io.github.Poiuyhje/eqvps
REMOTE · MCP.EQVPS.COM · SCANNED AUG 3
No-KYC VPS an AI agent buys itself: sign up, pay crypto, get root. No human, no card, no KYC.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →
Endpoint Security57
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 26 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability77
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 2087 tokens (~80/item across 26 items; 26 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management27
- Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage67
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 0% of tool parameters carry a description.Fail
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
remote · mcp.eqvps.com
claude mcp add --transport http poiuyhje-eqvps https://mcp.eqvps.com/mcp
[mcp_servers.poiuyhje-eqvps] url = "https://mcp.eqvps.com/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"poiuyhje-eqvps": {
"type": "remote",
"url": "https://mcp.eqvps.com/mcp",
"enabled": true
}
}
} openclaw mcp add poiuyhje-eqvps --url https://mcp.eqvps.com/mcp --transport streamable-http
mcp_servers:
poiuyhje-eqvps:
url: "https://mcp.eqvps.com/mcp" {
"mcpServers": {
"poiuyhje-eqvps": {
"type": "http",
"url": "https://mcp.eqvps.com/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Aug 26 +1
- Tool “reset_password” rewrote its description, which is the text the model reads security
- Tool “get_vps_status” rewrote its description, which is the text the model reads security
- Schema quality: 69 → 80 ▼ functional
- New tool “close_ticket” functional
- New tool “create_ticket” functional
- New tool “get_ticket” functional
- New tool “list_tickets” functional
- New tool “reply_ticket” functional
- “get_vps_status” added an optional parameter “reveal” cosmetic
- 1 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.
- 31 Jul 26 +1
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 30 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 29 Jul 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 28 Jul 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
- 27 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 26 Jul 26 59
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Probed https://mcp.eqvps.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=eqvps.com | CN=YE1,O=Let's Encrypt,C=US | 25 Jul 2026 | 23 Oct 2026 | ECDSA 256 | ECDSA-SHA384 | 62dd887da5b3399f228eecb65c9c54fb750 |
| SANs: *.eqvps.com, eqvps.com | ||||||
| CN=YE1,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 5ddd70dd31f801c85c186a7a04b80afe |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
DNSSEC insecure
Validation of mcp.eqvps.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| eqvps.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| x-content-type-options | nosniff |
| x-frame-options | DENY |
| referrer-policy | strict-origin-when-cross-origin |
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.eqvps.com/mcp | Verified | 200 | |
| http (plaintext) | http://mcp.eqvps.com/mcp | HTTPS enforced | 301 | https://mcp.eqvps.com/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
accept_delegation Accept delegated access ~50
Accept a delegation invitation using the `token` from the invite link. Creates/links your account and grants operator access. Returns a bearer token for the delegated account.
| Name | Type | Req | Description |
|---|---|---|---|
| token | string | yes | — |
No output schema declared.
No examples provided.
cancel_service Cancel a VPS ~150
Cancel a VPS. DEFAULT `end_of_period`: the server stays active until the end of the already-paid period, then is simply not renewed — NO data loss now, safe. `immediate` DESTROYS the VM and ALL data right away, permanently and irreversibly, and REQUIRES `confirm` set to the exact server hostname (see get_vps_status). Use end_of_period unless you explicitly intend to wipe the server now. On `immediate`, the unused portion of the already-paid period is refunded to your account balance (see `refund_amount` in the response).
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | string | — | — |
| service_id | integer | yes | — |
| type | string | — | — |
No output schema declared.
No examples provided.
close_ticket Close a support ticket ~69
Close one of your tickets. `rating` (1-5) and `comment` are OPTIONAL — you can close without rating. Use the ticket code from create_ticket / list_tickets.
| Name | Type | Req | Description |
|---|---|---|---|
| comment | string | — | — |
| rating | integer | — | — |
| ticket_code | string | yes | — |
No output schema declared.
No examples provided.
create_ticket Open a support ticket ~83
Open a support ticket with EQVPS. `subject` and `message` are required; optional `service_id` ties it to one of your VPS. The response includes the ticket `code` — use that with get_ticket / reply_ticket / close_ticket.
| Name | Type | Req | Description |
|---|---|---|---|
| message | string | yes | — |
| service_id | integer | — | — |
| subject | string | yes | — |
No output schema declared.
No examples provided.
delegate_service Delegate service access ~91
Grant OPERATOR access to one of YOUR VPS to another person by email (they can power/reinstall/console/hostname/rdns, but NOT renew, cancel or change billing). Sends them an invitation with an accept link. Optional `expires_days` for time-limited access. Owner-only.
| Name | Type | Req | Description |
|---|---|---|---|
| string | yes | — | |
| expires_days | integer | — | — |
| service_id | integer | yes | — |
No output schema declared.
No examples provided.
get_balance Get prepaid balance ~33
Return the account's prepaid credit balance and currency. `order_vps` spends from this balance automatically when it is sufficient.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_ticket Read a support ticket ~70
Read one ticket and its full message thread. Each message has an `author`: `you` or `staff` — a `staff` message is a reply from support. Poll this to see new answers. The ticket code comes from create_ticket / list_tickets.
| Name | Type | Req | Description |
|---|---|---|---|
| ticket_code | string | yes | — |
No output schema declared.
No examples provided.
get_vps_metrics Get VPS metrics ~59
Time-series resource metrics (CPU %, memory, network, disk) for a VPS. `timeframe` ∈ hour|day|week|month (default hour).
| Name | Type | Req | Description |
|---|---|---|---|
| service_id | integer | yes | — |
| timeframe | string | — | — |
No output schema declared.
No examples provided.
get_vps_status Get VPS status & access ~341
Get full detail for one VPS: status, specs, live VM state/uptime, and SSH access info (host, port, ready-to-paste `command`). ROOT PASSWORD (keyless VPS): call with `reveal: true` to retrieve it. It is shown ONCE, and only after the VM has finished booting — at that moment the password is applied to the live VM, so it is guaranteed to work. While the VM is still booting the response carries `password_pending: true` and NO password; just call again with `reveal: true` in ~30-60s (the one-time reveal is NOT spent until a password is actually returned — no reset or reboot needed). Without `reveal`, `password_available: true` means a password is waiting to be revealed. If you supplied an SSH key at order time, log in with that key (no password); `ssh_ready: false` means the VM is still booting — retry shortly. Use `reset_password` ONLY if the password is lost. Poll this (without `reveal`) after `order_vps` to watch provisioning reach `active`. NAT plans (no dedicated IP): the SSH `port` shown is an EXTERNAL DNAT port forwarded to the VM internal port 22 (`internal_port` in the response). If you configure a host firewall, allow the INTERNAL port — `ufw allow OpenSSH` — NOT the external port, or `ufw enable` will lock SSH out. See `firewall_note` in the response.
| Name | Type | Req | Description |
|---|---|---|---|
| reveal | boolean | — | — |
| service_id | integer | yes | — |
No output schema declared.
No examples provided.
list_delegated_to_me List services delegated to me ~32
List services other owners have delegated operator access to you — the VPS you can operate but don't own.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_delegations List delegations I granted ~36
List outgoing delegations you (the owner) have granted on your services — who has operator access to what, and its status.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_plans List VPS plans ~56
List all available VPS plans (catalog) with pricing, specs and the OS images each plan can boot. No authentication needed. Use this first to pick a `product` slug and an `os_id` for `order_vps`.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_tickets List support tickets ~37
List your support tickets with status and last-message info. `last_message_author: "staff"` means support has replied since you last looked.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_vps List my VPS ~71
List the account's ACTIVE VPS services — active, provisioning, and suspended servers (deleted/cancelled are excluded). Use the `id` as `service_id` for the management tools. If a server is missing from this list it has been deleted — do not query its status or try to manage it.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
login Log in ~49
Log in with email + password. Returns a bearer `token` to send as `Authorization: Bearer <token>` on subsequent requests.
| Name | Type | Req | Description |
|---|---|---|---|
| string | yes | — | |
| password | string | yes | — |
No output schema declared.
No examples provided.
order_vps Order a VPS ~185
Order a VPS. `product` = plan slug from list_plans; `os_id` = an OS id from that plan's images. Optional `hostname` and `ssh_key` (public key — strongly recommended so you get key-based root login). Branching on the response: • `paid_from_balance: true` → the prepaid balance covered it; the server is provisioning. Poll `get_vps_status` until status is `active` and the VM is reachable. • `paid_from_balance: false` → balance was insufficient; an unpaid `invoice` is returned. Call `pay_invoice` with `invoice.id` to get a crypto `checkout_url`, OR `topup_balance` then re-order.
| Name | Type | Req | Description |
|---|---|---|---|
| hostname | string | — | — |
| os_id | integer | yes | — |
| product | string | yes | — |
| ssh_key | string | — | — |
No output schema declared.
No examples provided.
pay_invoice Pay an invoice ~51
Initiate payment for an owned, unpaid invoice. Returns a PayRam `checkout_url`; the invoice settles (and the VPS provisions) automatically once the on-chain payment confirms.
| Name | Type | Req | Description |
|---|---|---|---|
| invoice_id | integer | yes | — |
No output schema declared.
No examples provided.
power_vps Power control ~40
Power-control a VPS: `start`, `stop` or `reboot`.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | — |
| service_id | integer | yes | — |
No output schema declared.
No examples provided.
register_account Register a new account ~81
Create a new EQVPS customer account with first_name, last_name, email. Returns a bearer `token` — store it and send it as `Authorization: Bearer <token>` on every following request. No password or human step needed.
| Name | Type | Req | Description |
|---|---|---|---|
| string | yes | — | |
| first_name | string | yes | — |
| last_name | string | yes | — |
No output schema declared.
No examples provided.
reinstall_vps Reinstall OS ~102
DESTRUCTIVE — all data is lost. REQUIRES confirm = exact hostname (from get_vps_status) or 'DELETE'. Agent must explicitly confirm with the human before calling. Wipes and reinstalls the VPS with the given OS image (`os_id` from list_plans). Provisioning runs asynchronously; poll `get_vps_status`.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | string | yes | — |
| os_id | integer | yes | — |
| service_id | integer | yes | — |
No output schema declared.
No examples provided.
reply_ticket Reply to a support ticket ~44
Post a reply on one of your tickets. Use the ticket code from create_ticket / list_tickets.
| Name | Type | Req | Description |
|---|---|---|---|
| message | string | yes | — |
| ticket_code | string | yes | — |
No output schema declared.
No examples provided.
reset_password Reset root password ~153
Rotate the root password. The new password is applied to the LIVE VM immediately via the guest-agent (no reboot) and works within ~10-30s; the OLD password stops working. REQUIRES confirm = exact hostname (from get_vps_status) or 'DELETE'. Agent must confirm with the human before calling. Use this ONLY if the password was lost — NOT because SSH was not instant on a fresh order (a new VM needs ~60s to boot; poll get_vps_status with reveal:true instead). New password is NOT in this response — read it ONCE via get_vps_status (reveal:true); also emailed.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | string | yes | — |
| service_id | integer | yes | — |
No output schema declared.
No examples provided.
revoke_delegation Revoke a delegation ~61
Revoke a delegation by its id (owner revokes access, or a delegate declines their own). The other side is notified. Use list_delegations / list_delegated_to_me to find the id.
| Name | Type | Req | Description |
|---|---|---|---|
| delegation_id | integer | yes | — |
No output schema declared.
No examples provided.
set_hostname Set hostname ~39
Set the VPS hostname (valid DNS label; applied on next reboot/rebuild).
| Name | Type | Req | Description |
|---|---|---|---|
| hostname | string | yes | — |
| service_id | integer | yes | — |
No output schema declared.
No examples provided.
topup_balance Top up balance ~75
Create a top-up invoice and return a `checkout_url` (PayRam crypto checkout). The balance is credited automatically once the on-chain payment confirms. `amount` is in account currency (USD); minimum and maximum are enforced server-side. Only one unpaid top-up may exist at a time.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | yes | — |
No output schema declared.
No examples provided.
whoami Current account ~29
Return the authenticated account profile (id, name, email). Use to verify the bearer token is valid.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.