Borrowing it
Nothing to install: this file belongs to javimosch/supercli. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/javimosch/supercli/master/.agents/skills/supercli_mcp_dev/SKILL.mdgit clone --depth 1 https://github.com/javimosch/supercliWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/javimosch/supercli/supercli_mcp_dev)<a href="https://agentmods.dev/skills/javimosch/supercli/supercli_mcp_dev"><img src="https://agentmods.dev/badge/skills/javimosch/supercli/supercli_mcp_dev/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/javimosch/supercli/supercli_mcp_dev"><img src="https://agentmods.dev/badge/skills/javimosch/supercli/supercli_mcp_dev.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00061 | $0.01932 |
| Opus 5.5 | $0.00024 | $0.00773 |
| Sonnet 5.5 | $0.00012 | $0.00386 |
| Haiku 4.5 | $0.00006 | $0.00193 |
Grade A, and why
supercli-mcp-dev scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl http://localhost:3002/tool -X POST \ How it starts
The opening of the file, as written. The whole thing — 271 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Supercli MCP Development
Work on MCP (Model Context Protocol) features in supercli including adapter implementation, SSE streaming support, and server integration.
MCP Adapter Architecture
The MCP adapter (cli/adapters/mcp.js) supports multiple transport modes:
Transport Modes
- HTTP/SSE MCP: HTTP-based MCP servers with SSE streaming
- Stdio MCP with Daemon: Local stdio MCP servers routed through daemon
- Stdio MCP Direct: Direct stdio calls (may have compatibility issues)
Key Components
execute(): Main entry point, routes to appropriate transportcallHttpMcpTool(): HTTP/SSE MCP handler with JSON-RPC supportparseSseResponse(): SSE event parsercallStdioTool(): Direct stdio executionstdioCallToolJsonRpc(): Stdio JSON-RPC protocol handlercallDaemonTool(): Daemon-routed stdio calls
HTTP/SSE Implementation
Request Format
Uses JSON-RPC 2.0 format for HTTP MCP calls:
{
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"name": toolName,
"arguments": input
},
"id": 1
}
Headers
Must include both content types for SSE negotiation:
{
"Content-Type": "application/json",
"Accept": "text/event-stream, application/json"
}
SSE Response Parsing
Parses Server-Sent Events format:
- Lines starting with
event:define event type - Lines starting with
data:contain event data - Empty lines terminate events
- Accumulates chunks and returns final result
Auto-detection
Automatically detects SSE responses via Content-Type header and falls back to JSON if not SSE.
Stdio MCP with Daemon
Configuration
{
"adapterConfig": {
"server": "mcp-server-name",
"tool": "tool-name",
"stateful": true,
"timeout_ms": 60000
}
}
Daemon Client
- File:
cli/mcp-daemon-client.js - Functions:
callDaemonTool(),listDaemonTools() - Maintains persistent sessions for stateful MCP servers
- Daemon runs on CLI side (not server) - starts on-demand when first command with
stateful: trueis executed via CLI - Runs as detached background process with Unix socket at
~/.supercli/mcp-daemon.sock - Persists across command executions to maintain MCP server sessions
- Better for long-running stdio MCP servers
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 271 lines · 61 tokens per session scan A 475b96262850
supercli-mcp-dev is a skill published in the GitHub repository javimosch/supercli (56 stars, last pushed today), licensed MIT. It adds 61 tokens to every session and 1,932 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-29.
Other skills, from other repositories
sandbox-next
Build or maintain Cloudflare Sandbox apps on @cloudflare/sandbox@next (SDK 1.0 preview). Use sandbox-migrate-to-next when porting a stable app.
durable-objects
Build, debug, or review Cloudflare Durable Objects code for persistent state and coordination.
cloudflare-email-service
Implement or troubleshoot Cloudflare Email Sending and Email Routing integrations and their delivery configuration.
workers-best-practices
Cloudflare Workers best practices for production applications. Use when writing, reviewing, or configuring Workers.
k2
Build and troubleshoot Cloudflare K2 or K2 Streams durable logs. Use for stream setup, producing from Workers or HTTP, configuring retention and inputs, and consuming through subscriptions.
news-search
Search current news for a topic, company, competitor, or hook and return dated, attributed articles. Uses the newsjack CLI and Medialyst REST API when available, tries direct Medialyst MCP if the CLI is missing, and falls back to host web/browser search with explicit caveats only when neither cloud path is available.