io.github.Lykhoyda/ask-grok
Consult Grok through xAI's metered API with exact model selection and no fallback
- Created
- 9 months ago
- Last commit
- last week
- Latest release
- @ask-llm/mcp@1.2.13 weeks ago
Security Findings
Tools out of server's stated scope3×
MaliciousScannerask-llm: Server is described narrowly as consulting Grok via xAI's metered API, but this tool dispatches prompts to Codex, Claude, Antigravity, Ollama, and Gemini CLIs — providers entirely outside the stated Grok/xAI domain.
ask-cursor-agent: Server's stated purpose is Grok consultation via xAI's API, but this tool shells out to the Cursor Agent CLI (`agent --print --mode ask`), a different product and provider surface entirely.
multi-llm: Server states a narrow Grok/xAI consultation purpose, but this tool fans a prompt out to multiple non-Grok providers (Codex, Claude, Antigravity, Ollama, Gemini) in parallel.
Missing permission declaration
SuspiciousScannerServer declares no permissions across 4 tools
Tools
4 tools exposed by this MCP server
ask-cursor-agent
Use Cursor Agent as a model-neutral, read-only consultation harness. The provider and exact Cursor catalog model ID are separate required fields. Runs `agent --print --mode ask` without --force/--trust, never changes spend settings, and never falls back to another model or provider.
ask-llm
Send a prompt to an LLM provider (Codex, Claude, Grok, Antigravity, Ollama, Gemini). Specify which provider to use. Provider-specific fallback behavior is reported truthfully; Grok never substitutes or falls back from the requested model. Returns both human-readable text and a structured response (provider, model, sessionId, usage) via outputSchema.
multi-llm
Dispatch the same prompt to multiple LLM providers in parallel and return all responses in one structured payload. Use when you want to compare answers across Codex, Claude, Grok, Antigravity, Ollama, and Gemini, or when you want a multi-provider sanity check on a question. Returns per-provider success/failure, response text, model, sessionId, and token usage. Each call is fresh — no session continuity (use ask-llm for individual session-bearing calls).
ping
Test connectivity with the MCP server
Versions
2- 0.3.0Scanned Nov 2, 2026, 04:51 PMHigh
- 0.1.5Scanned Sep 20, 2026, 09:10 PMNone known