mcp copilot-instructions.md

Instructions for using smplkit, a hosted developer platform for feature flags, application settings, runtime logging, audit records, and scheduled web requests. They explain how to write code with its software libraries and operate these services through an MCP server.

In plain words
What is it for?
Adding feature flags, reading application configuration, changing logging levels, recording audit events, sending audit data to Datadog, and scheduling HTTP requests.
Why use it?
They keep code changes and service setup connected, so developers can create a resource, configure it, and verify it in one workflow.

Instructions file for GitHub Copilot

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/smplkit/mcp/copilot-instructions
Clone the repo
git clone --depth 1 https://github.com/smplkit/mcp

Made for: GitHub Copilot.

Per session 1,975 This file is loaded in full into every session.
When invoked 1,975 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.01975 $0.01975
Opus 5 $0.00988 $0.00988
Sonnet 5 $0.00395 $0.00395
Haiku 4.5 $0.00198 $0.00198

Measured yesterday against content hash 18ede41b67bf, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

mcp copilot-instructions.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.github/copilot-instructions.md · 63 lines

How it starts

The opening of the file, as written. The whole thing — 63 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Using smplkit — write against it and operate it

smplkit is a hosted developer platform — feature flags, application config, runtime logging, audit, and scheduled HTTP jobs — with two halves you use together: author in code with the smplkit SDKs (resolve a flag, read a config value, install the dynamic-logging adapter, emit an audit event), and operate through the smplkit MCP server (https://mcp.smplkit.com/api/mcp) — express intent ("turn this flag on in prod for enterprise users," "set the staging DB host," "raise this logger to DEBUG," "stream audit events to Datadog," "POST this endpoint every morning at 7") and the tools translate it to the right API calls. Refer to it as "smplkit," not a single-purpose tool for any one capability.

The author + operate loop

The differentiated move is doing both in one flow: write the SDK call in the code, provision the underlying resource with the tools, and verify it — without leaving the editor. The id in code is the same string you provision (a flag id, config id, logger name, audit resource_type).

"Add a kill-switch for the new checkout." → in code, checkout = client.flags.boolean_flag("checkout-v2", default=False) then if checkout.get(): render_new_checkout(); provision with create_flag(key="checkout-v2", type="boolean", default=false); verify with get_flag(key="checkout-v2").

Writing code with the smplkit SDKs

SDKs exist for Python, TypeScript, Go, Java, C#, and Ruby. One client exposes all four runtime products as sub-namespaces (client.flags, client.config, client.logging, client.audit); the SDK key comes from the SMPLKIT_API_KEY env var (or a ~/.smplkit profile); set environment once on the client (production/staging) to scope resolution — never per call. Representative snippets are Python; the per-language reference (install, client init, idiomatic usage for every language) is at https://docs.smplkit.com/products/sdks/<python|typescript|go|java|csharp|ruby>.

Read the full file on GitHub · 63 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 63 lines · 1,975 tokens per session scan A 18ede41b67bf

Subscribe to this mod's changes

mcp copilot-instructions.md is an instructions file published in the GitHub repository smplkit/mcp (0 stars, last pushed 3d ago), licensed MIT. It adds 1,975 tokens to every session, about $0.0099 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.