Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add metaspartan/cybara --skill mcportergit clone --depth 1 https://github.com/metaspartan/cybaraWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/metaspartan/cybara/mcporter)<a href="https://agentmods.dev/skills/metaspartan/cybara/mcporter"><img src="https://agentmods.dev/badge/skills/metaspartan/cybara/mcporter.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00041 | $0.00406 |
| Opus 5 | $0.00020 | $0.00203 |
| Sonnet 5 | $0.00008 | $0.00081 |
| Haiku 4.5 | $0.00004 | $0.00041 |
Grade A, and why
mcporter scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
94% identical to mcporter — 25 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
What it actually says
mcporter
Use mcporter to work with MCP servers directly.
Quick start
mcporter listmcporter list <server> --schemamcporter call <server.tool> key=value
Call tools
- Selector:
mcporter call linear.list_issues team=ENG limit:5 - Function syntax:
mcporter call "linear.create_issue(title: \"Bug\")" - Full URL:
mcporter call https://api.example.com/mcp.fetch url:https://example.com - Stdio:
mcporter call --stdio "bun run ./server.ts" scrape url=https://example.com - JSON payload:
mcporter call <server.tool> --args '{"limit":5}'
Auth + config
- OAuth:
mcporter auth <server | url> [--reset] - Config:
mcporter config list|get|add|remove|import|login|logout
Daemon
mcporter daemon start|status|stop|restart
Codegen
- CLI:
mcporter generate-cli --server <name>or--command <url> - Inspect:
mcporter inspect-cli <path> [--json] - TS:
mcporter emit-ts <server> --mode client|types
Notes
- Config default:
./config/mcporter.json(override with--config). - Prefer
--output jsonfor machine-readable results.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 39 lines · 41 tokens per session scan A e7238bd1e658
mcporter is a skill published in the GitHub repository metaspartan/cybara (28 stars, last pushed today), licensed MIT. It adds 41 tokens to every session and 406 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. It is 94% identical to mcporter, differing in 25 lines, and is treated as a copy.
Other skills, from other repositories
kodama-verification
Define measurable success criteria and collect targeted test, build, lint, type-check, or smoke-test evidence before claiming work is complete.
kodama-behavior
Classify requests, assess unfamiliar codebases, delegate work safely, and recover from failed attempts. Use for multi-step, ambiguous, or parallelizable work.
kodama-constraints
Enforce non-negotiable safety, scope, security, and quality constraints for implementation and review work.
project-release-check
Validate this example project's release readiness. Use before publishing a release candidate.
marketing-ai-seo
Skill "marketing-ai-seo" from KornLabs/truss, covering ai seo, before starting, 1. current ai visibility, 2. content & domain and 3. goals.
anthropic-skill-development
Skill "anthropic-skill-development" from KornLabs/truss, covering skill development for claude code plugins, about skills, what skills provide, anatomy of a skill and progressive disclosure design principle.