Claude Agy MCP

Why Gemini 3.8 Flash? · MCP Power Stack · Tools · Timeouts · Claude Code delegates heavy tasks to Google's flagship Gemini Flash via the Antigravity CLI (agy) - saving Claude's context window and tokens for what matters. Its 9 documented tools cluster into delegate, analyze, deep, web. It runs locally over stdio via the published package.

People who work with agy, antigravity and delegation and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-09-18 · ★ 2 · #56 OF 160 MAINTAINED PRODUCTIVITY · VERIFIED 2026-09-18

MIT · TypeScript servers · how we verify → /methodology

01 · Install Claude Agy MCP

Claude Code

claude mcp add pymodel-claude-agy-mcp -- npx -y @pymodel/claude-agy-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "pymodel-claude-agy-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@pymodel/claude-agy-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

repo age created 2026-08-13 - young repo, little track record yet

license MIT - declared in the repository

npm package @pymodel/claude-agy-mcp - published under the repo owner's npm scope (@pymodel)

registry namespace io.github.PyModel is GitHub-verified and matches the repo owner

03 · What Claude Agy MCP can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

An agent gets 9 documented tools across delegate, analyze, deep, including analyze_files, deep_search, web_lookup, adversarial_review.

Capability map

Tools grouped from the project's README - what Claude Agy MCP lets an agent do.

Delegate

2 tools - e.g. Anything else heavy (read-only unless write: true); One question to a council of models, or N sub-tasks at once

delegate · delegate_many

Analyze

1 tool - e.g. Files >200 lines, >3 files at once, logs, dumps, generated code

analyze_files

Deep

1 tool - e.g. git log/diff/blame archaeology, repo-wide greps

deep_search

Web

1 tool - e.g. Docs, API references, external/current knowledge

web_lookup

Adversarial

1 tool - e.g. Plan critiques, design and code reviews

adversarial_review

1 tool - e.g. Continue a prior session by session_id - no context resend; write: true to rework files

follow_up

update

1 tool - e.g. Record the user's model + tier once; every tool routes to it first

set_model

Agy

1 tool - e.g. Spend, cooldowns, in-flight runs, resolved chains, agy version

agy_status

Limitations (from the README)

[!WARNING] AGY_SKIP_PERMISSIONS is a real grant, and agy does not enforce read-only on top of it. It defaults to true because headless agy auto-denies _every_ permissioned tool without it - including read_file - and a single denial ends the run with an empty response, so a bridge without the grant cannot read, search or fetch anything. The read-only tools pass --mode plan, but verified

Latest releases

v3.1.0 · 2026-09-12

Read-only runs are now enforced on macOS: plan-mode delegations run under sandbox-exec, which blocks writes into their roots and renames of any directory above them. Linux still watches read-only runs…

v3.0.4 · 2026-09-12

Ignored files are watched too, and the build is one tool · A plan-mode run that writes a git-ignored file is now seen. The fingerprint hashes the mode, size and mtime of every ignored entry and walks ignored…

v3.0.3 · 2026-09-12

The bridge holds up at its edges · An end-to-end audit drove the stdio server against real agy and a hostile fake, and found about fifty ways it could leak work, repeat a write, or report the wrong thing. Each fix…

04 · Who maintains Claude Agy MCP

claude-agy-mcp is maintained by pymodel. It's the only MCP server we track from this author; the repo dates to Aug 2026.

05 · Facts

repository: github.com/pymodel/claude-agy-mcp
category: productivity - ranked #56 of 160 actively-maintained productivity servers as of 2026-09-18.
release cadence: 10+ releases in the last 90 days (latest 2026-09-12)
registry: io.github.PyModel/claude-agy-mcp (active, first published 2026-08-14 · 2 versions)
packages: npm:@pymodel/claude-agy-mcp

06 · Claude Agy MCP FAQ

Is Claude Agy MCP still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-18 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

What can Claude Agy MCP do?

An agent gets 9 documented tools across delegate, analyze, deep, including analyze_files, deep_search, web_lookup, adversarial_review.

How do I install Claude Agy MCP?

Run `npx -y @pymodel/claude-agy-mcp`. You can also paste the ready-made client config above.

Does Claude Agy MCP run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Claude Agy MCP

Alternatives to Claude Agy MCP

Maintained productivity servers if Claude Agy MCP isn't the fit.

Pairs well with

Servers that cover what Claude Agy MCP doesn't - only shown when the pairing reason fits the companion.

More productivity MCP servers · Quant Gist · Jira MCP · Remnus · Neuro Stack · Agentic Task System (ATS)

More TypeScript MCP servers · Pyth Pro MCP Server · Qase Test Management · Oh My Wind · Qingkuai MCP Server · Server Template · see all