Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/ryanmichaeljames/dataverse-mcp/claude-mdgit clone --depth 1 https://github.com/ryanmichaeljames/dataverse-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/ryanmichaeljames/dataverse-mcp/claude-md)<a href="https://agentmods.dev/instructions/ryanmichaeljames/dataverse-mcp/claude-md"><img src="https://agentmods.dev/badge/instructions/ryanmichaeljames/dataverse-mcp/claude-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00924 | $0.00924 |
| Opus 5 | $0.00462 | $0.00462 |
| Sonnet 5 | $0.00185 | $0.00185 |
| Haiku 4.5 | $0.00092 | $0.00092 |
Grade A, and why
dataverse-mcp CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 81 lines — stays where its author put it; the contents beside it link to each section on GitHub.
dataverse-mcp
Purpose
This repository is a Python MCPServer (mcp.server.mcpserver) server for Microsoft Dataverse (Web API v9.2), with tools implemented under src/dataverse_mcp/tools/.
Keep These Invariants
- Python 3.10+, Pydantic v2,
mcp[cli],httpx>=0.20.0,<1.0 - Follow existing project patterns; do not introduce new architectural styles without clear need
- Tool modules stay domain-scoped (
solutions.py,tables.py,metadata.py,environments.py) - Use async
httpxpatterns already established in this codebase
Tool Design Rules
- Tool names:
dataverse_{verb}_{noun} - Input models:
{Action}{Resource}Inputinsrc/dataverse_mcp/models.py - Input models must use
ConfigDict(str_strip_whitespace=True, extra='forbid') - Use
Field(...)constraints/descriptions on public tool inputs - Set tool annotations truthfully:
readOnlyHint=Trueonly for read operationsdestructiveHint=Truefor delete operationsidempotentHint=Truefor GET/PUT/DELETE style behavioropenWorldHint=True
Response and Error Contract
- Every tool returns
strcontaining JSON (no Markdown) - Do not raise uncaught exceptions from tools
- HTTP/API failures should return:
{"error": true, "message": "Actionable message"}
- Catch
httpx.HTTPStatusErrorbefore broad exceptions - Include
counton list-style responses - Include
has_morewhere pagination applies
Dataverse-Specific Conventions
- Use
entity_set_namewhere table collection names are required - Prefer explicit
selectin queries to keep payloads small - Default paging should remain conservative (
top=50unless tool-specific needs differ) - Navigation properties in
expandare case-sensitive - Use lowercase logical names where Dataverse expects logical names
- The Dataverse base URL must be supplied per call via
dataverse_url; there is no server-side fallback
Security and Config Hygiene
- Never hardcode or commit credentials, tenant IDs, client IDs, or real org URLs
- Use generic placeholders in docs/examples (
yourorg,your-tenant-id,your-client-id) - Keep authentication env-driven (
DATAVERSE_AUTH_TYPEsupportsinteractiveandazure_cli) - Write/delete behavior is controlled by server env flags (
DATAVERSE_ALLOW_WRITE,DATAVERSE_ALLOW_DELETE)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 81 lines · 924 tokens per session scan A 224b5ed3ce77
dataverse-mcp CLAUDE.md is an instructions file published in the GitHub repository ryanmichaeljames/dataverse-mcp (2 stars, last pushed 9d ago), licensed MIT. It adds 924 tokens to every session, about $0.0046 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
seekstone CLAUDE.md
Instructions for shaqmughal/seekstone, covering claude.md, what this repo is, commands, the harness itself (run after npm install) and architecture.
plan-forge database.instructions.md
Database patterns for .NET — Dapper/EF Core, parameterized queries, migration strategy.
pg-dash CLAUDE.md
Claude Code instructions for indiekitai/pg-dash, covering pg-dash claude.md, 项目结构, 构建与测试, 发版纪律(强制) and 发版检查清单(每次 npm publish 前必须按序执行).
jdbc-driver CLAUDE.md
Claude Code instructions for keboola/jdbc-driver, covering claude.md, project overview, build & test commands, jdbc driver and vscode sqltools extension.
MCP-SqlServer CLAUDE.md
Claude Code instructions for Aron-Valenzuela/MCP-SqlServer, covering claude.md, project overview, setup (for each user), 1. install dependencies and 2. configure claude desktop.
plsql-intelligence AGENTS.md
Instructions for MuhDur/plsql-intelligence, covering agents.md — plsql-intelligence, founder constraints (plan.md §3, non-negotiable), plan rules to internalize (plan.md §4), rule 1 – absolute (do not ever violate this) and irreversible git & filesystem actions.