Claudexor
NPM · CLAUDEXOR · SCANNED SEP 20
Route coding work across Claude Code, Codex, Cursor, and OpenCode with shared context.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security100
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 4 of 45 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency100
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to razzant/claudexor). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 1 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability69
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2426 tokens (~134/item across 18 items; 18 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management83
- Stability observed for 25 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage97
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 91% of tool parameters carry a description.Partial
- Structured output schemas are declared (56% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 18 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 18 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
How do I install the Claudexor MCP server?
Claudexor runs locally as an npm package, launched with npx -y claudexor. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · claudexor
claude mcp add razzant-claudexor -- npx -y claudexor
{
"mcpServers": {
"razzant-claudexor": {
"command": "npx",
"args": [
"-y",
"claudexor"
]
}
}
} {
"servers": {
"razzant-claudexor": {
"command": "npx",
"args": [
"-y",
"claudexor"
]
}
}
} codex mcp add razzant-claudexor -- npx -y claudexor
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"razzant-claudexor": {
"type": "local",
"command": [
"npx",
"-y",
"claudexor"
],
"enabled": true
}
}
} openclaw mcp add razzant-claudexor --command npx --arg -y --arg claudexor
mcp_servers:
razzant-claudexor:
command: "npx"
args: ["-y", "claudexor"] {
"McpServers": {
"razzant-claudexor": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"claudexor"
]
}
}
} assistant mcp add razzant-claudexor -t stdio -c npx -a -y claudexor
{
"mcpServers": {
"razzant-claudexor": {
"command": "npx",
"args": [
"-y",
"claudexor"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.
- 19 Sept 26 −3
- Stability: pass → 0.80 functional
- 18 Sept 26 0
- Stability: 0.97 → pass security
- 17 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 15 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.
- 13 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Sept 26 −3
- Stability: pass → 0.80 functional
- 11 Sept 26 0
- Stability: 0.97 → pass security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed npm/claudexor@3.9.5
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | npm |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | razzant/claudexor |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/razzant/claudexor/.github/workflows/release.yml@refs/tags/v3.9.5 |
| Rekor log index | 2675999542 |
| Predicate type | https://slsa.dev/provenance/v1 |
| Subject digest | sha512:24f968e6c103d928a3bb68169f58a50644e23f864ece63c2a75f2c8537a090cbb9a8253298d3fdc214296f374fa7d5472a071b0088d0dcbf96ccb8437 |
Background: How many MCP packages publish verified provenance →
Dependencies 45 packages
| Packages resolved | 45 |
|---|---|
| Stale | 4 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
claudexor_accounts ~164
Return the read-only Accounts view: registered profiles, readiness, quota freshness, and routing identity. Default reads the server's CACHED listing (cheap; at most ~15s stale). fresh:true requests the atomic snapshot instead — an EXPENSIVE explicit refresh (a live probe per registered profile, a full harness doctor sweep, and the vendor quota fan-out, which honors per-vendor rate-limit cooldowns and discloses skipped vendors in quota.refresh_skipped). Use fresh:true only when acting on staleness matters; never poll with it. This tool never starts login or changes account state.
| Name | Type | Req | Description |
|---|---|---|---|
| fresh | boolean | – | true = the expensive atomic Accounts snapshot (fresh probes + doctor + vendor quota fan-out); false/absent = the cached listing. |
Structured output declared, but exposes no named fields.
No examples provided.
claudexor_answer_interaction ~58
Answer a daemon-persisted run interaction; success is reported only after the control API acknowledges the journal mutation.
| Name | Type | Req | Description |
|---|---|---|---|
| answers | array | yes | – |
| interactionId | string | yes | – |
| runId | string | yes | – |
No output schema declared.
No examples provided.
claudexor_apply_check ~58
Dry-check whether a run's patch would apply cleanly to its original project (no mutation).
| Name | Type | Req | Description |
|---|---|---|---|
| runId | string | yes | Daemon run id (from a run tool's runId trailer or claudexor_runs). |
No output schema declared.
No examples provided.
claudexor_ask ~306
Enqueue a read-only Claudexor answer; pass deepScan:true for a bounded multi-scout research sweep with synthesis. Returns a durable run handle, not terminal output; use claudexor_run_status/result for the final answer.
| Name | Type | Req | Description |
|---|---|---|---|
| access | string | – | Optional access profile for this run. |
| deepScan | boolean | – | Widen the answer into a bounded multi-scout research sweep with synthesis. |
| effort | string | – | Optional effort override for the primary harness. Expects a reasoning-effort level the resolved harness/model advertises (a lowercase slug; each vendor lists its own levels, weakest to strongest); an… |
| externalContextPolicy | string | – | Alias of web for control-api parity. |
| harness | string | – | Optional harness id to force for this one-shot run. |
| model | string | – | Optional model override for the primary harness. |
| n | integer | – | Optional best-of-N width for candidate races (or deep-scan scout width). |
| paidBudget | – | – | Incremental-cash budget: explicitly unlimited or a finite non-negative USD cap. |
| primaryHarness | string | – | Optional primary harness id for this run. |
| prompt | string | yes | The user task or question to run through Claudexor. |
| repoPath | string | – | Absolute path of the target project. Defaults to the MCP server cwd. |
| web | string | – | External context policy for this run. |
| Name | Type | Req | Description |
|---|---|---|---|
| applyEligibility | – | yes | Apply-gate verdict for mutating runs; null for read-only routes or when no patch exists. |
| council | – | – | Council membership + merge disclosure (QA-023b); null for solo/non-plan tools or deferred handles. |
| delegatedFromRunId | string|null | – | – |
| delegation | – | – | Engine-owned Delegate requested/effective/used receipt; surfaces project it without parsing model output. |
| detailProblem | – | – | Typed post-terminal detail-read problem (the run result survives; its detail projections are absent for this reason); null when the detail read succeeded. |
| failure | – | – | Typed terminal failure detail and recovery actions; null for non-failed runs. |
| outcomeBanner | string|null | – | Server-owned outcome headline (D18); the single honest one-line verdict, null while non-terminal or unavailable. |
| outcomeFacts | – | – | The D8 terminal outcome axes (checks/review/reason/noChanges); null for non-terminal or read-only routes. |
| parentRunId | string|null | – | – |
| planReadiness | – | – | Derived plan readiness for plan tools (D17); null for non-plan tools. |
| runDir | string|null | yes | Artifact directory of the run; null when not persisted. |
| runFacts | – | – | Validated canonical terminal RunFacts receipt; null while active, unavailable, or for legacy runs. |
| runId | string|null | yes | Daemon run id (recovery handle for inspect/follow/apply/decision); null for in-process read-only runs. |
| status | string|null | yes | Terminal run LIFECYCLE (succeeded | failed | cancelled | interrupted). |
| summary | string | yes | Human-readable outcome summary (same text as the tool's text content). |
No examples provided.
claudexor_best_of ~346
Enqueue a best-of-N Claudexor run with cross-family review. Returns a durable run handle; use claudexor_run_status/result for terminal output.
| Name | Type | Req | Description |
|---|---|---|---|
| access | string | – | Optional access profile for this run. |
| effort | string | – | Optional effort override for the primary harness. Expects a reasoning-effort level the resolved harness/model advertises (a lowercase slug; each vendor lists its own levels, weakest to strongest); an… |
| externalContextPolicy | string | – | Alias of web for control-api parity. |
| harness | string | – | Optional harness id to force for this one-shot run. |
| model | string | – | Optional model override for the primary harness. |
| n | integer | – | Optional best-of-N width for candidate races (or deep-scan scout width). |
| paidBudget | – | – | Incremental-cash budget: explicitly unlimited or a finite non-negative USD cap. |
| primaryHarness | string | – | Optional primary harness id for this run. |
| prompt | string | yes | The user task or question to run through Claudexor. |
| protectedPathApprovals | array | – | Typed approvals for existing protected path edits. |
| repoPath | string | – | Absolute path of the target project. Defaults to the MCP server cwd. |
| reviewerEfforts | object | – | Per-provider reviewer effort overrides. |
| reviewerModels | object | – | Per-provider reviewer model overrides. |
| reviewerPanel | array | – | Explicit reviewer panel entries, preserving order and duplicates. |
| tests | array | – | Typed-argv deterministic gate commands for this run. |
| web | string | – | External context policy for this run. |
| Name | Type | Req | Description |
|---|---|---|---|
| applyEligibility | – | yes | Apply-gate verdict for mutating runs; null for read-only routes or when no patch exists. |
| council | – | – | Council membership + merge disclosure (QA-023b); null for solo/non-plan tools or deferred handles. |
| delegatedFromRunId | string|null | – | – |
| delegation | – | – | Engine-owned Delegate requested/effective/used receipt; surfaces project it without parsing model output. |
| detailProblem | – | – | Typed post-terminal detail-read problem (the run result survives; its detail projections are absent for this reason); null when the detail read succeeded. |
| failure | – | – | Typed terminal failure detail and recovery actions; null for non-failed runs. |
| outcomeBanner | string|null | – | Server-owned outcome headline (D18); the single honest one-line verdict, null while non-terminal or unavailable. |
| outcomeFacts | – | – | The D8 terminal outcome axes (checks/review/reason/noChanges); null for non-terminal or read-only routes. |
| parentRunId | string|null | – | – |
| planReadiness | – | – | Derived plan readiness for plan tools (D17); null for non-plan tools. |
| runDir | string|null | yes | Artifact directory of the run; null when not persisted. |
| runFacts | – | – | Validated canonical terminal RunFacts receipt; null while active, unavailable, or for legacy runs. |
| runId | string|null | yes | Daemon run id (recovery handle for inspect/follow/apply/decision); null for in-process read-only runs. |
| status | string|null | yes | Terminal run LIFECYCLE (succeeded | failed | cancelled | interrupted). |
| summary | string | yes | Human-readable outcome summary (same text as the tool's text content). |
No examples provided.
claudexor_capabilities ~51
Return the derived AgentCapabilityCatalog: per-harness live capabilities (doctor-backed), canonical modes, the mutability matrix, run-control keys, CLI verbs, and the run-apply-state vocabulary.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| availableHarnesses | array | yes | Convenience: ids with doctor status ok. |
| cliCommands | array | yes | CLI verbs with mutability/stability (full flag detail via `claudexor help --json`). |
| generatedAt | string | yes | ISO timestamp when the catalog was composed. |
| git | object | yes | Execution-location Git readiness. Read-only and valid non-Git in-place flows do not require it. |
| harnesses | array | yes | Live per-harness capabilities (doctor-backed). |
| mcpTools | array | yes | MCP tool names `claudexor mcp serve` exposes. |
| modes | array | yes | Canonical run modes; strategy controls are separate schema-owned fields, never modes. |
| mutability | object | yes | The mutability matrix: every way a Claudexor run can (or cannot) touch a tree, from the schema's closed vocabularies. |
| ok | boolean | yes | Envelope marker (matches the CLI JSON convention). |
| outputSchemaDialects | array | yes | Supported structured-output JSON Schema dialects and canonical $schema URIs. |
| runApplyStates | array | yes | RunApplyState vocabulary an agent can encounter on run results (not_applied | applied | applied_review_blocked | reverted) — distinct from the ApplyEligibility verdict object on run details. |
| runControlKeys | array | yes | Accepted POST /runs request keys (derived from the ControlRunStartRequest schema; the CLI/MCP/ACP surfaces project subsets of these). |
| version | string | yes | Claudexor version serving this catalog (compare with CLAUDEXOR_PLUGIN_VERSION to detect plugin skew). |
No examples provided.
claudexor_create ~342
Enqueue a create-from-scratch Claudexor run. Returns a durable run handle; use claudexor_run_status/result for terminal output.
| Name | Type | Req | Description |
|---|---|---|---|
| access | string | – | Optional access profile for this run. |
| effort | string | – | Optional effort override for the primary harness. Expects a reasoning-effort level the resolved harness/model advertises (a lowercase slug; each vendor lists its own levels, weakest to strongest); an… |
| externalContextPolicy | string | – | Alias of web for control-api parity. |
| harness | string | – | Optional harness id to force for this one-shot run. |
| model | string | – | Optional model override for the primary harness. |
| n | integer | – | Optional best-of-N width for candidate races (or deep-scan scout width). |
| paidBudget | – | – | Incremental-cash budget: explicitly unlimited or a finite non-negative USD cap. |
| primaryHarness | string | – | Optional primary harness id for this run. |
| prompt | string | yes | The user task or question to run through Claudexor. |
| protectedPathApprovals | array | – | Typed approvals for existing protected path edits. |
| repoPath | string | – | Absolute path of the target project. Defaults to the MCP server cwd. |
| reviewerEfforts | object | – | Per-provider reviewer effort overrides. |
| reviewerModels | object | – | Per-provider reviewer model overrides. |
| reviewerPanel | array | – | Explicit reviewer panel entries, preserving order and duplicates. |
| tests | array | – | Typed-argv deterministic gate commands for this run. |
| web | string | – | External context policy for this run. |
| Name | Type | Req | Description |
|---|---|---|---|
| applyEligibility | – | yes | Apply-gate verdict for mutating runs; null for read-only routes or when no patch exists. |
| council | – | – | Council membership + merge disclosure (QA-023b); null for solo/non-plan tools or deferred handles. |
| delegatedFromRunId | string|null | – | – |
| delegation | – | – | Engine-owned Delegate requested/effective/used receipt; surfaces project it without parsing model output. |
| detailProblem | – | – | Typed post-terminal detail-read problem (the run result survives; its detail projections are absent for this reason); null when the detail read succeeded. |
| failure | – | – | Typed terminal failure detail and recovery actions; null for non-failed runs. |
| outcomeBanner | string|null | – | Server-owned outcome headline (D18); the single honest one-line verdict, null while non-terminal or unavailable. |
| outcomeFacts | – | – | The D8 terminal outcome axes (checks/review/reason/noChanges); null for non-terminal or read-only routes. |
| parentRunId | string|null | – | – |
| planReadiness | – | – | Derived plan readiness for plan tools (D17); null for non-plan tools. |
| runDir | string|null | yes | Artifact directory of the run; null when not persisted. |
| runFacts | – | – | Validated canonical terminal RunFacts receipt; null while active, unavailable, or for legacy runs. |
| runId | string|null | yes | Daemon run id (recovery handle for inspect/follow/apply/decision); null for in-process read-only runs. |
| status | string|null | yes | Terminal run LIFECYCLE (succeeded | failed | cancelled | interrupted). |
| summary | string | yes | Human-readable outcome summary (same text as the tool's text content). |
No examples provided.
claudexor_inspect ~64
Inspect a daemon-tracked run: status, summary, decision verdict, and the derived applyEligibility (what unblocks apply).
| Name | Type | Req | Description |
|---|---|---|---|
| runId | string | yes | Daemon run id (from a run tool's runId trailer or claudexor_runs). |
| Name | Type | Req | Description |
|---|---|---|---|
| applyEligibility | – | – | Derived apply-gate verdict; null for read-only runs or when no patch exists. |
| budget | – | – | Run budget snapshot (cash + subscription valuation, QA-023c); null when unavailable. |
| council | – | – | Council membership + merge disclosure (QA-023b); null for solo/non-plan runs. |
| decisionStatus | string|null | – | The arbitration decision status, when the run reached arbitration. |
| delegatedFromRunId | string|null | – | Claudexor Delegate parent id; null for ordinary runs and native subagents. |
| delegation | – | – | Typed Delegate receipt; null when unavailable or legacy. |
| detailProblem | – | – | Typed post-terminal detail-read problem (the durable run handle survives); null when the detail read succeeded. |
| failure | – | – | Typed terminal failure detail and recovery actions; null for non-failed runs. |
| outcomeBanner | string|null | – | Server-owned outcome headline (D18); null while non-terminal. |
| outcomeFacts | – | – | The D8 terminal outcome axes (checks/review/reason/noChanges), when terminal. |
| parentRunId | string|null | – | Server-owned ordinary parent/follow-up run id, when present. |
| pendingInteractions | – | – | Count of questions still awaiting answers, when known. |
| planReadiness | – | – | Derived plan readiness (plan runs only, D17); null otherwise. |
| runDir | string|null | – | Artifact directory; null when absent. |
| runFacts | – | – | Validated canonical terminal RunFacts receipt; null while active, unavailable, or for legacy runs. |
| runId | string|null | – | The daemon run id, when known. |
| status | string|null | – | The run's terminal or in-flight lifecycle state, when known. |
| summary | string | yes | Human-readable outcome/status text (same as the tool's text content). |
No examples provided.
claudexor_journal_recovery ~42
Inspect, validate, or export one durable journal partition through v2.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | – |
| partition | string | yes | – |
No output schema declared.
No examples provided.
claudexor_plan ~290
Enqueue a read-only Claudexor implementation plan. Returns a durable run handle; use claudexor_run_status/result for the final plan.
| Name | Type | Req | Description |
|---|---|---|---|
| access | string | – | Optional access profile for this run. |
| council | boolean | – | Draft n (2..4) plans in parallel, then merge one plan and question set. |
| effort | string | – | Optional effort override for the primary harness. Expects a reasoning-effort level the resolved harness/model advertises (a lowercase slug; each vendor lists its own levels, weakest to strongest); an… |
| externalContextPolicy | string | – | Alias of web for control-api parity. |
| harness | string | – | Optional harness id to force for this one-shot run. |
| model | string | – | Optional model override for the primary harness. |
| n | integer | – | Optional best-of-N width for candidate races (or deep-scan scout width). |
| paidBudget | – | – | Incremental-cash budget: explicitly unlimited or a finite non-negative USD cap. |
| primaryHarness | string | – | Optional primary harness id for this run. |
| prompt | string | yes | The user task or question to run through Claudexor. |
| repoPath | string | – | Absolute path of the target project. Defaults to the MCP server cwd. |
| web | string | – | External context policy for this run. |
| Name | Type | Req | Description |
|---|---|---|---|
| applyEligibility | – | yes | Apply-gate verdict for mutating runs; null for read-only routes or when no patch exists. |
| council | – | – | Council membership + merge disclosure (QA-023b); null for solo/non-plan tools or deferred handles. |
| delegatedFromRunId | string|null | – | – |
| delegation | – | – | Engine-owned Delegate requested/effective/used receipt; surfaces project it without parsing model output. |
| detailProblem | – | – | Typed post-terminal detail-read problem (the run result survives; its detail projections are absent for this reason); null when the detail read succeeded. |
| failure | – | – | Typed terminal failure detail and recovery actions; null for non-failed runs. |
| outcomeBanner | string|null | – | Server-owned outcome headline (D18); the single honest one-line verdict, null while non-terminal or unavailable. |
| outcomeFacts | – | – | The D8 terminal outcome axes (checks/review/reason/noChanges); null for non-terminal or read-only routes. |
| parentRunId | string|null | – | – |
| planReadiness | – | – | Derived plan readiness for plan tools (D17); null for non-plan tools. |
| runDir | string|null | yes | Artifact directory of the run; null when not persisted. |
| runFacts | – | – | Validated canonical terminal RunFacts receipt; null while active, unavailable, or for legacy runs. |
| runId | string|null | yes | Daemon run id (recovery handle for inspect/follow/apply/decision); null for in-process read-only runs. |
| status | string|null | yes | Terminal run LIFECYCLE (succeeded | failed | cancelled | interrupted). |
| summary | string | yes | Human-readable outcome summary (same text as the tool's text content). |
No examples provided.
claudexor_quarantine_journal ~50
Quarantine a corrupt partition and start a fresh epoch after exact confirmation.
| Name | Type | Req | Description |
|---|---|---|---|
| confirmation | string | yes | – |
| expectedFingerprint | string | yes | – |
| partition | string | yes | – |
No output schema declared.
No examples provided.
claudexor_run ~347
Enqueue an Agent-mode Claudexor run. Returns a durable run handle plus any immediate start facts; use claudexor_run_status/result for the terminal WorkProduct.
| Name | Type | Req | Description |
|---|---|---|---|
| access | string | – | Optional access profile for this run. |
| effort | string | – | Optional effort override for the primary harness. Expects a reasoning-effort level the resolved harness/model advertises (a lowercase slug; each vendor lists its own levels, weakest to strongest); an… |
| externalContextPolicy | string | – | Alias of web for control-api parity. |
| harness | string | – | Optional harness id to force for this one-shot run. |
| model | string | – | Optional model override for the primary harness. |
| n | integer | – | Optional best-of-N width for candidate races (or deep-scan scout width). |
| paidBudget | – | – | Incremental-cash budget: explicitly unlimited or a finite non-negative USD cap. |
| primaryHarness | string | – | Optional primary harness id for this run. |
| prompt | string | yes | The user task or question to run through Claudexor. |
| protectedPathApprovals | array | – | Typed approvals for existing protected path edits. |
| repoPath | string | – | Absolute path of the target project. Defaults to the MCP server cwd. |
| reviewerEfforts | object | – | Per-provider reviewer effort overrides. |
| reviewerModels | object | – | Per-provider reviewer model overrides. |
| reviewerPanel | array | – | Explicit reviewer panel entries, preserving order and duplicates. |
| tests | array | – | Typed-argv deterministic gate commands for this run. |
| web | string | – | External context policy for this run. |
| Name | Type | Req | Description |
|---|---|---|---|
| applyEligibility | – | yes | Apply-gate verdict for mutating runs; null for read-only routes or when no patch exists. |
| council | – | – | Council membership + merge disclosure (QA-023b); null for solo/non-plan tools or deferred handles. |
| delegatedFromRunId | string|null | – | – |
| delegation | – | – | Engine-owned Delegate requested/effective/used receipt; surfaces project it without parsing model output. |
| detailProblem | – | – | Typed post-terminal detail-read problem (the run result survives; its detail projections are absent for this reason); null when the detail read succeeded. |
| failure | – | – | Typed terminal failure detail and recovery actions; null for non-failed runs. |
| outcomeBanner | string|null | – | Server-owned outcome headline (D18); the single honest one-line verdict, null while non-terminal or unavailable. |
| outcomeFacts | – | – | The D8 terminal outcome axes (checks/review/reason/noChanges); null for non-terminal or read-only routes. |
| parentRunId | string|null | – | – |
| planReadiness | – | – | Derived plan readiness for plan tools (D17); null for non-plan tools. |
| runDir | string|null | yes | Artifact directory of the run; null when not persisted. |
| runFacts | – | – | Validated canonical terminal RunFacts receipt; null while active, unavailable, or for legacy runs. |
| runId | string|null | yes | Daemon run id (recovery handle for inspect/follow/apply/decision); null for in-process read-only runs. |
| status | string|null | yes | Terminal run LIFECYCLE (succeeded | failed | cancelled | interrupted). |
| summary | string | yes | Human-readable outcome summary (same text as the tool's text content). |
No examples provided.
claudexor_run_cancel ~60
Request cancellation of a daemon-owned run; success is returned only after the control API acknowledges the durable command.
| Name | Type | Req | Description |
|---|---|---|---|
| runId | string | yes | Daemon run id (from a run tool's runId trailer or claudexor_runs). |
No output schema declared.
No examples provided.
claudexor_run_interactions ~55
List daemon-persisted questions that are still awaiting answers for a run.
| Name | Type | Req | Description |
|---|---|---|---|
| runId | string | yes | Daemon run id (from a run tool's runId trailer or claudexor_runs). |
No output schema declared.
No examples provided.
claudexor_run_result ~63
Read a durable run's terminal result and apply eligibility; non-terminal runs report their current state without pretending to be complete.
| Name | Type | Req | Description |
|---|---|---|---|
| runId | string | yes | Daemon run id (from a run tool's runId trailer or claudexor_runs). |
| Name | Type | Req | Description |
|---|---|---|---|
| applyEligibility | – | – | Derived apply-gate verdict; null for read-only runs or when no patch exists. |
| budget | – | – | Run budget snapshot (cash + subscription valuation, QA-023c); null when unavailable. |
| council | – | – | Council membership + merge disclosure (QA-023b); null for solo/non-plan runs. |
| decisionStatus | string|null | – | The arbitration decision status, when the run reached arbitration. |
| delegatedFromRunId | string|null | – | Claudexor Delegate parent id; null for ordinary runs and native subagents. |
| delegation | – | – | Typed Delegate receipt; null when unavailable or legacy. |
| detailProblem | – | – | Typed post-terminal detail-read problem (the durable run handle survives); null when the detail read succeeded. |
| failure | – | – | Typed terminal failure detail and recovery actions; null for non-failed runs. |
| outcomeBanner | string|null | – | Server-owned outcome headline (D18); null while non-terminal. |
| outcomeFacts | – | – | The D8 terminal outcome axes (checks/review/reason/noChanges), when terminal. |
| parentRunId | string|null | – | Server-owned ordinary parent/follow-up run id, when present. |
| pendingInteractions | – | – | Count of questions still awaiting answers, when known. |
| planReadiness | – | – | Derived plan readiness (plan runs only, D17); null otherwise. |
| runDir | string|null | – | Artifact directory; null when absent. |
| runFacts | – | – | Validated canonical terminal RunFacts receipt; null while active, unavailable, or for legacy runs. |
| runId | string|null | – | The daemon run id, when known. |
| status | string|null | – | The run's terminal or in-flight lifecycle state, when known. |
| summary | string | yes | Human-readable outcome/status text (same as the tool's text content). |
No examples provided.
claudexor_run_status ~57
Read the current daemon-acknowledged state of a durable Claudexor run.
| Name | Type | Req | Description |
|---|---|---|---|
| runId | string | yes | Daemon run id (from a run tool's runId trailer or claudexor_runs). |
| Name | Type | Req | Description |
|---|---|---|---|
| applyEligibility | – | – | Derived apply-gate verdict; null for read-only runs or when no patch exists. |
| budget | – | – | Run budget snapshot (cash + subscription valuation, QA-023c); null when unavailable. |
| council | – | – | Council membership + merge disclosure (QA-023b); null for solo/non-plan runs. |
| decisionStatus | string|null | – | The arbitration decision status, when the run reached arbitration. |
| delegatedFromRunId | string|null | – | Claudexor Delegate parent id; null for ordinary runs and native subagents. |
| delegation | – | – | Typed Delegate receipt; null when unavailable or legacy. |
| detailProblem | – | – | Typed post-terminal detail-read problem (the durable run handle survives); null when the detail read succeeded. |
| failure | – | – | Typed terminal failure detail and recovery actions; null for non-failed runs. |
| outcomeBanner | string|null | – | Server-owned outcome headline (D18); null while non-terminal. |
| outcomeFacts | – | – | The D8 terminal outcome axes (checks/review/reason/noChanges), when terminal. |
| parentRunId | string|null | – | Server-owned ordinary parent/follow-up run id, when present. |
| pendingInteractions | – | – | Count of questions still awaiting answers, when known. |
| planReadiness | – | – | Derived plan readiness (plan runs only, D17); null otherwise. |
| runDir | string|null | – | Artifact directory; null when absent. |
| runFacts | – | – | Validated canonical terminal RunFacts receipt; null while active, unavailable, or for legacy runs. |
| runId | string|null | – | The daemon run id, when known. |
| status | string|null | – | The run's terminal or in-flight lifecycle state, when known. |
| summary | string | yes | Human-readable outcome/status text (same as the tool's text content). |
No examples provided.
claudexor_runs ~31
List recent daemon-tracked Claudexor runs (recovery: find a lost runId).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
claudexor_status ~42
Return doctor-backed Claudexor runtime status: per-harness verdicts with enabled/disabled intents, doctor reasons and checks, and the configured model.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
What is the Claudexor MCP server?
Claudexor is an MCP server listed in the public MCP registry as io.github.razzant/claudexor. Route coding work across Claude Code, Codex, Cursor, and OpenCode with shared context. This page covers its npm package (claudexor).
Is the Claudexor MCP server safe to use?
Claudexor scores 92 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Claudexor MCP server expose?
Claudexor exposes 18 tools: claudexor_ask, claudexor_run, claudexor_best_of, claudexor_plan, claudexor_create, and 13 more. Their descriptions and schemas cost roughly 2,426 tokens of context every time the server is loaded.
Is the Claudexor MCP server still maintained?
Claudexor is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the Claudexor MCP server under?
Claudexor declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.