mcp-runtime AGENTS.md

An onboarding and development guide for MCP Runtime, a repository related to connecting software tools through the Model Context Protocol. It points contributors to the right task-specific instructions, source files, build and test commands, and release checks.

In plain words
What is it for?
Finding where to work in MCP Runtime, choosing the relevant runbook for a task, building and testing changes, checking quality before pushing, and preparing releases.
Why use it?
It reduces the time spent searching a large codebase for the correct procedure. It also directs agents to focused guidance for cluster setup, permissions, troubleshooting, public deployment, testing, and design reviews.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/agent-hellboy/mcp-runtime/agents-md
Clone the repo
git clone --depth 1 https://github.com/Agent-Hellboy/mcp-runtime

Made for: Codex, OpenCode.

Per session 2,649 This file is loaded in full into every session.
When invoked 2,649 The same file — it is already loaded in full.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.02649 $0.02649
Opus 5 $0.01324 $0.01324
Sonnet 5 $0.00530 $0.00530
Haiku 4.5 $0.00265 $0.00265

Measured 2d ago against content hash 2130df679c85, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

mcp-runtime AGENTS.md scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

Prereqs: Docker, Kind, `kubectl`, `curl`, `jq`, Python 3, Go.
AGENTS.md · 161 lines

How it starts

The opening of the file, as written. The whole thing — 161 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md — developer and AI-agent guide

This file is the onboarding index for the MCP Runtime repo. It complements README.md with where to look, build/CI conventions, and pointers to focused runbooks. Prefer repo source (README, CRDs, v1alpha1 types) over generic Kubernetes or MCP advice.

Operational detail lives in .codex/skills/ (symlinked from .claude/skills). Load the skill that matches your task instead of re-reading long checklists here.

Task Skill
Kind contributor cluster bring-up qa-cluster-bringup
Local URLs, API keys, test logins mcp-runtime-local-dev
Grants, sessions, MCP JSON-RPC mcp-runtime-governance
Cluster failures (401, ingress, registry, pulls) mcp-runtime-troubleshooting
Public domain, TLS, ACME, prod hostnames mcp-runtime-platform-public
Public k3s deploy scripts k3s-public-ops
Real-cluster QA sweeps qa-e2e-operations, qa-e2e-security, qa-e2e-ui, …
Release / ship readiness release-readiness
API / CRD / CLI design & "is this good design?" review design-principles
Codebase navigation graphify (when graphify-out/ exists)

Repository map (where to look)

Area Path Notes
User-facing CLI cmd/mcp-runtime/, internal/cli/root/, internal/cli/<command>/, internal/cli/core/ Cobra routing; setup, status, registry, server, access, …
Agent adapters internal/cli/adapter/, internal/agentadapter/, services/runtime-api/internal/runtimeapi/adapter*.go adapter proxy/stdio use issued sessions; adapter enroll submits a local-key CSR for enterprise mTLS
Operator cmd/operator/, internal/operator/ MCPServer reconciliation, ingress (ingressClass default traefik), gateway
API & CRD types api/v1alpha1/, config/crd/bases/ Source of truth for object shapes
Access and policy pkg/access/, pkg/policy/ Grant/session helpers; gateway policy contract
Control-plane / K8s pkg/controlplane/, pkg/k8sclient/, pkg/kubeworkload/, pkg/manifest/, pkg/metadata/ MCPServer ops, manifests, registry resolution
Sentinel packages pkg/events/, pkg/clickhouse/, pkg/serviceutil/, pkg/sentinel/ Events, analytics, service utilities
Sentinel services services/platform-api, services/runtime-api, services/analytics-api, services/ui, services/ingest, services/processor, services/mcp-gateway, … Separate go.mod where present; Go 1.26 for shared imports
Samples / install YAML examples/workspace-assistant-mcp/, k8s/, config/ Demo server; overlays and CRDs
Team isolation docs/multi-team.md Namespaces, RBAC, ingress watch scope
Deployment targets docs/deployment-targets.md, docs/k3s-on-prem-cluster.md Before distribution-specific runbooks
E2E test/e2e/, test/integration/ Kind script; envtest integration
Agent skills .codex/skills/, .claude/skills../.codex/skills Canonical skills tree

Read the full file on GitHub · 161 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 161 lines · 2,649 tokens per session scan A 2130df679c85

Subscribe to this mod's changes

mcp-runtime AGENTS.md is an instructions file published in the GitHub repository Agent-Hellboy/mcp-runtime (5 stars, last pushed 8d ago), licensed Apache-2.0. It adds 2,649 tokens to every session, about $0.0132 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.