Borrowing it
Nothing to install: this file belongs to activeing123/mcptoon. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/activeing123/mcptoon/main/AGENTS.mdgit clone --depth 1 https://github.com/activeing123/mcptoonWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/activeing123/mcptoon/agents-md)<a href="https://agentmods.dev/instructions/activeing123/mcptoon/agents-md"><img src="https://agentmods.dev/badge/instructions/activeing123/mcptoon/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/activeing123/mcptoon/agents-md"><img src="https://agentmods.dev/badge/instructions/activeing123/mcptoon/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.04636 | $0.04636 |
| Opus 5.5 | $0.01854 | $0.01854 |
| Sonnet 5.5 | $0.00927 | $0.00927 |
| Haiku 4.5 | $0.00464 | $0.00464 |
Grade A, and why
mcptoon AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 217 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md — rules for AI agents working on mcptoon
Any AI agent (Codex, Claude Code, Cursor, DSH, ...) writing code, docs, or cutting releases in this repo follows the rules on this page. They exist because mcptoon is now carried by external automation: numtide/llm-agents.nix packages this project and an official bot auto-bumps it on every PyPI release. A careless release breaks that channel; these rules keep it clean. Human contributors: see CONTRIBUTING.md.
Hard rules
- Zero dependencies, always. The
dependenciesfield inpyproject.tomlstays empty. Standard library only. CI enforces this viascripts/check_zero_deps.py— treat a red zero-deps job as a broken build, not a suggestion. - Tests gate every change. New behavior ships with tests in
tests/. Runpython -m pytest tests/and paste the real green output before claiming done. - Windows is a first-class target. Anything touching paths, subprocess, or npx must work on Windows; the CI matrix runs it on every PR.
- Conventional Commits for every commit (
feat:,fix:,docs:,test:,chore:).
Release discipline
A release is complete only when all five land together:
- version bumped in
pyproject.toml CHANGELOG.mdentry written for the new version- full test suite green
- git tag
vX.Y.Zpushed - PyPI publish green (
.github/workflows/publish.yml)
The numtide bot turns PyPI releases into Nix bump PRs automatically. A version that exists on main but not on PyPI (or the reverse) leaves a broken bump in that channel. Breaking changes must land as deprecation warnings one minor version before removal.
Release notes are in English (added 2026-10-04)
The GitHub Release title and body are English — always. The body is the CHANGELOG.md
block for that version, verbatim; the title is vX.Y.Z — <short English summary>. Do not
paste a commit subject into the title, and do not hand-write a translated body.
Why this is a rule and not a preference: the Release is a global surface. The numtide
packaging bot and its maintainers, the PyPI project page (which renders this body), the MCP
Registry, Glama's reviewers and every upstream PR author read it. The Chinese-facing surface
already exists and is README.zh-CN.md. Measured drift this rule prevents: v0.8.12 shipped
with a Chinese title (the release: commit subject, pasted into name) and v0.8.11 with a
fully Chinese body that was never in CHANGELOG.md at all — 2 of 47 releases, both fixed
2026-10-04. CHANGELOG.md itself has stayed 0.0% CJK throughout, so following it is enough
to stay English; the failure mode is bypassing it.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago Changed · +1 lines · +570 tokens per session 5d10b20ab30a
- 14d ago Changed · +1 lines · +107 tokens per session 932579a49c57
- 19d ago Changed · +11 lines · +219 tokens per session 6cf28f19716d
- 25d ago Changed · +31 lines · +459 tokens per session 8001fe04b84c
- 1mo ago Changed · +15 lines · +267 tokens per session 3b11ce7a55fe
- 1mo ago Changed · +26 lines · +546 tokens per session ecd90111fdaa
- 1mo ago Changed · +38 lines · +843 tokens per session 9034423f9599
- 1mo ago Changed · +1 lines · +32 tokens per session c79a896428cb
- 1mo ago Changed · +1 lines · +31 tokens per session 3f8cce0889df
- 1mo ago First seen · 92 lines · 1,562 tokens per session scan A 44242261a715
mcptoon AGENTS.md is an instructions file published in the GitHub repository activeing123/mcptoon (422 stars, last pushed 2d ago), licensed Apache-2.0. It adds 4,636 tokens to every session, about $0.0185 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-06.
mcptoon AGENTS.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| mcptoon AGENTS.mdactiveing123/mcptoon | Instructions file | 422 | 2d ago | Apache-2.0 | A | 4,636 | Codex, OpenCode |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | today | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | today | MIT | A | 4,680 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 5,516 | GitHub Copilot |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 3,093 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 274k | 2d ago | MIT | A | 4,313 | Codex, OpenCode |