# io.github.mkXultra/ai-cli-mcp (npm · ai-cli-mcp)

Run Claude, Codex, Gemini, Forge, and OpenCode CLIs through MCP with background jobs

- Trust score: 72/100 (medium)
- Change this week: +28
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `ai-cli-mcp`: 72/100 (this document), [markdown](https://verifymcp.io/servers/mkxultra-ai-cli-mcp/ai-cli-mcp.md), [page](https://verifymcp.io/servers/mkxultra-ai-cli-mcp/ai-cli-mcp)

## Channel facts

- Registry: `npm`
- Package: `ai-cli-mcp`
- Version: `2.22.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 97/100
  - Source repository is publicly reachable at the declared URL.
  - Cryptographically verified build provenance (signed, bound to mkXultra/ai-cli-mcp).
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 12 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 57/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 1465 tokens (~162/item across 9 items; 9 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add mkxultra-ai-cli-mcp -- npx -y ai-cli-mcp
```

### Codex

```bash
codex mcp add mkxultra-ai-cli-mcp -- npx -y ai-cli-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "mkxultra-ai-cli-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "ai-cli-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add mkxultra-ai-cli-mcp --command npx --arg -y --arg ai-cli-mcp
```

### Hermes

```yaml
mcp_servers:
  mkxultra-ai-cli-mcp:
    command: "npx"
    args: ["-y", "ai-cli-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "mkxultra-ai-cli-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "ai-cli-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 72, +48)

- [security improvement] Install scripts: unverified → pass
- [security improvement] Provenance: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- [security] The attested source repository moved: mkXultra/ai-cli-mcp
- [functional regression] Capabilities: pass → unverified
- [functional improvement] License: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Schema quality: unverified → good
- [functional] Licence: MIT

### 2026-08-01 (score 24, +5)

- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] MCP protocol: unverified → pass

### 2026-07-31 (score 19, −25)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-27 (score 44)

First indexed and scored.

## MCP tools (9)

### `run` (~932 tokens)

AI Agent Runner: Starts a Claude, Codex, Gemini, Forge, or OpenCode CLI process in the background and returns a PID immediately. Use list_processes and get_result to monitor progress.

• File ops: Create, read, (fuzzy) edit, move, copy, delete, list files, analyze/ocr images, file content analysis
• Code: Generate / analyse / refactor / fix
• Git: Stage ▸ commit ▸ push ▸ tag (any workflow)
• Terminal: Run any CLI cmd or open URLs
• Web search + summarise content on-the-fly
• Multi-step workflows & GitHub integration

\**IMPORTANT**: This tool now returns immediately with a PID. Use other tools to check status and get results.

\**Supported models**:
"claude-ultra", "codex-ultra", "gemini-ultra", "sonnet", "sonnet[1m]", "opus", "opusplan", "fable", "haiku", "gpt-5.4", "gpt-5.6-sol", "gpt-5.6-terra", "gpt-5.6-luna", "gpt-5.5", "gpt-5.4-mini", "gpt-5.3-codex", "gpt-5.3-codex-spark", "gpt-5.2", "gemini-2.5-pro", "gemini-2.5-flash", "gemini-3.1-pro-preview", "gemini-3-pro-preview", "gemini-3-flash-preview", "forge", "opencode", "oc-<provider/model>"

\**Prompt input**: You must provide EITHER prompt (string) OR prompt_file (file path), but not both.

\**Prompt tips**
1\. Be concise, explicit & step-by-step for complex tasks.
2\. Check process status with list_processes
3\. Get results with get_result using the returned PID
4\. Kill long-running processes with kill_process if needed

Input parameters:

- `model` (string): The model to use. Aliases: "claude-ultra" (Opus with auto max effort; does not select Fable), "codex-ultra" (auto ultra reasoning), "gemini-ultra". Standard: "sonnet", "sonnet[1m]", "opus", "opusplan…
- `prompt` (string): The detailed natural language prompt for the agent to execute. Either this or prompt_file is required.
- `prompt_file` (string): Path to a file containing the prompt. Either this or prompt is required. Must be an absolute path or relative to workFolder.
- `reasoning_effort` (string): Reasoning control for Claude and Codex. Claude uses --effort with "low", "medium", "high", "xhigh", "max". Codex uses model_reasoning_effort with "low", "medium", "high", "xhigh"; GPT-5.6 Sol and Ter…
- `session_id` (string): Optional session ID to resume a previous session. Supported for Claude, Codex, Gemini, Forge, and OpenCode. OpenCode resumes in-place via --session and may also be combined with explicit oc-<provider…
- `workFolder` (string, required): The working directory for the agent execution. Must be an absolute path.

### `list_processes` (~34 tokens)

List all running and completed AI agent processes. Returns a simple list with PID, agent type, and status for each process.

### `get_result` (~88 tokens)

Get the current output and status of an AI agent process by PID. Defaults to a compact result shape; set verbose to true for full metadata and detailed parsed output.

Input parameters:

- `pid` (number, required): The process ID returned by run tool.
- `verbose` (boolean): Optional: If true, returns the full result shape including metadata fields and detailed parsed output such as tool usage history. Defaults to false.

### `wait` (~113 tokens)

Wait for multiple AI agent processes to complete and return their results. Defaults to compact result items; set verbose to true for full metadata and detailed parsed output.

Input parameters:

- `pids` (array, required): List of process IDs to wait for (returned by the run tool).
- `timeout` (number): Optional: Maximum time to wait in seconds. Defaults to 180 (3 minutes).
- `verbose` (boolean): Optional: If true, each result item uses the full result shape including metadata fields and detailed parsed output. Defaults to false.

### `peek` (~197 tokens)

One-shot short observation window for running child agents. Returns only natural-language message events, and optionally normalized tool_call events, observed during this call; not a history API, not gapless streaming, and not stdout/stderr tailing. In v1, message extraction is supported for Codex, Claude, OpenCode, Gemini, and best-effort Forge Summary/Completed successfully lines. Forge tool calls are low-precision Execute/Finished markers and never include command output. Tool calls exclude raw tool output.

Input parameters:

- `include_tool_calls` (boolean): Optional: include normalized tool_call events without raw tool output. Defaults to false.
- `peek_time_sec` (number): Optional positive integer observation window in seconds. Defaults to 10; maximum is 60.
- `pids` (array, required): Process IDs returned by run. Duplicates are deduplicated server-side, preserving first occurrence order. Unknown PIDs are returned per process as not_found.

### `kill_process` (~30 tokens)

Terminate a running AI agent process by PID.

Input parameters:

- `pid` (number, required): The process ID to terminate.

### `cleanup_processes` (~24 tokens)

Remove all completed and failed processes from the process list to free up memory.

### `doctor` (~26 tokens)

Check supported AI CLI binary availability and path resolution. Does not verify login state or terms acceptance.

### `models` (~21 tokens)

List supported model names, model aliases, and dynamic backend discovery hints.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/mkxultra-ai-cli-mcp/ai-cli-mcp#diagnostics

## Score history

- 2026-08-03: 72
- 2026-08-02: 72
- 2026-08-01: 24
- 2026-07-31: 19
- 2026-07-30: 44
- 2026-07-28: 44
- 2026-07-27: 44

## Links

- npm package: https://www.npmjs.com/package/ai-cli-mcp
- Socket report: https://socket.dev/npm/package/ai-cli-mcp
- Repository: https://github.com/mkXultra/ai-cli-mcp
- Changelog RSS feed: https://verifymcp.io/servers/mkxultra-ai-cli-mcp/ai-cli-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/mkxultra-ai-cli-mcp/ai-cli-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/mkxultra-ai-cli-mcp/ai-cli-mcp
