Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/fouradata/mcp/agents-mdgit clone --depth 1 https://github.com/fouradata/mcpWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00648 | $0.00648 |
| Opus 5 | $0.00324 | $0.00324 |
| Sonnet 5 | $0.00130 | $0.00130 |
| Haiku 4.5 | $0.00065 | $0.00065 |
Grade A, and why
mcp AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 55 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md
Agent-facing reference for the FourA MCP server (@fouradata/mcp). If you are an AI agent
deciding whether and how to use this server, read this.
What this server does
Fetches arbitrary public web pages for you: static pages, JSON APIs, JavaScript-rendered
SPAs, and anti-bot-protected targets. It wraps the FourA web scraping API. All tools are
read-only (readOnlyHint: true) and reach the open web (openWorldHint: true).
Tools (four)
foura_auto- the default. Give it aurl; it returns the content and picks the fetch method for you. Use this first unless you need explicit control. Optionalvalidate.data.acceptlets it tell a real page from a challenge page.foura_single- one fast HTTP request. Static pages and JSON APIs. A full browser header set is sent by default (unblocker); setbrowser,os, orversionwhen a target refuses the default Chrome.foura_proxy- the same request through a rotating proxy pool with retry. Use when a direct request is blocked; difficult protected targets may needmaxTries: 25-30. The innerrequesttakes the same browser-profile fields.foura_browser- a real browser session; JavaScript runs and the DOM finishes rendering. Use for SPAs and lazy-loaded content.
The primitives compose: foura_proxy returns a base36 proxy ID; pass it into
foura_single.proxy or foura_browser.proxy to reuse the same exit.
Prompts (six)
smart_fetch, scrape_product_page, extract_article, monitor_pricing,
check_endpoint_health, bulk_fetch_urls. Each expands into a templated task that orchestrates
the tools for you.
Errors
Every error carries a structuredContent envelope with {service, code, error} and, where
relevant, status / retryAfter. Read code for retry logic: rate_limited, at_capacity,
service_unavailable, upstream_error are retry-safe (respect retryAfter); auth_failed,
bad_request, not_found, ssrf_blocked are not. Full list: https://foura.ai/docs/mcp/errors.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 55 lines · 648 tokens per session scan A 9c88d3698144
mcp AGENTS.md is an instructions file published in the GitHub repository fouradata/mcp (4 stars, last pushed 12d ago), licensed MIT. It adds 648 tokens to every session, about $0.0032 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
BraveMCP CLAUDE.md
Claude Code instructions for glatinone/BraveMCP, covering claude.md — bravemcp orchestration instructions, project overview, build & run commands, mcp server (/mcp-server) and claude desktop integration.
helm CLAUDE.md
Claude Code instructions for tylergibbs1/helm, covering helm — semantic browser automation mcp server, project structure, running, mcp config and key design decisions.
qutebrowser-mcp CLAUDE.md
Claude Code instructions for afreakk/qutebrowser-mcp, covering claude.md, build commands, architecture, communication flow and key components.
OneJS AGENTS.md
Instructions for Singtaa/OneJS, covering onejs v3: agent guide, requirements, install, project setup and build and live reload.
AutomatiQ AGENTS.md
Instructions for StoneSteel27/AutomatiQ, covering agent guidelines, background context, our partner: nodemaven, package structure and important commands.
ketch CLAUDE.md
Instructions for 1broseidon/ketch, covering ketch, architecture, build & test, output format and output flags (all commands).