What is mcp-arr-lite AGENTS.md?

A repository guide containing the project’s coding rules, tools, commands, tests, and architecture notes for mcp-arr-lite.

Use it when working on this repository to choose the right development, build, type-checking, and test commands and to follow its module and file conventions.

It gives a coding agent the project-specific instructions needed to build, test, and edit the repository correctly. It also explains terms such as Node.js, TypeScript, and Vitest through the commands it documents.

How Cuti27/mcp-arr-lite configures Codex and OpenCode

Reuse

Borrowing it

Nothing to install: this file belongs to Cuti27/mcp-arr-lite. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/Cuti27/mcp-arr-lite/main/AGENTS.md

Clone the repo

git clone --depth 1 https://github.com/Cuti27/mcp-arr-lite

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/instructions/cuti27/mcp-arr-lite/agents-md/github.svg)](https://agentmods.dev/instructions/cuti27/mcp-arr-lite/agents-md)

Your own site

<a href="https://agentmods.dev/instructions/cuti27/mcp-arr-lite/agents-md"><img src="https://agentmods.dev/badge/instructions/cuti27/mcp-arr-lite/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/instructions/cuti27/mcp-arr-lite/agents-md"><img src="https://agentmods.dev/badge/instructions/cuti27/mcp-arr-lite/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 915 This file is loaded in full into every session.

When invoked 915 The same file — it is already loaded in full.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00915	$0.00915
Opus 5.5	$0.00366	$0.00366
Sonnet 5.5	$0.00183	$0.00183
Haiku 4.5	$0.00092	$0.00092

Measured 2mo ago against content hash addce063bdb1, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

mcp-arr-lite AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 44 lines

How it starts

The opening of the file, as written. The whole thing — 44 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

Compact guide for OpenCode sessions working in this repo.

Toolchain

Node >= 20, ES modules ("type": "module"), module/moduleResolution: NodeNext. Use .js extensions in relative imports (required at runtime under NodeNext).
No ESLint/Prettier — npm run lint and npm run typecheck are both tsc --noEmit. Do not look for a separate linter config.
npm run build compiles src/ -> dist/ (rootDir: src, outDir: dist); tests/ is excluded from tsconfig.json but included in tsconfig.test.json.

Commands

Dev: npm run dev (tsx watch on src/index.ts).
Build: npm run build; run built: npm start (stdio) or npm run start:stdio / npm run start:http.
Tests: npm test (vitest run). Coverage: npm run test:coverage.
Single test: npx vitest run tests/tools.test.ts or npx vitest run -t "pattern".
Run both npm run typecheck and npm run typecheck:tests before pushing.

Tests

vitest.config.ts sets globals: true and environment: 'node'; tests live in tests/**/*.test.ts.
tests/setup.ts stubs env vars (RADARR_URL, RADARR_API_KEY, SONARR_URL, SONARR_API_KEY, MCP_TRANSPORT=http, LOG_LEVEL=error) for the whole suite via beforeAll. Don't assume a real Radarr/Sonarr is reachable.
Tests mock ArrClient / global fetch — no integration services required.

Architecture

Entry: src/index.ts (bin dist/index.js). Loads config, builds ArrClient instances for configured apps, creates the MCP McpServer, then selects transport from MCP_TRANSPORT.
src/config.ts owns all env loading and validation; validateHttpConfig requires MCP_AUTH_TOKEN when MCP_TRANSPORT=http. Radarr/Sonarr config is optional.
src/server.ts registers tools from buildTools() into the MCP McpServer and wraps handlers with safe-error normalization.
Transport: src/transport/stdio.ts and src/transport/http.ts. HTTP transport adds bearer auth, rate limiting (60 req/min/IP), and 1 MB body limit; defaults HOST=127.0.0.1.
Tools live in src/tools/handlers/ and are aggregated in src/tools/registry.ts (buildTools()). Adding a tool = create handler file + append it in buildTools(); server.ts picks the rest up automatically.
src/arr/client.ts is the only Arr API surface (X-Api-Key auth); src/arr/radarr.ts / src/arr/sonarr.ts wrap resource-specific calls and default-resolution (quality profile, root folder); src/arr/indexer.ts has the preferred-indexer logic (lowest numeric priority among enabled).
Search tools default to the preferred indexer; pass a specific indexer id to force an alternative. Read-only tools (*_lookup, list_indexers) are safe to auto-approve; mutations (*_add, *_search_releases, *_grab) should require HITL.

Read the full file on GitHub · 44 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

2mo ago First seen · 44 lines · 915 tokens per session scan A addce063bdb1

Subscribe to this mod's changes

mcp-arr-lite AGENTS.md is an instructions file published in the GitHub repository Cuti27/mcp-arr-lite (0 stars, last pushed 2mo ago), licensed MIT. It adds 915 tokens to every session, about $0.0037 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

mcp-arr-lite AGENTS.md next to 6 instructions from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
mcp-arr-lite AGENTS.mdCuti27/mcp-arr-lite	Instructions file	0	2mo ago	MIT	A	915	Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	9,719	GitHub Copilot
next.js AGENTS.mdvercel/next.js	Instructions file	143k	yesterday	MIT	A	7,461	Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchain	Instructions file	149k	yesterday	MIT	A	4,680	Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	5,516	GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	3,093	GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness	Instructions file	274k	2d ago	MIT	A	4,313	Codex, OpenCode

mcp-arr-lite: Instructions file for Codex