Borrowing it
Nothing to install: this file belongs to zenml-io/mcp-zenml. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/zenml-io/mcp-zenml/main/CLAUDE.mdgit clone --depth 1 https://github.com/zenml-io/mcp-zenmlWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/zenml-io/mcp-zenml/claude-md)<a href="https://agentmods.dev/instructions/zenml-io/mcp-zenml/claude-md"><img src="https://agentmods.dev/badge/instructions/zenml-io/mcp-zenml/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/zenml-io/mcp-zenml/claude-md"><img src="https://agentmods.dev/badge/instructions/zenml-io/mcp-zenml/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.09342 | $0.09342 |
| Opus 5.5 | $0.03737 | $0.03737 |
| Sonnet 5.5 | $0.01868 | $0.01868 |
| Haiku 4.5 | $0.00934 | $0.00934 |
Grade A, and why
mcp-zenml CLAUDE.md scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- `scripts/test_runner_tls.py` - network-free regression checks for TLS rejection classification; `python scripts/check_runner_tls.py` probes healthy HTTPS and the compromised direct/cross-signed chains with Python, curl How it starts
The opening of the file, as written. The whole thing — 416 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CLAUDE.md
This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
Commands
Running and testing
- Run MCP server locally:
uv run server/zenml_server.py(stdio). For HTTP:uv run server/zenml_server.py --transport streamable-http --port 8001 - Smoke test (needs
ZENML_STORE_URL,ZENML_STORE_API_KEY,ZENML_ACTIVE_PROJECT_ID):uv run scripts/test_mcp_server.py server/zenml_server.py --profile compact --write-policy read_write. Pass--profile legacyor--write-policy read_onlyto check the other tool inventories; the test fails if the advertised tool list does not exactly matchzenml_tool_catalog.tool_names(). - Analytics test:
uv run scripts/test_analytics.py --full-diagnostic - Credential-free test suite (the same list CI runs in
pr-test.yml; run each withuv run):scripts/test_datetime_normalization.py- datetime filter normalization and exception classificationscripts/test_resource_registry.py,test_resource_operations.py,test_resource_mutations.py,test_resource_actions.py- the generic resource catalog and its read, create/update/delete and action dispatchscripts/test_resource_integration.py- skips its live part unless run through the disposable-server script belowscripts/test_sdk_contracts.py- checks the ZenML SDK method signatures the dispatcher calls still matchscripts/test_credential_isolation.py- uses the real SDK in separate processes with temporary credentials files to check that explicit API keys stay in memory while connections without API keys retainzenml loginsupportscripts/test_tool_contracts.py,test_tool_profiles.py- tool schemas, and which tools each profile/write policy advertisesscripts/test_step_logs.py-get_step_logsagainst fake ZenML servers: cursor paging on the 0.97+/logs/{id}/entriesendpoint, the fallback to/steps/{id}/logson 0.96,tail, thepossibly_truncatedflag and itsnote, and login through the ZenML client's sessionscripts/test_mcp_transport.py- the MCP 2.2 runtime: protocol negotiation, HTTP host/origin security, timeouts and cancellation, error sanitising, analytics allowlistscripts/test_mcp_apps.py- drives both MCP Apps in headless Chromium. Install the browser first withuv run --with playwright==1.64.0 playwright install --with-deps chromium, or pointPLAYWRIGHT_CHROMIUM_EXECUTABLEat an existing Chromiumscripts/test_distributions.py self-testscripts/test_runner_tls.py- network-free regression checks for TLS rejection classification;python scripts/check_runner_tls.pyprobes healthy HTTPS and the compromised direct/cross-signed chains with Python, curl, Git, and uv
- Live integration against a throwaway ZenML server:
bash scripts/run_disposable_resource_integration.sh. It starts a local ZenML OSS server (the version pinned inpyproject.toml) on a random loopback port with a temporary database, runstest_resource_integration.pyagainst it (real create/update/delete calls, plus a check that two projects with same-named resources stay separate), then deletes everything. No credentials needed. Extra opt-in integration gates (ZENML_MCP_ACTION_INTEGRATION,ZENML_MCP_RESTRICTED_INTEGRATION) need an external server; seeRELEASE.md. - Manifest check:
uv run scripts/generate_manifest_fields.py --check(drop--checkto regenerate thetools/promptsfields inmanifest.json). CI fails if the manifest does not match the registered tools. - MCPB bundle:
bash scripts/build_mcpb.shbuildsmcp-zenml.mcpb(needs Node/npm; CI uses Node 20).uv run scripts/test_distributions.py reproducible mcp-zenml.mcpbrebuilds it and checks the bytes match and the unpacked bundle starts and lists the right tools. - Docker:
docker build -t mcp-zenml:test . && uv run scripts/test_distributions.py docker mcp-zenml:test(the second command starts MCP inside the container and checks the tool list).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +1 lines · +98 tokens per session 7361772e5b50
- 3d ago Changed · +1 lines · +187 tokens per session 3cb3696ac351
- 5d ago Changed · +2 lines · +121 tokens per session feb42dc6e0c6
- 11d ago Changed 45ceed539843
- 1mo ago Changed · +2 lines · +811 tokens per session fdac01ddc75a
- 1mo ago Changed · +3 lines · +2,623 tokens per session 50ac51fe2cd4
- 1mo ago Changed · +10 lines · +331 tokens per session 429dd5ef44d7
- 2mo ago Changed · +203 tokens per session 56ea0b6648d8
- 2mo ago First seen · 397 lines · 4,968 tokens per session scan A b25ddcee6067
mcp-zenml CLAUDE.md is an instructions file published in the GitHub repository zenml-io/mcp-zenml (49 stars, last pushed 2d ago), licensed MIT. It adds 9,342 tokens to every session, about $0.0374 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
mcp-zenml CLAUDE.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| mcp-zenml CLAUDE.mdzenml-io/mcp-zenml | Instructions file | 49 | 2d ago | MIT | A | 9,342 | Claude Code |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 9,719 | GitHub Copilot |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 5,516 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | today | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | today | MIT | A | 4,680 | Codex, OpenCode |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 3,093 | GitHub Copilot |
| vscode model-prompts.instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 2,022 | GitHub Copilot |