# AmpleRun GPU rentals (npm · @amplerun/mcp)

Find, price, rent and stop GPUs on AmpleRun. Paid in USDC or USDT on Base. Flat 5% fee.

- Trust score: 70/100 (medium)
- Change this week: −3
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-06

## Components

- remote · `amplerun.com`: 25/100, [markdown](https://verifymcp.io/servers/com-amplerun-gpu-rentals/api-mcp.md), [page](https://verifymcp.io/servers/com-amplerun-gpu-rentals/api-mcp)
- npm · `@amplerun/mcp`: 70/100 (this document), [markdown](https://verifymcp.io/servers/com-amplerun-gpu-rentals/amplerun-mcp.md), [page](https://verifymcp.io/servers/com-amplerun-gpu-rentals/amplerun-mcp)

## Channel facts

- Registry: `npm`
- Package: `@amplerun/mcp`
- Version: `0.1.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-06.

- **Supply Chain Security**: 82/100
  - No malware found by supply-chain analysis.
  - CVE check failed: a known high-severity CVE affects @modelcontextprotocol/server 2.1.0, a direct dependency. A fixed version is available.
  - No install/post-install scripts declared.
  - 1 of 23 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 19/100
  - Repository check failed: no source repository is declared.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 37 days ago).
  - Security-disclosure policy not yet verified: we couldn't inspect the source repository.
- **Schema Quality & AI Usability**: 69/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 2198 tokens (~183/item across 12 items; 12 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 83/100
  - Stability observed for 25 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 98/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 94% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 12 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 13 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a current MCP spec version (2026-07-28).

## Install

### How do I install the AmpleRun GPU rentals MCP server?

AmpleRun GPU rentals runs locally as an npm package, launched with npx -y @amplerun/mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add com-amplerun-gpu-rentals -- npx -y @amplerun/mcp
```

### Cursor

```json
{
  "mcpServers": {
    "com-amplerun-gpu-rentals": {
      "command": "npx",
      "args": [
        "-y",
        "@amplerun/mcp"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "com-amplerun-gpu-rentals": {
      "command": "npx",
      "args": [
        "-y",
        "@amplerun/mcp"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add com-amplerun-gpu-rentals -- npx -y @amplerun/mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-amplerun-gpu-rentals": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@amplerun/mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add com-amplerun-gpu-rentals --command npx --arg -y --arg @amplerun/mcp
```

### Hermes

```yaml
mcp_servers:
  com-amplerun-gpu-rentals:
    command: "npx"
    args: ["-y", "@amplerun/mcp"]
```

### Netclaw

```json
{
  "McpServers": {
    "com-amplerun-gpu-rentals": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "@amplerun/mcp"
      ]
    }
  }
}
```

### Vellum

```bash
assistant mcp add com-amplerun-gpu-rentals -t stdio -c npx -a -y @amplerun/mcp
```

### Other

```json
{
  "mcpServers": {
    "com-amplerun-gpu-rentals": {
      "command": "npx",
      "args": [
        "-y",
        "@amplerun/mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-05 (score 70, −3)

- [functional] Stability: pass → 0.80

### 2026-10-30 (score 73, +1)

- [security] Stability: 0.97 → pass

### 2026-10-28 (score 72, +1)

No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-26 (score 71, +1)

No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-24 (score 70, +1)

- [security regression] CVE-2023-54404 affects this package: high

### 2026-10-22 (score 69, +1)

No change was recorded against any check on this day. Stability & Change Management went from 70 to 73. That category is still filling its 30-day observation window: 21 days of observed history at the previous scan, 22 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-21 (score 68, −5)

- [security regression] CVE-2026-111768 affects this package: high
- [security regression] CVE-2026-111771 affects this package: high
- [security regression] CVE-2026-111770 affects this package: high
- [security regression] Known CVEs: pass → fail

### 2026-10-19 (score 73, +1)

No change was recorded against any check on this day. Stability & Change Management went from 60 to 63. That category is still filling its 30-day observation window: 18 days of observed history at the previous scan, 19 at this one. The score rises as the window fills, whether or not the server changes.

## MCP tools (12)

### `get_agent_account_challenge` (~119 tokens)

Start registering this agent's own AmpleRun account

Step 1 of 2. Returns an EIP-4361 (Sign-In with Ethereum) message for a wallet address this agent controls, valid five minutes, single use. Signing it accepts the AmpleRun Terms version it names. Sign the message exactly as returned with personal_sign (EIP-191), then call register_agent_account with message and signature. Never send a private key to any tool.

Input parameters:

- `address` (string): The agent's wallet address (0x...). Defaults to this server's wallet when it has one.

### `register_agent_account` (~152 tokens)

Register this agent's own AmpleRun account

Step 2 of 2. Opens an AmpleRun account for this AI agent, tagged as agent-created, with its wallet as the verified payout wallet, and returns an API key (shown once; keep it secret). The same wallet again returns the same account and a new key. There is no free credit: renting needs a deposit first. Pass message and signature from get_agent_account_challenge. scopes defaults to ["renter"]; add "host" to host machines.

Input parameters:

- `agent` (object, required)
- `message` (string): The challenge message, exactly as returned.
- `scopes` (array)
- `signature` (string): 0x-prefixed EIP-191 signature of message.

### `list_templates` (~175 tokens)

List GPU templates

List published AmpleRun templates: pinned container images a rental runs, such as an inference server with fixed model weights or a PyTorch or Jupyter runtime. Returns each template's id, slug (template_id), name, kind, engine, minimum VRAM in bytes and minimum GPU count, plus next_cursor. Read-only; no API key needed. search_offers finds machines for a template.

Input parameters:

- `cursor` (string): next_cursor from the previous page.
- `gpu_vram_gib` (integer): Only templates that fit on a GPU with this much VRAM, in GiB (e.g. 24).
- `kind` (string): model: an inference server with pinned weights; classical: a general runtime; custom: other images.
- `limit` (integer): Page size, 1 to 100.

### `search_offers` (~314 tokens)

Search GPU offers

Search GPU machines that can be rented now on AmpleRun. gpu_model, gpu_count and max_rate_micro_per_hour filter on the server. min_vram_gib and region filter each fetched page here because the API has no such filters, so a page can return fewer than limit matches: scanned is how many offers were checked, and next_cursor continues. Prices are micro-units per hour for the whole machine, fee included; cheapest first. With template, each offer carries fit {fits, reason}. Read-only; no API key needed.

Input parameters:

- `cursor` (string): next_cursor from the previous page.
- `gpu_count` (integer): Minimum number of GPUs in the machine.
- `gpu_model` (string): Case-insensitive part of the GPU model name, e.g. "4090" or "A100".
- `limit` (integer): Page size, 1 to 100.
- `max_rate_micro_per_hour` (string): Highest machine price per hour in micro-units, e.g. "500000" for 0.50 USDC/h.
- `min_vram_gib` (integer): Minimum VRAM per GPU in GiB. Offers with unmeasured VRAM are excluded.
- `region` (string): Case-insensitive part of the host's cloud region, e.g. "us-east". Offers without a reported region are excluded.
- `template` (string): Template slug such as "pytorch-cuda", or its id (UUID), from list_templates.

### `get_quote` (~236 tokens)

Get a rental quote

Price a rental without committing: creates a free, non-binding AmpleRun quote (valid 60 seconds; nothing is reserved or charged) for a template on an offer, capped by budget_micro. Returns the quote exactly as the API sent it plus fee_split: the most the rental can cost and how that divides into the platform fee (platform_fee_bps) and the host's share. Needs AMPLERUN_API_KEY with the renter scope. create_rental quotes again when it reserves, so this step is optional.

Input parameters:

- `asset` (string): Balance to pay from. USDC when omitted.
- `budget_micro` (string, required): Spending cap in micro-units of the asset ("1000000" = 1 USDC). The rental is never charged more than this.
- `duration_limit_s` (integer, required): Maximum runtime in seconds (60 to 31536000), e.g. 7200 for two hours.
- `offer_id` (string, required): offer_id from search_offers.
- `template` (string, required): Template slug such as "pytorch-cuda", or its id (UUID), from list_templates.

### `create_rental` (~331 tokens)

Rent a GPU (spends balance)

Rent a GPU on AmpleRun: quotes the template on the offer and reserves the machine in one step, holding up to budget_micro from the account balance. budget_micro is required and is a hard cap: the rental is never charged more, and metering starts only once the machine is verified ready. Returns rental_id, state, the quote, fee_split and the idempotency_key used; retrying with the same idempotency_key never creates a second rental. get_rental reports state and access. Spends money. Write tool: refused unless the server was started with AMPLERUN_MCP_ALLOW_SPEND=1 (the default is read-only).

Input parameters:

- `asset` (string): Balance to pay from. USDC when omitted.
- `budget_micro` (string, required): Spending cap in micro-units of the asset ("1000000" = 1 USDC). The rental is never charged more than this.
- `duration_limit_s` (integer, required): Maximum runtime in seconds (60 to 31536000), e.g. 7200 for two hours.
- `idempotency_key` (string): UUID that makes retries safe. Generated when omitted and returned in the result.
- `offer_id` (string, required): offer_id from search_offers.
- `ssh_public_key` (string, required): One-line OpenSSH public key (the .pub file), e.g. "ssh-ed25519 AAAA... you@laptop". Installed for SSH access.
- `template` (string, required): Template slug such as "pytorch-cuda", or its id (UUID), from list_templates.

### `get_rental` (~114 tokens)

Get rental status and access

Get one AmpleRun rental by rental_id: state, cumulative charge (micro-units), rate and funded-through time. While it is RUNNING (verified ready), and read-only for a limited window after STOPPED, also returns access: endpoints, SSH host-key fingerprint, a ready-made command and, for model templates, the endpoint's per-rental API key. Read-only. list_rentals finds rental ids.

Input parameters:

- `rental_id` (string, required): rental_id from create_rental or list_rentals.

### `list_rentals` (~90 tokens)

List my rentals

List the account's AmpleRun rentals with state, charge so far (micro-units), rate and funded-through time. Ordered by id, not by time; page with next_cursor. Read-only. get_rental gives details and access for one rental.

Input parameters:

- `cursor` (string): next_cursor from the previous page.
- `limit` (integer): Page size, 1 to 100.

### `stop_rental` (~137 tokens)

Stop a rental

Stop an AmpleRun rental: ends the workload and its metering. Files inside the machine stay reachable read-only only for a limited retrieval window. Stopping again is harmless. Returns rental_id and the new state (STOPPING or a later state). Write tool: refused unless the server was started with AMPLERUN_MCP_ALLOW_SPEND=1 (the default is read-only).

Input parameters:

- `idempotency_key` (string): UUID that makes retries safe. Generated when omitted.
- `reason` (string): Recorded with the stop.
- `rental_id` (string, required): rental_id from create_rental or list_rentals.

### `get_balance` (~66 tokens)

Get account balance

Get the AmpleRun account's USDC and USDT balances as micro-unit strings: spendable (available for new rentals), held by live rentals, pending, disputed and withdrawable, plus the last 30 days' spend. Read-only; needs AMPLERUN_API_KEY.

### `host_this_machine` (~90 tokens)

Earn with this machine's GPU

Explains how to add the GPU of the machine this agent runs on to AmpleRun, so its owner earns from rentals. Returns the one-line installer command, the steps and the earnings links. It runs nothing itself. The installer needs root, so ask the machine's owner before running it, and the owner must approve the machine from the approve_url it prints: nothing is listed without that approval.

### `top_up` (~160 tokens)

Get top-up payment instructions

Get what it takes to top up the AmpleRun USDC balance by amount_micro with x402: the payment requirements (network, USDC contract, treasury payTo, amount, EIP-712 domain). A wallet signs them as an EIP-3009 transferWithAuthorization and repeats POST /api/v1/billing/x402/top-up with the PAYMENT-SIGNATURE header (@amplerun/sdk does this with its x402 option). This server holds no wallet, so it pays nothing; an operator who configures AMPLERUN_MCP_WALLET_KEY_FILE and allows spending lets it pay.

Input parameters:

- `amount_micro` (string, required): Top-up amount in micro-USDC, e.g. "5000000" for 5 USDC.

## Diagnostics

Captured diagnostic sections: Provenance, Vulnerabilities, Dependencies. The full working is on the page: https://verifymcp.io/servers/com-amplerun-gpu-rentals/amplerun-mcp#diagnostics

## Score history

- 2026-11-06: 70
- 2026-11-05: 70
- 2026-11-04: 73
- 2026-11-03: 73
- 2026-11-02: 73
- 2026-11-01: 73
- 2026-10-31: 73
- 2026-10-30: 73
- 2026-10-29: 72
- 2026-10-28: 72
- 2026-10-27: 71
- 2026-10-26: 71
- 2026-10-25: 70
- 2026-10-24: 70
- 2026-10-23: 69
- 2026-10-22: 69
- 2026-10-21: 68
- 2026-10-20: 73
- 2026-10-19: 73
- 2026-10-18: 72
- 2026-10-17: 72
- 2026-10-16: 71
- 2026-10-15: 71
- 2026-10-14: 71
- 2026-10-13: 70
- 2026-10-12: 64
- 2026-10-11: 64
- 2026-10-07: 64
- 2026-10-06: 64
- 2026-10-04: 64

## Common questions

### What is the AmpleRun GPU rentals MCP server?

AmpleRun GPU rentals is an MCP server listed in the public MCP registry as com.amplerun/gpu-rentals. Find, price, rent and stop GPUs on AmpleRun. Paid in USDC or USDT on Base. Flat 5% fee. This page covers its npm package (@amplerun/mcp).

### Is the AmpleRun GPU rentals MCP server safe to use?

AmpleRun GPU rentals scores 70 out of 100 on VerifyMCP. We recorded 4 known advisories against it as of 6 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the AmpleRun GPU rentals MCP server expose?

AmpleRun GPU rentals exposes 12 tools: get_agent_account_challenge, register_agent_account, list_templates, search_offers, get_quote, and 7 more. Their descriptions and schemas cost roughly 1,984 tokens of context every time the server is loaded.

### Is the AmpleRun GPU rentals MCP server still maintained?

AmpleRun GPU rentals is still listed as active in the MCP registry. We last reached this channel on 6 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What licence is the AmpleRun GPU rentals MCP server under?

AmpleRun GPU rentals declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

### What did VerifyMCP test on the AmpleRun GPU rentals MCP server?

VerifyMCP ran 15 checks on AmpleRun GPU rentals, covering Malware scan, Known CVEs, Install scripts, Dependency health and 11 more. One item could not be completed, a gap on our side rather than a finding about AmpleRun GPU rentals: Security disclosure. Endpoint Security and Transport & Reachability do not apply to an npm package, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.

## Links

- npm package: https://www.npmjs.com/package/@amplerun/mcp
- Socket report: https://socket.dev/npm/package/@amplerun/mcp
- Website: https://amplerun.com/docs/agents
- Changelog RSS feed: https://verifymcp.io/servers/com-amplerun-gpu-rentals/amplerun-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/com-amplerun-gpu-rentals/amplerun-mcp/changelog.json
- Trust report (JSON): https://verifymcp.io/servers/com-amplerun-gpu-rentals/amplerun-mcp.json
- HTML version of this page: https://verifymcp.io/servers/com-amplerun-gpu-rentals/amplerun-mcp