Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add unblockingapi/mcp --skill unblockgit clone --depth 1 https://github.com/unblockingapi/mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/unblockingapi/mcp/unblock)<a href="https://agentmods.dev/skills/unblockingapi/mcp/unblock"><img src="https://agentmods.dev/badge/skills/unblockingapi/mcp/unblock/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/unblockingapi/mcp/unblock"><img src="https://agentmods.dev/badge/skills/unblockingapi/mcp/unblock.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00070 | $0.01209 |
| Opus 5.5 | $0.00028 | $0.00484 |
| Sonnet 5.5 | $0.00014 | $0.00242 |
| Haiku 4.5 | $0.00007 | $0.00121 |
Grade A, and why
unblock scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 91 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Reading the web with UnblockingAPI
You have the UnblockingAPI MCP server. Use it to read web pages: it goes out through residential proxies and a real browser when needed, so it can read public pages that need JavaScript, refuse simple requests or depend on location.
Workflow
- Leave
renderunset.unblock_fetch(url)lets the API decide: a fast plain fetch first, and a real browser instead when that comes back blocked, as a challenge wall or as an empty JavaScript shell. It learns per site, so the next request goes straight to the browser.render_reasonin the output says what happened. Clean HTML comes back with scripts, styles, SVGs and cookie banners stripped. - Force a mode only when you know better.
render: truewhen the page loaded but content you need is filled in by JavaScript;render: falsenever renders. A render can take up to two minutes on slow sites. - Tune the wait only if a render is still missing content.
wait_fortakes a CSS selector orstable/domcontentloaded/networkidle;wait_staterefines a selector wait (nonempty,hiddenfor a spinner,stable);scroll_stepstriggers lazy sections;wait_min_msadds a minimum delay;settle_mscaps how long the page may keep changing;wait_ruleshandles pages with several layouts (consent gate, interstitial). Any of these implies a browser.readiness.verification.status: "interactive"means a verification (Turnstile, reCAPTCHA, DataDome, …;vendorsays which) wants a human, and waiting longer will not help. - Geo-restricted or localised pages: pass
locationas a 2-letter country code (us,gb,de,se, …). - Re-reading a page: the exact same fetch (another
selectorformat) within 10 minutes is reused for free; passfresh: trueto fetch again.max_age(seconds, up to 300) accepts the API's cached copy instantly but still costs 1 credit, and changes the fetch, so it misses that free reuse.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago Changed · +1 lines ee25a728ec59
- 6d ago Changed · +19 lines · -8 tokens per session 82fdc708da72
- 27d ago Changed · +7 lines · -5 tokens per session 8750ac89174f
- 1mo ago First seen · 64 lines · 83 tokens per session scan A a05734fc4566
unblock is a skill published in the GitHub repository unblockingapi/mcp (2 stars, last pushed 5d ago), licensed MIT. It adds 70 tokens to every session and 1,209 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-10.
Other skills, from other repositories
transformers-js
Run Hugging Face models in JavaScript or TypeScript with Transformers.js, WebGPU, or WASM across browser, Node.js, Bun, and Deno. Use for client-side or JS-runtime inference, not Python training.
octen-web-search
Use when anything needs live information from the web — looking something up, checking current or recent information, finding sources, comparing products / vendors / pricing, researching a topic, or reading a specific web page — even if the user never mentions Octen or the word "search". Also use before falling back…
agent-browser-verify
Automated browser verification for dev servers. Triggers when a dev server starts to run a visual gut-check with agent-browser — verifies the page loads, checks for console errors, validates key UI elements, and reports pass/fail before continuing.
vercel-sandbox
Vercel Sandbox guidance — ephemeral Firecracker microVMs for running untrusted code safely. Supports AI agents, code generation, and experimentation. Use when executing user-generated or AI-generated code in isolation.
agent-browser
Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to "open a website", "fill out a form", "click a…
get-domain-cookies
Use when the user asks for Chrome cookies for a domain (especially amctheatres.com Queue-it sessions).