Borrowing it
Nothing to install: this file belongs to NovadaLabs/Novada-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/NovadaLabs/Novada-mcp/main/CLAUDE.mdgit clone --depth 1 https://github.com/NovadaLabs/Novada-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/novadalabs/novada-mcp/claude-md)<a href="https://agentmods.dev/instructions/novadalabs/novada-mcp/claude-md"><img src="https://agentmods.dev/badge/instructions/novadalabs/novada-mcp/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/novadalabs/novada-mcp/claude-md"><img src="https://agentmods.dev/badge/instructions/novadalabs/novada-mcp/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.01065 | $0.01065 |
| Opus 5.5 | $0.00426 | $0.00426 |
| Sonnet 5.5 | $0.00213 | $0.00213 |
| Haiku 4.5 | $0.00106 | $0.00106 |
Grade A, and why
Novada-mcp CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 43 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CLAUDE.md — Novada MCP Monorepo
This repo is a monorepo with two shipped artifacts (plus supporting dirs, see Layout). Read the routing table before editing.
The two shipped artifacts (one-liners)
npm-package/IS thenovada-mcpnpm package users run locally vianpx novada-mcp(a local stdio MCP server). Tool logic lives here.hosted-server/IS what runs athttps://mcp.novada.com— an HTTP wrapper (auth + rate-limit) aroundnpm-package. Since 2026-10-29 production runs on AWS EC2 (Frankfurt;hosted-server/ec2/: nginx → two Node instancesnovada-mcp@3000/@3001). The Vercel project is a hot standby until it is paused (~2026-11-05).
Which folder do I edit?
| Task | Path |
|---|---|
| Tool logic (behavior, add/remove a tool) | npm-package/src/tools/ |
| Auth / rate-limit / token validation | hosted-server/vercel/api/mcp.ts |
| Ship hosted (mcp.novada.com, EC2) | re-vendor + commit, then hosted-server/ec2/deploy-ec2.sh (see note below) |
| Restart hosted after an env change | hosted-server/ec2/restart-rolling.sh — never systemctl restart |
| npm release | npm-package/ — REDLINE: owner approval |
Rules
mcp.novada.comis a bare API endpoint (since 2026-07-10, matching Bright Data/Firecrawl/Tavily) —vercel.jsonroutes everything except/mcpand/:key/mcpthrough a catch-all/(.*)→api/mcp.ts, which returns a bare JSON pointer at/and a clean 404 for anything unmatched. No marketing HTML lives here anymore — that content ishosted-server/landing/(separate deploy target for novada.com, out of scope for this project). If Vercel Analytics or Speed Insights is ever enabled on this project, add an explicit/_vercel/(.*)passthrough rule ABOVE the catch-all invercel.jsonfirst — otherwise the catch-all will swallow/_vercel/insights/*and/_vercel/speed-insights/*before Vercel's own routes get a chance.- Never edit
hosted-server/vercel/vendor/by hand. It is generated bydeploy-hosted.sh(which buildsnpm-package/and rsyncs itsbuild/output into the vendor dir). Hand edits will be overwritten on the next deploy. - REDLINE: no npm publish, no
vercel deploy, no version bump, no push without explicit owner approval. - Tool logic has ONE home:
npm-package/src/. The hosted server consumes the built artifact — it never forks tool behavior. hosted-server/scripts/deploy-hosted.shdeploys fromhosted-server/(the Vercel project root) and vendors from../npm-package. ⚠️ Since the EC2 cutover it still deploys to Vercel (standby), while its VERIFY phase curlsmcp.novada.com, which is now EC2 — use it only for its BUILD/VENDOR/GATES phases until it is re-pointed; production deploys go throughhosted-server/ec2/deploy-ec2.sh(one instance at a time, health-gated, auto-rollback).- EC2 hosted ops: zero-downtime restarts only (
restart-rolling.sh/deploy-ec2.sh). A plainsystemctl restartcaused a 75 s outage on 2026-10-29 — seehosted-server/ec2/MIGRATE-TO-TEMPLATE-UNIT.md.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago Changed · +4 lines · +311 tokens per session a906b92ee9c2
- 11d ago Changed · +5 lines · +87 tokens per session 560787f096d5
- 2mo ago First seen · 34 lines · 667 tokens per session scan A 7337ee2a47c9
Novada-mcp CLAUDE.md is an instructions file published in the GitHub repository NovadaLabs/Novada-mcp (3 stars, last pushed today), licensed MIT. It adds 1,065 tokens to every session, about $0.0043 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Novada-mcp CLAUDE.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| Novada-mcp CLAUDE.mdNovadaLabs/Novada-mcp | Instructions file | 3 | today | MIT | A | 1,065 | Claude Code |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | today | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | yesterday | MIT | A | 4,680 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 5,516 | GitHub Copilot |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 3,093 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 274k | 2d ago | MIT | A | 4,313 | Codex, OpenCode |