Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/getsentry/xcodebuildmcp/claude-mdgit clone --depth 1 https://github.com/getsentry/XcodeBuildMCPWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.01886 | $0.01886 |
| Opus 5 | $0.00943 | $0.00943 |
| Sonnet 5 | $0.00377 | $0.00377 |
| Haiku 4.5 | $0.00189 | $0.00189 |
Grade A, and why
XcodeBuildMCP CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
88% identical to XcodeBuildMCP AGENTS.md — 90 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 101 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Development Rules
Code Quality
- No
anytypes unless absolutely necessary - Check node_modules for external API type definitions instead of guessing
- NEVER use inline imports - no
await import("./foo.js"), noimport("pkg").Typein type positions, no dynamic imports for types. Always use standard top-level imports. - NEVER remove or downgrade code to fix type errors from outdated dependencies; upgrade the dependency instead
- Always ask before removing functionality or code that appears to be intentional
- Do not add fallback behavior by default. If required context, configuration, runtime state, or dependencies are missing, fail loudly and fix the caller/setup instead of silently switching to an alternate path. Add a fallback only when explicitly requested or when it is a documented product requirement.
- Review the complete merge-base diff and trace changed or reused helper contracts, including error and sentinel returns, through callers, consumers, tests, and operational configuration.
- Verify standard quality commands include every changed path and exercise exact entry points and argument variants; validate explicitly when they do not.
- For asynchronous, workflow, or process-boundary changes, enumerate lifecycle states, retries, supersession, and race transitions; test terminal outcomes and missing or optional metadata.
Test Conventions
- Snapshot tests (
*.snapshot.test.ts) must only assert generated tool output against fixtures. Move helper, parser, schema, setup, or behavior assertions to non-snapshot unit/integration tests.
Commands
- NEVER commit unless user asks
GitHub
When reading issues:
- Always read all comments on the issue
Tools
- GitHub CLI for issues/PRs
- MCP
readOnlyHintdescribes whether a tool mutates host/project state such as files, build artifacts, configuration, or external services. Simulator HID/UI actions that only tap, type, press, or gesture inside the simulator may remainreadOnlyHint: true; do not flip them tofalsemerely because app UI state changes. - CLI design note: do not rely on CLI session-default writes. CLI is intentionally deterministic for CI/scripting and should use explicit command arguments as the primary input surface.
- When working on skill sources in
skills/, use theskill-creatorskill workflow. - After modifying any skill source, run
npx skill-check <skill-directory>and address all errors/warnings before handoff. - Before handoff, run the matching manual Warden review for high-risk changes: runtime/CLI/daemon boundaries →
xcodebuildmcp-runtime-boundary-review; test infrastructure or harnesses →xcodebuildmcp-test-boundary-review; tool manifests, schemas, or contracts →xcodebuildmcp-tool-contract-review. Invoke only applicable skills withwarden --skill <name>.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 101 lines · 1,886 tokens per session scan A 429863626970
XcodeBuildMCP CLAUDE.md is an instructions file published in the GitHub repository getsentry/XcodeBuildMCP (6,316 stars, last pushed yesterday), licensed MIT. It adds 1,886 tokens to every session, about $0.0094 per session on Opus 5. A static security scan graded it A with 0 findings. It is 88% identical to XcodeBuildMCP AGENTS.md, differing in 90 lines, and is treated as a copy.
Other instructions, from other repositories
create-mcp-server CLAUDE.md
Instructions for agentailor/create-mcp-server, covering @agentailor/create-mcp-server, project structure, development, install dependencies and build.
xc-mcp CLAUDE.md
Claude Code instructions for conorluddy/xc-mcp, covering claude.md, project overview, architecture (v4.0.0), v4.0 migration guide (breaking) and development commands.
mcp_espn_ff CLAUDE.md
Instructions for KBThree13/mcp_espn_ff, covering claude.md, project overview, running the server, architecture and single-file mcp server.
quip-mcp-server-typescript CLAUDE.md
Claude Code instructions for zxkane/quip-mcp-server-typescript, covering claude.md, common development commands, build and development, testing and code quality.
searxng-ai-kit AGENTS.md
AGENTS.md instructions for nikvdp/searxng-ai-kit, covering searxng ai kit development context and reminders, critical reminders, testing and running commands, project context and package structure.
deepsource-mcp-server CLAUDE.md
Instructions for sapientpants/deepsource-mcp-server, covering claude.md, repository overview, development commands, understanding mcp servers and quick start.