Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/aicayzer/bigquery-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/rules/aicayzer/bigquery-mcp/default)<a href="https://agentmods.dev/rules/aicayzer/bigquery-mcp/default"><img src="https://agentmods.dev/badge/rules/aicayzer/bigquery-mcp/default/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/rules/aicayzer/bigquery-mcp/default"><img src="https://agentmods.dev/badge/rules/aicayzer/bigquery-mcp/default.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00361 | $0.00361 |
| Opus 5.5 | $0.00144 | $0.00144 |
| Sonnet 5.5 | $0.00072 | $0.00072 |
| Haiku 4.5 | $0.00036 | $0.00036 |
Grade A, and why
default scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
BigQuery MCP Development Standards
Code Quality
- Write clean, efficient, minimal code
- No unnecessary complexity or over-engineering
- Follow existing patterns and conventions
- Use descriptive variable names, avoid abbreviations
Version Control
- Update version numbers consistently across all files when making releases
- Use semantic versioning (MAJOR.MINOR.PATCH)
- Keep commits focused and atomic
- Write clear, concise commit messages
Code Standards
- Run
ruff formatbefore committing - Run
ruff check --fixto resolve linting issues - Add type hints for function parameters and returns
- Include docstrings for public functions and classes
Testing
- Add tests for new functionality
- Run
pytestbefore committing - Ensure all tests pass in CI
Documentation
- Keep documentation minimal and focused
- Update relevant docs when changing functionality
- Use clear, direct language - no fluff or emojis
- Focus on what users need to know, not implementation details
Changelog Formatting
- Use clean, elegant formatting without bold text
- Write concise, descriptive entries
- No unnecessary formatting or emphasis
- Keep entries focused on what actually changed
Architecture
- Prefer command-line arguments over config files
- Keep dependencies minimal
- Follow MCP protocol standards
- Maintain backwards compatibility when possible
Error Handling
- Use custom exception classes for specific error types
- Provide actionable error messages
- Log errors appropriately for debugging
User Preferences
- Avoid over-engineering and unnecessary complexity
- Don't overthink security implementations unless specifically requested
- Focus on what's needed, not what could be possible
- Maintain high repository standards suitable for GitHub
- Keep configuration clean with proper .example files and gitignored personal configs
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 54 lines · 361 tokens per session scan A 2841cccb6c13
default is a cursor rule published in the GitHub repository aicayzer/bigquery-mcp (2 stars, last pushed 1y ago), licensed MIT. It adds 361 tokens to every session, about $0.0014 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other cursor rules, from other repositories
postgresql
PostgreSQL production rules. Safe migrations, parameterized queries, TIMESTAMPTZ, proper indexing strategy.
python-app
Here's how the python application is organized.
supabase-auth-security
Supabase auth security — enforces getUser() over getSession() on the server.
supabase-rls
Supabase Row Level Security enforcement.
schema-design
Database schema design conventions and standards. Apply when designing schema or migrations.
cockroachdb-app-patterns
Application-level best practices and anti-patterns when building applications on CockroachDB. Covers transaction retry logic, ORM configuration, schema design, connection management, online DDL, batching, session guardrails, and multi-region patterns. Based on real-world production patterns from…