meta-ads-mcp AGENTS.md

Project instructions for a small installer that connects coding agents to a hosted service for managing Meta advertising. Meta ads are advertisements run through services such as Facebook and Instagram.

In plain words
What is it for?
Use them when changing, building, or deploying the Meta ads MCP installer. They cover secret manifests, version checks, reviews, and deployment safeguards.
Why use it?
They define safety checks for deployment secrets and block releases when keys are missing, unexpected, or changed too much. This helps keep credentials out of logs and source control.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/nerdlab-dev/meta-ads-mcp/agents-md
Clone the repo
git clone --depth 1 https://github.com/nerdlab-dev/meta-ads-mcp

Made for: Codex, OpenCode.

Per session 264 This file is loaded in full into every session.
When invoked 264 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00264 $0.00264
Opus 5 $0.00132 $0.00132
Sonnet 5 $0.00053 $0.00053
Haiku 4.5 $0.00026 $0.00026

Measured 2d ago against content hash 81a62cc1d4a6, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

meta-ads-mcp AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 11 lines

What it actually says

환경변수 및 Secret 배포 안전 정책

  • 이 레포에 배포 환경변수나 Secret을 도입하면 필요한 키 목록을 값 없이 매니페스트로 관리합니다.
  • Docker 빌드 또는 배포 전에 실제 Secret 키와 매니페스트가 정확히 일치하는지 검사합니다.
  • 누락 키, 빈 값, 승인되지 않은 추가 키, 검사 오류가 있으면 배포를 차단합니다.
  • 키 개수가 직전 승인 기준보다 5개 이상 또는 10% 이상 달라지면 서킷브레이커를 작동하고 공통 모니터링 채널에 긴급 경고를 보냅니다.
  • 의도적인 키 추가·삭제는 같은 PR에서 매니페스트를 변경하고 운영 담당자 1명 이상의 리뷰를 받습니다.
  • Secret 값은 로그나 Git에 남기지 않습니다. 알림에는 서비스명, 키 이름, 개수, 커밋만 포함합니다.
  • 검사한 Secret과 배포하는 Secret은 같은 숫자 버전을 사용합니다. 검증되지 않은 latest를 운영 배포에 사용하지 않습니다.
  • 공통 검사 도구가 있으면 레포별 구현을 새로 만들지 않고 재사용합니다.
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 11 lines · 264 tokens per session scan A 81a62cc1d4a6

Subscribe to this mod's changes

meta-ads-mcp AGENTS.md is an instructions file published in the GitHub repository nerdlab-dev/meta-ads-mcp (17 stars, last pushed 12d ago), licensed MIT. It adds 264 tokens to every session, about $0.0013 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.