Coral is a local application that gives AI agents one SQL interface for querying connected APIs, files, and live data sources. It is for agents and developers who need to retrieve and correlate data across sources while reducing repeated tool calls, pagination, and source-specific integration code. Coral exposes its query interface to compatible agents through MCP, and the catalogue add-ons support using it in agent workflows.
Borrowing it
Nothing to install: this file belongs to withcoral/coral. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/withcoral/coral/main/AGENTS.mdgit clone --depth 1 https://github.com/withcoral/coralWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/withcoral/coral/agents-md)<a href="https://agentmods.dev/instructions/withcoral/coral/agents-md"><img src="https://agentmods.dev/badge/instructions/withcoral/coral/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/withcoral/coral/agents-md"><img src="https://agentmods.dev/badge/instructions/withcoral/coral/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.04053 | $0.04053 |
| Opus 5.5 | $0.01621 | $0.01621 |
| Sonnet 5.5 | $0.00811 | $0.00811 |
| Haiku 4.5 | $0.00405 | $0.00405 |
Grade A, and why
coral AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 281 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Repository guidance
Canonical context
- Use
GLOSSARY.mdas the product glossary. - Issues live in
withcoral/coral. Always pass--repo withcoral/coraltogh; this checkout also has an unrelatedupstreamremote. - The PR title becomes the squash commit that release-please reads. Use
Conventional Commits,
type(scope): summary, and keep the title current as the branch changes. Onlyfeat,fix,perf, and breaking (type!:) titles open a release PR and reach the changelog, so give a user-visible change one of those. The scope appears in the release notes, so name what a user sees, not an internal codename:uifor Reef and Wax, neverreef..github/workflows/pr.ymllists the rejected scopes. - Tracker conventions, triage labels, and domain-document rules are under
docs/agents/.
Durable boundaries
- Keep transport and presentation adapters thin. Put domain behavior behind a transport-neutral interface.
- Coral keeps no MCP session: every MCP request stands on its own credential, so any Coral Instance serves it (ADR 0029). Do not hold state between a client's requests in the Adapter, and do not send a client anything outside the response to its own request.
- Read process environment only at process bootstrap. Pass explicit values to domain code.
- Route untrusted outbound HTTP through
coral-outbound::Client. Pass the bootstrap-resolved operator destination policy to domain modules. Identity and inbound listener selection do not determine outbound permissions. See ADR 0008 for composition defaults. - Keep cross-crate W3C propagation, safe telemetry fields, the
coral.*metric catalog, and export filtering incoral-telemetry. Domain modules own signal timing and record metrics throughcoral_telemetry::metric. Application bootstrap owns exporter configuration. - Keep generated files marked
linguist-generatedin.gitattributes.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +6 lines · +121 tokens per session ba6d6798a388
- yesterday Changed · +3 lines · +44 tokens per session 22075c9e9f20
- 4d ago Changed · +4 lines · +76 tokens per session 2ad3b0fcd135
- 5d ago Changed · +3 lines · +63 tokens per session 4392b53f5918
- 6d ago Changed · +1 lines · +21 tokens per session 50ba00a8e03e
- 7d ago Changed · +2 tokens per session 48f1608e077e
- 9d ago Changed · +7 lines · +117 tokens per session e0432e406b3c
- 10d ago Changed · +3 lines · +47 tokens per session 91947b6a5686
- 15d ago Changed · +28 lines · +402 tokens per session 36893914f4d2
- 16d ago First seen · 226 lines · 3,160 tokens per session scan A cb65ad4e6379
coral AGENTS.md is an instructions file published in the GitHub repository withcoral/coral (4,935 stars, last pushed yesterday), licensed Apache-2.0. It adds 4,053 tokens to every session, about $0.0162 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
coral AGENTS.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| coral AGENTS.mdwithcoral/coral | Instructions file | 4.9k | yesterday | Apache-2.0 | A | 4,053 | Codex, OpenCode |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | today | MIT | A | 7,461 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 5,516 | GitHub Copilot |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | today | MIT | A | 4,680 | Codex, OpenCode |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 3,093 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 274k | 2d ago | MIT | A | 4,313 | Codex, OpenCode |