mcp-agents 0.6.5 → 0.7.0

package/README.md

@@ -1,6 +1,6 @@
 # mcp-agents
 
-MCP server that wraps AI CLI tools — [Claude Code](https://docs.anthropic.com/en/docs/claude-code), [Gemini CLI](https://github.com/google-gemini/gemini-cli), and [Codex CLI](https://github.com/openai/codex) — so any MCP client can call them as tools.
+MCP server that wraps AI CLI tools — [Claude Code](https://docs.anthropic.com/en/docs/claude-code), [Antigravity CLI](https://antigravity.google/) (`agy`), and [Codex CLI](https://github.com/openai/codex) — so any MCP client can call them as tools.
 
 ## Prerequisites
 
@@ -10,7 +10,7 @@ MCP server that wraps AI CLI tools — [Claude Code](https://docs.anthropic.com/
 | CLI | Install |
 |-----|---------|
 | `claude` | [Claude Code docs](https://docs.anthropic.com/en/docs/claude-code) |
-| `gemini` | `npm install -g @anthropic-ai/gemini-cli` |
+| `agy` | [Google Antigravity](https://antigravity.google/) |
 | `codex` | `npm install -g @openai/codex` |
 
 Only the CLI you select with `--provider` needs to be present.
@@ -37,9 +37,6 @@ mcp-agents
 # Specific provider
 mcp-agents --provider claude
 mcp-agents --provider gemini
-
-# Optional: enable Gemini sandbox mode
-mcp-agents --provider gemini --sandbox true
 ```
 
 The server speaks [JSON-RPC over stdio](https://modelcontextprotocol.io/docs/concepts/transports#stdio). It prints `[mcp-agents] ready (provider: <name>)` to stderr when it's listening.
@@ -51,7 +48,7 @@ Each `--provider` flag maps to a single exposed tool:
 | Provider | Tool name | CLI command |
 |----------|-----------|-------------|
 | `claude` | `claude_code` | `claude -p --output-format json` |
-| `gemini` | `gemini` | `gemini [-s] -p <prompt>` |
+| `gemini` | `gemini` | `agy --sandbox -p <prompt>` |
 | `codex` | *(pass-through)* | `codex mcp-server` |
 
 ### `claude_code` parameters
@@ -69,12 +66,13 @@ Claude calls run with `--output-format json`; the server parses the JSON payload
 
 | Parameter | Type | Required | Description |
 |-----------|------|----------|-------------|
-| `prompt` | `string` | yes | The prompt to send to Gemini CLI |
-| `sandbox` | `boolean` | no | Run in sandbox mode (`-s` flag, default: false) |
+| `prompt` | `string` | yes | The prompt to send to the Antigravity CLI (`agy`) |
 | `timeout_ms` | `integer` | no | Timeout in ms (default: 300 000 / 5 minutes) |
 
 Any additional `tools/call` arguments are ignored (for example `model` or `model_reasoning_effort`).
 
+`agy` always runs with `--sandbox` (terminal restrictions enabled); there is no per-call sandbox toggle.
+
 ### `codex` (pass-through)
 
 The codex provider passes through to Codex's native MCP server (`codex mcp-server`)
@@ -85,7 +83,7 @@ or Gemini during bridge calls.
 
 | CLI Flag | Default | Codex config key |
 |----------|---------|-----------------|
-| `--model` | `gpt-5.4` | `model` |
+| `--model` | `gpt-5.5` | `model` |
 | `--model_reasoning_effort` | `xhigh` | `model_reasoning_effort` |
 
 Hardcoded defaults: `sandbox_mode=read-only`, `approval_policy=never`,
@@ -121,19 +119,6 @@ Add entries to your project's `.mcp.json` (requires `npm i -g mcp-agents`):
 }
 ```
 
-Optional Gemini sandbox mode in `.mcp.json`:
-
-```json
-{
-  "mcpServers": {
-    "gemini": {
-      "command": "mcp-agents",
-      "args": ["--provider", "gemini", "--sandbox", "true"]
-    }
-  }
-}
-```
-
 Override codex defaults at server startup:
 
 ```json
@@ -141,7 +126,7 @@ Override codex defaults at server startup:
   "mcpServers": {
     "codex": {
       "command": "mcp-agents",
-      "args": ["--provider", "codex", "--model", "gpt-5.4", "--model_reasoning_effort", "medium"]
+      "args": ["--provider", "codex", "--model", "gpt-5.5", "--model_reasoning_effort", "medium"]
     }
   }
 }
@@ -188,15 +173,6 @@ args = ["--provider", "gemini"]
 tool_timeout_sec = 300
 ```
 
-Optional Gemini sandbox mode in Codex config:
-
-```toml
-[mcp_servers.gemini]
-command = "mcp-agents"
-args = ["--provider", "gemini", "--sandbox", "true"]
-tool_timeout_sec = 300
-```
-
 Then in a Codex session you can call the `claude_code` or `gemini` tools, which shell out to the respective CLIs.
 
 ## Development

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-agents",
-  "version": "0.6.5",
+  "version": "0.7.0",
   "description": "MCP server that wraps AI CLI tools (Claude Code, Gemini CLI, Codex CLI) for use by any MCP client",
   "type": "module",
   "bin": {
@@ -27,7 +27,12 @@
   },
   "author": "Thomas Witt",
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.0.0"
+    "@modelcontextprotocol/sdk": "^1.29.0"
+  },
+  "overrides": {
+    "fast-uri": "^3.1.2",
+    "hono": "^4.12.22",
+    "ip-address": "^10.2.0"
   },
   "engines": {
     "node": ">=18"

package/server.js

@@ -27,7 +27,7 @@ const VERSION = JSON.parse(
 ).version;
 
 const DEFAULT_TIMEOUT_MS = 300_000;
-const DEFAULT_CODEX_MODEL = "gpt-5.4";
+const DEFAULT_CODEX_MODEL = "gpt-5.5";
 const DEFAULT_CODEX_MODEL_REASONING_EFFORT = "xhigh";
 const MAX_BUFFER_BYTES = 10 * 1024 * 1024;
 const CLAUDE_EMPTY_OUTPUT_MAX_ATTEMPTS = 2;
@@ -50,12 +50,13 @@ const CLI_BACKENDS = {
     extraProperties: {},
   },
   gemini: {
-    command: "gemini",
+    command: "agy",
     toolName: "gemini",
     description:
-      "Run Gemini CLI with a prompt. Always runs in sandbox mode with --approval-mode=plan.",
+      "Run the Antigravity CLI (`agy`, Google's Gemini-backed agent) with a prompt. Always runs in --sandbox mode (terminal restrictions enabled).",
     stdinPrompt: false,
-    buildArgs: (prompt) => ["-s", "--approval-mode=plan", "-p", prompt],
+    isolateCwd: true,
+    buildArgs: (prompt) => ["--sandbox", "-p", prompt],
     extraProperties: {},
   },
   codex: {
@@ -209,6 +210,7 @@ function parseArgs() {
  * @param {{
  *   timeoutMs?: number,
  *   stdinData?: string,
+ *   cwd?: string,
  *   onSpawn?: (childInfo: { pid?: number, killGroup: () => void }) => void,
  *   onSettled?: (pid?: number) => void,
  * }} [opts]
@@ -217,6 +219,7 @@ function parseArgs() {
 function runCli(command, args, opts = {}) {
   const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
   const stdinData = opts.stdinData;
+  const cwd = opts.cwd;
   const onSpawn = opts.onSpawn;
   const onSettled = opts.onSettled;
   const startedAt = Date.now();
@@ -229,6 +232,7 @@ function runCli(command, args, opts = {}) {
     let settled = false;
 
     const child = spawn(command, args, {
+      cwd,
       detached: true,
       stdio: ["pipe", "pipe", "pipe"],
       env: { ...process.env, NO_COLOR: "1" },
@@ -307,6 +311,18 @@ function runCli(command, args, opts = {}) {
   });
 }
 
+/**
+ * Create a fresh, empty working directory under the OS temp dir for an
+ * agentic CLI. Agentic CLIs (e.g. agy/Antigravity) treat their cwd as a
+ * workspace and write project files into it; running them here keeps them
+ * from mutating whatever directory the MCP server was started in.
+ * @param {string} provider
+ * @returns {string}
+ */
+function createIsolatedWorkdir(provider) {
+  return mkdtempSync(join(tmpdir(), `mcp-agents-${provider}-`));
+}
+
 /**
  * Resolve the source Codex home used by the parent process.
  * @returns {string}
@@ -628,10 +644,12 @@ async function main() {
     const cliArgs = backend.stdinPrompt
       ? backend.buildArgs(extraOpts)
       : backend.buildArgs(prompt, extraOpts);
+    let isolatedWorkdir;
     const buildCliOpts = (attemptTimeoutMs) => (
       {
         timeoutMs: attemptTimeoutMs,
         ...(backend.stdinPrompt ? { stdinData: prompt } : {}),
+        ...(isolatedWorkdir ? { cwd: isolatedWorkdir } : {}),
         onSpawn: ({ pid, killGroup }) => {
           if (!pid) return;
           activeChildren.set(pid, killGroup);
@@ -653,6 +671,24 @@ async function main() {
         };
       }
 
+      if (backend.isolateCwd) {
+        try {
+          isolatedWorkdir = createIsolatedWorkdir(providerName);
+        } catch (err) {
+          const msg = err instanceof Error ? err.message : String(err);
+          logErr(`[mcp-agents] failed to create isolated workdir: ${msg}`);
+          return {
+            content: [
+              {
+                type: "text",
+                text: `Failed to prepare isolated working directory: ${msg}`,
+              },
+            ],
+            isError: true,
+          };
+        }
+      }
+
       const startedAt = Date.now();
       const maxAttempts = providerName === "claude"
         ? CLAUDE_EMPTY_OUTPUT_MAX_ATTEMPTS
@@ -738,6 +774,14 @@ async function main() {
         isError: true,
       };
     } finally {
+      if (isolatedWorkdir) {
+        try {
+          rmSync(isolatedWorkdir, { recursive: true, force: true });
+        } catch (err) {
+          const msg = err instanceof Error ? err.message : String(err);
+          logErr(`[mcp-agents] failed to clean isolated workdir: ${msg}`);
+        }
+      }
       activeRequests -= 1;
       maybeFinalizeShutdown();
     }