Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.Poiuyhje/eqvps

REMOTE · MCP.EQVPS.COM · SCANNED SEP 25

No-KYC crypto VPS AI agents rent & run over MCP — 57 tools, pay USDC/USDT on Base/Eth/Polygon/Solana

Available components

−3 this week 76 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security66
  • The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
  • Authorisation not fully verified: no authorisation is required to call this server, and 27 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
  • HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
  • The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
  • DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
Transport & Reachability100
Schema Quality & AI Usability76
  • AI-judged instruction clarity (good).Pass
  • Tool/resource definitions use about 2713 tokens (~100/item across 27 items; 27 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management83
  • Stability check failed: schema churn in the 30 days we've observed: 0 tool removals, 9 breaking changes, 0 auth/transport breaks, 0 additions. See how to fix → Fail
Tool Coverage74
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 23% of tool parameters carry a description.Partial
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "pay_invoice" implies "pay" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
  • An AI judge read all 27 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

How do I install the io.github.Poiuyhje/eqvps MCP server?

io.github.Poiuyhje/eqvps is a hosted endpoint at https://mcp.eqvps.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · mcp.eqvps.com

# add to Claude Code
claude mcp add --transport http poiuyhje-eqvps 'https://mcp.eqvps.com/mcp'
// .cursor/mcp.json
{
  "mcpServers": {
    "poiuyhje-eqvps": {
      "url": "https://mcp.eqvps.com/mcp"
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "poiuyhje-eqvps": {
      "type": "http",
      "url": "https://mcp.eqvps.com/mcp"
    }
  }
}
# ~/.codex/config.toml
[mcp_servers.poiuyhje-eqvps]
url = "https://mcp.eqvps.com/mcp"
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "poiuyhje-eqvps": {
      "type": "remote",
      "url": "https://mcp.eqvps.com/mcp",
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add poiuyhje-eqvps --url 'https://mcp.eqvps.com/mcp' --transport streamable-http
# ~/.hermes/config.yaml
mcp_servers:
  poiuyhje-eqvps:
    url: "https://mcp.eqvps.com/mcp"
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "poiuyhje-eqvps": {
      "Transport": "http",
      "Url": "https://mcp.eqvps.com/mcp"
    }
  }
}
# add to Vellum
assistant mcp add poiuyhje-eqvps -t streamable-http -u 'https://mcp.eqvps.com/mcp'
// mcp.json
{
  "mcpServers": {
    "poiuyhje-eqvps": {
      "type": "http",
      "url": "https://mcp.eqvps.com/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 25 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 22 Sept 26 0
    • Tool “get_vps_status” rewrote its description, which is the text the model reads security
    • Tool “list_plans” rewrote its description, which is the text the model reads security
    • Tool “order_vps” rewrote its description, which is the text the model reads security
  • 20 Sept 26 −3
    • Stability: pass → fail ▼ security
    • A breaking change shipped without a version bump: still 1.0.1 ▼ security
    • Tool “accept_delegation” rewrote its description, which is the text the model reads security
    • Schema quality: 85 → 95 ▼ functional
    • “cancel_service” changed the type of “service_id”: integer → string ▼ functional
    • “create_ticket” changed the type of “service_id”: integer → string ▼ functional
    • “delegate_service” changed the type of “service_id”: integer → string ▼ functional
    • “get_vps_metrics” changed the type of “service_id”: integer → string ▼ functional
    • “get_vps_status” changed the type of “service_id”: integer → string ▼ functional
    • “power_vps” changed the type of “service_id”: integer → string ▼ functional
    • “reinstall_vps” changed the type of “service_id”: integer → string ▼ functional
    • “reset_password” changed the type of “service_id”: integer → string ▼ functional
    • “set_hostname” changed the type of “service_id”: integer → string ▼ functional
    • Tool coverage: 2% → 23% ▲ functional
    • Schema quality: excellent → good functional
    • “cancel_service” reworded the description of “service_id” cosmetic
    • “create_ticket” reworded the description of “service_id” cosmetic
    • “delegate_service” reworded the description of “service_id” cosmetic
    • “get_vps_metrics” reworded the description of “service_id” cosmetic
    • “get_vps_status” reworded the description of “service_id” cosmetic
    • “power_vps” reworded the description of “service_id” cosmetic
    • “reinstall_vps” reworded the description of “service_id” cosmetic
    • “reset_password” reworded the description of “service_id” cosmetic
    • “set_hostname” reworded the description of “service_id” cosmetic
    • “cancel_service” made “service_id” optional cosmetic
    • “delegate_service” made “service_id” optional cosmetic
    • “get_vps_metrics” made “service_id” optional cosmetic
    • “get_vps_status” made “service_id” optional cosmetic
    • “power_vps” made “service_id” optional cosmetic
    • “reinstall_vps” made “service_id” optional cosmetic
    • “reset_password” made “service_id” optional cosmetic
    • “set_hostname” made “service_id” optional cosmetic
  • 14 Sept 26 +2
    • DNSSEC: fail → pass ▲ security
  • 12 Sept 26 0
    • Stability: fail → pass ▲ security
  • 6 Sept 26 +2
    • HSTS header: fail → pass ▲ security
  • 28 Aug 26 +1
    • A breaking change shipped without a version bump: still 1.0.1 ▼ security
    • Tool “reseller_add_client” was removed ▼ security
    • Tool “reseller_check_balance” was removed ▼ security
    • Tool “reseller_create_plan” was removed ▼ security
    • Tool “reseller_list_clients” was removed ▼ security
    • Tool “reseller_list_plans” was removed ▼ security
    • Tool “reseller_order_for_client” was removed ▼ security
    • Tool “reseller_service_status” was removed ▼ security
    • Schema quality: 2662 → 2302 ▲ functional
    • Schema quality: good → excellent functional
  • 27 Aug 26 74
    • Schema quality: 2302 → 2662 ▼ functional
    • Schema quality: excellent → good functional
    • New tool “reseller_add_client” functional
    • New tool “reseller_check_balance” functional
    • New tool “reseller_create_plan” functional
    • New tool “reseller_list_clients” functional
    • New tool “reseller_list_plans” functional
    • New tool “reseller_order_for_client” functional
    • New tool “reseller_service_status” functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 25 Sept 2026 · Probed https://mcp.eqvps.com/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=eqvps.com CN=YE2,O=Let's Encrypt,C=US 22 Sept 2026 21 Dec 2026 ECDSA 256 ECDSA-SHA384 52bb3a0a2a6e74825af95d496e9e87dd37f
SANs: *.eqvps.com, eqvps.com
CN=YE2,O=Let's Encrypt,C=US (CA) CN=Root YE,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 ECDSA 384 ECDSA-SHA384 4df3b15dd6c0784c507cd37b58e6f115
CN=Root YE,O=ISRG,C=US (CA) CN=ISRG Root X2,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 ECDSA-SHA384 872165fc34b6e5fba8add5b3705fb53a
CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 SHA256-RSA 6c8f1dc727c7117f7baf853ac980f9cd

Background: What to check on a remote MCP endpoint →

DNSSEC secure

Validation of mcp.eqvps.com. — Secure

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
com. present 19718 13 Verified
eqvps.com. present 2371 13 Verified
mcp.eqvps.com. Verified address RRset verified with the apex keys
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=31536000; includeSubDomains
x-content-type-options nosniff
x-frame-options DENY
referrer-policy strict-origin-when-cross-origin
permissions-policy camera=(), microphone=(), geolocation=(), payment=(), usb=(), interest-cohort=()

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://mcp.eqvps.com/mcp Verified 200
http (plaintext) http://mcp.eqvps.com/mcp HTTPS enforced 301 https://mcp.eqvps.com/mcp
MCP tools · 27 exposed · ~2,713 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
accept_delegation ~60

Accept a delegation invitation using the `token` from the invite link. Requires being signed in as the invited email address: it grants operator access to your own account. No new token is returned — keep using yours.

NameTypeReqDescription
tokenstringyes–

No output schema declared.

No examples provided.

cancel_service ~208

Cancel a VPS. DEFAULT `end_of_period`: the server stays active until the end of the already-paid period, then is simply not renewed — NO data loss now, safe. `immediate` DESTROYS the VM and ALL data right away, permanently and irreversibly, and REQUIRES `confirm` set to the exact server hostname (see get_vps_status). Use end_of_period unless you explicitly intend to wipe the server now. On `immediate`, the unused portion of the already-paid period is refunded to your account balance (see `refund_amount` in the response).

NameTypeReqDescription
confirmstring––
reasonstringyesREQUIRED: why this VPS is being cancelled (e.g. project finished, too expensive, no longer needed).
service_idstring–Service code as returned by list_vps/order_vps, e.g. "68J67T5" (a plain numeric id is also accepted).
typestring––

No output schema declared.

No examples provided.

close_ticket ~69

Close one of your tickets. `rating` (1-5) and `comment` are OPTIONAL — you can close without rating. Use the ticket code from create_ticket / list_tickets.

NameTypeReqDescription
commentstring––
ratinginteger––
ticket_codestringyes–

No output schema declared.

No examples provided.

create_ticket ~113

Open a support ticket with EQVPS. `subject` and `message` are required; optional `service_id` ties it to one of your VPS. The response includes the ticket `code` — use that with get_ticket / reply_ticket / close_ticket.

NameTypeReqDescription
messagestringyes–
service_idstring–Service code as returned by list_vps/order_vps, e.g. "68J67T5" (a plain numeric id is also accepted).
subjectstringyes–

No output schema declared.

No examples provided.

delegate_service ~121

Grant OPERATOR access to one of YOUR VPS to another person by email (they can power/reinstall/console/hostname/rdns, but NOT renew, cancel or change billing). Sends them an invitation with an accept link. Optional `expires_days` for time-limited access. Owner-only.

NameTypeReqDescription
emailstringyes–
expires_daysinteger––
service_idstring–Service code as returned by list_vps/order_vps, e.g. "68J67T5" (a plain numeric id is also accepted).

No output schema declared.

No examples provided.

get_balance ~33

Return the account's prepaid credit balance and currency. `order_vps` spends from this balance automatically when it is sufficient.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_ticket ~70

Read one ticket and its full message thread. Each message has an `author`: `you` or `staff` — a `staff` message is a reply from support. Poll this to see new answers. The ticket code comes from create_ticket / list_tickets.

NameTypeReqDescription
ticket_codestringyes–

No output schema declared.

No examples provided.

get_vps_metrics ~89

Time-series resource metrics (CPU %, memory, network, disk) for a VPS. `timeframe` ∈ hour|day|week|month (default hour).

NameTypeReqDescription
service_idstring–Service code as returned by list_vps/order_vps, e.g. "68J67T5" (a plain numeric id is also accepted).
timeframestring––

No output schema declared.

No examples provided.

get_vps_status ~405

Get full detail for one VPS: status, specs, live VM state/uptime, and access info (host, port, ready-to-paste `command`; `access.method` = ssh for Linux, rdp for Windows — port follows the plan: dedicated IP 22/3389, NAT 20000+vmid). ROOT PASSWORD (keyless VPS): call with `reveal: true` to retrieve it. It is shown ONCE, and only after the VM has finished booting — at that moment the password is applied to the live VM, so it is guaranteed to work. While the VM is still booting the response carries `password_pending: true` and NO password; just call again with `reveal: true` in ~30-60s (the one-time reveal is NOT spent until a password is actually returned — no reset or reboot needed). Without `reveal`, `password_available: true` means a password is waiting to be revealed. If you supplied an SSH key at order time, log in with that key (no password); `ssh_ready: false` means the VM is still booting — retry shortly. Use `reset_password` ONLY if the password is lost. Poll this (without `reveal`) after `order_vps` to watch provisioning reach `active`. NAT plans (no dedicated IP): the SSH `port` shown is an EXTERNAL DNAT port forwarded to the VM internal port 22 (`internal_port` in the response). If you configure a host firewall, allow the INTERNAL port — `ufw allow OpenSSH` — NOT the external port, or `ufw enable` will lock SSH out. See `firewall_note` in the response.

NameTypeReqDescription
revealboolean––
service_idstring–Service code as returned by list_vps/order_vps, e.g. "68J67T5" (a plain numeric id is also accepted).

No output schema declared.

No examples provided.

list_delegated_to_me ~32

List services other owners have delegated operator access to you — the VPS you can operate but don't own.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_delegations ~36

List outgoing delegations you (the owner) have granted on your services — who has operator access to what, and its status.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_plans ~109

List all available VPS plans (catalog) with pricing, specs and the OS images each plan can boot: Linux plans (NAT or dedicated IPv4, from $3/mo) and Windows Server 2022 plans (slug windows-*, BYOL — the customer activates their own licence; RDP access, 150 Mbit/s port, from $11/mo). No authentication needed. Use this first to pick a `product` slug and an `os_id` for `order_vps`.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_tickets ~37

List your support tickets with status and last-message info. `last_message_author: "staff"` means support has replied since you last looked.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_vps ~71

List the account's ACTIVE VPS services — active, provisioning, and suspended servers (deleted/cancelled are excluded). Use the `id` as `service_id` for the management tools. If a server is missing from this list it has been deleted — do not query its status or try to manage it.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

login ~87

Log in with email + password. Returns a bearer `token`. NOTE: accounts created via register_account have NO password by default — reuse the token from register instead. If you have no password, first call `set_password` (while still authenticated with your register token), or use the human email-OTP flow in a browser.

NameTypeReqDescription
emailstringyes–
passwordstringyes–

No output schema declared.

No examples provided.

order_vps ~229

Order a VPS. `product` = plan slug from list_plans; `os_id` = an OS id from that plan's images. Optional `hostname` and `ssh_key` (public key — strongly recommended so you get key-based root login). Windows plans (windows-*) accept only the Windows Server 2022 image, ignore `ssh_key`, and are reached over RDP as Administrator (see get_vps_status → access); the licence is BYOL. Branching on the response: • `paid_from_balance: true` → the prepaid balance covered it; the server is provisioning. Poll `get_vps_status` until status is `active` and the VM is reachable. • `paid_from_balance: false` → balance was insufficient; an unpaid `invoice` is returned. Call `pay_invoice` with `invoice.id` to get a crypto `checkout_url`, OR `topup_balance` then re-order.

NameTypeReqDescription
hostnamestring––
os_idintegeryes–
productstringyes–
ssh_keystring––

No output schema declared.

No examples provided.

pay_invoice ~51

Initiate payment for an owned, unpaid invoice. Returns a PayRam `checkout_url`; the invoice settles (and the VPS provisions) automatically once the on-chain payment confirms.

NameTypeReqDescription
invoice_idintegeryes–

No output schema declared.

No examples provided.

power_vps ~70

Power-control a VPS: `start`, `stop` or `reboot`.

NameTypeReqDescription
actionstringyes–
service_idstring–Service code as returned by list_vps/order_vps, e.g. "68J67T5" (a plain numeric id is also accepted).

No output schema declared.

No examples provided.

register_account ~120

Create a new EQVPS customer account with first_name, last_name, email. Returns a bearer `token` — STORE IT SAFELY: it is your only credential. Send it as `Authorization: Bearer <token>` on every following request. No password or human step is needed. If you may lose the token, call `set_password` once (while authenticated) to also enable email+password `login` as a backup.

NameTypeReqDescription
emailstringyes–
first_namestringyes–
last_namestringyes–

No output schema declared.

No examples provided.

reinstall_vps ~132

DESTRUCTIVE — all data is lost. REQUIRES confirm = exact hostname (from get_vps_status) or 'DELETE'. Agent must explicitly confirm with the human before calling. Wipes and reinstalls the VPS with the given OS image (`os_id` from list_plans). Provisioning runs asynchronously; poll `get_vps_status`.

NameTypeReqDescription
confirmstringyes–
os_idintegeryes–
service_idstring–Service code as returned by list_vps/order_vps, e.g. "68J67T5" (a plain numeric id is also accepted).

No output schema declared.

No examples provided.

reply_ticket ~44

Post a reply on one of your tickets. Use the ticket code from create_ticket / list_tickets.

NameTypeReqDescription
messagestringyes–
ticket_codestringyes–

No output schema declared.

No examples provided.

reset_password ~183

Rotate the root password. The new password is applied to the LIVE VM immediately via the guest-agent (no reboot) and works within ~10-30s; the OLD password stops working. REQUIRES confirm = exact hostname (from get_vps_status) or 'DELETE'. Agent must confirm with the human before calling. Use this ONLY if the password was lost — NOT because SSH was not instant on a fresh order (a new VM needs ~60s to boot; poll get_vps_status with reveal:true instead). New password is NOT in this response — read it ONCE via get_vps_status (reveal:true); also emailed.

NameTypeReqDescription
confirmstringyes–
service_idstring–Service code as returned by list_vps/order_vps, e.g. "68J67T5" (a plain numeric id is also accepted).

No output schema declared.

No examples provided.

revoke_delegation ~61

Revoke a delegation by its id (owner revokes access, or a delegate declines their own). The other side is notified. Use list_delegations / list_delegated_to_me to find the id.

NameTypeReqDescription
delegation_idintegeryes–

No output schema declared.

No examples provided.

set_hostname ~69

Set the VPS hostname (valid DNS label; applied on next reboot/rebuild).

NameTypeReqDescription
hostnamestringyes–
service_idstring–Service code as returned by list_vps/order_vps, e.g. "68J67T5" (a plain numeric id is also accepted).

No output schema declared.

No examples provided.

set_password ~110

Set a password for THIS account (the one your bearer token belongs to). Accounts from register_account have no password by default — the bearer token is the credential. Call this ONCE to enable email+password `login` as a recovery method in case the token is lost. Needs only the new password (min 8 chars, letters+numbers) — no current password the first time. If a password was already set, this returns 409 (use change-password instead).

NameTypeReqDescription
passwordstringyes–

No output schema declared.

No examples provided.

topup_balance ~75

Create a top-up invoice and return a `checkout_url` (PayRam crypto checkout). The balance is credited automatically once the on-chain payment confirms. `amount` is in account currency (USD); minimum and maximum are enforced server-side. Only one unpaid top-up may exist at a time.

NameTypeReqDescription
amountnumberyes–

No output schema declared.

No examples provided.

whoami ~29

Return the authenticated account profile (id, name, email). Use to verify the bearer token is valid.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

Common questions

What is the io.github.Poiuyhje/eqvps MCP server?

io.github.Poiuyhje/eqvps is an MCP server listed in the public MCP registry as io.github.Poiuyhje/eqvps. No-KYC crypto VPS AI agents rent & run over MCP, 57 tools, pay USDC/USDT on Base/Eth/Polygon/Solana. This page covers its hosted endpoint (https://mcp.eqvps.com/mcp).

Is the io.github.Poiuyhje/eqvps MCP server safe to use?

io.github.Poiuyhje/eqvps scores 76 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.Poiuyhje/eqvps MCP server expose?

io.github.Poiuyhje/eqvps exposes 27 tools: list_plans, register_account, login, set_password, whoami, and 22 more. Their descriptions and schemas cost roughly 2,713 tokens of context every time the server is loaded.

Does the io.github.Poiuyhje/eqvps MCP server require authentication?

No. We connected to io.github.Poiuyhje/eqvps without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the io.github.Poiuyhje/eqvps MCP server still maintained?

io.github.Poiuyhje/eqvps is still listed as active in the MCP registry. We last reached this channel on 25 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.