Because `aider_message_prompt` detaches, the calling assistant is free the moment the edit starts and can poll `aider_check_progress` when it wants — which is what makes several edits across several directories possible at once. The safety story rests on the whitelist: nothing outside the globs you pass is reachable, and the default is to deny. If you point it at a local OpenAI-compatible endpoint, set parallel requests to 2 or the chat and the background run will wait on each other.
A stdio server that hands coding work to `aider` and returns immediately. The edit runs as a detached background process; the server writes an `.aider.mcp.details.json` with the process ID and start time, and gives the assistant tools to check whether it is still running and what the chat history says. Basic git and file tools come along so the model can look around between checks.
- `aider_message_prompt` starts `aider` in the background with a message prompt for a given directory
- `aider_check_progress` reads the chat history and the background process status
- `aider_check_last_prompt` returns the original prompt of the last run
- `aider_check_git_status` and `aider_check_git_log` report working-tree state and recent commits
- `aider_checkout_git_branch`, `aider_create_git_stash` and `aider_git_revert` switch branches, clear the directory and undo a commit by hash
- `aider_list_files` and `aider_read_file_contents` browse the project
- `aider_setup_config_yaml` and `aider_read_config_yaml` write and read `.aider.conf.yml`
- `aider_mcp_check_whitelist` reports which glob paths this server is allowed to touch
`node`, `aider` and `git` must all be on the shell path. Run it as `npx -y mcp-aider-executor` (package `mcp-aider-executor`, version 1.1.0) and pass at least one `--whitelist` glob — without one, every operation is denied. Model and endpoint come from environment variables such as `AIDER_MODEL`, `OPENAI_API_BASE` and `OPENAI_API_KEY`; the server deliberately cannot write API keys into the config YAML. Flags let you drop the git or file tools, or block only the git tools that rewrite history.
One command plus a key — npx -y mcp-aider-executor, then supply credentials
