Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/smplkit/mcp/copilot-instructionsgit clone --depth 1 https://github.com/smplkit/mcpWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.01975 | $0.01975 |
| Opus 5 | $0.00988 | $0.00988 |
| Sonnet 5 | $0.00395 | $0.00395 |
| Haiku 4.5 | $0.00198 | $0.00198 |
Grade A, and why
mcp copilot-instructions.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 63 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Using smplkit — write against it and operate it
smplkit is a hosted developer platform — feature flags, application config, runtime logging, audit, and scheduled HTTP jobs — with two halves you use together: author in code with the smplkit SDKs (resolve a flag, read a config value, install the dynamic-logging adapter, emit an audit event), and operate through the smplkit MCP server (https://mcp.smplkit.com/api/mcp) — express intent ("turn this flag on in prod for enterprise users," "set the staging DB host," "raise this logger to DEBUG," "stream audit events to Datadog," "POST this endpoint every morning at 7") and the tools translate it to the right API calls. Refer to it as "smplkit," not a single-purpose tool for any one capability.
The author + operate loop
The differentiated move is doing both in one flow: write the SDK call in the code, provision the underlying resource with the tools, and verify it — without leaving the editor. The id in code is the same string you provision (a flag id, config id, logger name, audit resource_type).
"Add a kill-switch for the new checkout." → in code,
checkout = client.flags.boolean_flag("checkout-v2", default=False)thenif checkout.get(): render_new_checkout(); provision withcreate_flag(key="checkout-v2", type="boolean", default=false); verify withget_flag(key="checkout-v2").
Writing code with the smplkit SDKs
SDKs exist for Python, TypeScript, Go, Java, C#, and Ruby. One client exposes all four runtime products as sub-namespaces (client.flags, client.config, client.logging, client.audit); the SDK key comes from the SMPLKIT_API_KEY env var (or a ~/.smplkit profile); set environment once on the client (production/staging) to scope resolution — never per call. Representative snippets are Python; the per-language reference (install, client init, idiomatic usage for every language) is at https://docs.smplkit.com/products/sdks/<python|typescript|go|java|csharp|ruby>.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 63 lines · 1,975 tokens per session scan A 18ede41b67bf
mcp copilot-instructions.md is an instructions file published in the GitHub repository smplkit/mcp (0 stars, last pushed 3d ago), licensed MIT. It adds 1,975 tokens to every session, about $0.0099 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
Basecamp-MCP-Server CLAUDE.md
Instructions for georgeantonopoulos/Basecamp-MCP-Server, covering claude.md, development commands, setup (one-time) - requires python 3.10+, option 2: using pip (if python 3.10+ already installed) and oauth authentication.
KingdeeMCP CLAUDE.md
Instructions for WaHaiLong/KingdeeMCP, covering claude.md, commands, install in development mode, run the mcp server directly and run with uvx (no install needed).
mcp-server-mattermost AGENTS.md
Instructions for cloud-ru-tech/mcp-server-mattermost, covering claude.md, project overview, documentation references, commands and install dependencies.
reddit-mcp-server AGENTS.md
Instructions for ismailsaoulaj/reddit-mcp-server, covering agents.md, commands, architecture, gotchas and git workflow.
skills-registry AGENTS.md
Instructions for nikships/skills-registry, covering repository guidance, layout and contracts and build and test.
bigquery-mcp CLAUDE.md
Instructions for pvoo/bigquery-mcp, covering claude.md, project overview, development commands, setup (recommended approach) and or manual setup.