inference.sh
REMOTE · API.INFERENCE.SH
run any ai model. compose agents, stack knowledge, connect tools. one api, pay per run.
Available components
Last scanned (17 hours ago)
Scores higher than 99% of remote servers
Reachable. Last reached 4 Nov 2026.
Category AI and Machine Learning
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security97
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- The endpoint enforces authorisation, advertised via RFC 9728 protected-resource metadata. View diagnostics → Pass
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
- The authorisation server supports Client ID Metadata Documents, the current MCP client-registration mechanism. View diagnostics → Pass
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability81
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 5201 tokens (~118/item across 44 items; 42 tools + 2 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management97
- Stability observed for 29 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage94
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 83% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 6 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 44 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
- Supports UI / widget rendering.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 −1
- Stability: pass → 0.97 functional
- 31 Oct 26 0
- Resource “Artifact Viewer” now points somewhere else: ui://inference.sh/artifact-viewer-037b8ba146c8.html → ui://inference.sh/artifact-viewer-0e99f8287d16.html security
- Resource “Task Viewer” now points somewhere else: ui://inference.sh/task-viewer-037b8ba146c8.html → ui://inference.sh/task-viewer-0e99f8287d16.html security
- 30 Oct 26 0
- Resource “Artifact Viewer” now points somewhere else: ui://inference.sh/artifact-viewer-5651d91328a7.html → ui://inference.sh/artifact-viewer-037b8ba146c8.html security
- Resource “Task Viewer” now points somewhere else: ui://inference.sh/task-viewer-5651d91328a7.html → ui://inference.sh/task-viewer-037b8ba146c8.html security
- 28 Oct 26 0
- New tool “artifact_page_get” functional
- 23 Oct 26 +2
- HSTS header: fail → pass ▲ security
- 22 Oct 26 0
- A breaking change shipped without a version bump: still 2.0.0 ▼ security
- Tool “open_workspace” was removed ▼ security
- Tool “open_thread_panel” was removed ▼ security
- Tool “workspace_focus” was removed ▼ security
- Tool “workspace_session” was removed ▼ security
- Tool “workspace_session_end” was removed ▼ security
- Tool “artifact_publish” rewrote its description, which is the text the model reads security
- Resource “inference.sh” was removed ▼ functional
- 17 Oct 26 0
- Tool “artifact_publish” rewrote its description, which is the text the model reads security
- “artifact_data_delete” added an optional parameter “cursor” cosmetic
- “artifact_data_delete” added an optional parameter “order” cosmetic
- “artifact_data_delete” added an optional parameter “where” cosmetic
- “artifact_data_get” added an optional parameter “cursor” cosmetic
- “artifact_data_get” added an optional parameter “order” cosmetic
- “artifact_data_get” added an optional parameter “where” cosmetic
- “artifact_data_list” added an optional parameter “cursor” cosmetic
- “artifact_data_list” added an optional parameter “order” cosmetic
- “artifact_data_list” added an optional parameter “where” cosmetic
- “artifact_data_set” added an optional parameter “cursor” cosmetic
- “artifact_data_set” added an optional parameter “order” cosmetic
- “artifact_data_set” added an optional parameter “where” cosmetic
- “artifact_data_update” added an optional parameter “cursor” cosmetic
- “artifact_data_update” added an optional parameter “order” cosmetic
- “artifact_data_update” added an optional parameter “where” cosmetic
- “artifact_publish” added an optional parameter “files” cosmetic
- “artifact_data_delete” reworded the description of “limit” cosmetic
- “artifact_data_get” reworded the description of “limit” cosmetic
- “artifact_data_list” reworded the description of “limit” cosmetic
- “artifact_data_set” reworded the description of “limit” cosmetic
- “artifact_data_update” reworded the description of “limit” cosmetic
- 14 Oct 26 0
- Tool “artifact_publish” rewrote its description, which is the text the model reads security
- Schema quality: pass → fail ▼ functional
- “task_get” reworded the description of “wait” cosmetic
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 4 Nov 2026 · Probed https://api.inference.sh/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=inference.sh | CN=WE1,O=Google Trust Services,C=US | 23 Sept 2026 | 22 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | ac6e899a9cbf28620e1fa1f40cb96721 |
| SANs: inference.sh, *.inference.sh | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of api.inference.sh. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| sh. | present | 34349 | 8 | Verified |
| inference.sh. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Enforced and verified
The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.
| Result | Enforced and verified |
|---|---|
| Enforced | On connection |
| HTTP status | 401 |
WWW-Authenticate challenge Bearer resource_metadata="https://api.inference.sh/.well-known/oauth-protected-resource", scope="agents:read apps:read conversations:read files:read flows:read datastores:read projects:read teams:read secrets:read credentials:read knowledge:read artifacts:read remotes:read sandboxes:read settings:read bounties:read agents:execute apps:execute flows:execute forms:execute agents:write apps:write conversations:write files:write flows:write datastores:write projects:write secrets:write credentials:write knowledge:write artifacts:write remotes:write sandboxes:write settings:write forms:write billing:read"
Bearer resource_metadata="https://api.inference.sh/.well-known/oauth-protected-resource", scope="agents:read apps:read conversations:read files:read flows:read datastores:read projects:read teams:read secrets:read credentials:read knowledge:read artifacts:read remotes:read sandboxes:read settings:read bounties:read agents:execute apps:execute flows:execute forms:execute agents:write apps:write conversations:write files:write flows:write datastores:write projects:write secrets:write credentials:write knowledge:write artifacts:write remotes:write sandboxes:write settings:write forms:write billing:read"| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000; includeSubDomains |
| content-security-policy | default-src 'none'; frame-ancestors 'none' |
| x-content-type-options | nosniff |
| x-frame-options | DENY |
| referrer-policy | strict-origin-when-cross-origin |
| www-authenticate | Bearer resource_metadata="https://api.inference.sh/.well-known/oauth-protected-resource", scope="agents:read apps:read conversations:read files:read flows:read datastores:read projects:read teams:read secrets:read credentials:read knowledge:read artifacts:read remotes:read sandboxes:read settings:read bounties:read agents:execute apps:execute flows:execute forms:execute agents:write apps:write conversations:write files:write flows:write datastores:write projects:write secrets:write credentials:write knowledge:write artifacts:write remotes:write sandboxes:write settings:write forms:write billing:read" |
Protected resource metadata
| Document | https://api.inference.sh/.well-known/oauth-protected-resource |
|---|---|
| Retrieved | Yes |
| Resource | https://api.inference.sh |
| Authorisation server | https://api.inference.sh |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://api.inference.sh/mcp | Verified | 200 | |
| http (plaintext) | http://api.inference.sh/mcp | HTTPS enforced | 301 | https://api.inference.sh/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
app_get Get App Details ~37
Get detailed app info including input/output schemas and version history
| Name | Type | Req | Description |
|---|---|---|---|
| app | string | yes | App ref: namespace/name or namespace/name@version |
No output schema declared.
No examples provided.
app_list List Apps ~54
Search and filter available apps on inference.sh
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | Filter by store category |
| cursor | string | – | – |
| limit | integer | – | – |
| query | string | – | Search by name or description |
No output schema declared.
No examples provided.
app_run Run App ~143
Run an app on inference.sh. Creates a task that executes the app with the given input. When the result's status is not final, the task is still running: call task_get with wait: true when you need its output.
| Name | Type | Req | Description |
|---|---|---|---|
| app | string | yes | App ref: namespace/name or namespace/name@version |
| function | string | – | Function name for multi-function apps |
| infrastructure | string | – | – |
| input | object | yes | App input matching the app's input schema |
| wait | boolean | – | Wait for the task to finish and return its output. Defaults to true, except for hosts that render the task card, which follows the task live. |
No output schema declared.
No examples provided.
artifact_asset_delete Delete Artifact Asset ~71
Permanently delete one file stored beside an artifact. Anything on the page still pointing at it stops loading, so delete only a file nothing references.
| Name | Type | Req | Description |
|---|---|---|---|
| artifact_id | string | yes | Artifact id, short id, or namespace/name ref |
| asset_id | string | yes | Asset id, from artifact_asset_list |
No output schema declared.
No examples provided.
artifact_asset_list List Artifact Assets ~52
List the files stored beside an artifact, with the URL each is referenced by and what the artifact is using against its budget.
| Name | Type | Req | Description |
|---|---|---|---|
| artifact_id | string | yes | Artifact id, short id, or namespace/name ref |
No output schema declared.
No examples provided.
artifact_asset_upload Upload Artifact Asset ~173
Store an image, video, audio file, font or PDF beside an artifact and get back the URL its page references it by. Use this instead of a data: URI for anything sizeable: a data URI costs a third more than the bytes it carries, and a page has a 16 MiB ceiling. The page must be published with the "assets" capability or its CSP will refuse to load the file. Uploading the same bytes twice returns the asset already there.
| Name | Type | Req | Description |
|---|---|---|---|
| artifact_id | string | yes | Artifact id, short id, or namespace/name ref |
| content | string | yes | The file's bytes, base64-encoded |
| content_type | string | – | MIME type; guessed from the filename when omitted |
| filename | string | – | What to call the file, e.g. chart.png |
No output schema declared.
No examples provided.
artifact_comments Read Artifact Comments ~89
Read the comment threads people left on an artifact. Each thread says whether it was sent to you: you may reply to and resolve those, and only those. Threads not sent to you are other people's conversations — read them for context, mention them to the user if they need action, but do not answer them.
| Name | Type | Req | Description |
|---|---|---|---|
| artifact_id | string | yes | Artifact id, short id, or namespace/name ref |
No output schema declared.
No examples provided.
artifact_data_delete Delete Artifact Document ~158
Removes one document from an artifact's store, as the page runtime's db.delete.
| Name | Type | Req | Description |
|---|---|---|---|
| artifact_id | string | yes | The artifact whose store this is |
| collection | string | yes | Collection path within the artifact |
| cursor | string | – | Continues a list from the next_cursor of the page before |
| data | object | – | Document body, for set and update |
| doc_id | string | yes | Document id within the collection |
| limit | integer | – | Caps a list; the server clamps it to 200 |
| order | string | – | List order; -updated_at by default |
| where | object | – | Keeps documents whose top-level fields equal these values (string, number, boolean, or null for missing) |
No output schema declared.
No examples provided.
artifact_data_get Read Artifact Document ~158
Reads one document from an artifact's store, as the page runtime's db.get.
| Name | Type | Req | Description |
|---|---|---|---|
| artifact_id | string | yes | The artifact whose store this is |
| collection | string | yes | Collection path within the artifact |
| cursor | string | – | Continues a list from the next_cursor of the page before |
| data | object | – | Document body, for set and update |
| doc_id | string | yes | Document id within the collection |
| limit | integer | – | Caps a list; the server clamps it to 200 |
| order | string | – | List order; -updated_at by default |
| where | object | – | Keeps documents whose top-level fields equal these values (string, number, boolean, or null for missing) |
No output schema declared.
No examples provided.
artifact_data_list List Artifact Documents ~158
Lists a collection in an artifact's store, as the page runtime's db.list.
| Name | Type | Req | Description |
|---|---|---|---|
| artifact_id | string | yes | The artifact whose store this is |
| collection | string | yes | Collection path within the artifact |
| cursor | string | – | Continues a list from the next_cursor of the page before |
| data | object | – | Document body, for set and update |
| doc_id | string | – | Document id within the collection |
| limit | integer | – | Caps a list; the server clamps it to 200 |
| order | string | – | List order; -updated_at by default |
| where | object | – | Keeps documents whose top-level fields equal these values (string, number, boolean, or null for missing) |
No output schema declared.
No examples provided.
artifact_data_set Write Artifact Document ~159
Replaces one document in an artifact's store, as the page runtime's db.set.
| Name | Type | Req | Description |
|---|---|---|---|
| artifact_id | string | yes | The artifact whose store this is |
| collection | string | yes | Collection path within the artifact |
| cursor | string | – | Continues a list from the next_cursor of the page before |
| data | object | yes | Document body, for set and update |
| doc_id | string | yes | Document id within the collection |
| limit | integer | – | Caps a list; the server clamps it to 200 |
| order | string | – | List order; -updated_at by default |
| where | object | – | Keeps documents whose top-level fields equal these values (string, number, boolean, or null for missing) |
No output schema declared.
No examples provided.
artifact_data_update Update Artifact Document ~160
Merges into one document in an artifact's store, as the page runtime's db.update.
| Name | Type | Req | Description |
|---|---|---|---|
| artifact_id | string | yes | The artifact whose store this is |
| collection | string | yes | Collection path within the artifact |
| cursor | string | – | Continues a list from the next_cursor of the page before |
| data | object | yes | Document body, for set and update |
| doc_id | string | yes | Document id within the collection |
| limit | integer | – | Caps a list; the server clamps it to 200 |
| order | string | – | List order; -updated_at by default |
| where | object | – | Keeps documents whose top-level fields equal these values (string, number, boolean, or null for missing) |
No output schema declared.
No examples provided.
artifact_get Get Artifact ~70
Get an artifact's metadata and page source by id, short id, or namespace/name[@version]
| Name | Type | Req | Description |
|---|---|---|---|
| artifact_id | string | yes | Artifact id, short id, or namespace/name ref |
| include_content | boolean | – | – |
| version | string | – | Optional version id or short id (default latest) |
No output schema declared.
No examples provided.
artifact_guidance Artifact Guidance ~119
Everything needed to write a good artifact page, assembled in one call: the page contract plus the skills that carry the detail, resolved from the registry so they are always the current version. Call this BEFORE writing a page. Narrow it with topics; omit topics for all of them.
| Name | Type | Req | Description |
|---|---|---|---|
| topics | array | – | Which parts to include. "design" is always worth having; "capabilities" when the page takes input, remembers anything or knows its viewer; "diagrams" when it has a flow or chart. Omit for all three. |
No output schema declared.
No examples provided.
artifact_list List Artifacts ~48
List artifacts you own or that were shared with you, newest first
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | – |
| limit | integer | – | – |
| search | string | – | Search over title and description |
No output schema declared.
No examples provided.
artifact_page_get Artifact Page ~80
Returns one artifact version's rendered page, the document at ui://inference.sh/artifact-pages/{id}@{n}, for a viewer whose host reads no resource but its own.
| Name | Type | Req | Description |
|---|---|---|---|
| artifact_id | string | yes | The artifact to render |
| version_number | integer | – | The version to render; one the caller cannot reach serves the live version |
No output schema declared.
No examples provided.
artifact_publish Publish Artifact ~1,899
Publish a self-contained HTML(+JS) or Markdown page as an artifact: a live page at a private URL that can be shared with a team, an org, or publicly, and that updates in place when published again. Pass artifact_id (or reuse the same name) to publish a new version. Returns the artifact id, url, and version. ## Before you write the page Load the skill for what you are about to build, with whichever skill tool this session has (`skill_get`, `skill_use`, or `belt skill use infsh/<name>`): - `belt-artifact-design` — always. Treatment, the injected design tokens, the three theme states, the traps that fail silently. - `belt-artifact-capabilities` — when the page takes input, remembers anything, knows who is viewing, or shows a file stored beside it. - `belt-artifact-diagrams` — when it has a flow, an architecture, a timeline or a chart. They are the current version at all times. This description is only the contract. ## What an artifact is for A page for what plain text shows badly: a dashboard from data already pulled, a walkthrough of a change with annotated diffs, several options side by side, sliders to tune values, a checklist kept up to date while a long task runs, or anything a person will look at, interact with, or send to a teammate as a link. A short answer, a code snippet, or advice acted on right away reads better as plain text. ## Page contract - Write the PAGE CONTENT only. It is wrapped at publish time in <!doctype html> + <head> (charset, viewport, <title>, favicon, a reset, and the inference.sh design tokens) + <body>. Put your own <style> and <script> at the top of the content. A full document (starting with <!doctype> or <html>) is accepted too and keeps its own <head>. - Everything must be self-contained: inline CSS and JS or ship them as files, embed images as data: URIs, draw diagrams as mermaid, inline SVG or HTML/CSS. A page may ship extra files (pages, css, js, json) via `files`: link between pages with relative links (`pricing` or `pricing.…
| Name | Type | Req | Description |
|---|---|---|---|
| artifact_id | string | – | Existing artifact id/ref to update in place |
| base_version_id | string | – | The version this content was built on. When the artifact has moved past it the publish is refused with a conflict error naming the current version to merge onto. Omit to publish unconditionally. |
| capabilities | array | – | Runtime capabilities the page may use. "db" gives it a small store so it remembers what people do on it; "user" tells it who is viewing; "assets" lets it show images, video, fonts or PDFs stored besi… |
| content | string | yes | Page source: HTML content (or full document) or Markdown. Self-contained. |
| content_encoding | string | – | Set to "base64" and base64-encode content. Required in practice: the edge firewall rejects request bodies containing raw HTML tags such as <script>. |
| description | string | – | One sentence shown under the title |
| favicon | string | – | One or two emoji used as the tab icon |
| files | array | – | Extra files served beside the page at the same origin: more pages (.html, .md), and .css, .js, .json, .svg, .txt, .xml, .csv. Link pages with relative links ("pricing" or "pricing.html"); fetch json… |
| force | boolean | – | Publish over a newer version anyway, discarding it. Only set this when the user explicitly says to discard the intervening version. |
| image | string | – | URL of a cover image for the gallery card and viewer header |
| label | string | – | Optional label for this version |
| name | string | – | Optional URL slug; derived from title when omitted |
| title | string | yes | Short distinctive name for the page (2-4 words) |
| type | string | – | – |
| visibility | string | – | Who can open the page (default private). Only widen when asked. |
No output schema declared.
No examples provided.
artifact_reply Reply To Artifact Comment ~118
Reply into one comment thread on an artifact. Only works on a thread that was sent to you. Your reply is shown as written by you on behalf of the person who sent the thread. Say what you changed, briefly; if you made the change, resolve the thread afterwards.
| Name | Type | Req | Description |
|---|---|---|---|
| artifact_id | string | yes | Artifact id, short id, or namespace/name ref |
| text | string | yes | The reply. Plain text, a sentence or two. |
| thread_id | string | yes | Id of the thread to reply into, from artifact_comments |
No output schema declared.
No examples provided.
artifact_resolve Resolve Artifact Comment ~105
Mark a comment thread resolved once you have acted on it: the change is made, or you established none was needed. Only works on a thread that was sent to you. Do not resolve feedback you did not act on, and leave a thread open while the person still needs an answer from you.
| Name | Type | Req | Description |
|---|---|---|---|
| artifact_id | string | yes | Artifact id, short id, or namespace/name ref |
| thread_id | string | yes | Id of the thread to resolve, from artifact_comments |
No output schema declared.
No examples provided.
artifact_viewer_get Artifact Viewer ~59
Tells a page who is looking at it, as the page runtime's user.get: signed in or not, name, avatar, and whether they may edit. Never an email.
| Name | Type | Req | Description |
|---|---|---|---|
| artifact_id | string | yes | The artifact being viewed |
No output schema declared.
No examples provided.
knowledge_create Create Knowledge Entry ~66
Create a new knowledge entry (concept, observation, preference, reference, etc.)
| Name | Type | Req | Description |
|---|---|---|---|
| content | string | yes | Entry content (markdown) |
| description | string | – | One sentence: when this entry is relevant |
| name | string | yes | Entry name |
| type | string | – | – |
No output schema declared.
No examples provided.
knowledge_delete Delete Knowledge Entry ~24
Delete a knowledge entry by ID
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Entry ID |
No output schema declared.
No examples provided.
knowledge_get Get Knowledge Entry ~35
Get detailed information about a knowledge entry by namespace/name or ID
| Name | Type | Req | Description |
|---|---|---|---|
| ref | string | yes | Entry ref: namespace/name or ID |
No output schema declared.
No examples provided.
knowledge_list List Knowledge ~43
List your knowledge entries, optionally filtered by type
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | – |
| limit | integer | – | – |
| type | string | – | Filter by knowledge type |
No output schema declared.
No examples provided.
knowledge_search Search Knowledge ~48
Search your knowledge entries by query
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | – |
| limit | integer | – | – |
| query | string | yes | Search query |
| type | string | – | Filter by type |
No output schema declared.
No examples provided.
mcp_connect Connect to MCP Server ~41
Initiate a connection to an MCP server. For OAuth servers, returns an authorization URL to open in a browser.
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | Server slug |
No output schema declared.
No examples provided.
mcp_disconnect Disconnect from MCP Server ~25
Remove connection to an MCP server
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | Server slug |
No output schema declared.
No examples provided.
mcp_get Get MCP Server Details ~28
Get details about an MCP server including connection status
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | Server slug |
No output schema declared.
No examples provided.
mcp_list List MCP Servers ~55
Browse available MCP servers that can be connected to
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | Filter by store category |
| cursor | string | – | – |
| featured | boolean | – | Show only featured servers |
| limit | integer | – | – |
No output schema declared.
No examples provided.
mcp_run Call MCP Tool ~58
Call a tool on a connected MCP server. The server must be connected first via mcp_connect.
| Name | Type | Req | Description |
|---|---|---|---|
| input | object | – | Tool input arguments |
| slug | string | yes | slug/tool format (e.g. 'linear/list_issues') |
No output schema declared.
No examples provided.
mcp_search Search MCP Servers ~39
Search available MCP servers by query
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | – |
| limit | integer | – | – |
| query | string | yes | Search query |
No output schema declared.
No examples provided.
mcp_tools List MCP Server Tools ~54
List available tools on a connected MCP server, or get details for a specific tool
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | Server slug (e.g. 'linear') or slug/tool (e.g. 'linear/list_issues') |
No output schema declared.
No examples provided.
skill_files List Skill Files ~33
List supplementary files for a skill (references, scripts, etc.)
| Name | Type | Req | Description |
|---|---|---|---|
| ref | string | yes | Skill ref: namespace/name |
No output schema declared.
No examples provided.
skill_search Search Skill Store ~48
Search the public skill store
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | Filter by store category |
| cursor | string | – | – |
| limit | integer | – | – |
| query | string | yes | Search query |
No output schema declared.
No examples provided.
skill_store Browse Skill Store ~53
Browse approved skills in the public skill store
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | Filter by store category |
| cursor | string | – | – |
| featured | boolean | – | Show only featured skills |
| limit | integer | – | – |
No output schema declared.
No examples provided.
skill_upload Upload Skill ~90
Create or update a skill with SKILL.md content and optional supporting files
| Name | Type | Req | Description |
|---|---|---|---|
| allowed_tools | string | – | Comma-separated list of allowed tools |
| content | string | yes | SKILL.md body content (markdown) |
| description | string | – | What the skill does and when to use it |
| files | array | – | Supporting files (references, scripts) |
| name | string | yes | Skill name |
No output schema declared.
No examples provided.
skill_use Use Skill ~63
Fetch a skill's assembled SKILL.md content. Tries the inference.sh store first, falls back to GitHub. Returns the full skill content for the agent to consume.
| Name | Type | Req | Description |
|---|---|---|---|
| ref | string | yes | Skill ref: namespace/name, or github.com/user/repo URL |
No output schema declared.
No examples provided.
skill_view View Skill File ~43
View a specific supplementary file from a skill's manifest
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | yes | File path within the skill |
| ref | string | yes | Skill ref: namespace/name |
No output schema declared.
No examples provided.
task_cancel Cancel Task ~39
Cancel a running or queued task
| Name | Type | Req | Description |
|---|---|---|---|
| force | boolean | – | Force kill immediately instead of graceful shutdown |
| task_id | string | yes | Task ID |
No output schema declared.
No examples provided.
task_get Get Task ~112
Get status and output of a task
| Name | Type | Req | Description |
|---|---|---|---|
| include_logs | boolean | – | Also return the tail of each of the task's logs as structuredContent.logs (the source task_logs reads) |
| log_lines | integer | – | With include_logs, how many trailing lines of each log to return |
| task_id | string | yes | Task ID |
| wait | boolean | – | Wait for the task to finish before answering, up to 45 seconds; a task still going then is answered as it is, to ask again |
No output schema declared.
No examples provided.
task_list List Tasks ~36
List your tasks on inference.sh
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | – |
| limit | integer | – | – |
| status | string | – | – |
No output schema declared.
No examples provided.
task_logs Get Task Logs ~33
Get execution logs for a task
| Name | Type | Req | Description |
|---|---|---|---|
| log_type | string | – | – |
| task_id | string | yes | Task ID |
No output schema declared.
No examples provided.
How do I install the inference.sh MCP server?
inference.sh is a hosted endpoint at https://api.inference.sh/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · api.inference.sh
claude mcp add --transport http ac-inference-sh-mcp 'https://api.inference.sh/mcp'
What is the inference.sh MCP server?
inference.sh is an MCP server listed in the public MCP registry as ac.inference.sh/mcp. run any ai model. compose agents, stack knowledge, connect tools. one api, pay per run. This page covers its hosted endpoint (https://api.inference.sh/mcp).
Is the inference.sh MCP server safe to use?
inference.sh scores 94 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the inference.sh MCP server expose?
inference.sh exposes 42 tools: app_get, app_list, app_run, artifact_asset_delete, artifact_asset_list, and 37 more. Their descriptions and schemas cost roughly 4,976 tokens of context every time the server is loaded.
Does the inference.sh MCP server require authentication?
Yes. inference.sh asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.
Is the inference.sh MCP server still maintained?
inference.sh is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.