Borrowing it
Nothing to install: this file belongs to littleblakew/msds-chain-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/littleblakew/msds-chain-mcp/main/AGENTS.mdgit clone --depth 1 https://github.com/littleblakew/msds-chain-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/littleblakew/msds-chain-mcp/agents-md)<a href="https://agentmods.dev/instructions/littleblakew/msds-chain-mcp/agents-md"><img src="https://agentmods.dev/badge/instructions/littleblakew/msds-chain-mcp/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/littleblakew/msds-chain-mcp/agents-md"><img src="https://agentmods.dev/badge/instructions/littleblakew/msds-chain-mcp/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.01073 | $0.01073 |
| Opus 5.5 | $0.00429 | $0.00429 |
| Sonnet 5.5 | $0.00215 | $0.00215 |
| Haiku 4.5 | $0.00107 | $0.00107 |
Grade A, and why
msds-chain-mcp AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 23d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 42 lines — stays where its author put it; the contents beside it link to each section on GitHub.
msds-chain-mcp
这是什么
MSDS Chain 的 MCP server 公开核心（Python，server.py 注册全部工具），同时承载各客户端的分发清单（Claude / Codex 插件、Gemini 扩展、npm shim）。
Remote：github.com/littleblakew/msds-chain-mcp，公开仓，MIT。
分支模型：只有 main。push main 触发 deploy.yml（先跑全量测试再发布容器）；v* tag 触发 release.yml（发布 npm 与 MCP registry，不可撤销）。
用法与工具清单见 README.md，不在这里重复。
怎么跑
pip install -r requirements-dev.txt # 运行时依赖 + pytest + 测试脚本要的 httpx2 / PyYAML
MSDS_API_KEY=sk-msds-... python server.py # stdio 模式（server.py 末尾 mcp.run()）
python server_remote.py # HTTP 模式，MSDS_MCP_HOST / MSDS_MCP_PORT（默认 0.0.0.0:8080）
scripts/hooks/install.sh # 每个 clone 装一次 git hooks；--check 只报告
- 版本号只有一个人工入口：仓根
VERSION。改完跑scripts/release.sh（把版本与派生数字写进所有清单并跑守卫），再提交、推main，最后git tag vX.Y.Z && git push origin vX.Y.Z；tag 必须打在改VERSION的那个 commit 上。 - 工具面基线
published_tool_surface.json用python3 scripts/export_tool_surface.py重新生成。
怎么验证
python -m pytest tests/ -v # 与 deploy.yml 的 test 步骤一致；必须全绿才能推 main
python -m pytest tests/contract/test_version.py -q # 改了 VERSION / 清单后的快速检查（release.yml 也跑它）
- 工具面守卫
tests/contract/test_tool_surface_drift.py红了不是坏事，是要你判断这次改动对已接入的外部客户端是否安全，确认后再更新基线。 - 新增 scheduled workflow 时，必须把它的
name:登记进cron-failure-alert.yml的workflows:清单，tests/repo_guards/test_cron_alert_coverage.py会查。
红线
- 🔴 这是公开仓，推上去就进了别人的 clone，撤回 commit 删不掉历史。 不许提交：真实语料 / 客户配方（
tests/repo_guards/test_no_real_corpus_in_fixtures.py守夹具）、密钥与 token、内部系统名与人名。 - 🔴 注释和 docstring 不写「某天在哪被撞到、量多小」的事故叙事或运行数字（
tests/repo_guards/test_no_incident_narrative.py按「日期 + 叙事词」查注释与 docstring）。要写就写「为什么现在是这样」。 - 🔴
push main即发布，没有 promote 闸。 commit message 的正文里不许出现 CI 跳过令牌的字面量（GitHub 只认字面量，提到它也会让 CI 静默不跑）；要跳过就把令牌放在 subject。scripts/hooks/commit-msg守这条，没装 hooks 就没人守。 - 🔴
release.yml必须跑在 GitHub-hosted runner（ubuntu-latest）：npm 的 provenance 拒绝 self-hosted。npm 发布走 OIDC trusted publishing，别给它加NODE_AUTH_TOKEN，token 存在时 npm 会优先用它并失败。 - 🔴
scripts/refresh_backend_surface.py在写盘前裁掉后端内部面，只留本仓真的调用的/api/v2端点。别绕过它手工复制后端导出，公开仓的历史删不掉。 - 工具的返回文本和描述是对外契约：改措辞、参数名、必填项，先看
tests/contract/test_description_matches_payload.py与工具面守卫，别只改server.py。 - 单副本约束：SSE 传输有状态，
deploy.yml把实例固定为min=max=1并开 sticky sessions。改成多副本之前先想清楚/messages/会不会 404。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 23d ago Changed · +6 tokens per session 7b78b6f4b227
- 24d ago First seen · 42 lines · 1,067 tokens per session scan A e19937385630
msds-chain-mcp AGENTS.md is an instructions file published in the GitHub repository littleblakew/msds-chain-mcp (0 stars, last pushed 3d ago), licensed MIT. It adds 1,073 tokens to every session, about $0.0043 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-06.
Other instructions, from other repositories
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode copilot-instructions.md
Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).
deno copilot-instructions.md
Copilot instructions for denoland/deno, covering deno development guide for github copilot, network access, high level overview, key directories and key files to understand first.