mcp-server: Instructions file for Codex

AGENTS.md

mcp-server AGENTS.md is an instructions file for Codex, OpenCode from ALCops/mcp-server. It costs 5,708 tokens per session, scanned A, original, MIT.

A project instruction file for the ALCops MCP server, a service that lets AI assistants use ALCops code analyzers. It records .NET build, test, packaging, and dependency instructions.

In plain words
What is it for?
Use it when building, testing, restoring dependencies for, or packaging the ALCops MCP server as a .NET global tool.
Why use it?
It gives an agent the repository-specific commands and setup details needed to work on the project correctly.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md.

This is ALCops/mcp-server's own configuration. It tells Codex and OpenCode how to work on mcp-server itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything mcp-server configures →

Reuse

Borrowing it

Nothing to install: this file belongs to ALCops/mcp-server. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/ALCops/mcp-server/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/ALCops/mcp-server

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for mcp-server AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/alcops/mcp-server/agents-md/github.svg)](https://agentmods.dev/instructions/alcops/mcp-server/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/alcops/mcp-server/agents-md"><img src="https://agentmods.dev/badge/instructions/alcops/mcp-server/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for mcp-server AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/alcops/mcp-server/agents-md"><img src="https://agentmods.dev/badge/instructions/alcops/mcp-server/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 5,708 This file is loaded in full into every session.
When invoked 5,708 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.05708 $0.05708
Opus 5.5 $0.02283 $0.02283
Sonnet 5.5 $0.01142 $0.01142
Haiku 4.5 $0.00571 $0.00571

Measured 5d ago against content hash 72a05cff2c36, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

mcp-server AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 100 lines

How it starts

The opening of the file, as written. The whole thing — 100 lines — stays where its author put it; the contents beside it link to each section on GitHub.

ALCops MCP Server — Agent Instructions

Build

# Build (BC DevTools come from restore, see below)
dotnet build --configuration Release

# Run tests
dotnet test --configuration Release

# Pack as .NET global tool
dotnet pack src/ALCops.Mcp/ALCops.Mcp.csproj --configuration Release --output ./artifacts

There are no linters in this repository.

BC DevTools dependency

The project compiles against proprietary Microsoft BC Development Tools DLLs (Microsoft.Dynamics.Nav.CodeAnalysis, .Workspaces, .Analyzers.Common).

A plain PackageReference is impossible: as of 17.0 the Microsoft.Dynamics.BusinessCentral.Development.Tools package is DotnetTool + Template only, with all payload under tools/<tfm>/any/, and NuGet rejects referencing a DotnetTool package. Instead both csproj files declare a <PackageDownload> on a pinned version — which restores the nupkg into the global packages folder without referencing it — and point three <Reference> items at $(NuGetPackageRoot)…/tools/$(BcToolsTfm)/any/.

  • $(BcDevToolsVersion) — the compile floor, deliberately the lowest supported stable release. Compiling against the oldest SDK and running against newer ones is what makes forward compatibility hold; CI overrides this property to run its version matrix.
  • $(BcToolsTfm) — net10.0 by default, matching our own TFM (18.x ships both net8.0 and net10.0 payloads; the 17.x line shipped net8.0 only).
  • src sets <Private>false</Private>, so the proprietary DLLs never enter the build output and therefore never enter the published package. This is the redistribution guard.
  • tests sets <Private>true</Private> on purpose: the CI compatibility matrix hot-swaps those three DLLs in the prebuilt test binary to run the same tests against every supported SDK version.

At runtime BcToolsLocator finds the DLLs in the user's own toolchain. The DevTools themselves are never downloaded at runtime; only ALCops' own analyzers are provisioned from NuGet (see below).

Read the full file on GitHub · 100 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago Changed · +2 lines · +860 tokens per session 72a05cff2c36
  2. 1mo ago Changed · +15 lines · +1,194 tokens per session b9ebfe7c7569
  3. 1mo ago Changed · +2 lines · +679 tokens per session 8548a0ab6829
  4. 1mo ago Changed · +194 tokens per session b19e4d0b11d5
  5. 1mo ago Changed · +2 lines · +187 tokens per session 9ace5ad4a76c
  6. 1mo ago Changed · +229 tokens per session b29b041e6113
  7. 1mo ago Changed · +4 lines · +436 tokens per session 4c984cebd80a
  8. 1mo ago First seen · 75 lines · 1,929 tokens per session scan A 3c00f7a9cf08

Subscribe to this mod's changes

mcp-server AGENTS.md is an instructions file published in the GitHub repository ALCops/mcp-server (8 stars, last pushed 5d ago), licensed MIT. It adds 5,708 tokens to every session, about $0.0228 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-13.

Related

Other instructions, from other repositories

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 9,719 tokens

next.js AGENTS.md

AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,461 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).

microsoft/vscode · 5,516 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain · 4,680 tokens

vscode copilot-instructions.md

Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).

microsoft/vscode · 3,048 tokens

generative-ai-for-beginners AGENTS.md

AGENTS.md instructions for microsoft/generative-ai-for-beginners, covering agents.md, project overview, setup commands, initial repository setup and clone the repository.

microsoft/generative-ai-for-beginners · 2,850 tokens