ask-oracle-mcp: Instructions file for Codex

AGENTS.md

ask-oracle-mcp AGENTS.md is an instructions file for Codex, OpenCode from doberkofler/ask-oracle-mcp. It costs 1,476 tokens per session, scanned A, original, MIT.

Repository instructions for working on ask-oracle-mcp, a local service that lets an AI agent inspect Oracle databases and run SQL. They describe its project structure, commands, environment, and safety rules.

In plain words
What is it for?
Guiding work on the server, Oracle connection pool, schema inspection, SQL write permissions, client example, and model integration.
Why use it?
They give coding agents the project-specific information needed to make changes without violating the service’s database and architecture rules.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md.

This is doberkofler/ask-oracle-mcp's own configuration. It tells Codex and OpenCode how to work on ask-oracle-mcp itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything ask-oracle-mcp configures →

Reuse

Borrowing it

Nothing to install: this file belongs to doberkofler/ask-oracle-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/doberkofler/ask-oracle-mcp/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/doberkofler/ask-oracle-mcp

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for ask-oracle-mcp AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/doberkofler/ask-oracle-mcp/agents-md/github.svg)](https://agentmods.dev/instructions/doberkofler/ask-oracle-mcp/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/doberkofler/ask-oracle-mcp/agents-md"><img src="https://agentmods.dev/badge/instructions/doberkofler/ask-oracle-mcp/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for ask-oracle-mcp AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/doberkofler/ask-oracle-mcp/agents-md"><img src="https://agentmods.dev/badge/instructions/doberkofler/ask-oracle-mcp/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 1,476 This file is loaded in full into every session.
When invoked 1,476 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01476 $0.01476
Opus 5 $0.00738 $0.00738
Sonnet 5 $0.00295 $0.00295
Haiku 4.5 $0.00148 $0.00148

Measured 9d ago against content hash ed379bf61e03, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

ask-oracle-mcp AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 115 lines

How it starts

The opening of the file, as written. The whole thing — 115 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Agent Guidelines: ask-oracle-mcp

Instructions for autonomous agents working in this repository.

Project Overview

ask-oracle-mcp is a Node.js MCP server that exposes Oracle schema introspection and SQL execution over stdio. It contains two executable entry points:

  • src/server.ts: MCP server with list_tables, describe_table, and run_sql tools.
  • src/client-example.ts: Terminal I/O and MCP transport for the demo host.

The server must remain independent of any LLM. Natural-language translation belongs in the host. Oracle access uses node-oracledb thin mode and a module-level connection pool.

Architecture

  • src/server.ts: MCP registration, read-only SQL guard, lifecycle, and stdio transport.
  • src/server/db.ts: Oracle pool and query execution.
  • src/server/schema.ts: Cheap table listing and one-table ALL_TAB_COLUMNS introspection.
  • src/server/sql-policy.ts: Dual server/caller write authorization.
  • src/client-example.ts: CLI options, transport, terminal input, and output.
  • src/client/agent.ts: Bounded pi-ai tool-calling loop and host-side write policy.
  • src/client/llm.ts: pi-ai provider/model resolution plus keyless Ollama registration.
  • src/client/credential-store.ts: Persistent pi-ai OAuth/API-key credential storage.
  • src/client/mcp-content.ts: Runtime validation of MCP content.
  • src/client/repl.ts: Repeated Inquirer question loop and per-question recovery.
  • src/client/sql.ts: Generated SQL normalization and read-only classification.
  • src/env.ts: Required environment-variable validation.
  • vite.config.ts: Multi-entry SSR build producing dist/server.js and dist/client-example.js.

Environment

The server and demo resolve Oracle configuration from CLI options, environment variables, or persistent configuration:

  • ORACLE_USER
  • ORACLE_PASSWORD
  • ORACLE_SERVER

CLI values override environment variables, which override saved Oracle configuration. Supplied Oracle CLI values are persisted. Persistent data defaults to ${XDG_CONFIG_HOME:-~/.config}/ask-oracle-mcp and can be relocated with ASK_ORACLE_CONFIG_DIR. The demo uses LLM_PROVIDER (default ollama) and LLM_MODEL. OLLAMA_MODEL and OPENAI_MODEL are supported provider-specific model fallbacks. OLLAMA_HOST is optional and defaults to http://localhost:11434; LLM_AUTH_FILE overrides the persistent LLM credential path.

Read the full file on GitHub · 115 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 115 lines · 1,476 tokens per session scan A ed379bf61e03

Subscribe to this mod's changes

ask-oracle-mcp AGENTS.md is an instructions file published in the GitHub repository doberkofler/ask-oracle-mcp (0 stars, last pushed 9d ago), licensed MIT. It adds 1,476 tokens to every session, about $0.0074 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other instructions, from other repositories

next.js AGENTS.md

AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,296 tokens

codex AGENTS.md

AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.

openai/codex · 5,153 tokens

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 6,785 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, applying the notice (cutover) and fallback chain (never fail the build).

microsoft/vscode · 5,001 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain · 4,469 tokens

deepseek-harness AGENTS.md

AGENTS.md instructions for deepseek-ai/deepseek-harness, covering agents.md, pre-stable apis and released session data, repository layout, commands and host sandbox failures.

deepseek-ai/deepseek-harness · 3,735 tokens