Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add GeckoVision/gecko-surf --skill gecko-setupgit clone --depth 1 https://github.com/GeckoVision/gecko-surfWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/geckovision/gecko-surf/gecko-setup)<a href="https://agentmods.dev/skills/geckovision/gecko-surf/gecko-setup"><img src="https://agentmods.dev/badge/skills/geckovision/gecko-surf/gecko-setup/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/geckovision/gecko-surf/gecko-setup"><img src="https://agentmods.dev/badge/skills/geckovision/gecko-surf/gecko-setup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00075 | $0.00832 |
| Opus 5.5 | $0.00030 | $0.00333 |
| Sonnet 5.5 | $0.00015 | $0.00166 |
| Haiku 4.5 | $0.00007 | $0.00083 |
Grade A, and why
gecko-setup scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
allowed-tools: Bash(curl:*), Bash(claude:*), Bash(npx:*), Bash(uvx:*), Bash(command:*) How it starts
The opening of the file, as written. The whole thing — 77 lines — stays where its author put it; the contents beside it link to each section on GitHub.
gecko-setup — install the hosted Gecko surface and prove it works
Your goal: connect the hosted MCP surface to the client you are running in, sign in, and verify with one real call. Gecko answers questions about companies: it picks the data sources, shows the price before anything is spent, and returns every value with its source, date and cost. It never holds your keys and never signs.
Step 1: Fetch the canonical config
One file carries every client's exact wiring — always start from it rather than hand-typing URLs:
curl -s https://geckovision.tech/mcp-config.json
Step 2: Install for THIS client
- Claude Code:
claude mcp add --transport http gecko https://mcp.geckovision.tech/anyquery/mcp - Claude web / desktop: Settings -> Connectors -> Add custom connector with
the
clients.claude_web.connector_urlfrom the config (the web UI takes only the URL — no JSON there). - Cursor: merge
clients.cursor.jsoninto~/.cursor/mcp.json. - VS Code: merge
clients.vscode.jsoninto.vscode/mcp.json. - Anything else that reads mcp.json:
clients.generic_mcp_json.
Step 3: Sign in once
This surface needs a credential. A client that supports MCP sign-in (OAuth)
opens a sign-in page on first connect: the user gives an email and types the
code that arrives. Raw HTTP or a client without OAuth mints a Gecko key
self-serve and sends Authorization: Bearer <key>; the steps are in
https://geckovision.tech/auth.md. Keep the key in the environment or the OS
keychain, never in a chat message.
Step 4: Verify with a real call
List the new server's tools, then call plan_query with a plain question. It
returns the fields, the sources it would use and a quote, and spends nothing.
Setup is DONE when that call answers. A config edit alone is not done, and a
401 means no credential reached the server.
Paid tools (run_query, cnpj_lookup, open_dataset_download) quote first
and charge only on a second call with the quote id and confirm: true. Show
the user the quote and get a yes first.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago Changed · +17 lines · +4 tokens per session e57b06bc2a68
- 1mo ago First seen · 60 lines · 71 tokens per session scan A 9e3c0674366d
gecko-setup is a skill published in the GitHub repository GeckoVision/gecko-surf (22 stars, last pushed 5d ago), licensed Apache-2.0. It adds 75 tokens to every session and 832 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.
Other skills, from other repositories
aident-loadout
Run multi-step work across apps the user connected in Aident Loadout: live action schemas, connection checks, cost preflight, and approval before side effects.
okf-loom
Load this repo skill when working with Open Knowledge Format (OKF) bundles: validate, search, discover, update, render, serve the live studio, author concepts, or use the bundled OKF docs. The repo is the distribution unit; run scripts from the checkout with scripts/okf-loom.
llmwiki-serve
Use this skill when a coding agent needs local wiki context from a configured llmwiki-serve instance. The server is read-only from the client perspective and is addressed through the LLMWIKISERVEURL environment variable.
gaia-meta-sweep
Appraise the complete post-ingest Gaia tree: run 13 deterministic audit dimensions, recompute evidence, Trust Magnitude and rank eligibility, use Jev/Luna for bounded semantic review, adversarially verify findings, and report structural proposals. Gaia computes authority; Jev is read-only advice; humans ratify all…
gaia-full-pipeline
End-to-end Gaia curation pipeline orchestrator. Routes each phase to its dedicated skill and keeps you on track from first discovery to closed intake. Use when starting a fresh curation run or when you want a single skill to hold the sequence together without duplicating each phase's instructions. Trigger phrases…
impeccable
Use when the user wants to design, redesign, shape, critique, audit, polish, clarify, distill, harden, optimize, adapt, animate, colorize, extract, or otherwise improve a frontend interface. Covers websites, landing pages, dashboards, product UI, app shells, components, forms, settings, onboarding, and empty states.…