Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add The-40-Thieves/alexandria-mcp --skill alexandriagit clone --depth 1 https://github.com/The-40-Thieves/alexandria-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/the-40-thieves/alexandria-mcp/alexandria)<a href="https://agentmods.dev/skills/the-40-thieves/alexandria-mcp/alexandria"><img src="https://agentmods.dev/badge/skills/the-40-thieves/alexandria-mcp/alexandria/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/the-40-thieves/alexandria-mcp/alexandria"><img src="https://agentmods.dev/badge/skills/the-40-thieves/alexandria-mcp/alexandria.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00071 | $0.00611 |
| Opus 5.5 | $0.00028 | $0.00244 |
| Sonnet 5.5 | $0.00014 | $0.00122 |
| Haiku 4.5 | $0.00007 | $0.00061 |
Grade A, and why
alexandria scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 60 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Alexandria
Query, read, and ingest texts from 152 public digital libraries through the
@the-40-thieves/alexandria-mcp MCP server.
Install
npx -y @the-40-thieves/alexandria-mcp
Or add it to a client directly, for example Claude Code:
claude mcp add alexandria -- npx -y @the-40-thieves/alexandria-mcp
Search and read need no credentials. library_ask, library_answer,
library_research, and library_ingest need OPENAI_API_KEY; see the
README for the full list of optional keys.
Workflow
Start with library_ask(query) - it routes a natural-language question to
the best sources and searches them in parallel. Use library_search(query, source, limit?) instead when you already know which of the 152 sources to
query.
Once a result names a source/id pair, library_read(id, source) fetches
the full text.
For a synthesized, cited answer instead of raw results, use
library_answer(query) for a single question or library_research(query, depth?, breadth?, max_minutes?) for a recursive multi-round report that
generates its own follow-up queries.
library_citations(id, source, direction, limit?, format?) walks the
citation graph around an item forward (direction: "citations") or backward
(direction: "references") for snowball searching, and can export the
result as a bibtex, ris, or apa bibliography.
If a source looks like it is misbehaving (no results, stale data, repeated
errors), call library_health_check(source?, cluster?) before trusting or
retrying it.
response_format
library_ask, library_search, library_answer, library_research, and
library_health_check take response_format: "concise" | "detailed"
(default concise). concise returns the high-signal fields only (title,
source, id, year, hasFullText, url; the answer/report plus citations; health
name, cluster, status). detailed adds routing reasons, relevance scores,
per-stage diagnostics, and per-source error rate, latency, and quota usage -
ask for it when you need to explain or debug a result, not by default.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 60 lines · 71 tokens per session scan A 2ad4f7f94a1d
alexandria is a skill published in the GitHub repository The-40-Thieves/alexandria-mcp (3 stars, last pushed yesterday), licensed MIT. It adds 71 tokens to every session and 611 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-07.
Other skills, from other repositories
arxiv-guide
Resolve citations to arXiv IDs, find an author's papers, follow a paper's versions, and read long papers section by section with the arxiv tools. Use when a task needs arXiv preprints found by citation (author-year, CoRR abs/ refs, arXiv DOIs), author, category, or date, or needs a paper's full text.
conduct-witness
A procedure for independently observing an A2A or MCP agent and recording the observation in a public ledger. A2A and MCP are standards for agents to communicate with tools and other agents.
openfda-guide
Query discipline for the openfda tools — gates that stop false zeros and misread counts, where NDCs, application numbers, setids, K-numbers, and recall numbers come from, and the chains that join them across endpoints. Use before comparing adverse-event counts, concluding a drug or device has no record, or linking…
anyapi
Get live data from LinkedIn, Instagram, TikTok, YouTube, X/Twitter, Reddit, Facebook, Google Search, Google Maps, and Amazon, plus clean JSON from any web page that blocks bots - one key, USD pay-per-request, free trial built in. Use whenever a task needs third-party data that a direct fetch or a general web search…
pulse-verity-price-check
Read Pulse Verity crypto reference-price observations and verify their signed receipts when the user requests Pulse Verity data or receipt verification.
rhylthyme
Schedule multi-step procedures that a person carries out against a clock, with parallel tracks, shared equipment and steps that end when the person says so. Use when turning a lab protocol, recipe, event run sheet or workout into a timed plan; when several procedures must share one instrument (one centrifuge, one…