Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/GoranErhartic/cursor-development-rulesWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/rules/goranerhartic/cursor-development-rules/http-clients)<a href="https://agentmods.dev/rules/goranerhartic/cursor-development-rules/http-clients"><img src="https://agentmods.dev/badge/rules/goranerhartic/cursor-development-rules/http-clients/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/rules/goranerhartic/cursor-development-rules/http-clients"><img src="https://agentmods.dev/badge/rules/goranerhartic/cursor-development-rules/http-clients.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00017 | $0.00279 |
| Opus 5.5 | $0.00007 | $0.00112 |
| Sonnet 5.5 | $0.00003 | $0.00056 |
| Haiku 4.5 | $0.00002 | $0.00028 |
Grade A, and why
http-clients scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
HTTP Clients (Spring Boot)
RestClient
- RestClient.create() or builder; get/post/put/delete; uri(), header(), body(); retrieve() or exchange(); type with ParameterizedTypeReference for generics.
- Set base URL from config; timeout (ClientHttpRequestFactory); interceptors for auth (Bearer), correlation ID header, logging.
- Error handling: onStatus to map 4xx/5xx to exception or Result; use DefaultResponseErrorHandler or custom.
Declarative (HttpInterface)
- @HttpExchange on interface; @GetExchange, @PostExchange with path; @RequestHeader, @RequestBody, @PathVariable, @RequestParam.
- Return type: DTO, Mono/Flux (WebClient), or HttpEntity; register interface as bean with HttpServiceProxyFactory.
- Use for typed, centralized API contracts.
Conventions
- Base URL and timeouts from config; retry/circuit breaker via Resilience4j; correlation ID in header; type-safe responses; do not log full body.
Anti-Patterns
- No timeout; no retry for transients; hardcoded URL; logging request/response body with secrets
See also: resilience.mdc, aggregation.mdc
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 28 lines · 17 tokens per session scan A a946a283cbc3
http-clients is a cursor rule published in the GitHub repository GoranErhartic/cursor-development-rules (19 stars, last pushed 7mo ago), licensed MIT. It adds 17 tokens to every session and 279 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other cursor rules, from other repositories
springboot-jpa-best-practices
A set of Chinese-language rules for structuring Java Spring Boot applications that use JPA, a library for database access.
graftcode-java
Mandatory Graftcode architecture rules for building Java backend services (plain Maven/Gradle modules exposed via Graftcode Gateway, not REST).
spring-boot-architecture
Spring Boot Java architecture contract for feature packaging, service boundaries, repositories, DTOs, mappers, and controller dependencies.
spring-boot-http-client
Spring Boot outbound HTTP contract for RestClient beans, timeouts, and repository-side remote calls.
spring-retry-conventions
Spring Boot database retry conventions using AbstractDatabaseService and RetryTemplate.
java-springboot-standards
Java Spring Boot coding standards and patterns for your monorepo services.