agentcursor: Instructions file for Codex

AGENTS.md

agentcursor AGENTS.md is an instructions file for Codex, OpenCode from kumard3/agentcursor. It costs 1,054 tokens per session, scanned A, original, MIT.

Repository instructions for AgentCursor, a tool that lets an AI agent control Chrome tabs or interact with macOS applications. They explain which implementation to choose, how to install it, and how to build and test it.

In plain words
What is it for?
Use them to read web pages, click or type in Chrome, or automate macOS apps while following the project's setup and testing process.
Why use it?
They help an agent choose between browser control and native-app control, and avoid confusing the separate Node, Rust, and extension code paths.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions Claude Code.

This is kumard3/agentcursor's own configuration. It tells Codex and OpenCode how to work on agentcursor itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything agentcursor configures →

Reuse

Borrowing it

Nothing to install: this file belongs to kumard3/agentcursor. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/kumard3/agentcursor/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/kumard3/agentcursor

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for agentcursor AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/kumard3/agentcursor/agents-md/github.svg)](https://agentmods.dev/instructions/kumard3/agentcursor/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/kumard3/agentcursor/agents-md"><img src="https://agentmods.dev/badge/instructions/kumard3/agentcursor/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for agentcursor AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/kumard3/agentcursor/agents-md"><img src="https://agentmods.dev/badge/instructions/kumard3/agentcursor/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 1,054 This file is loaded in full into every session.
When invoked 1,054 The same file — it is already loaded in full.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01054 $0.01054
Opus 5.5 $0.00422 $0.00422
Sonnet 5.5 $0.00211 $0.00211
Haiku 4.5 $0.00105 $0.00105

Measured yesterday against content hash db3c584d8eef, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

agentcursor AGENTS.md scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

Rust core (not published to npm, brew or curl; build from source):
AGENTS.md · 82 lines

How it starts

The opening of the file, as written. The whole thing — 82 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AgentCursor: guide for coding agents

AgentCursor gives an AI agent a visible, human-paced cursor. It has two surfaces, and they are separate code paths.

Surface What it drives Code Needs
Browser extension Chrome tabs (real profile, logged in) src/ (Node MCP server) + extension/ (MV3) Node, pnpm, Chrome, the extension loaded
Computer use (Rust core) Any macOS app window rust/ (one binary, agentcursor) Rust toolchain, macOS arm64, Accessibility permission

Details: docs/extension.md and docs/computer-use.md.

Which one to pick

  • Task is inside a web page (read DOM, click, type, tabs, JS evaluate): browser extension. Tools: read_page, click, type, tabs, evaluate.
  • Task is a native app (Notes, Finder, Safari chrome, TextEdit, System Settings): computer use.
  • Computer use must not disturb the user (front app and pointer stay put): the Rust core. It clicks and types through accessibility actions.
  • Rust core is not wired under the Node desktop_* tools. The Node server has its own desktop_* implementation (Swift helper) that moves the real cursor.
  • The Claude Code plugin (.mcp.json) still launches the Node server, not the Rust binary.

Install and connect

Browser extension and Node server:

pnpm install && pnpm build
node dist/index.js setup

Then load extension/ at chrome://extensions (Developer mode, Load unpacked). By hand: claude mcp add --scope user agentcursor -- node /abs/path/dist/index.js.

Rust core (not published to npm, brew or curl; build from source):

cd rust && cargo build --release

MCP config: {"mcpServers":{"agentcursor":{"command":"/abs/path/rust/target/release/agentcursor","args":["mcp"]}}}

There is no npm package named agentcursor. Never run npm install agentcursor or npx agentcursor.

The loop

  1. Read: read_page (browser) or agentcursor read <app> (computer use). Output is compact text with refs ([12], [d12]).
  2. Act by label or ref: click --text Save or click [d12]. Do not guess coordinates.
  3. Verify by reading again. Use changes (read --changes) to get only the diff. Take a screenshot only for canvases and custom-drawn UI.

Read the full file on GitHub · 82 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 82 lines · 1,054 tokens per session scan A db3c584d8eef

Subscribe to this mod's changes

agentcursor AGENTS.md is an instructions file published in the GitHub repository kumard3/agentcursor (0 stars, last pushed 2d ago), licensed MIT. It adds 1,054 tokens to every session, about $0.0042 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-11-10.

Related

agentcursor AGENTS.md compared with instructions from other repositories

agentcursor AGENTS.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
agentcursor AGENTS.mdkumard3/agentcursorInstructions file02d agoMITA1,054Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143ktodayMITA7,461Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA5,685GitHub Copilot
langchain AGENTS.mdlangchain-ai/langchainInstructions file149ktodayMITA4,680Codex, OpenCode
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA3,093GitHub Copilot
vscode model-prompts.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA2,022GitHub Copilot