Borrowing it
Nothing to install: this file belongs to Rethunk-AI/mcp-multi-root-git. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/Rethunk-AI/mcp-multi-root-git/main/AGENTS.mdgit clone --depth 1 https://github.com/Rethunk-AI/mcp-multi-root-gitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/rethunk-ai/mcp-multi-root-git/agents-md)<a href="https://agentmods.dev/instructions/rethunk-ai/mcp-multi-root-git/agents-md"><img src="https://agentmods.dev/badge/instructions/rethunk-ai/mcp-multi-root-git/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/rethunk-ai/mcp-multi-root-git/agents-md"><img src="https://agentmods.dev/badge/instructions/rethunk-ai/mcp-multi-root-git/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.03775 | $0.03775 |
| Opus 5.5 | $0.01510 | $0.01510 |
| Sonnet 5.5 | $0.00755 | $0.00755 |
| Haiku 4.5 | $0.00378 | $0.00378 |
Grade A, and why
mcp-multi-root-git AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 95 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md — LLM + dev onboarding
IDEs injecting this as context: do not re-link from rules.
Package: @rethunk/mcp-multi-root-git. MCP stdio server. Entry src/server.ts → FastMCP + registerRethunkGitTools. Build output dist/server.js (publish ships full dist/).
Canonical docs — do not duplicate:
- Install + per-client wiring → docs/install.md
- Tools, JSON shape, resources, root resolution → docs/mcp-tools.md
- Dev setup, CI, commit conventions → CONTRIBUTING.md
- Presets, auth, publish → HUMANS.md
- Spec layout for repo planning → specs/README.md
Implementation map
| File | Symbols |
|---|---|
src/server.ts |
FastMCP + roots: { enabled: true }; MCP_JSON_FORMAT_VERSION; registerRethunkGitTools |
src/server/json.ts |
jsonRespond() (minified, no envelope), readMcpServerVersion(), spreadWhen, spreadDefined |
src/server/git.ts |
gateGit, spawnGitAsync (optional { timeoutMs, signal, env }), asyncPool, GIT_SUBPROCESS_PARALLELISM, GIT_SUBPROCESS_TIMEOUT_MS, gitTopLevelAsync, gitRevParseGitDirAsync, gitRevParseHeadAsync, createTopLevelMemo, createRevParseHeadMemo, buildFilteredGitEnv, parseGitSubmodulePaths, hasGitMetadata, gitStatusSnapshotAsync, gitStatusShortBranchAsync, fetchAheadBehind, isSafeGitUpstreamToken, gitFailureDetail |
src/server/roots.ts |
requireGitAndRootsAsync (fan-out root resolution: string / string[] / "*", bounded-pool toplevel resolution), requireSingleRepo (workspaceRoot), resolveRootPathListAsync, RootPickArgs — shared tool preludes; session root resolution |
src/server/presets.ts |
PRESET_FILE_PATH, loadPresetsFromGitTop, presetLoadErrorPayload, applyPresetNestedRoots, applyPresetParityPairs; Zod schemas must match git-mcp-presets.schema.json |
src/server/schemas.ts |
WorkspacePickSchema (single-repo: workspaceRoot), RootPickSchema (fan-out: polymorphic root), MAX_ROOT_PATHS (256) |
src/server/inventory.ts |
InventoryEntryJson, MAX_INVENTORY_ROOTS_DEFAULT, MAX_BRANCH_STATUS_LINES_DEFAULT, makeSkipEntry, collectInventoryEntry |
src/server/git-refs.ts |
isProtectedBranch, PROTECTED_BRANCH_NAMES_TEXT, isSafeGitRefToken, isSafeGitRangeToken, isSafeGitAncestorRef, isSafeGitCommitIsh; getCurrentBranch, getRefSha, resolveRef, isWorkingTreeClean, isFullyMergedInto, isContentEquivalentlyMergedInto, commitListBetween; listWorktrees, worktreeForBranch; inferRemoteFromUpstream; conflictPaths |
src/server/error-codes.ts |
ERROR_CODES (centralised error-code registry — the exact error field strings on the wire) |
src/server/tools.ts |
registerRethunkGitTools — dispatches to register* below; selectToolRegistrars(envValue, registrars) — pure parse/filter fn for RETHUNK_GIT_TOOLS (reads env inside registerRethunkGitTools, not at module scope); TOOL_REGISTRARS ordered array |
src/server/git-status-tool.ts |
git_status |
src/server/git-inventory-tool.ts |
git_inventory — optional compareRefs: { left, right } ahead/behind between arbitrary local refs |
src/server/git-parity-tool.ts |
git_parity |
src/server/list-presets-tool.ts |
list_presets |
src/server/git-log-tool.ts |
git_log — v3 JSON shape: sha (full), workspaceRoot, no sha7/ageRelative, optional email; optional follow (exactly one paths entry) |
src/server/git-grep-tool.ts |
git_grep — read-only fan-out pickaxe history search (git log -S/-G via required pickaxe, commits[] per root); content mode removed in v6 |
src/server/git-diff-summary-tool.ts |
git_diff_summary — structured token-efficient diff viewer; read-only |
src/server/git-diff-tool.ts |
git_diff — raw scoped diff text; read-only |
src/server/git-show-tool.ts |
git_show — inspect commit message + diff or file content at a ref; read-only |
src/server/git-conflicts-tool.ts |
git_conflicts — inspect unresolved merge conflicts (state detection + per-file ours/theirs/base hunk parsing) |
src/server/git-stash-tool.ts |
git_stash_apply, git_stash_push |
src/server/git-blame-tool.ts |
git_blame — file authorship, run-length grouped by contiguous same-commit line runs; read-only |
src/server/git-tag-tool.ts |
git_tag — create/delete annotated or lightweight tags |
src/server/git-branch-tool.ts |
git_branch — create/delete/rename local branches; protected-name checks on every action |
src/server/git-worktree-tool.ts |
git_worktree_add, git_worktree_remove |
src/server/batch-commit-tool.ts |
batch_commit — sequential multi-commit; mutating; exports PushReport, runPushAfter |
src/server/git-push-tool.ts |
git_push — standalone push with optional upstream tracking |
src/server/git-merge-tool.ts |
git_merge — mutating |
src/server/git-cherry-pick-tool.ts |
git_cherry_pick (onConflict?: "abort"|"pause"), git_cherry_pick_continue (action?: "continue"|"abort", resumes/aborts a paused cherry-pick) — both mutating |
src/server/git-reset-soft-tool.ts |
git_reset_soft — soft-reset; mutating |
src/server/git-revert-tool.ts |
git_revert — inverse-commit revert; mutating, non-history-rewriting |
src/server/presets-resource.ts |
rethunk-git://presets resource |
src/server/tool-parameter-schemas.ts |
buildToolParameterSchemaDocument, captureToolParameterSchemas; backs tool-parameters.schema.json and published schemas/*.json snapshots |
src/server/coverage.ts |
parseAllFilesLineCoverage — parses bun test coverage output for coverage:check CI gate |
src/repo-paths.ts |
resolvePathForRepo, assertRelativePathUnderTop, isStrictlyUnderGitTop, validateRepoPath (combines the first two; the shared path-confinement check) |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 95 lines · 3,775 tokens per session scan A b607e547b639
mcp-multi-root-git AGENTS.md is an instructions file published in the GitHub repository Rethunk-AI/mcp-multi-root-git (0 stars, last pushed 2mo ago), licensed MIT. It adds 3,775 tokens to every session, about $0.0151 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-01.
mcp-multi-root-git AGENTS.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| mcp-multi-root-git AGENTS.mdRethunk-AI/mcp-multi-root-git | Instructions file | 0 | 2mo ago | MIT | A | 3,775 | Codex, OpenCode |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | yesterday | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | yesterday | MIT | A | 4,680 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 5,516 | GitHub Copilot |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 3,093 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 274k | 2d ago | MIT | A | 4,313 | Codex, OpenCode |