Codeman MCP Server: Let One Coding Agent Run Others

• Lists your Codeman sessions

  Shows every session you can see, each an agent CLI or shell in a tmux pane, with its ID, name, run mode, status, folder and whether this server may prompt it.

  Try: “Which Codeman sessions are open right now?”

  Read · list_sessions

• Starts a worker agent

  Opens a new session in a coding agent CLI or shell on the Codeman machine, in a named case folder, and waits until it can take a prompt. It shows up as a new tab in your dashboard.

  Try: “Start a Codex worker in a new case called review-auth-1.”

  Runs code · start_session

• Types a prompt into a worker

  Types one line into a session this server started and presses Enter. By default it waits for the turn to finish, or times out.

  Try: “Tell the review worker to check the auth module and print DONE_7f3a when finished.”

  Runs code · send_prompt

• Waits for a worker

  Waits until a session finishes its turn, stops for a permission prompt, goes idle or exits, or until a literal text marker appears in its output.

  Try: “Wait for the review worker to finish.”

  Read · wait_for_session

• Reads a worker answer

  Returns the last answer, the whole conversation or the end of the terminal screen of a session, capped in length.

  Try: “Show me the last answer from the review worker.”

  Read · read_output

• Stops a worker turn

  Presses Escape in a session this server started, which stops its current turn and keeps the conversation.

  Try: “Interrupt the review worker.”

  Write · interrupt_session

• Closes a worker

  Ends the CLI and removes its tab for a session this server started. The case folder stays on disk.

  Try: “Close the review worker now that it has answered.”

  Delete · delete_session

Watch out for

• Workers can edit files and run commands

  start_session and send_prompt start real coding agents in a case folder. What they do is limited only by that agent's own permission settings, so give each worker a fresh case and check what it is allowed to run. github.com

• Workers spend your agent accounts

  Workers run on the CLI logins of the Codeman host, so each prompt uses your Claude, Codex or other plan quota. github.com

• --allow-any-session lets it drive your existing tabs

  By default prompt, interrupt and delete only work on sessions this server started. The --allow-any-session flag lifts that limit, so leave it off unless you want that. github.com

• delete_session closes a session

  It ends the agent CLI and removes its tab, but the case folder stays on disk. github.com

Security advisories