About this Server
Asitis Agent Tools is an offline, read-only linter and token context budget analyzer for agent steering files (CLAUDE.md, AGENTS.md, SKILL.md, .cursorrules). It catches prompt injections disguised as hidden HTML comments, zero-width spaces and bidi characters, shadowed instruction files, duplicate/contradictory rules, and rule length violations across Claude Code, Cursor, Codex, and Windsurf.
Direct low-latency RPC protocol communication with structured JSON schemas.
Restricted capability bounds to prevent accidental modifications or leakage.
Security & Best Practices
When to Use (and When Not To)
- •Auditing repositories for prompt injection vectors in documentation, pull requests, and forks
- •Measuring and shrinking token context consumption in AGENTS.md, CLAUDE.md, and skill files
- •Verifying SKILL.md frontmatter compliance with the Agent Skills specification
- •Web/mobile UI journey and regression testing (use agent-qa instead)
- •Apple Developer documentation lookups (use Apple Developer Docs MCP instead)
- •Database schema branching and SQL query execution (use DBHub, Neon, or PlanetScale MCP instead)
Install & Setup
claude mcp add asitis -- npx -y @asitis/mcp@0.3.0 --root "$PWD"Exposed Tools & Endpoints
6 toolsFunctions your AI agent can invoke via this Model Context Protocol server
Lints CLAUDE.md, AGENTS.md, and SKILL.md files for invisible unicode, prompt injection comments, duplicate rules, and vendor limits.
Calculates approximate tokens loaded per session across Claude Code, Codex, Cursor, Gemini CLI, and Windsurf.
Reads markdown files with byte profiles, character counts, line endings, and security summaries.
Lists all steering and rule files grouped by session-load timing (always, on-match, or on-invocation).
Extracts ATX/setext headings and structure from markdown files while skipping code blocks.
Produces a unified diff preview of mechanical fixes for formatting errors and invisible characters.