Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add favcrm/mcp --skill favcrm-agentic-registrationgit clone --depth 1 https://github.com/favcrm/mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/favcrm/mcp/favcrm-agentic-registration)<a href="https://agentmods.dev/skills/favcrm/mcp/favcrm-agentic-registration"><img src="https://agentmods.dev/badge/skills/favcrm/mcp/favcrm-agentic-registration/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/favcrm/mcp/favcrm-agentic-registration"><img src="https://agentmods.dev/badge/skills/favcrm/mcp/favcrm-agentic-registration.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00052 | $0.00497 |
| Opus 5 | $0.00026 | $0.00249 |
| Sonnet 5 | $0.00010 | $0.00099 |
| Haiku 4.5 | $0.00005 | $0.00050 |
Grade A, and why
favcrm-agentic-registration scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
FavCRM Agentic Registration
Use this skill when a new user wants to sign up for FavCRM without leaving an MCP client. The real product flow is the no-auth MCP tool pair register_organisation_request -> register_organisation_verify.
Operating Rules
- Primary MCP path is
register_organisation_requestfollowed byregister_organisation_verify. - When operating through a shell, the
favcrmCLI supports the same no-auth flow withfavcrm signup requestandfavcrm signup verify. - Treat
/v6/dev/signupand/v6/dev/verifyas REST sandbox fallback/docs only. - Never ask the user to paste the API key into a repo, prompt history file, shared config, or source code.
- If the user already has a FavCRM account, tell them to sign in and create an MCP key from portal settings.
Required Inputs
email: owner email that receives the 6-digit code.organisationName: business or brand name.
Optional Inputs
industry: one ofbeauty,fitness,tutoring,retail,hospitality,services,other.country: ISO 3166-1 alpha-2 country code, such asHK,US,GB.timezone: IANA timezone, such asAsia/Hong_Kong.
Standard Flow
- Collect required inputs and optional fields if known.
- Call
register_organisation_request. - Tell the user to check the masked email for the 6-digit code.
- When the user provides the code, call
register_organisation_verifywithrequestIdandcode. - Return the
loginUrl, workspace IDs if useful, and secure key handling guidance. - Tell the user to set the API key as the MCP Bearer token or environment variable for future calls. If using the CLI,
favcrm signup verifysaves the key by default unless--no-saveis used.
Read references/agentic-registration-flow.md for exact call shapes and failure handling.
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 39 lines · 52 tokens per session scan A 03ba4cf8c089
favcrm-agentic-registration is a skill published in the GitHub repository favcrm/mcp (0 stars, last pushed 7d ago), licensed MIT. It adds 52 tokens to every session and 497 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
remnote
Search, read, and write RemNote notes and personal knowledge base content via remnote-cli. Use for note-taking, journaling, tags, tables, and knowledge-base navigation; require confirm write before mutating commands.
remnote-kb-navigation
Template skill for navigating a user's RemNote knowledge base using root and top-level note IDs; customize before use.
lain
Structural code intelligence for AI coding agents. Use this skill when the user wants to understand how a codebase is organized (modules, call graphs, file dependencies), find where to start reading, trace the impact of a change, find code by meaning, or understand what a symbol does in its full context. Do NOT use…
workspace-mirror
Sync and backup Antigravity IDE sessions, transcripts, SQLite database metadata, and brain artifacts locally into a structured workspace directory (.gemini-local/) with a rich interactive viewer.html page. Use this skill whenever the user mentions backups, workspace syncing, fswatch real-time mirroring, viewing…
skill-creator
Create or update AgentSkills. Use when designing, structuring, or packaging skills with scripts, references, and assets.
sast-fileupload
Detect insecure file upload vulnerabilities in a codebase using a three-phase approach: discovery (find all upload sites), batched verify (check extension bypass and related issues in parallel subagents, 3 sites each), and merge (consolidate batch results). Requires sast/architecture.md (run sast-analysis first).…