PlugWiki
PAL MCP Server logo

PAL MCP Server: Setup for Claude Code, Cursor and Other Apps

CommunityLocal

Lets Claude Code, Codex and Gemini CLI ask other AI models for second opinions, code reviews and plans, all inside one session.

PAL connects your coding assistant to other AI models and other AI command line tools. You can ask Gemini, OpenAI models or a local Ollama model to review code, debug an error or plan a feature, then bring the answer back. It runs on your computer and needs at least one model provider key. The one thing to know is that it can launch other AI programs that edit files without asking you first.

Good for

  • Claude Code and Codex users who want a second model to review their work
  • Developers who want Gemini, OpenAI and local models in one session
  • Teams that want a pre-commit check by a different model

Works in

12 should work

Tap an app to see how to set it up and any known problems.

Install PAL MCP

Claude Code

  1. 1

    Copy this prompt.

    Add the PAL MCP server to Claude Code. Run this command:
    
    claude mcp add pal -e GEMINI_API_KEY=<GEMINI_API_KEY> -e DISABLED_TOOLS=analyze,refactor,testgen,secaudit,docgen,tracer -e DEFAULT_MODEL=auto -- uvx --from git+https://github.com/BeehiveInnovations/pal-mcp-server.git pal-mcp-server
    
    Then check that it loaded and tell me if I need to sign in or restart.
  2. 2

    Paste it into Claude Code. It shows the change and asks before running it.

Requires uv, Python 3.10+, Git, One model provider key.

Read-only mode: Add clink to the disabled-tools setting so it cannot launch other AI tools. There is no full read-only mode.

The uvx method follows the README's instant setup, which installs straight from GitHub and needs uv. The README wraps the command in a shell script that searches common folders for uvx; the plain form here works when uvx is on your PATH, which desktop apps sometimes lack. The README also offers a clone-and-run setup script that configures several apps for you. Replace the example key with your own, and add other providers' keys the same way.

Built from the package data we hold. Not yet tested by us.

Tools

  • Brainstorms with another AI model and returns its answer

    Starts a conversation with the model you name, such as Gemini or an OpenAI model, so you get a second opinion inside your current session.

    Try: “Ask Gemini whether Redis or Memcached fits this cache better.”

    Network · chat

  • Has another model reason through a hard problem at length

    Runs a step-by-step deep reasoning pass with extra checks on edge cases and alternatives, then asks a second model to review it.

    Try: “Think through the edge cases of this payment retry logic with Gemini.”

    Network · thinkdeep

  • Breaks a big project into a step-by-step plan

    Builds a structured plan one step at a time, and can revise earlier steps as the plan develops.

    Try: “Plan the migration from REST to GraphQL in small steps.”

    Read · planner

  • Asks several AI models for their opinion and compares them

    Collects views from more than one model on a proposal, and lets you steer each model to argue for or against.

    Try: “Get consensus from Gemini and o3 on switching to a monorepo.”

    Network · consensus

  • Reviews code and lists issues by severity

    Walks through the code step by step and reports problems ranked by severity, with a second model checking the result.

    Try: “Review the auth module with Gemini Pro and rank the problems.”

    Files · codereview

  • Checks your changes before you commit them

    Looks over the pending changes in a git repo for bugs and regressions, with a second model validating the findings.

    Try: “Run a pre-commit check on my staged changes.”

    Files · precommit

  • Investigates a bug and works toward the root cause

    Guides a step-by-step investigation of an error, tracking hypotheses and evidence, then asks a second model to confirm.

    Try: “Debug this stack trace with o3 and find the root cause.”

    Files · debug

  • Hands a task to another AI command line tool such as Gemini CLI or Codex

    Launches an external AI CLI as a sub-agent with a role such as planner or code reviewer, and returns its answer. The docs say it starts those tools with relaxed permission flags so they can edit files and run tools on their own.

    Try: “Use clink with codex codereviewer to audit the auth module.”

    Runs code · clink

  • Makes the assistant question a claim instead of agreeing

    Wraps a statement in a prompt that asks for critical analysis, so the assistant does not just say you are right.

    Try: “Challenge this claim before we build on it.”

    Read · challenge

  • Reminds the assistant to look up current docs for an API or library

    Returns instructions that tell the assistant to research up-to-date documentation in a separate sub-task. It has no web search of its own.

    Try: “Look up the current docs for the Stripe Checkout API.”

    Read · apilookup

  • Lists the AI models you can use with your keys

    Shows the models available from each provider you have configured. It cannot be switched off.

    Try: “Which models can PAL use right now?”

    Read · listmodels

  • Shows the server version and system information

    Reports the PAL version and details about the machine it runs on. It cannot be switched off.

    Try: “What version of PAL is running?”

    Read · version

Read from the source code

Permissions

high risk · 4 things to watch

High risk

PAL sends your code and prompts to the AI providers you configure, and its clink tool can start other AI command line tools that edit files and run commands on their own. Switch clink off if you only want second opinions, and use provider keys with spending limits.

What it can do

  • Read your data
  • Create and change things
  • Delete things
  • Read-only mode

Watch out for

  • clink launches other AI tools with relaxed permissions

    The docs say Gemini starts with its auto-approve flag, Codex with sandbox checks bypassed and Claude with edits accepted. Turn clink off in the disabled-tools setting if you do not need it. github.com

  • Your code is sent to third-party model providers

    Files and prompts go to whichever provider handles the request. Use a local Ollama model for code that must stay on your machine. github.com

  • Several tools are on by default

    The code enables all 18 tools unless you set a disabled list. The README suggests turning six off to save context. github.com

  • Multi-step tools can run up provider costs

    Review and debug workflows make several model calls. Set spending limits on the keys you give it. github.com

Security advisories

No published security advisories as of Nov 1, 2026.

Technical details
Turning on read-onlyNo read-only mode is documented. The disabled-tools setting can switch off individual tools; clink can be turned off that way, while the version and model-list tools cannot.
Talks toThe model providers you configure (Gemini, OpenAI, OpenRouter, X.AI, Azure OpenAI, DIAL). A local Ollama server if you use one
Sign-in and keysProvider API keys sit in the server config or an .env file on your machine.

Questions

Do I need API keys?

Yes, at least one. The README lists Gemini, OpenAI, OpenRouter, Azure OpenAI, X.AI, DIAL and Ollama. Ollama runs local models for free, and any other provider bills you directly.

Is PAL the same as Zen MCP?

Yes. The project was called Zen MCP Server and is now PAL MCP. Some listings, including the Docker catalog, still use the Zen name.

Which apps does it work with?

The README is aimed at Claude Code, Codex CLI and Gemini CLI, and links setup for Cursor and VS Code. Use the install box above.

Can it edit my files?

Its own review and planning tools return advice. The clink tool can start other AI tools that do edit files and run commands on their own, so turn clink off if you do not want that.

Does my code leave my machine?

Yes, unless you only use a local Ollama model. Files and prompts are sent to whichever provider answers the request.

Which tools are on by default?

The README setup turns off six: analyze, refactor, testgen, secaudit, docgen and tracer. In the code, with no disabled list set, all 18 tools are on.

Is it official?

No. It is a community project from Beehive Innovations and is not made by Anthropic, Google or OpenAI.

Information

updated Nov 2, 2026

Publisher
Community
Transport
stdio
Auth
API key
License
Apache-2.0
Last commit
Dec 15, 2025
Open issues
79
Listed in
Docker MCP Catalog

GitHubDocker MCP CatalogChangelogIssues

Sources

Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.

Show all 3
  1. github.com · github.com
  2. github.com · github.com
  3. github.com · github.com

Facts from the official MCP registry, GitHub, npm, PyPI and the Docker catalog. Updated Nov 2, 2026.