Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/scottpedia0/access/agents-mdgit clone --depth 1 https://github.com/Scottpedia0/accessWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.01144 | $0.01144 |
| Opus 5 | $0.00572 | $0.00572 |
| Sonnet 5 | $0.00229 | $0.00229 |
| Haiku 4.5 | $0.00114 | $0.00114 |
Grade A, and why
access AGENTS.md scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -H "Authorization: Bearer $GLOBAL_AGENT_TOKEN" \ How it starts
The opening of the file, as written. The whole thing — 115 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Access — Agent Instructions
For agents developing on this codebase
What this is
Access is a self-hosted credential store + API proxy + MCP server for agents and scripts. Next.js App Router + Prisma + PostgreSQL.
Architecture
src/app/api/v1/<service>/route.ts— proxy route handlers (Zod validation, auth, proxy upstream)src/lib/<service>/client.ts— upstream API client functionssrc/lib/access.ts— request authentication (global token, consumer token, session)src/lib/security/encryption.ts— AES-256-GCM encrypt/decrypt with key rotation supportsrc/lib/security/tokens.ts— HMAC-SHA256 consumer token generation and verificationsrc/lib/env.ts— environment variable helpers and encryption key loadingsrc/lib/audit.ts— audit event loggingsrc/middleware.ts— rate limiting and body size enforcementprisma/schema.prisma— data model (Service, Secret, Consumer, AccessGrant, AuditEvent, etc.)mcp-server.mjs— standalone MCP server exposing Google Workspace toolsscripts/rotate-keys.ts— encryption key rotation script
Key patterns
- Every route uses
isValidGlobalAgentToken()orauthenticateRequestActor()for auth - Every route has Zod schemas for input validation
- Every route catches errors with
process.env.NODE_ENV === "development"gating on details export const runtime = "nodejs"on all POST route handlers- Google services use
authenticateGoogleRequest()which handles multi-account resolution
Adding a new service adapter
- Create
src/lib/<service>/client.tswith API functions - Create
src/app/api/v1/<service>/route.tsfollowing the hubspot pattern - Add env vars to
.env.example - Update the Supported Services section in
README.md
Data model
Service— a registered service (name, slug, description, visibility mode)Secret— encrypted credential belonging to a service (envVarName, encryptedValue)Consumer— an agent identity (name, slug, hashed token)AccessGrant— links a consumer to a service or specific secretAuditEvent— log of every access, reveal, copy, login, and API callGoogleToken— OAuth tokens for Google multi-account broker
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 115 lines · 1,144 tokens per session scan A fd394c8ef163
access AGENTS.md is an instructions file published in the GitHub repository Scottpedia0/access (0 stars, last pushed 4mo ago), licensed MIT. It adds 1,144 tokens to every session, about $0.0057 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
obsidian-agent-client AGENTS.md
AGENTS.md instructions for RAIT-09/obsidian-agent-client, covering agent client plugin - llm developer guide, architecture, data flow, acp event flow (single path) and permission flow.
memex GEMINI.md
Instructions for STiFLeR7/memex, covering memex, agent instructions, execution mode, non-negotiables and what is in scope.
kmux AGENTS.md
Instructions for kkd927/kmux, covering agents.md, kmux focus and test discipline.
obsidian-llm-hub AGENTS.md
Instructions for takeshy/obsidian-llm-hub, a project described as: Obsidian plugin for AI chat, workflow automation, and semantic search — supports Gemini, OpenAI, OpenRouter, Grok, Ollama, and CLI backends.
docker-gemini-cli GEMINI.md
Instructions for naoyoshinori/docker-gemini-cli, covering 1. core functionality, 2. project structure and key files, 2.1. image variants, 2.2. automation and 3. documentation.
gemini-faf-mcp GEMINI.md
Instructions for Wolfe-Jam/gemini-faf-mcp, covering gemini.md — gemini-faf-mcp, test & verify, where things live, stack and before changing things.