Borrowing it
Nothing to install: this file belongs to wellknownmcp/cortex-gateway. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/wellknownmcp/cortex-gateway/main/AGENTS.mdgit clone --depth 1 https://github.com/wellknownmcp/cortex-gatewayWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/wellknownmcp/cortex-gateway/agents-md)<a href="https://agentmods.dev/instructions/wellknownmcp/cortex-gateway/agents-md"><img src="https://agentmods.dev/badge/instructions/wellknownmcp/cortex-gateway/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/wellknownmcp/cortex-gateway/agents-md"><img src="https://agentmods.dev/badge/instructions/wellknownmcp/cortex-gateway/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.01098 | $0.01098 |
| Opus 5.5 | $0.00439 | $0.00439 |
| Sonnet 5.5 | $0.00220 | $0.00220 |
| Haiku 4.5 | $0.00110 | $0.00110 |
Grade A, and why
cortex-gateway AGENTS.md scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -s -D - -o /dev/null -X POST https://mcp.cortex-gateway.dev/mcp \ How it starts
The opening of the file, as written. The whole thing — 99 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md
Guidance for AI agents working in this repository — or evaluating the project. Humans welcome too.
What this is
Cortex Gateway is an open-source (MIT), self-hosted federated MCP gateway: one spec-compliant, OAuth 2.1-protected MCP server (Streamable HTTP, MCP 2026-07-28, 2025-11-25 and 2025-06-18) in front of N plain-HTTP backends. Permissions are never mirrored — the gateway propagates the real user identity, so each app's native permission model applies per user.
Verify the claims yourself
Don't take the README's word for it. Everything below is checkable in minutes:
# Unit tests (vitest)
npm ci && npm run typecheck && npm test
# The demo authorization server builds independently
cd demo/auth-server && npm ci && npm run typecheck
# Official MCP conformance suite against the production build (known gaps:
# scripts/conformance/baseline.yml)
npm run build && node scripts/conformance/run.mjs
Against the live demo (no account needed):
# MCP endpoint answers 401 + WWW-Authenticate (RFC 9728 challenge) — this is
# what lets any compliant MCP client bootstrap the OAuth flow on its own:
curl -s -D - -o /dev/null -X POST https://mcp.cortex-gateway.dev/mcp \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{}}' | grep -i www-authenticate
# Protected-resource metadata (RFC 9728):
curl -s https://mcp.cortex-gateway.dev/.well-known/oauth-protected-resource
# Authorization server metadata (RFC 8414) + JWKS:
curl -s https://auth.cortex-gateway.dev/.well-known/oauth-authorization-server
CI runs the same typecheck + test matrix on every push
(.github/workflows/ci.yml); the Docker image is built by
.github/workflows/docker.yml and published to
ghcr.io/wellknownmcp/cortex-gateway.
Map of the repository
| Path | What lives there |
|---|---|
src/contract/ |
The backend contract: types, HTTP client, static technical-token allowlist |
src/lib/ |
Federator (60s refresh + SSE), MCP protocol methods + gateway builtins, OAuth resource-server validation, env-driven registry, pseudonymized audit |
src/adapter/ |
MCP→backend proxy adapter (beta): downstream MCP client, per-user AES-256-GCM token vault, OAuth/DCR/PKCE discovery |
demo/auth-server/ |
Standalone OAuth 2.1 authorization server (RFC 8414/7591/7009/7662, PKCE, strict refresh rotation, magic links, consent, scope tiering) |
docs/ |
Backend contract, adapter, deployment runbook, tool-search mode |
site/ |
The static site served at cortex-gateway.dev (hand-written HTML, no build) |
registry/ |
MCP registry manifest (server.json) + publishing checklist |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago Changed · +4 lines · +37 tokens per session 8eb3026010d8
- 2mo ago First seen · 95 lines · 1,061 tokens per session scan A b3d6263c5e80
cortex-gateway AGENTS.md is an instructions file published in the GitHub repository wellknownmcp/cortex-gateway (12 stars, last pushed 11d ago), licensed MIT. It adds 1,098 tokens to every session, about $0.0044 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
cortex-gateway AGENTS.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| cortex-gateway AGENTS.mdwellknownmcp/cortex-gateway | Instructions file | 12 | 11d ago | MIT | A | 1,098 | Codex, OpenCode |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | yesterday | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | yesterday | MIT | A | 4,680 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 5,516 | GitHub Copilot |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 3,093 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 274k | 2d ago | MIT | A | 4,313 | Codex, OpenCode |