OpenCode Helper MCP

Local, read-only MCP server for code analysis. Normal callers use a single orchestrated tool; provider selection stays inside the server.

Tools

• analyze_code: deterministic chain — native Mac Ollama qwen3.8:27b-mlx, then NVIDIA GPT-OSS, then MiMo, then Cloudflare. After all fail, returns a sanitized all-providers-failed status so a direct Grok fallback is permitted.
• analyze_code_ollama: native Ollama only (diagnostic)
• analyze_code_nvidia: NVIDIA openai/gpt-oss-20b via OpenCode plan / low
• analyze_code_mimo: OpenCode mimo-v2.5-free
• analyze_code_cloudflare: Cloudflare Workers AI @cf/zai-org/glm-4.7-flash

MCP input is only directory, prompt, and optional maxWords / budgetMs. Clients never pass endpoint, model, options, tools, or test mode.

Native Ollama bridge

• POST http://Zvis-MacBook-Pro.local:11434/api/chat
• IPv4 fallback http://10.100.102.8:11434/api/chat only on connection or address-family errors
• Fixed payload fields: think: false, keep_alive: "30m", stream: false
• Native Ollama final answers must contain the ## Analysis marker. Leaked reasoning tags are removed, incomplete fragments are rejected, and the requested output word cap is enforced locally before returning MCP text.
• Bounded read-only tool loop (no shell): list_files, search_text, read_file
• Canonical path checks under the allowed workspace; rejects traversal and symlink/reparse escapes
• Skips node_modules, .git, build, vendor, binaries, hidden paths, and common credential files such as .env, *.pem, and id_rsa
• Rejects oversized files before a full read in read_file and search_text
• Caps rounds, files, bytes, context, output, and wall time; malformed, empty, unsafe, tool, and timeout errors fail the provider

OpenCode providers still launch opencode run with fixed arguments. NDJSON is accepted only with a valid final text event. OpenCode child stdout and stderr are memory-bounded; MCP clients receive sanitized errors only. Timeouts and output limits terminate only the known child process tree.

Scope

By default, target folders must resolve canonically under C:\Develop, including Windows junction and symlink resolution. Set OPENCODE_HELPER_ALLOWED_ROOTS to a semicolon-separated list of additional allowed absolute paths if needed.

Callers choose budgetMs from request complexity (roughly 90 seconds focused, 180 seconds multi-file, or 270 seconds deep). The helper dynamically redistributes unused time across the fixed provider chain without duplicate provider calls. Ollama receives half of focused and multi-file budgets, and two-thirds of a deep budget (180 seconds out of 270); unused time remains available to the fallback providers. The orchestrated MCP result reports the successful provider and sanitized statuses for any previous attempts before the analysis text. It never includes raw provider errors or credentials.

Run locally

npm install
npm start

Tests

npm test

Add to Codex

codex mcp add opencodeHelper -- node C:\Develop\openCodeHelperMcp\src\index.js

Open a new Codex task after adding the server. Remote OpenCode providers use credentials already stored by OpenCode; the helper does not store an API key. Native Ollama talks to the fixed Mac host above.