Vercel Shop is a monorepo, meaning one code repository that contains multiple related applications and tools, for a Next.js Shopify storefront template, its documentation site, and a scaffolding CLI. It helps developers create and work with Shopify storefronts built on Next.js. The catalogue entries are skills, commands, a plugin, and an instruction for working with this project.
Borrowing it
Nothing to install: this file belongs to vercel/shop. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/vercel/shop/main/AGENTS.mdgit clone --depth 1 https://github.com/vercel/shopWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/vercel/shop/agents-md)<a href="https://agentmods.dev/instructions/vercel/shop/agents-md"><img src="https://agentmods.dev/badge/instructions/vercel/shop/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/vercel/shop/agents-md"><img src="https://agentmods.dev/badge/instructions/vercel/shop/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.04385 | $0.04385 |
| Opus 5.5 | $0.01754 | $0.01754 |
| Sonnet 5.5 | $0.00877 | $0.00877 |
| Haiku 4.5 | $0.00439 | $0.00439 |
Grade A, and why
shop AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 161 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Vercel Shop
Vercel Shop is a Next.js storefront for Shopify, deployed to Vercel, with agent skills in .agents/skills/.
Three owners
Every feature belongs to exactly one owner. If a change cannot name its owner, or reaches into another owner's territory, redesign it. Place new work by owner first, then by domain. Docs and skills describe the product in these terms.
Shopify owns commerce through the framework-agnostic Hydrogen preview SDK, not the Hydrogen React Router framework.
- Owns: Storefront and Customer Account API clients, catalog, cart state and mutations, checkout, predictive search, Customer Account OAuth and sessions, policies, Shopify analytics.
- Lives in:
lib/shopify/**,lib/cart/**,lib/auth/{request,server}.ts, the handlers registered inproxy.ts, andlib/<domain>/types.tsfor the domain models transforms produce. - Must not be reimplemented: prices, availability, currency, cart totals, and customer identity always come from Shopify responses.
Next.js owns the app.
- Owns: routing and clean URLs, Server Components, caching and tag invalidation, metadata and SEO, Suspense and loading geometry, the request boundary that adapts Hydrogen's handlers, and the answer-engine surface:
text/markdownnegotiation, Markdown representations,/llms.txt, Schema.org data, sitemap, and robots. - Lives in:
app/,components/,lib/<domain>/{index,server,client,action}.ts,lib/config/,next.config.ts,proxy.ts; the answer-engine surface inlib/markdown/**,lib/seo/**,app/md/**,app/llms.txt/,app/sitemap*,app/robots.ts,components/schema/. - Must not: mutate the cart through Server Actions, refresh tokens in Server Components, invalidate public caches for cart changes, or reach into
agent/.
Eve owns the agent.
- Owns: sessions, channels, tools, connections, instructions, model selection,
/eve/v1/*. - Lives in:
agent/(tools inagent/tools/, shared execution helpers inagent/lib/),lib/agent/,components/agent/, and two Next.js routes:app/api/agent/session, which prepares the browser cart, andapp/agent/ucp-profile.json, which serves the agent's UCP profile. - Must not: import Next.js request or cache APIs, add a second tool-name dispatcher, recreate a chat API route, or let model arguments select the cart.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago Changed · +50 tokens per session aeb9e66fb7eb
- 9d ago Changed 871e1651a4ef
- 11d ago Changed · +2 lines · +259 tokens per session ea513320eee3
- 22d ago Changed · -144 lines · -2,871 tokens per session 6e87d5f20c0f
- 29d ago Changed · +2 lines · +236 tokens per session 77076c8e1cb4
- 1mo ago Changed · +258 lines · +5,912 tokens per session e0be9fc7fa34
- 1mo ago Changed · -1 lines · -32 tokens per session 3b0901a68718
- 1mo ago Changed · -6 lines · -115 tokens per session 0cffe201ad3b
- 1mo ago First seen · 50 lines · 946 tokens per session scan A 965ca554c645
shop AGENTS.md is an instructions file published in the GitHub repository vercel/shop (126 stars, last pushed 5d ago), licensed MIT. It adds 4,385 tokens to every session, about $0.0175 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-26.
shop AGENTS.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| shop AGENTS.mdvercel/shop | Instructions file | 126 | 5d ago | MIT | A | 4,385 | Codex, OpenCode |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | yesterday | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | yesterday | MIT | A | 4,680 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 5,516 | GitHub Copilot |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 3,093 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 274k | 2d ago | MIT | A | 4,313 | Codex, OpenCode |