Run the unified MCP server with a single command:
npx -y agentskin@latest
Then add to your agent's MCP config:
{
"mcpServers": {
"agentskin-suite": {
"command": "npx",
"args": ["-y", "agentskin@latest"]
}
}
}
That's it. You now have 7 tools: API pruning, CLI reduction, token estimation, and more.
AgentSkin Suite combines three complementary tools that eliminate token waste across the full AI agent cycle:
Combined, they reclaim 60-80% of context that was previously wasted on noise.
The Suite exposes 7 tools through a single MCP server — AgentSkin's semantic pruning merged with Tokenjuice's reduction engine (by Vincent Koc, MIT License):
fetch_optimized_data — Fetch URL, prune JSON, return Markdown skin (88% savings)skin_reasoning — Strip linguistic noise from text (14-29% reduction)classify_url — Match URL against 11 built-in API rulesstrip_ansi — Strip 5 patterns of ANSI escape codesreduce — Tokenjuice reduction pipeline (up to 99.97%)estimate_tokens — Grapheme-aware token estimationapply_json_semantic — Prune raw JSON with signal keysecho "source $(pwd)/.agents/hooks/bash-optimizer.sh" >> ~/.bashrc && source ~/.bashrc
The bash hook intercepts noisy CLI commands and pipes output through Tokenjuice before the agent sees it — zero overhead, zero agent awareness.
The reference implementation includes robust security measures to protect against common attack vectors in AI agent pipelines.
Blocks requests to private network ranges including IPv4 (127.x.x.x, 10.x.x.x, 172.16-31.x.x, 192.168.x.x, 169.254.x.x) and IPv6 variants (::1, ::ffff:, fe80:). Zone IDs are stripped and validated before processing.
Prevents access to cloud provider metadata services (metadata.google.internal, metadata.azure.com, kubernetes.default.svc) that could expose cloud credentials or configuration.
60 requests/minute sliding window per client to prevent abuse and ensure fair resource allocation in multi-agent environments.
All tool inputs are validated with Zod schema validation. Type coercion ensures signals, aliases, and apply_reasoning parameters are properly typed before processing.
HTML-extracted URLs are sanitized to block dangerous schemes (javascript:, data:) that could enable XSS attacks through the MCP tool interface.
30-second processing timeout prevents resource exhaustion from maliciously large payloads.
The security implementation is fully open-source and includes 4,695 tests across 274 files for continuous validation.
The reference implementation delivers verifiable, deterministic compression results.
ls -laR: 99.97% (3.19M → 897 chars)Sub-100ms transformation latency for payloads under 100KB. 30-second maximum timeout for large payloads.
v5.0 merges AgentSkin's semantic pruning with Tokenjuice's reduction pipeline into a single MCP server:
npx agentskin@latest instead of two separate serversreduce, estimate_tokens, apply_json_semantic from TokenjuiceSpecial thanks to Vincent Koc for the MIT-licensed Tokenjuice engine that powers the reduction pipeline.
| Creator | Contribution |
|---|---|
| Shawn Nichols Sr. Nichols Transco LLC |
AgentSkin SSS protocol, MCP server, Suite integration |
| Vincent Koc github.com/vincentkoc/tokenjuice |
Tokenjuice — MIT-licensed engine: powers reduce, estimate_tokens, and apply_json_semantic in unified MCP server |
| Julius Brussee github.com/JuliusBrussee/caveman |
Caveman — Output compression via prompt engineering |