Description

This MCP server provides Google Gemini 2.5 Pro integration as a development partner for Claude, enabling extended reasoning, code analysis, and collaborative problem-solving through a 1M token context window. Built by Fahad Gilani at Beehive Innovations using Python with the Google GenAI SDK, it offers five specialized tools: think_deeper for extended reasoning with enhanced thinking models, review_code for professional code reviews with severity prioritization, debug_issue for systematic root cause analysis, analyze for file and directory exploration, and chat for collaborative brainstorming. The implementation features automatic directory expansion with intelligent file filtering, dynamic context requests where Gemini can ask Claude for additional files mid-analysis, configurable thinking modes from minimal to maximum reasoning depth, and standardized JSON responses for seamless integration, making it valuable for architectural decision validation, large codebase analysis beyond Claude's context limits, complex debugging workflows, and collaborative development where multiple AI perspectives enhance problem-solving.

Installation 

git clone https://github.com/beehiveinnovations/pal-mcp-server

Claude Desktop Configuration

Add this configuration to your Claude Desktop config file to enable this MCP server:

Config file location: ~/Library/Application Support/Claude/claude_desktop_config.json

Config file location: %APPDATA%\Claude\claude_desktop_config.json

Config file location: ~/.config/Claude/claude_desktop_config.json

claude_desktop_config.json 
{
  "mcpServers": {
    "zen": {
      "command": "node",
      "args": [
        "path/to/server.js"
      ]
    }
  }
}

Security Audit

50 /100
🟡 Moderate Audited 2026-05-22 View methodology →
Dimension Result Details
📡 Transport Security Stdio (Local) Stdio is local-only process communication. SSE/HTTP exposes network attack surface.
🔐 Authentication None No authentication — any client can connect.
⏱️ Token Lifecycle N/A Short-lived tokens limit exposure window if compromised. Long-lived tokens require secure rotation policies.
🛡️ Input Handling Mixed Parameterized inputs prevent injection attacks. Shell strings enable command injection vectors.
🌍 Data Residency Local Only Local-only data never leaves your machine. Cloud residency means data flows through third-party APIs.
Auditor Notes: Multi-tool MCP server. Stdio transport. No auth. Some tools use shell commands (mixed input handling). Data stays local.