Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

tech.prismnetwork/mcp

NPM · @PRISMNETWORK/MCP · SCANNED SEP 20

Rent real NVIDIA GPUs from your agent. Browse with no wallet; pay per second onchain.

Available components

+3 this week 80 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security98
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 31 of 111 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency23
Schema Quality & AI Usability79
  • AI-judged instruction clarity (excellent).Pass
  • Tool/resource definitions use about 1593 tokens (~88/item across 18 items; 18 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage97
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 90% of tool parameters carry a description.Partial
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 18 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

How do I install the tech.prismnetwork/mcp server?

tech.prismnetwork/mcp runs locally as an npm package, launched with npx -y @prismnetwork/mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · @prismnetwork/mcp

# add to Claude Code
claude mcp add tech-prismnetwork-mcp -- npx -y @prismnetwork/mcp
// .cursor/mcp.json
{
  "mcpServers": {
    "tech-prismnetwork-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@prismnetwork/mcp"
      ]
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "tech-prismnetwork-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@prismnetwork/mcp"
      ]
    }
  }
}
# add to Codex CLI
codex mcp add tech-prismnetwork-mcp -- npx -y @prismnetwork/mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "tech-prismnetwork-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@prismnetwork/mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add tech-prismnetwork-mcp --command npx --arg -y --arg @prismnetwork/mcp
# ~/.hermes/config.yaml
mcp_servers:
  tech-prismnetwork-mcp:
    command: "npx"
    args: ["-y", "@prismnetwork/mcp"]
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "tech-prismnetwork-mcp": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "@prismnetwork/mcp"
      ]
    }
  }
}
# add to Vellum
assistant mcp add tech-prismnetwork-mcp -t stdio -c npx -a -y @prismnetwork/mcp
// mcp.json
{
  "mcpServers": {
    "tech-prismnetwork-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@prismnetwork/mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 20 Sept 26 0
    • Stability: 0.97 → pass security
  • 19 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

  • 17 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.

  • 15 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.

  • 13 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 73 to 77. That category is still filling its 30-day observation window: 22 days of observed history at the previous scan, 23 at this one. The score rises as the window fills, whether or not the server changes.

  • 11 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 67 to 70. That category is still filling its 30-day observation window: 20 days of observed history at the previous scan, 21 at this one. The score rises as the window fills, whether or not the server changes.

  • 9 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 60 to 63. That category is still filling its 30-day observation window: 18 days of observed history at the previous scan, 19 at this one. The score rises as the window fills, whether or not the server changes.

  • 7 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 53 to 57. That category is still filling its 30-day observation window: 16 days of observed history at the previous scan, 17 at this one. The score rises as the window fills, whether or not the server changes.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 20 Sept 2026 · Analysed npm/@prismnetwork/mcp@0.8.4

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem npm

Background: How many MCP packages publish verified provenance →

Dependencies 111 packages
Packages resolved 111
Stale 31
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 18 exposed · ~1,593 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
prism_batch_result ~58

Read the output of a batch lease by lease_id, once its node has reported. Use it to recover a result after prism_batch_run timed out.

NameTypeReqDescription
lease_idintegeryesThe lease_id from prism_batch_run's output or error.

No output schema declared.

No examples provided.

prism_batch_run ~183

Fund a lease that runs one command with no interactive access at all: the node executes it and reports the signed output. Matches only suppliers at trust class 'isolated' or above, so it can find no supplier when none is online; prefer prism_lease_and_run for broad availability. Output is capped at 64 KiB per stream.

NameTypeReqDescription
commandstringyesShell command to run (max 8 KiB).
duration_secondsintegerPaid window in seconds (default 900, max 21600). A command still running at the end is killed and reported exit 124.
max_usdgnumberHard cap on the USDG this lease may cost (default 1). Raise it deliberately for longer leases.
min_vram_mibintegerMinimum GPU memory in MiB (default 16000).

No output schema declared.

No examples provided.

prism_budget ~55

Show the spending limits this server enforces and what it has already spent in the last 24 hours, with the recent charges. Needs no wallet. Check this before a long job; a lease refused for budget says the same numbers.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

prism_end_lease ~38

Release a lease's local access. The on-chain lease settles at the end of its paid duration.

NameTypeReqDescription
lease_idintegeryes

No output schema declared.

No examples provided.

prism_infer ~138

Buy one LLM generation from Prism's managed inference endpoint. Pays the quoted USDG price from this wallet (about 0.01 USDG), waits through a cold start when no box is warm (up to a few minutes), and returns the generation with token usage. Cheaper and simpler than leasing when all you need is a completion.

NameTypeReqDescription
max_usdgnumberRefuse if the quoted price exceeds this (default 0.05).
modelstringModel to use; defaults to the endpoint's first offered model.
promptstringyesThe prompt to generate from (max 32 KiB).

No output schema declared.

No examples provided.

prism_lease ~144

Lease a GPU and keep it running. Returns a lease_id and SSH access. Use prism_run to execute commands and prism_end_lease when done.

NameTypeReqDescription
duration_secondsintegerLease length in seconds (default 900, max 21600).
max_usdgnumberHard cap on the USDG this lease may cost (default 1). Raise it deliberately for longer leases.
min_trust_classstringRefuse suppliers below this trust class (default 'open'). Raise it for anything the host operator must not read.
min_vram_mibintegerMinimum GPU memory in MiB (default 16000).

No output schema declared.

No examples provided.

prism_lease_and_run ~190

Lease a GPU, run one shell command on it, and return the output. The lease stays alive (use prism_run for more commands, prism_end_lease to release). Prefer this for a single command; use prism_lease when you'll run several.

NameTypeReqDescription
commandstringyesShell command to run on the GPU (e.g. 'nvidia-smi').
duration_secondsintegerLease length in seconds (default 900, max 21600).
max_usdgnumberHard cap on the USDG this lease may cost (default 1). Raise it deliberately for longer leases.
min_trust_classstringRefuse suppliers below this trust class (default 'open'). Raise it for anything the host operator must not read.
min_vram_mibintegerMinimum GPU memory in MiB (default 16000).

No output schema declared.

No examples provided.

prism_leases ~22

List this wallet's leases on Prism Network with their current state.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

prism_list_gpus ~116

List GPUs currently available to lease on Prism Network, with model, VRAM, price per second in USDG, and trust class. Trust class runs open < isolated < attested < confidential; on an 'open' supplier the host operator can read anything the workload touches. Keep secrets and credentials in prism_vault_store rather than on the box, and raise min_trust when the workload itself must not be readable.

NameTypeReqDescription
min_truststringOnly list suppliers at or above this trust class (default 'open').

No output schema declared.

No examples provided.

prism_price_index ~50

Current GPU pricing on Prism Network by model: sourced low/median/high and settled mean, in USDG per hour. Needs no wallet. Use it to estimate what an analysis job will cost before leasing.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

prism_receipts ~72

Recent settled lease receipts from the public proof feed: GPU model, runtime, what was charged and refunded, and the settlement transaction hash on Robinhood Chain. Needs no wallet. Every Prism lease ends in one of these.

NameTypeReqDescription
limitintegerMax receipts to return (default 10, max 50).

No output schema declared.

No examples provided.

prism_run ~66

Run a shell command on a GPU you already leased with prism_lease.

NameTypeReqDescription
commandstringyesShell command to run.
lease_idintegeryesThe lease_id returned by prism_lease.
timeout_secondsintegerMax seconds to wait (default 120).

No output schema declared.

No examples provided.

prism_vault_delete ~36

Permanently delete a vault item. The ciphertext is removed and the value cannot be recovered.

NameTypeReqDescription
item_idstringyes

No output schema declared.

No examples provided.

prism_vault_list ~39

List the agent's sealed vault items: item_id, label, version and trust floor. Values are not returned and are not readable by Prism.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

prism_vault_read ~71

Decrypt and return one vault item, in this process, using the wallet-derived key. The plaintext exists only here; do not echo it into a leased workspace, a log, or a message.

NameTypeReqDescription
item_idstringyesThe item_id from prism_vault_store or prism_vault_list.

No output schema declared.

No examples provided.

prism_vault_release ~88

Authorize a vault item into a lease you hold and return its plaintext for use there. Refused when the lease's trust class is below the item's trust floor, which is what stops a secret reaching a host that can read it. Every allowed release is recorded against the account.

NameTypeReqDescription
item_idstringyes
lease_idintegeryesA lease from prism_lease.

No output schema declared.

No examples provided.

prism_vault_store ~185

Store private data (a card, an identity document, an API credential) encrypted under a key derived from this agent's wallet on this machine. Prism receives ciphertext only and cannot read it. Use this instead of writing a secret into a workspace or a file. Returns an item_id; the value is not recoverable without the wallet.

NameTypeReqDescription
labelstringOptional plain-text name so the item is findable. Stored unencrypted, so keep it non-revealing (e.g. 'billing card', not the number).
trust_floorstringThe weakest workspace this item may ever be released into. Defaults to 'confidential', which is above anything the network serves today, so the item cannot reach a rented GPU at all. Only lower it de…
valuestringyesThe data to seal. Encrypted before it leaves this process.

No output schema declared.

No examples provided.

prism_wallet ~42

Show the agent's wallet address and on-chain balances (USDG and ETH for gas) on Robinhood Chain. Check this before leasing to confirm the wallet can pay.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

Common questions

What is the tech.prismnetwork/mcp server?

tech.prismnetwork/mcp is listed in the public MCP registry as tech.prismnetwork/mcp. Rent real NVIDIA GPUs from your agent. Browse with no wallet; pay per second onchain. This page covers its npm package (@prismnetwork/mcp).

Is the tech.prismnetwork/mcp server safe to use?

tech.prismnetwork/mcp scores 80 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the tech.prismnetwork/mcp server expose?

tech.prismnetwork/mcp exposes 18 tools: prism_budget, prism_wallet, prism_list_gpus, prism_price_index, prism_receipts, and 13 more. Their descriptions and schemas cost roughly 1,593 tokens of context every time the server is loaded.

Is the tech.prismnetwork/mcp server still maintained?

tech.prismnetwork/mcp is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the tech.prismnetwork/mcp server under?

tech.prismnetwork/mcp declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.