Borrowing it
Nothing to install: this file belongs to Happypig375/vscode-jupyter-mcp-server. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/Happypig375/vscode-jupyter-mcp-server/master/AGENTS.mdgit clone --depth 1 https://github.com/Happypig375/vscode-jupyter-mcp-serverWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/happypig375/vscode-jupyter-mcp-server/agents-md)<a href="https://agentmods.dev/instructions/happypig375/vscode-jupyter-mcp-server/agents-md"><img src="https://agentmods.dev/badge/instructions/happypig375/vscode-jupyter-mcp-server/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/happypig375/vscode-jupyter-mcp-server/agents-md"><img src="https://agentmods.dev/badge/instructions/happypig375/vscode-jupyter-mcp-server/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.03914 | $0.03914 |
| Opus 5.5 | $0.01566 | $0.01566 |
| Sonnet 5.5 | $0.00783 | $0.00783 |
| Haiku 4.5 | $0.00391 | $0.00391 |
Grade C, and why
vscode-jupyter-mcp-server AGENTS.md scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 18d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Harvests environment variableshighData exfiltration
Enumerating or grepping the environment for keys collects credentials unrelated to what the mod says it does.
Run `npm run typecheck` and `npm run compile` for structural checks. `npm test` runs the MCP, Jupyter integration, and compiled broker suites; isolate the broker with `npm run compile:test; node .vscode-test/broker.test. How it starts
The opening of the file, as written. The whole thing — 74 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Agent contract
Ownership
src/server.ts,src/schema.ts,src/localOperations.ts,src/extension.ts, andsrc/broker.tsdefine the MCP boundary and routing.src/notebookOps.tsowns VS Code notebook operations.src/test/mcp.test.jscovers the public boundary,src/test/broker.test.tscovers multi-window routing, andsrc/test/mcp.jupyter.test.jscovers Jupyter-backed integration behavior.
Authoritative 0.4.0 contract
Existing-notebook tools use notebookRef for one target and notebookRefs for multiple targets. A ref is a direct URI or a short opaque nb_ handle from list_notebooks; handles resolve only against currently open notebooks. list_notebooks returns grouped connected windows, including empty groups. open_notebooks accepts actual file URIs in uris and an optional windowId. create_notebook accepts title.
Tool schemas are strict. Unknown or obsolete keys fail validation. list_kernels is read-only; provider setup is explicit through configure_kernel; select_kernel accepts only an exact listed id. run_cells has no kernel hint. User supplied runtime selection takes precedence over defaults.
Colab setup in 0.5.0
23 October: the current source advances the exact environment/helper/broker
pin to installed stable Windows VS Code 1.143.0, commit
2d0b7506a36c1d6db9a466440131a8e01eab2289. Existing reviewed v9 restoration
corrections are preserved. Independent source review, structural checks and
deterministic fixture suites pass. Isolated native-picker and corrected
cleanup-only fixtures pass; preserve the full environment fixture's failed
cleanup receipt and its separate passing behavior assertions. A separately
reviewed append-only fixture observed the first folder conversion replace its
extension host and a later owned-folder append preserve the host activation/PID,
exact Workspace/first root and fresh environment readiness. Both owned windows
quit normally; independent process/port checks pass. Keep this claim limited
to the isolated settled observation, without real Jupyter/Colab. Default-profile
installation/restoration and real Colab readiness remain unverified. See the
23 October record in TRANSFER_DIAGNOSIS.md; do not infer broader compatibility
from these checks or the earlier 1.142.0 checks.
Do not install, reload or restart the active research host while its Colab run
or transfers are unsettled.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 18d ago Changed · +18 lines · +326 tokens per session f36c2b29a436
- 19d ago Changed · +10 lines · +1,414 tokens per session 322e1a461622
- 21d ago Changed · +18 lines · +1,289 tokens per session 9593f4930a90
- 24d ago Changed · +84 tokens per session 3dfa44fdbdc5
- 28d ago Changed · +2 lines · +150 tokens per session 3260a3f7ccaf
- 2mo ago First seen · 26 lines · 651 tokens per session scan C 839ff5604109
vscode-jupyter-mcp-server AGENTS.md is an instructions file published in the GitHub repository Happypig375/vscode-jupyter-mcp-server (1 stars, last pushed 18d ago), licensed MIT. It adds 3,914 tokens to every session, about $0.0157 per session on Opus 5.5. A static security scan graded it C with 1 finding (harvests environment variables). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-07.
vscode-jupyter-mcp-server AGENTS.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| vscode-jupyter-mcp-server AGENTS.mdHappypig375/vscode-jupyter-mcp-server | Instructions file | 1 | 18d ago | MIT | C | 3,914 | Codex, OpenCode |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | today | MIT | A | 7,461 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 5,649 | GitHub Copilot |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | today | MIT | A | 4,680 | Codex, OpenCode |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 3,093 | GitHub Copilot |
| vscode model-prompts.instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 2,022 | GitHub Copilot |