Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/alignbase/sunpeak/test-mcp-servernpx skills add Alignbase/sunpeak --skill test-mcp-servergit clone --depth 1 https://github.com/Alignbase/sunpeakWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00074 | $0.04904 |
| Opus 5 | $0.00037 | $0.02452 |
| Sonnet 5 | $0.00015 | $0.00981 |
| Haiku 4.5 | $0.00007 | $0.00490 |
Grade A, and why
test-mcp-server scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 461 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Test MCP Server
sunpeak includes a testing framework that works with any MCP server, regardless of language or framework. It provides four testing layers: e2e tests (inspector-based), visual regression, live tests (against real ChatGPT), and evals (multi-model tool calling).
For sunpeak app projects, testing integrates automatically. For non-sunpeak MCP servers (Python, Go, Rust, etc.), sunpeak test init scaffolds a self-contained test directory.
Getting Started
sunpeak test init # Interactive setup (detects project type)
sunpeak test init --server http://localhost:8000/mcp # URL-based server
sunpeak test init --server "python server.py" # Command-based server
sunpeak test init detects three project types:
- sunpeak projects -- Adds
defineConfig()and eval boilerplate - JS/TS projects -- Adds Playwright config, smoke test, and evals at project root
- Non-JS projects -- Creates a self-contained
tests/sunpeak/directory with its ownpackage.json
Getting Reference Code
Clone the sunpeak repo for working test examples:
git clone --depth 1 https://github.com/Alignbase/sunpeak /tmp/sunpeak
Test examples live at /tmp/sunpeak/packages/sunpeak/template/tests/. This includes e2e tests, simulations, evals, and live tests.
Commands
sunpeak inspect # Inspect any MCP server in the inspector (standalone)
sunpeak test # Run unit (if configured) + e2e tests
sunpeak test --e2e # Run e2e tests only (Playwright)
sunpeak test --visual # Run e2e tests with visual regression comparison
sunpeak test --visual --update # Update visual regression baselines
sunpeak test init # Scaffold test infrastructure into a project
sunpeak test --live # Run live tests against real ChatGPT (requires tunnel + browser session)
sunpeak test --eval # Run evals against multiple LLM models (requires API keys)
sunpeak test --unit # Run unit tests (sunpeak app framework only, not standalone)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 461 lines · 74 tokens per session scan A fd2c07b52d25
test-mcp-server is a skill published in the GitHub repository Alignbase/sunpeak (214 stars, last pushed 4d ago), licensed MIT. It adds 74 tokens to every session and 4,904 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
pr-to-video
Turn a GitHub pull request (a PR URL, owner/repo#N, or 'this PR' in a checked-out repo) into a code-change explainer video — changelog, feature reveal, fix, or refactor walkthrough built from the diff, commits, and files: the input is a code change, not a website. Not a product promo (/product-launch-video) or a no-PR…
slideshow
Author a HyperFrames slideshow — a presentation, pitch deck, or interactive deck with discrete slides, fragment reveals, branching, hotspot navigation, and built-in presenter mode with speaker notes; also converts an existing page into a deck. Output is a navigable deck, not a rendered MP4. If the user didn't…
general-video
Author or edit a custom HyperFrames composition when no specialized workflow fits, or when BRIEF.md sets flow: companion. Use for longer or multi-scene pieces, brand and sizzle reels, montages, static loops, static title cards, footage remixes, and freeform builds. Use motion-graphics instead for a short unnarrated…
motion-graphics
A short, design-led motion graphic where motion is the message — kinetic typography, stat count-up, chart/data-viz hit, logo sting / brand lockup, lower-third / callout / social overlay, animated map (highlight regions, connect places, zoom to a location), animated tweet / news-article / headline, webpage / UI…
implementation-final-review
Perform the repository's risk-tiered independent final review before implementation completion. Use only when explicitly invoked or when repository instructions require it after behavior-impacting implementation work; audit the complete task diff, supported contracts, lifecycle and security boundaries, complexity, and…
hyperframes-core
The HyperFrames composition contract — build one renderable project. Use for composition structure, the data- timing attributes, class="clip", tracks, sub-compositions, variables, framework-owned media playback, deterministic-render rules, and validation. Also covers Tailwind projects and the STORYBOARD.md / SCRIPT.md…