Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/stunt-double/stuntdouble-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/rules/stunt-double/stuntdouble-mcp/stuntdouble-basics)<a href="https://agentmods.dev/rules/stunt-double/stuntdouble-mcp/stuntdouble-basics"><img src="https://agentmods.dev/badge/rules/stunt-double/stuntdouble-mcp/stuntdouble-basics/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/rules/stunt-double/stuntdouble-mcp/stuntdouble-basics"><img src="https://agentmods.dev/badge/rules/stunt-double/stuntdouble-mcp/stuntdouble-basics.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00966 | $0.00966 |
| Opus 5.5 | $0.00386 | $0.00386 |
| Sonnet 5.5 | $0.00193 | $0.00193 |
| Haiku 4.5 | $0.00097 | $0.00097 |
Grade A, and why
stuntdouble-basics scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 44 lines — stays where its author put it; the contents beside it link to each section on GitHub.
stuntdouble-basics:
- Stunt Double runs AI actors (user personas) that drive real browsers through products and return evidence. Auth is OAuth 2.1 with PKCE; no API keys.
- Start with
list_workspaces, thenlist_projects; always pass a workspace. Anything with a reachable URL can be tested (production, staging, previews, published prototypes). searchfinds anything in a workspace by name or content (usetypesandproject_idto narrow). Search before you create, and prefer it over listing and filtering. It only returns workspaces you belong to.
Actors:
- Name like "FirstName - Role", give a description and system prompt, and cover varied segments (new, power, enterprise, accessibility, mobile).
add_actor_knowledgeis for what one actor needs to remember. - Conversations are read-only over MCP (
list_conversations,get_conversation). To probe actors for research or design review, run an interview.
Workflows and checklists:
- Workflows validate multi-step journeys; checklists are point-in-time quality checks. Runs are async: poll
get_workflow_runorget_checklist_run. create_workflow(trigger_type "schedule" or "webhook"), thenadd_workflow_steponce per step in run order; a workflow with no steps does nothing. Steps run along their connections: checkexecution_orderandunreachable_step_idsfromget_workflowbefore activating.- Schedules need a timezone: pass
{ cron, timezone }intrigger_configusing the timezone fromget_me, or the run lands at that hour in UTC.
Feedback:
- Lifecycle: new, reviewed, resolved (or dismissed for false positives). Cross-reference with actors and workflows for patterns and coverage gaps.
Interviews:
- Build the guide (
add_interview_section,add_interview_itemwithquestionortask) beforelaunch_interview. Add participants withadd_interview_participant(actor_id, orpersona_specwithname,bio,traits). - Launch is async; follow with
get_interviewandget_interview_participant, readget_interview_report, and useregenerate_interview_reportafter transcripts change.
Guidelines (workspace standards):
- A guideline is a standing rule (design system, tone of voice, brand, accessibility, compliance and so on) owned by the workspace and attached to projects. Enabled rules are rendered into every checklist run, design review, interview and triage for the project, so read
list_project_guidelinesfirst and assert the rules rather than restating them. - Check
list_workspace_guidelines, then write once withadd_project_guideline(library plus this project) oradd_workspace_guideline(library only), and reuse elsewhere withset_project_guideline.update_workspace_guidelinewithapply_to_design_reviewsalso covers Slack and Linear reviews, which have no project. - To enforce a standard: codify it as a guideline, assert it with checklist checks a user could verify on the rendered page, then re-run via
create_workflowon a schedule or deploy and design events.
Stunt Double Index (how AI agents experience websites):
- For agent readiness or AI visibility questions use
get_index_report(adomain, or aproject_id),list_index_sessionsto explain a score, andsearch_index_domainsto compare. Index data is public. - For a site the Index does not track yet,
request_index_scoreadds it with a first score (light probes;include_agent_sessionsfor live sessions). It never rescores a tracked site. request_index_rerunspends about 24 agent sessions, is owner-only and allowed once every 10 minutes: use it after shipping changes, not to refresh a current report.
Scope:
get_workspacesettings(public sharing, widget, workers, network policy) are admin ceilings a project cannot override.- Projects are archived, never deleted; archived projects and their contents read as missing.
list_project_mcp_serversshows which MCP servers a project's runs can reach.
Prompts: the server ships recipes, usually surfaced as slash commands: validate_design, verify_change, run_user_research, triage_feedback, setup_guardrails, check_brand, check_design_system, check_compliance, check_continuity, stuntdouble_guide.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago Changed · +1 lines · +50 tokens per session 211876387138
- 18d ago Changed · -27 lines · -803 tokens per session d74e8912ce3c
- 22d ago Changed · -12 tokens per session 7427155228c7
- 1mo ago Changed · +5 lines · +204 tokens per session bdef01d8eda1
- 1mo ago Changed · +1 lines · +82 tokens per session 8439fd7d8197
- 2mo ago First seen · 64 lines · 1,445 tokens per session scan A 8762a1404d84
stuntdouble-basics is a cursor rule published in the GitHub repository stunt-double/stuntdouble-mcp (1 stars, last pushed 3d ago), licensed MIT. It adds 966 tokens to every session, about $0.0039 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other cursor rules, from other repositories
cypress-integration-testing-cursorrules-prompt-file
Cursor rules for Cypress development with integration testing.
playwright-integration-testing-cursorrules-prompt-file
Cursor rules for Playwright development with integration testing.
playwright-defect-tracking-cursorrules-prompt-file
Cursor rules for Playwright development with defect tracking.
playwright-e2e-testing-cursorrules-prompt-file
Cursor rules for Playwright development with E2E testing.
cypress-e2e-testing-cursorrules-prompt-file
Cursor rules for Cypress development with E2E testing.
playwright-api-testing-cursorrules-prompt-file
Cursor rules for Playwright development with API testing.