Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/qubitonhq/qubiton-cursor-plugin/qubiton-setupnpx skills add qubitonhq/qubiton-cursor-plugin --skill qubiton-setupgit clone --depth 1 https://github.com/qubitonhq/qubiton-cursor-pluginWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/qubitonhq/qubiton-cursor-plugin/qubiton-setup)<a href="https://agentmods.dev/skills/qubitonhq/qubiton-cursor-plugin/qubiton-setup"><img src="https://agentmods.dev/badge/skills/qubitonhq/qubiton-cursor-plugin/qubiton-setup.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00102 | $0.01214 |
| Opus 5 | $0.00051 | $0.00607 |
| Sonnet 5 | $0.00020 | $0.00243 |
| Haiku 4.5 | $0.00010 | $0.00121 |
Grade B, and why
qubiton-setup scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads MCP configurationmediumAgent snooping
mcp.json carries server URLs and auth tokens; reading it lets a mod discover and abuse other integrations.
- The plugin's `mcp.json` header substitutes `${QUBITON_API_KEY}` at How it starts
The opening of the file, as written. The whole thing — 109 lines — stays where its author put it; the contents beside it link to each section on GitHub.
QubitOn setup
Introduce QubitOn MCP, get the user authenticated, verify the connection, and suggest a first validation to run.
Step 1: Introduction
Start with a short pitch so the user understands what QubitOn unlocks:
"QubitOn MCP connects your AI to global vendor and supplier data validation — addresses (USPS, Royal Mail, BAN, and 200+ country authorities), tax IDs (VAT, GSTIN, EIN, and many more), bank accounts (IBAN, SWIFT, ACH, and country-specific routing), phone and email validation, firmographic enrichment, and sanctions/PEP screening against OFAC, EU, UN, and UK HMT lists. Ask in plain language — 'validate this address', 'check this VAT number', 'screen this company against sanctions' — and I'll run it."
Then check connection.
Check connection
Attempt to list available QubitOn tools. Based on what you find:
- Tools are available: The user is already connected. Give a shorter intro — "You've got QubitOn MCP connected. Let me verify your setup and suggest a first test." — then skip to Step 3.
- No QubitOn tools available: The server is installed but needs authentication. Proceed to Step 2.
Step 2: Authentication
QubitOn MCP uses an API key sent in the apikey header.
-
Get an API key. Direct the user to www.qubiton.com:
- If they don't have an account: Get Started → sign up → verify email. A free plan with limited quota is available.
- Once signed in: Dashboard → API Keys → copy the key
(prefix
svm_...).
-
Configure the MCP client. The plugin's
mcp.jsonreferences aQUBITON_API_KEYenvironment variable. Two paths work:Path A — environment variable (preferred):
- Set
QUBITON_API_KEY=<key>in the shell where you launch Cursor (e.g., your shell profile,.zshenv/.bashrc). Relaunch Cursor. - The plugin's
mcp.jsonheader substitutes${QUBITON_API_KEY}at load time.
Path B — direct header (fallback, always works):
- Open Settings → Cursor Settings → Tools & MCP → find the qubiton server.
- If the
apikeyheader shows the literal string${QUBITON_API_KEY}instead of being expanded (you'll see a 401 on the first call), paste the key value directly into theapikeyheader field in Cursor's UI.
- Set
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 109 lines · 102 tokens per session scan B 93087921ddc9
qubiton-setup is a skill published in the GitHub repository qubitonhq/qubiton-cursor-plugin (5 stars, last pushed 4mo ago), licensed MIT. It adds 102 tokens to every session and 1,214 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it B with 1 finding (reads mcp configuration). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
editor-scripting
Extending the Unity Editor with custom inspectors, editor windows, property drawers, gizmos, and Scene View overlays using UI Toolkit.
animation-systems
Unity animation workflows including Animator Controller, Timeline, DOTween, and sprite animation for 2D.
audio-systems
Audio implementation patterns including AudioSource, AudioMixer, spatial audio, and audio management.
ecs-dots
Entity Component System development with Unity Entities, Jobs, and Burst for high-performance simulation.
monobehaviour-patterns
Comprehensive guide to MonoBehaviour lifecycle, async patterns with Awaitable, and common Unity design patterns.
networking
Multiplayer networking patterns with Netcode for GameObjects, Netcode for Entities, Mirror, and Photon Fusion.