XportL
REMOTE · XPORTL.IO
GPU fabric tools: NCCL benchmark analysis, degradation cost, cluster compatibility, XportL facts.
Available components
Last scanned (9 hours ago)
Scores higher than 79% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Cloud Infrastructure
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security74
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability75
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1985 tokens (~330/item across 6 items; 6 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management57
- Stability observed for 17 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 7 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 50 to 53. That category is still filling its 30-day observation window: 15 days of observed history at the previous scan, 16 at this one. The score rises as the window fills, whether or not the server changes.
- 2 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.
- 31 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 37 to 40. That category is still filling its 30-day observation window: 11 days of observed history at the previous scan, 12 at this one. The score rises as the window fills, whether or not the server changes.
- 30 Oct 26 0
- DNSSEC: unverified → fail ▼ security
- 29 Oct 26 +1
- DNSSEC: fail → unverified ▼ security
- 27 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 25 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.
- 22 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://xportl.io/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=xportl.io | CN=WE1,O=Google Trust Services,C=US | 11 Sept 2026 | 10 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | c5cde406a5b2818f13f59cd7f254b474 |
| SANs: xportl.io, *.xportl.io | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of xportl.io. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| io. | present | 38690 | 8 | Verified |
| xportl.io. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://xportl.io/mcp | Verified | 200 | |
| http (plaintext) | http://xportl.io/mcp | HTTPS enforced | 301 | https://xportl.io/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
analyze_nccl_benchmark NCCL Benchmark Analyzer ~379
Analyzes nccl-tests / rccl-tests results (paste raw all_reduce_perf output, or give size/busbw points). Detects node and GPU counts from the output, compares large-message bus bandwidth with the fabric's NIC line rate (InfiniBand HDR/NDR/XDR, RoCE 100G to 800G), and flags data errors, degraded bandwidth, dips as message size grows and unstable run-to-run results, with likely causes. Returns a health status and a bandwidth-loss figure for calculate_fabric_degradation_cost.
| Name | Type | Req | Description |
|---|---|---|---|
| collective | string | – | Collective that was benchmarked. Default all_reduce. |
| expected_busbw_gbs | number | – | Expected healthy bus bandwidth in GB/s, e.g. from an acceptance test. Overrides the line-rate reference; required to judge single-node runs. |
| fabric | string | – | Inter-node fabric and per-port speed. Use 'other' with link_gbps for anything else. |
| gpus_per_node | integer | – | GPUs per node. Detected from raw_output when omitted; default 8. |
| link_gbps | number | – | Per-NIC link speed in Gb/s. Overrides the speed implied by fabric. |
| nics_per_node | integer | – | Compute-fabric NICs per node (rails). Default: one per GPU. |
| nodes | integer | – | Number of nodes in the run. Detected from raw_output when omitted. |
| raw_output | string | – | Raw stdout of an nccl-tests or rccl-tests run (e.g. all_reduce_perf -b 8 -e 8G -f 2 -g 1). Paste it unchanged; rank/host lines are used to detect node count. |
| results | array | – | Alternative to raw_output: measured points as {size_bytes, busbw_gbs}. |
No output schema declared.
No examples provided.
calculate_fabric_degradation_cost Fabric Degradation Cost Calculator ~390
Estimates what silent fabric degradation (slow NCCL collectives, flapping links, congestion) costs a GPU cluster: throughput lost, GPU-hours and dollars per year, idle-GPU equivalent, cost per degraded hour, extra days on a training run, and the value of a recovery scenario with a conservative case and a sensitivity table. All assumptions are inputs with stated defaults.
| Name | Type | Req | Description |
|---|---|---|---|
| bandwidth_loss_pct | number | – | Collective bus bandwidth lost while degraded, vs. healthy. Measure with nccl-tests (see analyze_nccl_benchmark). Default 40. |
| comm_share_pct | number | – | Share of a healthy training step spent in collective communication that is NOT overlapped with compute. Typically 10 to 40% for large-scale training. Default 25. |
| degraded_time_pct | number | – | Share of running time the fabric is degraded (flapping links, congestion, bad cables/optics, misrouted paths). Default 10. |
| gpu_count | integer | yes | Total GPUs in the cluster (or in the jobs being analyzed). |
| gpu_hour_cost_usd | number | – | Actual fully-loaded cost per GPU-hour in USD (amortized hardware + power + facility, or cloud rate). Strongly preferred over the default. |
| gpu_model | string | – | GPU model, used only to pick a default cost per GPU-hour when gpu_hour_cost_usd is not given. |
| recovery_pct | number | – | Recovery scenario: share of the degradation-induced throughput loss you expect to recover by detecting and acting on degradation sooner. A planning assumption, not a measured XportL result. Default 2… |
| training_run_days | number | – | Optional: planned wall-clock length of one training run on this cluster, to show how many days degradation adds to it. |
| utilization_pct | number | – | Share of hours the GPUs are running distributed jobs. Default 80. |
No output schema declared.
No examples provided.
check_cluster_compatibility Cluster Compatibility Check ~315
Checks a GPU cluster against XportL's published support matrix (Linux 5.8+ for eBPF, InfiniBand / RoCE v2 / NVLink, NVIDIA and AMD GPUs, NCCL / RCCL, on-prem / cloud / hybrid, host access for the eBPF agent). Returns a verdict (good fit / needs review / not ready), each check, and next steps. Anything not on the published list is reported as 'review', never as supported.
| Name | Type | Req | Description |
|---|---|---|---|
| collective_library | array | – | Collective communication libraries in use. Default ['nccl']. |
| deployment | string | yes | Where the cluster runs. |
| fabrics | array | yes | Every interconnect the GPU jobs use, e.g. ['infiniband','nvlink']. efa = AWS Elastic Fabric Adapter. |
| gpu_count | integer | – | Total GPUs, for context. |
| gpu_vendor | string | yes | GPU vendor. |
| host_access | string | – | Can you run a privileged agent on the GPU hosts? eBPF needs root or CAP_BPF/CAP_PERFMON. 'none' = fully managed service with no host access. |
| host_os | string | – | Host operating system on the GPU nodes. |
| linux_kernel | string | – | Host kernel version as printed by `uname -r`, e.g. '5.15.0-105-generic'. Leave empty for non-Linux hosts or if unknown. |
| orchestrator | string | – | Job scheduler / orchestrator, for context. |
No output schema declared.
No examples provided.
get_xportl_overview XportL Overview ~105
Returns cite-ready facts about XportL from xportl.io: what it does, the problem it solves, the seven failure classes it detects, how it collects telemetry and acts, supported fabrics/GPUs/collectives/kernels, use cases, FAQ, company details (parent company, stage, NVIDIA Inception, contacts) and links to the engineering guides on xportl.io.
| Name | Type | Req | Description |
|---|---|---|---|
| topic | string | – | Section to return. Default 'all'. |
No output schema declared.
No examples provided.
recommend_checkpoint_interval Checkpoint Interval Advisor ~252
Recommends how often to checkpoint a training job using the Young and Daly formulas, from GPU count, blocking checkpoint write time, restart time and job MTTF (estimated from Meta's published 2024 reliability data when not given). Returns the recommended interval, expected failures per day, GPU time wasted per day at the recommended and current intervals, and the daily saving.
| Name | Type | Req | Description |
|---|---|---|---|
| checkpoint_write_minutes | number | yes | Time training is blocked while a checkpoint is written, in minutes. With asynchronous checkpointing, use only the blocking part. |
| current_interval_minutes | number | – | Current checkpoint interval in minutes, to compare against the recommendation. |
| gpu_count | integer | yes | GPUs in the training job. |
| gpu_hour_cost_usd | number | – | Cost per GPU-hour in USD. Default 2.75. |
| job_mttf_hours | number | – | Measured mean time between job-interrupting failures for a job this size, in hours. If omitted, it is estimated from Meta's published 2024 cluster reliability data. |
| restart_minutes | number | – | Time from a failure to training resuming: detection, rescheduling, process start and checkpoint load, in minutes. Default 20. |
No output schema declared.
No examples provided.
request_enterprise_demo Request an Enterprise Demo ~281
Sends the user's contact details and cluster summary to the XportL enterprise team to arrange a technical assessment or demo deployment. Before calling: collect name, work email, company and a summary (include benchmark, cost or compatibility results from this conversation), show the user exactly what will be sent, and get their explicit agreement. Never call it without that agreement or with made-up details.
| Name | Type | Req | Description |
|---|---|---|---|
| cluster_gpus | integer | – | Approximate number of GPUs in the cluster(s). |
| company | string | yes | Company or organization. |
| string | yes | Work email address. | |
| fabric | string | – | Fabric(s) and GPU types, e.g. 'NDR InfiniBand + NVLink, H100'. |
| interest | string | yes | What they want from XportL. |
| name | string | yes | The person's full name. |
| phone | string | – | Phone number, optional. |
| role | string | – | Job title, e.g. 'Director of ML Infrastructure'. |
| summary | string | yes | What they need in a few sentences: cluster, symptoms, workloads, timeline, and any results from this conversation (benchmark status, cost estimate, compatibility verdict). |
| user_confirmed | boolean | yes | Must be true. Only set it after showing the user exactly what will be sent and the user agreed to share it with XportL. |
No output schema declared.
No examples provided.
How do I install the XportL MCP server?
XportL is a hosted endpoint at https://xportl.io/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · xportl.io
claude mcp add --transport http io-xportl-xportl 'https://xportl.io/mcp'
What is the XportL MCP server?
XportL is an MCP server listed in the public MCP registry as io.xportl/xportl. GPU fabric tools: NCCL benchmark analysis, degradation cost, cluster compatibility, XportL facts. This page covers its hosted endpoint (https://xportl.io/mcp).
Is the XportL MCP server safe to use?
XportL scores 79 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the XportL MCP server expose?
XportL exposes 6 tools: get_xportl_overview, analyze_nccl_benchmark, calculate_fabric_degradation_cost, check_cluster_compatibility, recommend_checkpoint_interval, request_enterprise_demo. Their descriptions and schemas cost roughly 1,722 tokens of context every time the server is loaded.
Does the XportL MCP server require authentication?
No. We connected to XportL without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the XportL MCP server still maintained?
XportL is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.