Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/fxckcode/mcp-cor/cor-mcp-servernpx skills add fxckcode/mcp-cor --skill cor-mcp-servergit clone --depth 1 https://github.com/fxckcode/mcp-corWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00055 | $0.03225 |
| Opus 5 | $0.00028 | $0.01613 |
| Sonnet 5 | $0.00011 | $0.00645 |
| Haiku 4.5 | $0.00006 | $0.00323 |
Grade C, and why
cor-mcp-server scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
| `Command not found: uv` | uv not installed | Install: `curl -LsSf https://astral.sh/uv/install.sh | sh` | Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
| `Command not found: uv` | uv not installed | Install: `curl -LsSf https://astral.sh/uv/install.sh | sh` | How it starts
The opening of the file, as written. The whole thing — 310 lines — stays where its author put it; the contents beside it link to each section on GitHub.
COR MCP Server
What Is COR?
Project COR is a project management platform for creative and professional teams. It provides tools for:
- Project management — Create and manage projects, track budgets, costs, and profitability
- Task management — Assign tasks, set deadlines, track progress
- Client management — Manage clients, contracts, and billing
- Time tracking — Log hours, approve/reject entries, manage timesheets
- Team management — Organize users into teams, allocate resources
- Ratecards & Products — Define pricing and billing structures
- Resource allocation — Allocate team members to projects with percentages and dates
The COR MCP Server wraps the COR REST API (api.projectcor.com/v1) as 61 Model Context Protocol (MCP) tools, making them accessible from any MCP-compatible AI agent.
Architecture Overview
┌──────────────────────┐ ┌──────────────────────────────┐ ┌──────────────────────┐
│ MCP Client │ │ COR MCP Server │ │ COR REST API │
│ (Hermes / Claude / │◄───►│ (FastMCP + httpx) │────►│ api.projectcor.com │
│ Cursor / etc.) │ │ │ │ /v1 │
└──────────────────────┘ ├──────────────────────────────┤ └──────────────────────┘
│ Auth auto-detection │
│ • Email/Password (priority) │
│ • API Key + Client Secret │
└──────────────────────────────┘
Technology stack:
- FastMCP (
mcp[cli]>=1.0.0) — MCP server framework - httpx (
>=0.27.0) — Async HTTP client - python-dotenv (
>=1.0.0) — Environment variable management - Python 3.11+ — Async/await throughout
- Dual transport — stdio (for local agents) and SSE/HTTP (for remote access)
Project structure:
cor-mcp-server/
├── pyproject.toml # Dependencies and metadata
├── README.md # Full documentation
├── .env.example # Env var template
├── Dockerfile # Container deployment
├── skills/ # Hermes Agent skills
├── cor_mcp_server/
│ ├── __init__.py
│ ├── __main__.py # CLI entry point
│ ├── server.py # FastMCP + 61 tool registrations
│ ├── auth.py # Dual-mode OAuth 2.0
│ ├── client.py # Async HTTP client
│ ├── context.py # Shared client context
│ ├── models.py # Pydantic models
│ └── tools/ # 11 tool modules
│ ├── projects.py # 14 tools
│ ├── tasks.py # 10 tools
│ ├── time_tracking.py # 5 tools
│ ├── clients.py # 6 tools
│ ├── contracts.py # 5 tools
│ ├── messaging.py # 4 tools
│ ├── team.py # 8 tools
│ ├── labels.py # 1 tool
│ ├── ratecards.py # 3 tools
│ ├── allocations.py # 3 tools
│ └── products.py # 2 tools
└── tests/
└── test_tools.py # 24 passing tests (mocked)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 310 lines · 55 tokens per session scan C 361930fbd8d5
cor-mcp-server is a skill published in the GitHub repository fxckcode/mcp-cor (0 stars, last pushed 1mo ago), licensed MIT. It adds 55 tokens to every session and 3,225 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
plane-workflow
Create, update, audit, standardize, label, and organize Plane work items with the Plane Workflow MCP tools. Use when a user asks to create a Plane task or issue, turn a brief into a ticket, manage modules, or improve a Plane backlog.
agile-development
ServiceNow Agile Development 2.0 — the rmteam → rmsprint → rmstory → rmepic model, the state and point values ServiceNow actually accepts, how a story is attached to a sprint, and the reporting tools (board, burndown, velocity, capacity, standup, retrospective).
linear-oneshot
Find one-shottable WaniWani Linear tickets and scope them for autonomous execution. Use when the user says "triage one-shots", "find easy tickets", "find simple tickets", "one-shot triage", "qualify WAN-123", "scope WAN-123", "is this ticket one-shottable", or wants to label simple Linear tickets an agent can…
discover-work
Deep research across codebase, GitHub issues, discussions, project board, and architecture docs to discover new tasks, gaps, technical debt, and improvement ideas. Trigger when user says: discover work, find tasks, what needs doing, audit codebase, find gaps, technical debt audit, backlog discovery, brainstorm tasks…
building-glamorous-tuis
Build terminal UIs with Charmbracelet (Bubble Tea, Lip Gloss, Gum). Use when: Go TUI, shell prompts/spinners, "make CLI prettier", adaptive layouts, async rendering, focus state machines, sparklines, heatmaps, kanban boards, SSH apps.
ulc-loop
Start a Unified Loop Controller session via Ralph Wiggum. Autonomously works through backlog, dispatches agents, and explores via QD when idle.