raindrop-mcp mcp-dev.instructions.md

Coding guidance for building MCP servers—programs that let AI tools use external services through a shared protocol. It covers server structure, input checks, errors, manifests, and tests.

In plain words
What is it for?
Use it when designing or implementing MCP tools, validating requests and responses, handling errors, exposing server capabilities, or writing Vitest tests.
Why use it?
It gives developers consistent patterns for making servers compatible, testable, and easier to extend. This reduces guesswork around communication methods and tool behavior.

Instructions file for GitHub Copilot

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/adeze/raindrop-mcp/mcp-dev
Clone the repo
git clone --depth 1 https://github.com/adeze/raindrop-mcp

Made for: GitHub Copilot.

Per session 696 This file is loaded in full into every session.
When invoked 696 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00696 $0.00696
Opus 5 $0.00348 $0.00348
Sonnet 5 $0.00139 $0.00139
Haiku 4.5 $0.00070 $0.00070

Measured 2d ago against content hash 7f7ed3f363e5, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

raindrop-mcp mcp-dev.instructions.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

Copies of this mod

1 near-identical copy found in the catalogue:

.github/instructions/mcp-dev.instructions.md · 40 lines

How it starts

The opening of the file, as written. The whole thing — 40 lines — stays where its author put it; the contents beside it link to each section on GitHub.

GitHub Copilot Instructions for MCP Server Development

MCP Server Design Patterns

  • Protocol Compliance: All server logic must strictly follow the Model Context Protocol (MCP) specification. Reference MCP docs and LLMs integration guide.
  • Transport Abstraction: Implement transport-agnostic logic. Use interfaces and dependency injection for HTTP, STDIO, or custom transports.
  • Service Layer: Encapsulate business logic in service classes. Each service should be stateless, testable, and expose clear async methods for protocol operations.
  • Schema Validation: Use zod for all input/output validation. Define schemas for requests, responses, and errors. Validate at the transport boundary.
  • Error Handling: Centralize error handling. Return MCP-compliant error objects with descriptive messages and codes.
  • Manifest & Tooling: Expose a manifest endpoint/tool for host integration. Manifest must declare all supported operations, schemas, and metadata.
  • Extensibility: Design for easy addition of new tools/operations. Use a registry or factory pattern for tool handlers.
  • Testing: Use Vitest for all tests. Place tests in tests/ and cover protocol, service, and transport logic.
  • Logging: Use a configurable logger. Avoid console.log for STDIO servers; use structured logging and log levels.
  • Async/Await: All operations must be async.
  • Type Safety: Use TypeScript interfaces and types for all protocol objects.
  • Configuration: Use environment variables and config files for secrets, endpoints, and options.
  • Documentation: Document all public classes, methods, and schemas.

Tool Implementation Patterns

  • Tool Registration: Register each tool in a central registry or manifest. Use a factory or mapping to resolve tool handlers by name.
  • Tool Handler Structure: Implement each tool as a class or function with a clear async run or execute method. Accept validated input, return structured output.
  • Schema-Driven: Define input/output schemas with zod. Validate all tool calls at runtime.
  • Error Propagation: Catch errors in tool handlers and return MCP-compliant error objects.
  • Resource Access: For resource tools (e.g., collections, bookmarks), encapsulate resource logic in dedicated service classes. Use dependency injection for external APIs.
  • Declarative Manifest: Ensure all tools and resources are declared in the manifest with their schemas, descriptions, and metadata.
  • Isolation: Tools should be stateless and not share mutable state. Use context objects for per-request data.
  • Extensibility: New tools/resources should be easy to add by implementing a handler and updating the manifest/registry.

Read the full file on GitHub · 40 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 40 lines · 696 tokens per session scan A 7f7ed3f363e5

Subscribe to this mod's changes

raindrop-mcp mcp-dev.instructions.md is an instructions file published in the GitHub repository adeze/raindrop-mcp (180 stars, last pushed 1mo ago), licensed MIT. It adds 696 tokens to every session, about $0.0035 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.