verifyax-mcp: Instructions file for Claude Code

CLAUDE.md

verifyax-mcp CLAUDE.md is an instructions file for Claude Code from verifyax/verifyax-mcp. It costs 3,367 tokens per session, scanned A, original, Apache-2.0.

A set of project instructions for VerifyAX, a platform that evaluates AI agents, plus the MCP server and typed TypeScript client that connect to it. The project is organized as a monorepo, meaning multiple related packages are kept in one repository.

In plain words
What is it for?
Use it when developing the VerifyAX SDK or MCP server. It covers the package split, available tool scope, API authentication, local stdio operation, and remote Streamable HTTP deployment.
Why use it?
It records the project's scope and decisions so contributors do not redesign parts that have already been settled. It clarifies how the reusable API client and conversational MCP tools relate to each other.

Instructions file for Claude Code

Written for Claude Code: the file is CLAUDE.md. Also seen: mentions CLAUDE.md; mentions Claude Code.

This is verifyax/verifyax-mcp's own configuration. It tells Claude Code how to work on verifyax-mcp itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything verifyax-mcp configures →

Reuse

Borrowing it

Nothing to install: this file belongs to verifyax/verifyax-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/verifyax/verifyax-mcp/main/CLAUDE.md
Clone the repo
git clone --depth 1 https://github.com/verifyax/verifyax-mcp

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for verifyax-mcp CLAUDE.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/verifyax/verifyax-mcp/claude-md/github.svg)](https://agentmods.dev/instructions/verifyax/verifyax-mcp/claude-md)
Your own site
<a href="https://agentmods.dev/instructions/verifyax/verifyax-mcp/claude-md"><img src="https://agentmods.dev/badge/instructions/verifyax/verifyax-mcp/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for verifyax-mcp CLAUDE.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/verifyax/verifyax-mcp/claude-md"><img src="https://agentmods.dev/badge/instructions/verifyax/verifyax-mcp/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 3,367 This file is loaded in full into every session.
When invoked 3,367 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.03367 $0.03367
Opus 5.5 $0.01347 $0.01347
Sonnet 5.5 $0.00673 $0.00673
Haiku 4.5 $0.00337 $0.00337

Measured 1mo ago against content hash a749c8cc1323, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

verifyax-mcp CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 209 lines

How it starts

The opening of the file, as written. The whole thing — 209 lines — stays where its author put it; the contents beside it link to each section on GitHub.

CLAUDE.md

Persistent project context for Claude Code. Read this first in every session.

What we're building

A Model Context Protocol (MCP) server that exposes the VerifyAX agent-evaluation platform as conversational tools, distributed as an npm package. Plus the typed SDK it sits on top of.

Two packages in one monorepo:

  • @verifyax/sdk — typed TypeScript client for the VerifyAX REST API. Reusable by any consumer, not MCP-specific.
  • @verifyax/mcp-server — MCP server exposing 17 tools mapped to user intents. Depends on the SDK.

The MCP server complements (does not replace) the existing verifyax-api skill at https://github.com/verifyax/verifyax-plugins-claude. The skill is for developers writing code; the MCP server is for conversational workflows.

v1 scope and constraints

Update (0.2.0): the constraints below describe the v1 (0.1.x) shape. As of 0.2.0 the server also ships a Streamable HTTP transport + GCP Cloud Run deployment (verifyax-mcp-server-http), with per-request header auth — i.e. remote hosting, previously a v2 item, has landed. The stdio + VERIFYAX_API_KEY path below is unchanged and remains the default.

  • Local distribution only. Users install via npm and configure the server in their MCP client (Claude Code, Claude Desktop). Remote hosting is v2.
  • API key auth. User pastes their VerifyAX key into MCP client config as VERIFYAX_API_KEY. OAuth is v2.
  • Blocking-by-default tools. Async polling lives inside the server, invisible to Claude and the user. No start_job / get_status pairs in v1.
  • Structured errors over exceptions. Tools return { success: false, reason, suggested_fix } instead of throwing where possible.
  • Seventeen tools (v1.2 catalogue). Resist the urge to wrap every endpoint. See the catalogue below.

Architecture decisions (already made — do not re-litigate)

  1. Language: TypeScript. Faster-moving MCP ecosystem, better tool descriptions support.
  2. Package manager: pnpm with workspaces.
  3. SDK and MCP server are separate packages, published under the @verifyax npm scope.
  4. API client style: resource-oriented, like stripe-node. client.agents.create(...), client.scenarios.generate(...), client.simulations.simulate(...).
  5. Error handling: typed error hierarchy. VerifyaxError base; AuthError, NotFoundError, ConflictError, JobFailedError, TimeoutError, RateLimitError derived.
  6. MCP tool errors: structured. SDK throws; the tool handler catches and translates to MCP tool-result { success: false, ... } payloads. Never let raw exceptions escape into MCP output.
  7. Polling: in-SDK helper. client.jobs.pollUntilTerminal(jobUuid, { timeoutMs, intervalMs }). Used by both SDK consumers and the MCP server.
  8. Logging: stderr only, structured JSON, controlled by VERIFYAX_MCP_LOG_LEVEL env. stdout is reserved for MCP protocol.
  9. No telemetry in v1. Document this explicitly in the README.

Read the full file on GitHub · 209 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago Changed · +3 lines · +63 tokens per session a749c8cc1323
  2. 1mo ago Changed · +2 lines · +60 tokens per session 74897f1c12f6
  3. 1mo ago Changed · +9 tokens per session a57198ba9135
  4. 1mo ago Changed · +2 lines · +18 tokens per session f0fa1b77a502
  5. 2mo ago First seen · 202 lines · 3,217 tokens per session scan A 2d2d77613b1e

Subscribe to this mod's changes

verifyax-mcp CLAUDE.md is an instructions file published in the GitHub repository verifyax/verifyax-mcp (1 stars, last pushed yesterday), licensed Apache-2.0. It adds 3,367 tokens to every session, about $0.0135 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

verifyax-mcp CLAUDE.md compared with instructions from other repositories

verifyax-mcp CLAUDE.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
verifyax-mcp CLAUDE.mdverifyax/verifyax-mcpInstructions file1yesterdayApache-2.0A3,367Claude Code
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA9,719GitHub Copilot
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA5,516GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143kyesterdayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149ktodayMITA4,680Codex, OpenCode
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA3,093GitHub Copilot
vscode model-prompts.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA2,022GitHub Copilot