What is vas3k-mcp CLAUDE.md?

A project instruction file for vas3k-mcp, a remote server that exposes the vas3k.club service through MCP tools. It documents the project, common commands, architecture, and how to add tools.

Use it when installing, developing, testing, formatting, deploying, or extending the vas3k-mcp Cloudflare Worker project.

It gives an agent the project-specific context needed to work consistently in the repository instead of guessing its commands and structure.

How uburuntu/vas3k-mcp configures Claude Code

Reuse

Borrowing it

Nothing to install: this file belongs to uburuntu/vas3k-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/uburuntu/vas3k-mcp/main/CLAUDE.md

Clone the repo

git clone --depth 1 https://github.com/uburuntu/vas3k-mcp

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/instructions/uburuntu/vas3k-mcp/claude-md.svg)](https://agentmods.dev/instructions/uburuntu/vas3k-mcp/claude-md)

Your own site

<a href="https://agentmods.dev/instructions/uburuntu/vas3k-mcp/claude-md"><img src="https://agentmods.dev/badge/instructions/uburuntu/vas3k-mcp/claude-md.svg" alt="Measured on agentmods" height="20"></a>

Per session 2,525 This file is loaded in full into every session.

When invoked 2,525 The same file — it is already loaded in full.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.02525	$0.02525
Opus 5	$0.01262	$0.01262
Sonnet 5	$0.00505	$0.00505
Haiku 4.5	$0.00252	$0.00252

Measured 7d ago against content hash ad5b1df7147a, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

vas3k-mcp CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 141 lines

How it starts

The opening of the file, as written. The whole thing — 141 lines — stays where its author put it; the contents beside it link to each section on GitHub.

CLAUDE.md

This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.

Project

vas3k-mcp is a remote MCP (Model Context Protocol) server for vas3k.club, deployed as a Cloudflare Worker at https://vas3k-mcp.rmbk.me. It exposes the club's JSON API as MCP tools and acts as a dual OAuth bridge — OAuth provider to MCP clients (Claude Desktop, Cursor, MCP Inspector, …), OAuth client to vas3k.club's OpenID Connect endpoint.

Common commands

Use the Makefile — every target wraps a pnpm invocation.

make help              # list every target with its description
make install           # pnpm install
make hooks             # one-time per clone: enable .githooks/pre-push (runs `make ci`)
make dev               # wrangler dev on http://127.0.0.1:8788
make ci                # typecheck + lint + test (the pre-push hook also runs this)
make deploy            # ci → wrangler deploy (Cloudflare prod)
make format            # biome --write

Run a single test: pnpm exec vitest run path/to/file.test.ts -t "test name substring".

Contract tests (test/contract/) auto-skip without VAS3K_SERVICE_TOKEN. To run them locally, bring up the upstream Django stack from a vas3k/vas3k.club clone via docker compose up, then run the bootstrap script that lives here:

python3 manage.py shell -c "$(cat /path/to/vas3k-mcp/ci/bootstrap.py)"
# script prints SERVICE_TOKEN, POST_SLUG, ROOM_SLUG, FRIEND_SLUG sentinel lines
export VAS3K_BASE_URL=http://localhost:8000 VAS3K_SERVICE_TOKEN=… VAS3K_TEST_POST_SLUG=… VAS3K_TEST_ROOM_SLUG=… VAS3K_TEST_FRIEND_SLUG=…
make ci

Architecture

Dual OAuth bridge. The worker is simultaneously an OAuth 2.1 provider (to MCP clients) and an OAuth client (to vas3k.club). Read src/index.ts first — it composes everything via OAuthProvider from @cloudflare/workers-oauth-provider:

apiHandlers map two MCP endpoints to two McpAgent subclasses (see Two endpoints below).
defaultHandler is the Hono app in src/vas3k-handler.ts — handles /, /authorize (consent screen + redirect to vas3k.club), /callback (token exchange).
tokenExchangeCallback transparently refreshes the upstream vas3k.club token whenever the MCP client refreshes its own token. Calls refreshUpstreamTokens (exported for test access).

Read the full file on GitHub · 141 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

7d ago First seen · 141 lines · 2,525 tokens per session scan A ad5b1df7147a

Subscribe to this mod's changes

vas3k-mcp CLAUDE.md is an instructions file published in the GitHub repository uburuntu/vas3k-mcp (8 stars, last pushed 1mo ago), licensed MIT. It adds 2,525 tokens to every session, about $0.0126 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

ai-agents anthropic claude cloudflare cloudflare-workers mcp

next.js AGENTS.md

AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,296 tokens

codex AGENTS.md

AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.

openai/codex · 5,182 tokens

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 6,785 tokens

vas3k-mcp: Instructions file for Claude Code