What is sonic-mcp-server copilot-instructions.md?

A project guide for building Sonic MCP Server, a TypeScript service that lets AI agents manage Sonic events, venues, songs, and users. It describes the technologies, file layout, data checks, authentication, and error-handling patterns to follow.

It helps implement and organize MCP tools, validate their inputs, connect to the Sonic API, handle JWT authentication, and keep TypeScript types and responses consistent.

It gives an AI coding assistant the project context needed to make changes that fit the existing server design and API rules.

sonic-mcp-server copilot-instructions.md — Instructions file by McScribble

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods

npx agentmods add instructions/mcscribble/sonic-mcp-server/copilot-instructions

Clone the repo

git clone --depth 1 https://github.com/McScribble/sonic-mcp-server

Made for: GitHub Copilot.

Per session 560 This file is loaded in full into every session.

When invoked 560 The same file — it is already loaded in full.

Security scan C 1 finding. Scan, not verified.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5	$0.00560	$0.00560
Opus 5	$0.00280	$0.00280
Sonnet 5	$0.00112	$0.00112
Haiku 4.5	$0.00056	$0.00056

Measured yesterday against content hash 1f19441f57db, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade C, and why

sonic-mcp-server copilot-instructions.md scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Hidden instructionshighPrompt injection

Directives inside HTML comments, invisible characters or bidirectional overrides are read by the model and not by the person reviewing the file.

<!-- Use this file to provide workspace-specific custom instructions to Copilot. For more details, visit https://code.visualstudio.com/docs/copilot/copilot-customization#_use-a-githubcopilotinstructionsmd-file -->

.github/copilot-instructions.md · 59 lines

How it starts

The opening of the file, as written. The whole thing — 59 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Copilot Instructions for Sonic MCP Server

Project Context

This is a Model Context Protocol (MCP) Server project written in TypeScript that enables AI agents to interact with the Sonic API for managing events, venues, songs, and users.

Key Technologies & Patterns

MCP SDK: @modelcontextprotocol/sdk for protocol implementation
TypeScript: Strict typing with ES2022 target
Axios: HTTP client for API requests
Zod: Schema validation and type safety

MCP Server Guidelines

Tool Definitions: All tools should follow MCP schema format with proper input validation
Error Handling: Use McpError with appropriate error codes
Authentication: Handle JWT tokens via environment variables or arguments
Response Format: Wrap all responses in { content: data } format
Type Safety: Use TypeScript interfaces for all API models

Architecture Patterns

Server Setup: Single index.ts with tool registration and handlers
Client Layer: Separate sonic-client.ts for API communication
Types: Dedicated types.ts for all interface definitions
Tools: Each tool should have proper schema validation and error handling

API Integration

Base URL: Configurable via environment variable
Authentication: Bearer token in Authorization header
Endpoints: RESTful API with CRUD operations for events, venues, songs, users
Pagination: Support page/pageSize parameters
Filtering: Include search, owner, and relationship inclusion options

Development Workflow

Build: npm run build compiles TypeScript to JavaScript
Development: npm run dev for watch mode
Testing: Manual testing via stdio transport
Debugging: VS Code debugging support with source maps

Read the full file on GitHub · 59 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

yesterday First seen · 59 lines · 560 tokens per session scan C 1f19441f57db

Subscribe to this mod's changes

sonic-mcp-server copilot-instructions.md is an instructions file published in the GitHub repository McScribble/sonic-mcp-server (0 stars, last pushed 1y ago), licensed MIT. It adds 560 tokens to every session, about $0.0028 per session on Opus 5. A static security scan graded it C with 1 finding (hidden instructions). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Backend and APIs Planning Security

spec-kit AGENTS.md

AGENTS.md instructions for github/spec-kit, covering agents.md, about spec kit and specify, quickstart — add a new integration in 5 steps, integration architecture and integrationmanifest — file tracking.

github/spec-kit · 7,104 tokens

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 6,785 tokens

sonic-mcp-server copilot-instructions.md