Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add rules/evilfreelancer/zaezd/mcp-layergit clone --depth 1 https://github.com/EvilFreelancer/zaezdWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.01260 |
| Opus 5 | $0.00000 | $0.00630 |
| Sonnet 5 | $0.00000 | $0.00252 |
| Haiku 4.5 | $0.00000 | $0.00126 |
Grade A, and why
mcp-layer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 102 lines — stays where its author put it; the contents beside it link to each section on GitHub.
MCP layer: three tools and one widget
src/mcp/ exposes the product to agents. It is an adapter: it validates input, calls the
orchestrator, and shapes the answer. No business logic lives here.
The three tools
| Tool | Arguments | Returns |
|---|---|---|
find_event_trips |
topics[], origin, budget?, date_from?, date_to?, adults? |
the event, up to three packages, the coverage note, a link to the web version |
get_trip_details |
trip_id, package |
package details, hotel, rates, weather when available |
create_trip_checkout |
trip_id, package |
a checklist of two or three links, each carrying its actual kind |
These exact names appear in the code, the README, the user guide and the architecture diagram. Renaming one means renaming it everywhere in the same change.
- All three declare
outputSchemaand returnstructuredContent. This is precisely the gap measured in Tutu MCP, and closing it removes a whole class of client parse errors. - Annotations are honest:
readOnlyHint: trueanddestructiveHint: falseon all three,idempotentHint: falseoncreate_trip_checkoutbecause the links expire. - Input validation is forgiving (see @data-sources.mdc): arrays accepted as array, JSON string or comma-separated string; numeric strings coerced; a missing argument object treated as empty. Reject nothing that can be understood.
What this layer must not do
- Proxy raw Tutu tools outward. The point of the gateway is a product contract of three verbs, not a re-export of sixteen searches.
- Keep trip state on the server.
trip_idis a compact encoding of the request, not a key in a store, and/t/:idis reproducible from it alone. - Create a cart. The user opens the link and the cart appears in their own Tutu session. That is Tutu's legal model and it is not ours to work around.
- Store a checkout link in a snapshot. Links are rebuilt live on click; if the live call
fails, fall back to
search_results_urlwith an honest label.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 102 lines · 0 tokens per session scan A 2f5820fce78f
mcp-layer is a cursor rule published in the GitHub repository EvilFreelancer/zaezd (1 stars, last pushed 13d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,260 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other cursor rules, from other repositories
agoragentic-sell
Prepare an Agoragentic capability for commercial listing or paid routing. Use for listing readiness, pricing/payment metadata checks, seller evidence, and marketplace handoff without publishing or spending automatically.
cursorrules
When the user asks about planthire, use planthire-ai-mcp tools: searchequipment, getrentalquote, checkavailability, createbooking, getsafetychecklist.
cursorrules
When the user asks about price tracker, use price-tracker-ai-mcp tools: trackprice, getpricehistory, setalert, compareprices.
cursorrules
When the user asks about inventory management, use inventory-management-ai-mcp tools: reorderpoint, demandforecast, skuoptimizer, warehouselayout, shrinkagedetector.
cursorrules
When the user asks about ecommerce, use ecommerce-ai-mcp tools: writeproductdescription, optimizepricing, summarizereviews, forecastinventory, generateseometa.
custom-rules
Cursor rule "custom-rules" from Mithgroth/fakestore-mcp, covering core project requirements, development strategy: ui-first approach, technical architecture guidelines, development approach and code quality standards.