# tech.prismnetwork/mcp (npm · @prismnetwork/mcp)

Rent real NVIDIA GPUs from your agent. Browse with no wallet; pay per second onchain.

- Trust score: 80/100 (high trust)
- Change this week: +3
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-09-20

## Components

- npm · `@prismnetwork/mcp`: 80/100 (this document), [markdown](https://verifymcp.io/servers/tech-prismnetwork-mcp/prismnetwork-mcp.md), [page](https://verifymcp.io/servers/tech-prismnetwork-mcp/prismnetwork-mcp)

## Channel facts

- Registry: `npm`
- Package: `@prismnetwork/mcp`
- Version: `0.8.4`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-09-20.

- **Supply Chain Security**: 98/100
  - No malware found by supply-chain analysis.
  - No known CVEs affecting this package version or its production dependencies.
  - No install/post-install scripts declared.
  - 31 of 111 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 23/100
  - Repository check failed: no source repository is declared.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (Apache-2.0).
  - Actively maintained (last published 15 days ago).
  - Publishes a security disclosure policy (SECURITY.md).
- **Schema Quality & AI Usability**: 79/100
  - AI-judged instruction clarity (excellent).
  - Tool/resource definitions use about 1593 tokens (~88/item across 18 items; 18 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 100/100
  - No destabilizing schema changes in the last 30 days.
- **Tool Coverage**: 97/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 90% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.
  - An AI judge read all 18 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the tech.prismnetwork/mcp server?

tech.prismnetwork/mcp runs locally as an npm package, launched with npx -y @prismnetwork/mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add tech-prismnetwork-mcp -- npx -y @prismnetwork/mcp
```

### Cursor

```json
{
  "mcpServers": {
    "tech-prismnetwork-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@prismnetwork/mcp"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "tech-prismnetwork-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@prismnetwork/mcp"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add tech-prismnetwork-mcp -- npx -y @prismnetwork/mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "tech-prismnetwork-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@prismnetwork/mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add tech-prismnetwork-mcp --command npx --arg -y --arg @prismnetwork/mcp
```

### Hermes

```yaml
mcp_servers:
  tech-prismnetwork-mcp:
    command: "npx"
    args: ["-y", "@prismnetwork/mcp"]
```

### Netclaw

```json
{
  "McpServers": {
    "tech-prismnetwork-mcp": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "@prismnetwork/mcp"
      ]
    }
  }
}
```

### Vellum

```bash
assistant mcp add tech-prismnetwork-mcp -t stdio -c npx -a -y @prismnetwork/mcp
```

### Other

```json
{
  "mcpServers": {
    "tech-prismnetwork-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@prismnetwork/mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-09-20 (score 80, 0)

- [security] Stability: 0.97 → pass

### 2026-09-19 (score 80, +1)

No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-17 (score 79, +1)

No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-15 (score 78, +1)

No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-13 (score 77, +1)

No change was recorded against any check on this day. Stability & Change Management went from 73 to 77. That category is still filling its 30-day observation window: 22 days of observed history at the previous scan, 23 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-11 (score 76, +1)

No change was recorded against any check on this day. Stability & Change Management went from 67 to 70. That category is still filling its 30-day observation window: 20 days of observed history at the previous scan, 21 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-09 (score 75, +1)

No change was recorded against any check on this day. Stability & Change Management went from 60 to 63. That category is still filling its 30-day observation window: 18 days of observed history at the previous scan, 19 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-07 (score 74, +1)

No change was recorded against any check on this day. Stability & Change Management went from 53 to 57. That category is still filling its 30-day observation window: 16 days of observed history at the previous scan, 17 at this one. The score rises as the window fills, whether or not the server changes.

## MCP tools (18)

### `prism_budget` (~55 tokens)

Show the spending limits this server enforces and what it has already spent in the last 24 hours, with the recent charges. Needs no wallet. Check this before a long job; a lease refused for budget says the same numbers.

### `prism_wallet` (~42 tokens)

Show the agent's wallet address and on-chain balances (USDG and ETH for gas) on Robinhood Chain. Check this before leasing to confirm the wallet can pay.

### `prism_list_gpus` (~116 tokens)

List GPUs currently available to lease on Prism Network, with model, VRAM, price per second in USDG, and trust class. Trust class runs open < isolated < attested < confidential; on an 'open' supplier the host operator can read anything the workload touches. Keep secrets and credentials in prism_vault_store rather than on the box, and raise min_trust when the workload itself must not be readable.

Input parameters:

- `min_trust` (string): Only list suppliers at or above this trust class (default 'open').

### `prism_price_index` (~50 tokens)

Current GPU pricing on Prism Network by model: sourced low/median/high and settled mean, in USDG per hour. Needs no wallet. Use it to estimate what an analysis job will cost before leasing.

### `prism_receipts` (~72 tokens)

Recent settled lease receipts from the public proof feed: GPU model, runtime, what was charged and refunded, and the settlement transaction hash on Robinhood Chain. Needs no wallet. Every Prism lease ends in one of these.

Input parameters:

- `limit` (integer): Max receipts to return (default 10, max 50).

### `prism_leases` (~22 tokens)

List this wallet's leases on Prism Network with their current state.

### `prism_batch_run` (~183 tokens)

Fund a lease that runs one command with no interactive access at all: the node executes it and reports the signed output. Matches only suppliers at trust class 'isolated' or above, so it can find no supplier when none is online; prefer prism_lease_and_run for broad availability. Output is capped at 64 KiB per stream.

Input parameters:

- `command` (string, required): Shell command to run (max 8 KiB).
- `duration_seconds` (integer): Paid window in seconds (default 900, max 21600). A command still running at the end is killed and reported exit 124.
- `max_usdg` (number): Hard cap on the USDG this lease may cost (default 1). Raise it deliberately for longer leases.
- `min_vram_mib` (integer): Minimum GPU memory in MiB (default 16000).

### `prism_batch_result` (~58 tokens)

Read the output of a batch lease by lease_id, once its node has reported. Use it to recover a result after prism_batch_run timed out.

Input parameters:

- `lease_id` (integer, required): The lease_id from prism_batch_run's output or error.

### `prism_infer` (~138 tokens)

Buy one LLM generation from Prism's managed inference endpoint. Pays the quoted USDG price from this wallet (about 0.01 USDG), waits through a cold start when no box is warm (up to a few minutes), and returns the generation with token usage. Cheaper and simpler than leasing when all you need is a completion.

Input parameters:

- `max_usdg` (number): Refuse if the quoted price exceeds this (default 0.05).
- `model` (string): Model to use; defaults to the endpoint's first offered model.
- `prompt` (string, required): The prompt to generate from (max 32 KiB).

### `prism_lease_and_run` (~190 tokens)

Lease a GPU, run one shell command on it, and return the output. The lease stays alive (use prism_run for more commands, prism_end_lease to release). Prefer this for a single command; use prism_lease when you'll run several.

Input parameters:

- `command` (string, required): Shell command to run on the GPU (e.g. 'nvidia-smi').
- `duration_seconds` (integer): Lease length in seconds (default 900, max 21600).
- `max_usdg` (number): Hard cap on the USDG this lease may cost (default 1). Raise it deliberately for longer leases.
- `min_trust_class` (string): Refuse suppliers below this trust class (default 'open'). Raise it for anything the host operator must not read.
- `min_vram_mib` (integer): Minimum GPU memory in MiB (default 16000).

### `prism_lease` (~144 tokens)

Lease a GPU and keep it running. Returns a lease_id and SSH access. Use prism_run to execute commands and prism_end_lease when done.

Input parameters:

- `duration_seconds` (integer): Lease length in seconds (default 900, max 21600).
- `max_usdg` (number): Hard cap on the USDG this lease may cost (default 1). Raise it deliberately for longer leases.
- `min_trust_class` (string): Refuse suppliers below this trust class (default 'open'). Raise it for anything the host operator must not read.
- `min_vram_mib` (integer): Minimum GPU memory in MiB (default 16000).

### `prism_run` (~66 tokens)

Run a shell command on a GPU you already leased with prism_lease.

Input parameters:

- `command` (string, required): Shell command to run.
- `lease_id` (integer, required): The lease_id returned by prism_lease.
- `timeout_seconds` (integer): Max seconds to wait (default 120).

### `prism_end_lease` (~38 tokens)

Release a lease's local access. The on-chain lease settles at the end of its paid duration.

Input parameters:

- `lease_id` (integer, required)

### `prism_vault_store` (~185 tokens)

Store private data (a card, an identity document, an API credential) encrypted under a key derived from this agent's wallet on this machine. Prism receives ciphertext only and cannot read it. Use this instead of writing a secret into a workspace or a file. Returns an item_id; the value is not recoverable without the wallet.

Input parameters:

- `label` (string): Optional plain-text name so the item is findable. Stored unencrypted, so keep it non-revealing (e.g. 'billing card', not the number).
- `trust_floor` (string): The weakest workspace this item may ever be released into. Defaults to 'confidential', which is above anything the network serves today, so the item cannot reach a rented GPU at all. Only lower it de…
- `value` (string, required): The data to seal. Encrypted before it leaves this process.

### `prism_vault_list` (~39 tokens)

List the agent's sealed vault items: item_id, label, version and trust floor. Values are not returned and are not readable by Prism.

### `prism_vault_read` (~71 tokens)

Decrypt and return one vault item, in this process, using the wallet-derived key. The plaintext exists only here; do not echo it into a leased workspace, a log, or a message.

Input parameters:

- `item_id` (string, required): The item_id from prism_vault_store or prism_vault_list.

### `prism_vault_delete` (~36 tokens)

Permanently delete a vault item. The ciphertext is removed and the value cannot be recovered.

Input parameters:

- `item_id` (string, required)

### `prism_vault_release` (~88 tokens)

Authorize a vault item into a lease you hold and return its plaintext for use there. Refused when the lease's trust class is below the item's trust floor, which is what stops a secret reaching a host that can read it. Every allowed release is recorded against the account.

Input parameters:

- `item_id` (string, required)
- `lease_id` (integer, required): A lease from prism_lease.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/tech-prismnetwork-mcp/prismnetwork-mcp#diagnostics

## Score history

- 2026-09-20: 80
- 2026-09-19: 80
- 2026-09-18: 79
- 2026-09-17: 79
- 2026-09-16: 78
- 2026-09-15: 78
- 2026-09-14: 77
- 2026-09-13: 77
- 2026-09-12: 76
- 2026-09-11: 76
- 2026-09-10: 75
- 2026-09-09: 75
- 2026-09-08: 74
- 2026-09-07: 74
- 2026-09-06: 73
- 2026-09-05: 73
- 2026-09-04: 73
- 2026-09-03: 72
- 2026-09-02: 71
- 2026-09-01: 70
- 2026-08-31: 70
- 2026-08-30: 70
- 2026-08-29: 69
- 2026-08-28: 65
- 2026-08-27: 65
- 2026-08-26: 65
- 2026-08-25: 64
- 2026-08-24: 64
- 2026-08-23: 64
- 2026-08-22: 64

## Common questions

### What is the tech.prismnetwork/mcp server?

tech.prismnetwork/mcp is listed in the public MCP registry as tech.prismnetwork/mcp. Rent real NVIDIA GPUs from your agent. Browse with no wallet; pay per second onchain. This page covers its npm package (@prismnetwork/mcp).

### Is the tech.prismnetwork/mcp server safe to use?

tech.prismnetwork/mcp scores 80 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the tech.prismnetwork/mcp server expose?

tech.prismnetwork/mcp exposes 18 tools: prism_budget, prism_wallet, prism_list_gpus, prism_price_index, prism_receipts, and 13 more. Their descriptions and schemas cost roughly 1,593 tokens of context every time the server is loaded.

### Is the tech.prismnetwork/mcp server still maintained?

tech.prismnetwork/mcp is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What licence is the tech.prismnetwork/mcp server under?

tech.prismnetwork/mcp declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

## Links

- npm package: https://www.npmjs.com/package/@prismnetwork/mcp
- Socket report: https://socket.dev/npm/package/@prismnetwork/mcp
- Website: https://prismnetwork.tech/
- Changelog RSS feed: https://verifymcp.io/servers/tech-prismnetwork-mcp/prismnetwork-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/tech-prismnetwork-mcp/prismnetwork-mcp.json
- HTML version of this page: https://verifymcp.io/servers/tech-prismnetwork-mcp/prismnetwork-mcp