -y --arg ai-cli-mcp

# ~/.hermes/config.yaml

mcp_servers:
  mkxultra-ai-cli-mcp:
    command: "npx"
    args: ["-y", "ai-cli-mcp"]

// mcp.json

{
  "mcpServers": {
    "mkxultra-ai-cli-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "ai-cli-mcp"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

2 Aug 26 +48
- Install scripts: unverified → pass ▲ security
- Provenance: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Malware scan: unverified → pass ▲ security
- Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
- The attested source repository moved: mkXultra/ai-cli-mcp security
- Capabilities: pass → unverified ▼ functional
- License: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- Schema quality: unverified → good ▲ functional
- Licence: MIT functional
1 Aug 26 +5
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- MCP protocol: unverified → pass ▲ functional
31 Jul 26 −25
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
27 Jul 26 44

First indexed and scored.

Show 2 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/[email protected]

Provenance verified

Ecosystem: npm · Outcome: verified

Reason: verified

Source repo:: mkXultra/ai-cli-mcp
Certificate issuer:: https://token.actions.githubusercontent.com
Certificate SAN:: https://github.com/mkXultra/ai-cli-mcp/.github/workflows/publish.yml@refs/heads/develop
Rekor log index:: 2212089462
Predicate type:: https://slsa.dev/provenance/v1
Subject digest:: sha512:2b3973cec25548d89c687301d5ecf7100a1a0aa7ddee4555f93a546f9c42d289215aed1467c5c6285de6f3aadd29e3174f6ff8d2d7448603bc5093ffe
Discovery method:: attestation_endpoint

Dependencies 95 packages

95 packages in the resolved dependency tree · 95 deprecated · 29 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 9 exposed · ~1,465 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

cleanup_processes ~24

Remove all completed and failed processes from the process list to free up memory.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

doctor ~26

Check supported AI CLI binary availability and path resolution. Does not verify login state or terms acceptance.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_result ~88

Get the current output and status of an AI agent process by PID. Defaults to a compact result shape; set verbose to true for full metadata and detailed parsed output.

Input Output Examples

Name	Type	Req	Description
pid	number	yes	The process ID returned by run tool.
verbose	boolean	—	Optional: If true, returns the full result shape including metadata fields and detailed parsed output such as tool usage history. Defaults to false.

No output schema declared.

No examples provided.

kill_process ~30

Terminate a running AI agent process by PID.

Input Output Examples

Name	Type	Req	Description
pid	number	yes	The process ID to terminate.

No output schema declared.

No examples provided.

list_processes ~34

List all running and completed AI agent processes. Returns a simple list with PID, agent type, and status for each process.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

models ~21

List supported model names, model aliases, and dynamic backend discovery hints.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

peek ~197

One-shot short observation window for running child agents. Returns only natural-language message events, and optionally normalized tool_call events, observed during this call; not a history API, not gapless streaming, and not stdout/stderr tailing. In v1, message extraction is supported for Codex, Claude, OpenCode, Gemini, and best-effort Forge Summary/Completed successfully lines. Forge tool calls are low-precision Execute/Finished markers and never include command output. Tool calls exclude raw tool output.

Input Output Examples

Name	Type	Req	Description
include_tool_calls	boolean	—	Optional: include normalized tool_call events without raw tool output. Defaults to false.
peek_time_sec	number	—	Optional positive integer observation window in seconds. Defaults to 10; maximum is 60.
pids	array	yes	Process IDs returned by run. Duplicates are deduplicated server-side, preserving first occurrence order. Unknown PIDs are returned per process as not_found.

No output schema declared.

No examples provided.

run ~932

AI Agent Runner: Starts a Claude, Codex, Gemini, Forge, or OpenCode CLI process in the background and returns a PID immediately. Use list_processes and get_result to monitor progress. • File ops: Create, read, (fuzzy) edit, move, copy, delete, list files, analyze/ocr images, file content analysis • Code: Generate / analyse / refactor / fix • Git: Stage ▸ commit ▸ push ▸ tag (any workflow) • Terminal: Run any CLI cmd or open URLs • Web search + summarise content on-the-fly • Multi-step workflows & GitHub integration **IMPORTANT**: This tool now returns immediately with a PID. Use other tools to check status and get results. **Supported models**: "claude-ultra", "codex-ultra", "gemini-ultra", "sonnet", "sonnet[1m]", "opus", "opusplan", "fable", "haiku", "gpt-5.4", "gpt-5.6-sol", "gpt-5.6-terra", "gpt-5.6-luna", "gpt-5.5", "gpt-5.4-mini", "gpt-5.3-codex", "gpt-5.3-codex-spark", "gpt-5.2", "gemini-2.5-pro", "gemini-2.5-flash", "gemini-3.1-pro-preview", "gemini-3-pro-preview", "gemini-3-flash-preview", "forge", "opencode", "oc-<provider/model>" **Prompt input**: You must provide EITHER prompt (string) OR prompt_file (file path), but not both. **Prompt tips** 1. Be concise, explicit & step-by-step for complex tasks. 2. Check process status with list_processes 3. Get results with get_result using the returned PID 4. Kill long-running processes with kill_process if needed

Input Output Examples

Name	Type	Req	Description
model	string	—	The model to use. Aliases: "claude-ultra" (Opus with auto max effort; does not select Fable), "codex-ultra" (auto ultra reasoning), "gemini-ultra". Standard: "sonnet", "sonnet[1m]", "opus", "opusplan…
prompt	string	—	The detailed natural language prompt for the agent to execute. Either this or prompt_file is required.
prompt_file	string	—	Path to a file containing the prompt. Either this or prompt is required. Must be an absolute path or relative to workFolder.
reasoning_effort	string	—	Reasoning control for Claude and Codex. Claude uses --effort with "low", "medium", "high", "xhigh", "max". Codex uses model_reasoning_effort with "low", "medium", "high", "xhigh"; GPT-5.6 Sol and Ter…
session_id	string	—	Optional session ID to resume a previous session. Supported for Claude, Codex, Gemini, Forge, and OpenCode. OpenCode resumes in-place via --session and may also be combined with explicit oc-<provider…
workFolder	string	yes	The working directory for the agent execution. Must be an absolute path.

No output schema declared.

No examples provided.

wait ~113

Wait for multiple AI agent processes to complete and return their results. Defaults to compact result items; set verbose to true for full metadata and detailed parsed output.

Input Output Examples

Name	Type	Req	Description
pids	array	yes	List of process IDs to wait for (returned by the run tool).
timeout	number	—	Optional: Maximum time to wait in seconds. Defaults to 180 (3 minutes).
verbose	boolean	—	Optional: If true, each result item uses the full result shape including metadata fields and detailed parsed output. Defaults to false.

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug