Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/xytom/coding-tools-mcp/agents-mdgit clone --depth 1 https://github.com/xyTom/coding-tools-mcpWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00329 | $0.00329 |
| Opus 5 | $0.00164 | $0.00164 |
| Sonnet 5 | $0.00066 | $0.00066 |
| Haiku 4.5 | $0.00033 | $0.00033 |
Grade A, and why
coding-tools-mcp AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Coding Tools MCP repository guide
This repository is a monorepo. Keep changes inside the narrowest owning subtree and avoid creating cross-component coupling unless the feature requires it.
Repository map
coding_tools_mcp/: core Python MCP runtime and public server behavior.apps/desktop-client/: desktop client UI and desktop runtime integration.integrations/tunnels/: user-facing tunnel launchers for remote MCP access.infra/cloudflare/sandbox-control/: Cloudflare Worker control plane paired with.github/workflows/start-sandbox.yml.packages/npm-launcher/: thin npm launcher for the Python package.media/promo-video/: Remotion source for the project promo video.benchmarks/: benchmark runners and fixtures.reports/: generated/published benchmark and compliance results.docs/: user, contributor, architecture, and reference documentation.scripts/: repository maintenance, validation, installation, release, and report-generation scripts. Do not put user-facing runtime integrations here.
Standing rules
- Preserve public CLI names, Python import paths, protocol schemas, and release behavior unless a task explicitly requires a breaking change.
- Keep one authoritative home for each fact; link to it instead of copying long explanations between documents.
- Changes to
infra/cloudflare/sandbox-control/and.github/workflows/start-sandbox.ymlmay form one interface contract. Update and validate them together. - Prefer subtree-specific instructions when present.
- Run the narrowest relevant checks first, then broader checks when tooling is available.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 25 lines · 329 tokens per session scan A 6cdb491c8d9e
coding-tools-mcp AGENTS.md is an instructions file published in the GitHub repository xyTom/coding-tools-mcp (956 stars, last pushed 9d ago), licensed Apache-2.0. It adds 329 tokens to every session, about $0.0016 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
EchoBird AGENTS.md
AGENTS.md instructions for edison7009/EchoBird, covering agents.md — echobird, project shape, ci gates (must pass locally before pushing), lesson (learned the hard way) and verification habits.
Agentkey AGENTS.md
Instructions for chainbase-labs/Agentkey, covering agents.md, what this repo is, directory structure, key commands and test a local edit against every detected agent.
superdesign-skill AGENTS.md
Instructions for superdesigndev/superdesign-skill, covering project agent memory, what this repo is, skill flow invariant: two entry paths, ground truth for cli behavior and plugin packaging & release.
iPolloWork AGENTS.md
AGENTS.md instructions for Devin-AXIS/iPolloWork, covering agents.md, what ipollowork is, core philosophy, pull request expectations (fast merge) and validate every experience.
seektty AGENTS.md
Instructions for Hilbert-beinghappy/seektty: This repository ships one out-of-tree DeepSeek Harness Bundle. Harness remains the only owner of Agent, Session, model, settings, permissions, Profile, plugin, and persistence state.
causal-memory CLAUDE.md
Instructions for JingxuanC/causal-memory, covering causal memory mcp integration, causal memory integration, after acting on a decision and observing the result, when something fails unexpectedly and when a recorded lesson turns out to be wrong.