agentmods.dev

mcpforge AGENTS.md

Project instructions for mcpforge, a Python command-line tool and MCP server that creates runnable MCP servers from plain-English descriptions and validates them.

In plain words
What is it for?
Working on mcpforge, including checking code quality, running tests, validating generated server projects, building releases, and avoiding credential-bearing files.
Why use it?
They give a coding agent the project’s current context, commands, safety boundaries, and verification requirements.

Instructions file for CodexOpenCode

0 10d ago A scan 305 tokens original MIT
View the source file saagpatel/mcpforge
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/saagpatel/mcpforge/agents-md
Clone the repo
git clone --depth 1 https://github.com/saagpatel/mcpforge

Made for: Codex, OpenCode.

Per session 305 This file is loaded in full into every session.
When invoked 305 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00305 $0.00305
Opus 5 $0.00152 $0.00152
Sonnet 5 $0.00061 $0.00061
Haiku 4.5 $0.00030 $0.00030

Measured yesterday against content hash 3ecf79dfd36c, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

mcpforge AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 43 lines

What it actually says

AGENTS.md

What This Project Is

mcpforge is a Python 3.12+ CLI and MCP server that generates runnable FastMCP servers from plain-English descriptions, then validates generated projects before they are trusted.

Current State

Use docs/PROVIDER-MATRIX.md for hosted-provider readiness, CHANGELOG.md for release history, and live git/package state for current release context before acting.

Stack

  • Python 3.12+
  • FastMCP
  • uv
  • pytest
  • ruff
  • Generated Python and TypeScript MCP server examples

How To Run

Core verification baseline:

uv run ruff check .
uv run ruff format --check .
uv run pytest
uv run mcpforge validate examples/todo-server
uv build

Use hosted generation smoke tests only when the task explicitly authorizes the required provider credentials.

Known Risks

  • Generated MCP servers can widen local tool reach; validate generated code before installing or wiring it into clients.
  • Do not read provider keys, .env files, keychains, OAuth stores, browser profiles, raw logs, private transcripts, or credential-bearing configs.
  • Keep PyPI/package naming, release state, and docs/template drift synchronized before any publish framing.

For this repo, first decide publish/park or active follow-up status, then verify the provider matrix, changelog, package metadata, and live git before doing feature work.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 43 lines · 305 tokens per session scan A 3ecf79dfd36c

Subscribe to this mod's changes

mcpforge AGENTS.md is an instructions file published in the GitHub repository saagpatel/mcpforge (0 stars, last pushed 10d ago), licensed MIT. It adds 305 tokens to every session, about $0.0015 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Code GenerationCode reviewLanguagesTestingai-toolsclifastmcpmcppython
Related

Other instructions, from other repositories

trilium-fastmcp AGENTS.md

AGENTS.md instructions for eliassoares/trilium-fastmcp, covering agents.md, project overview, project structure, commands and code style.

eliassoares/trilium-fastmcp · 1,311 tokens

trilium-fastmcp CLAUDE.md

Claude Code instructions for eliassoares/trilium-fastmcp, covering claude.md, project overview, project structure, commands and code style.

eliassoares/trilium-fastmcp · 1,267 tokens

reddit-research-mcp CLAUDE.md

Claude Code instructions for dialog-tools/reddit-research-mcp, covering reddit research mcp server - development guide, project overview, key files, releasing new versions and automated release process.

dialog-tools/reddit-research-mcp · 967 tokens

substack-gateway-oss CLAUDE.md

Instructions for jakub-k-slys/substack-gateway-oss, covering claude.md, commands, install dependencies (dev included, all workspace members), run the server (dev mode with reload) and lint.

jakub-k-slys/substack-gateway-oss · 1,722 tokens

sagemath-mcp CLAUDE.md

Instructions for XBP-Europe/sagemath-mcp, covering claude.md, project, commands, linting and testing.

XBP-Europe/sagemath-mcp · 2,395 tokens

intpot AGENTS.md

Instructions for tugrulguner/intpot, covering agents.md, what intpot is, layout, coding guidelines and workflow.

tugrulguner/intpot · 1,337 tokens