Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/panyam/mcpkit/example-newgit clone --depth 1 https://github.com/panyam/mcpkitWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.01837 |
| Opus 5 | $0.00000 | $0.00919 |
| Sonnet 5 | $0.00000 | $0.00367 |
| Haiku 4.5 | $0.00000 | $0.00184 |
Grade A, and why
example-new scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 60 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Scaffold a new mcpkit example matching the conventions in examples/CONVENTIONS.md.
Args
$1— example name (required, kebab-case, e.g.progress-reports). Used as both the directory name and the demokitDir(...)value.--ui— optional flag. Scaffold an MCP-Apps-style example (HTML asset + iframe bridge + no walkthrough.go) instead of the default scripted-walkthrough shape.
If $1 is missing, ask the user for one before doing anything else.
Steps
-
Read
examples/CONVENTIONS.mdbefore generating anything. It is the source of truth — if it has changed since this skill was written, follow the doc, not this file. If anything below contradicts CONVENTIONS.md, CONVENTIONS.md wins. -
Confirm the destination:
- Path:
examples/<name>/(orexamples/events/<name>/if the user says it's an events example — ask if ambiguous). - Refuse if the directory already exists. Suggest
/example-audit <name>instead.
- Path:
-
Ask the user three questions (one shot, not back-and-forth):
- One-paragraph description of what the example demonstrates (goes into
demokit.Description(...)and the README intro). - List of MCP tools the example will register (names + one-line each). If UI, also which ones ship apps.
- Whether the example needs static fixtures (
testdata/) or live event injection (/injectPOST endpoint) — see CONVENTIONS.md §3 "Fixtures." Skip for UI examples.
- One-paragraph description of what the example demonstrates (goes into
-
Generate files matching the layout in CONVENTIONS.md §1:
Non-UI (default):
main.go— dual-mode dispatcher +serve()usingcommon.MCPServerOptions(*addr, "[mcp] ")for the listen + canonical logger middleware (single-line replacement for the older 12-line block; see CONVENTIONS.md §2),srv.ListenAndServe(server.WithStreamableHTTP(true)),demokit.FilterArgs(os.Args[1:], demokit.BoolFlag("--serve"), demokit.ValueFlag("--url"))(add moreValueFlag(...)for example-specific flags). Append example-specific options (server.WithListTTL,server.WithExtension, etc.) onto the slice returned byMCPServerOptions. If the example needs side endpoints (e.g./inject), wire them viaserver.WithMux(...)— never hand-roll anhttp.Server{}. Add theexamples/commondependency togo.mod(require github.com/panyam/mcpkit/examples/common ...+replace ... => ../common).walkthrough.go—runDemo()skeleton from CONVENTIONS.md §3. Pre-fill: title,Dir("<name>"), the description from step 3, two actors (Host / Server), aSetupsection pointing tojust serve, one placeholderStep()per tool with// TODOmarkers in theRun()body for the user to fill in, the closing "Where to look in the code"Section(), andcommon.SetupRenderer(demo)+demo.Execute(). Usecommon.ServerURL()(no args) as the default endpoint — honors--url,$MCPKIT_SERVER_URL, then falls back to:8080. Error-path steps usecommon.PrintRPCError(err, wantReason); passwantReason=""unless asserting a specific spec-defined reason.README.md— Quick Start (just serve/just demo), What it demonstrates (mirrors the step list), Architecture placeholder (Mermaid block stub if the topology is non-trivial — leave blank otherwise), Where to look in the code (mirrors walkthrough.go).justfile— exactly the four baseline recipes (demo,serve,readme,build) with doc comments above each recipe anddefault: demo. No example-specific extras at scaffold time — the user adds those after.Makefile— the make twin of the justfile during the transition: the same four baseline targets (demo,serve,readme,build) with## help-textcomments,.PHONYline,.DEFAULT_GOAL := demo.go.mod— module namegithub.com/panyam/mcpkit/examples/<name>(or.../examples/events/<name>), Go 1.23+, dependencies ongithub.com/panyam/mcpkit/{core,server,client}andgithub.com/panyam/demokitat the version currently used byexamples/file-inputs/go.mod. Add a localreplace github.com/panyam/mcpkit => ../..directive (relative path from the new example).testdata/— only if the user said static fixtures in step 3. Empty directory with a.gitkeepis fine; user adds the actual files.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 60 lines · 0 tokens per session scan A 9f9bcad193fc
example-new is a command published in the GitHub repository panyam/mcpkit (5 stars, last pushed 2d ago), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 1,837 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
checklist
Generate a custom checklist for the current feature based on user requirements.
clarify
Identify underspecified areas in the current feature spec by asking up to 5 highly targeted clarification questions and encoding answers back into the spec.
specify
Create or update the feature specification from a natural language feature description.
analyze
Perform a non-destructive cross-artifact consistency and quality analysis across spec.md, plan.md, and tasks.md after task generation.
converge
Assess the current codebase against the feature's spec, plan, and tasks, then append any remaining unbuilt work as new tasks to tasks.md so implement can complete it.
implement
Execute the implementation plan by processing and executing all tasks defined in tasks.md.