
PAL MCP Server: Setup for Claude Code, Cursor and Other Apps
Lets Claude Code, Codex and Gemini CLI ask other AI models for second opinions, code reviews and plans, all inside one session.
PAL connects your coding assistant to other AI models and other AI command line tools. You can ask Gemini, OpenAI models or a local Ollama model to review code, debug an error or plan a feature, then bring the answer back. It runs on your computer and needs at least one model provider key. The one thing to know is that it can launch other AI programs that edit files without asking you first.
Good for
- Claude Code and Codex users who want a second model to review their work
- Developers who want Gemini, OpenAI and local models in one session
- Teams that want a pre-commit check by a different model
Works in
12 should work
Tap an app to see how to set it up and any known problems.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Client does not support this transport.
Client does not support this transport.
Install PAL MCP
Claude Code
- 1
Copy this prompt.
Add the PAL MCP server to Claude Code. Run this command: claude mcp add pal -e GEMINI_API_KEY=<GEMINI_API_KEY> -e DISABLED_TOOLS=analyze,refactor,testgen,secaudit,docgen,tracer -e DEFAULT_MODEL=auto -- uvx --from git+https://github.com/BeehiveInnovations/pal-mcp-server.git pal-mcp-server Then check that it loaded and tell me if I need to sign in or restart.
- 2
Paste it into Claude Code. It shows the change and asks before running it.
Requires uv, Python 3.10+, Git, One model provider key.
Read-only mode: Add clink to the disabled-tools setting so it cannot launch other AI tools. There is no full read-only mode.
The uvx method follows the README's instant setup, which installs straight from GitHub and needs uv. The README wraps the command in a shell script that searches common folders for uvx; the plain form here works when uvx is on your PATH, which desktop apps sometimes lack. The README also offers a clone-and-run setup script that configures several apps for you. Replace the example key with your own, and add other providers' keys the same way.
Built from the package data we hold. Not yet tested by us.
Tools
Brainstorms with another AI model and returns its answer
Starts a conversation with the model you name, such as Gemini or an OpenAI model, so you get a second opinion inside your current session.
Try: “Ask Gemini whether Redis or Memcached fits this cache better.”
Network ·
chatHas another model reason through a hard problem at length
Runs a step-by-step deep reasoning pass with extra checks on edge cases and alternatives, then asks a second model to review it.
Try: “Think through the edge cases of this payment retry logic with Gemini.”
Network ·
thinkdeepBreaks a big project into a step-by-step plan
Builds a structured plan one step at a time, and can revise earlier steps as the plan develops.
Try: “Plan the migration from REST to GraphQL in small steps.”
Read ·
plannerAsks several AI models for their opinion and compares them
Collects views from more than one model on a proposal, and lets you steer each model to argue for or against.
Try: “Get consensus from Gemini and o3 on switching to a monorepo.”
Network ·
consensusReviews code and lists issues by severity
Walks through the code step by step and reports problems ranked by severity, with a second model checking the result.
Try: “Review the auth module with Gemini Pro and rank the problems.”
Files ·
codereviewChecks your changes before you commit them
Looks over the pending changes in a git repo for bugs and regressions, with a second model validating the findings.
Try: “Run a pre-commit check on my staged changes.”
Files ·
precommitInvestigates a bug and works toward the root cause
Guides a step-by-step investigation of an error, tracking hypotheses and evidence, then asks a second model to confirm.
Try: “Debug this stack trace with o3 and find the root cause.”
Files ·
debugHands a task to another AI command line tool such as Gemini CLI or Codex
Launches an external AI CLI as a sub-agent with a role such as planner or code reviewer, and returns its answer. The docs say it starts those tools with relaxed permission flags so they can edit files and run tools on their own.
Try: “Use clink with codex codereviewer to audit the auth module.”
Runs code ·
clinkMakes the assistant question a claim instead of agreeing
Wraps a statement in a prompt that asks for critical analysis, so the assistant does not just say you are right.
Try: “Challenge this claim before we build on it.”
Read ·
challengeReminds the assistant to look up current docs for an API or library
Returns instructions that tell the assistant to research up-to-date documentation in a separate sub-task. It has no web search of its own.
Try: “Look up the current docs for the Stripe Checkout API.”
Read ·
apilookupLists the AI models you can use with your keys
Shows the models available from each provider you have configured. It cannot be switched off.
Try: “Which models can PAL use right now?”
Read ·
listmodelsShows the server version and system information
Reports the PAL version and details about the machine it runs on. It cannot be switched off.
Try: “What version of PAL is running?”
Read ·
versionStudies a codebase for structure, patterns and dependencies
Examines files and reports on architecture, patterns and dependencies. Off by default in the README setup.
Try: “Analyze the architecture of this repo.”
Files ·
analyzeFinds refactoring opportunities and plans them
Analyses code step by step and suggests how to break up large pieces. Off by default in the README setup.
Try: “Find refactors that would split up this 2,000 line file.”
Files ·
refactorPlans tests, including edge cases
Works out a test plan for code, with edge cases, validated by a second model. Off by default in the README setup.
Try: “Generate tests for the invoice calculator.”
Files ·
testgenAudits code for security problems
Runs a security review against the OWASP Top 10 and compliance areas. Off by default in the README setup.
Try: “Run a security audit on the login flow.”
Files ·
secauditPlans documentation for code
Works through code to produce documentation guidance, including how complex each part is. Off by default in the README setup.
Try: “Document the public functions in this module.”
Files ·
docgenMaps how a function is called through the code
Produces static-analysis prompts for call-flow mapping. Off by default in the README setup.
Try: “Trace everything that calls the checkout function.”
Files ·
tracer
Read from the source code
Permissions
high risk · 4 things to watch
High risk
PAL sends your code and prompts to the AI providers you configure, and its clink tool can start other AI command line tools that edit files and run commands on their own. Switch clink off if you only want second opinions, and use provider keys with spending limits.
What it can do
- Read your data
- Create and change things
- Delete things
- Read-only mode
Watch out for
clink launches other AI tools with relaxed permissions
The docs say Gemini starts with its auto-approve flag, Codex with sandbox checks bypassed and Claude with edits accepted. Turn clink off in the disabled-tools setting if you do not need it. github.com
Your code is sent to third-party model providers
Files and prompts go to whichever provider handles the request. Use a local Ollama model for code that must stay on your machine. github.com
Several tools are on by default
The code enables all 18 tools unless you set a disabled list. The README suggests turning six off to save context. github.com
Multi-step tools can run up provider costs
Review and debug workflows make several model calls. Set spending limits on the keys you give it. github.com
Security advisories
No published security advisories as of Nov 1, 2026.
Technical details
| Turning on read-only | No read-only mode is documented. The disabled-tools setting can switch off individual tools; clink can be turned off that way, while the version and model-list tools cannot. |
|---|---|
| Talks to | The model providers you configure (Gemini, OpenAI, OpenRouter, X.AI, Azure OpenAI, DIAL). A local Ollama server if you use one |
| Sign-in and keys | Provider API keys sit in the server config or an .env file on your machine. |
Questions
Do I need API keys?
Yes, at least one. The README lists Gemini, OpenAI, OpenRouter, Azure OpenAI, X.AI, DIAL and Ollama. Ollama runs local models for free, and any other provider bills you directly.
Is PAL the same as Zen MCP?
Yes. The project was called Zen MCP Server and is now PAL MCP. Some listings, including the Docker catalog, still use the Zen name.
Which apps does it work with?
The README is aimed at Claude Code, Codex CLI and Gemini CLI, and links setup for Cursor and VS Code. Use the install box above.
Can it edit my files?
Its own review and planning tools return advice. The clink tool can start other AI tools that do edit files and run commands on their own, so turn clink off if you do not want that.
Does my code leave my machine?
Yes, unless you only use a local Ollama model. Files and prompts are sent to whichever provider answers the request.
Which tools are on by default?
The README setup turns off six: analyze, refactor, testgen, secaudit, docgen and tracer. In the code, with no disabled list set, all 18 tools are on.
Is it official?
No. It is a community project from Beehive Innovations and is not made by Anthropic, Google or OpenAI.
Information
updated Nov 2, 2026
- Publisher
- Community
- Transport
- stdio
- Auth
- API key
- License
- Apache-2.0
- Last commit
- Dec 15, 2025
- Open issues
- 79
- Listed in
- Docker MCP Catalog
Sources
Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.
Show all 3Hide
- github.com · github.com
- github.com · github.com
- github.com · github.com