Borrowing it
Nothing to install: this file belongs to otis22/vetmanager-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/otis22/vetmanager-mcp/main/.claude/commands/product-metrics.mdgit clone --depth 1 https://github.com/otis22/vetmanager-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/otis22/vetmanager-mcp/product-metrics)<a href="https://agentmods.dev/commands/otis22/vetmanager-mcp/product-metrics"><img src="https://agentmods.dev/badge/commands/otis22/vetmanager-mcp/product-metrics/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/otis22/vetmanager-mcp/product-metrics"><img src="https://agentmods.dev/badge/commands/otis22/vetmanager-mcp/product-metrics.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00051 | $0.01297 |
| Opus 5 | $0.00026 | $0.00648 |
| Sonnet 5 | $0.00010 | $0.00259 |
| Haiku 4.5 | $0.00005 | $0.00130 |
Grade A, and why
product-metrics scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
ssh "root@${VETMANAGER_MCP_PROD_HOST:?set VETMANAGER_MCP_PROD_HOST}" 'curl -fsS http://127.0.0.1:8000/metrics' | rg '^vetmanager_tool_calls_total' How it starts
The opening of the file, as written. The whole thing — 85 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Product metrics — ad-hoc snapshot
Ты product-metrics reporter для vetmanager-mcp. Задача — позвать скрипт
scripts/product_metrics_report.py на prod через SSH, показать результат
пользователю.
Как
-
Args из user-prompt пробрасываем в команду только из whitelist, чтобы не пропустить шелл-инъекцию в
ssh "...":--top-n=<N>где N — целое, 1..100--format=markdownили--format=jsonЛюбой другой аргумент — отказать пользователю, не передавать в shell. (Stage 116.1:--window-daysфлаг удалён из скрипта; 30-дневное окно hardcoded.)
-
Выполни через Bash:
ssh "root@${VETMANAGER_MCP_PROD_HOST:?set VETMANAGER_MCP_PROD_HOST}" 'cd /opt/vetmanager-mcp && docker compose --profile production exec -T mcp python scripts/product_metrics_report.py {validated_args}'(одинарные кавычки: никакой intermediate shell-эвалюации не нужно)
Таймаут: 30 сек (скрипт должен отработать за < 2 сек на реальной БД).
-
Дополнительно собери top-5 tool-call counters и период их накопления:
- source для counters: production
/metrics, только строкиvetmanager_tool_calls_total{...}. - source для начала периода:
docker compose --profile production ps mcp --format json, полеCreatedAtконтейнераmcp. - конец периода: timestamp генерации основного product metrics отчёта, если он есть
в stdout (
_generated at ... UTC); иначе текущийdate -u. - counters process-local: явно подпиши, что период — с последнего старта/restart
контейнера
mcp, а не 30-дневное окно БД. - агрегируй по tool/endpoint: если
endpointсодержит:tool_name, используй часть после:как имя tool; иначе используй весь endpoint label. Суммируй success/error rows одного tool/endpoint. - выведи ровно top-5 по убыванию
calls; если есть error rows, сохрани их в сумме и не скрывай, что это общий count по всем outcomes.
Удобные команды:
ssh "root@${VETMANAGER_MCP_PROD_HOST:?set VETMANAGER_MCP_PROD_HOST}" 'cd /opt/vetmanager-mcp && docker compose --profile production ps mcp --format json' ssh "root@${VETMANAGER_MCP_PROD_HOST:?set VETMANAGER_MCP_PROD_HOST}" 'curl -fsS http://127.0.0.1:8000/metrics' | rg '^vetmanager_tool_calls_total' - source для counters: production
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 85 lines · 51 tokens per session scan A 8bcb28213da3
product-metrics is a command published in the GitHub repository otis22/vetmanager-mcp (1 stars, last pushed yesterday), licensed MIT. It adds 51 tokens to every session and 1,297 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
compile
Compile a FIBER decision context (world + query) and report the oracle verdict, omission accounting, and certificate digest faithfully.
data-mesh-contract
Create federated data product contracts for mesh architectures with SLAs, governance, and interoperability guarantees (project).
audit-web
A command for requesting a website security assessment through an MCP tool, a way for an agent to call an external service. It requires proof of permission before any network checks.
atrs
Generate Algorithmic Transparency Recording Standard (ATRS) record for AI/algorithmic tools.
fr-rgpd
You are helping an enterprise architect generate a French CNIL Compliance Assessment — the French-specific GDPR layer applied by the CNIL (Commission Nationale de l'Informatique et des Libertés). Run this after /arckit-eu:eu-rgpd to add French obligations that go beyond the EU GDPR baseline.
servicenow
Create comprehensive ServiceNow service design with CMDB, SLAs, incident management, and change control.