AgentCompute
io.github.Ockram4444/agentcomputeOckram4444streamable-httpv0.8.0Scanned
Free experimental GPU tools: text generation, images and audio transcription. Shared quotas; no SLA.
9 tools: 4 change things and 5 only read.
- Reads private data · 1
- Reads text others write · 1
- Can send data out · 0
- No findings
Anlyon alternative
4 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
9 tools
Changes things 4Claude Code: ask
create_trial_accessCreate a private 24-hour trial token automatically.No findings
Why it is in this group
- The name "create_trial_access" says "create": a word for a change.
Description, as the server wrote it Create a private 24-hour trial token automatically. No ChatGPT account, payment or manual setup. Audio: 3 jobs per session. Chat/images: 24 total submissions per rolling 24 hours, 10 per session/reported client, one active task per session, shared queue of 3. Global access issuance caps apply. Retain the token for upload and result retrieval. Reuse the session; never create new sessions to bypass quotas.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
submit_chat_jobQueue a free text task: draft, summarize, extract, translate text, reason or assist with code.No findings
Why it is in this group
- The name "submit_chat_job" says "submit": a word for a change.
Description, as the server wrote it Queue a free text task: draft, summarize, extract, translate text, reason or assist with code. No code is executed. Provide user/assistant messages, explicit consent for nonconfidential permitted content, and a stable idempotency key. Returns immediately with a job ID. Poll get_studio_job. Uses the configured local model, no external AI fallback.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
submit_compute_jobBeta users must supply their uploaded asset_id and kind compute_job.No findings
Why it is in this group
- The name "submit_compute_job" says "submit": a word for a change.
Description, as the server wrote it Beta users must supply their uploaded asset_id and kind compute_job. No accuracy guarantee is made for uploaded files. Owner legacy calls can queue the fixed synthetic benchmark. compute_job returns a transcript; delegated_task additionally requires word error rate at most 10% against the known reference. Returns a job_id to poll with get_compute_job. No payment is charged. Reuse the same idempotency_key for retries, and use a new key only for a new job.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
submit_image_jobQueue a free text-to-image task from a complete scene description.No findings
Why it is in this group
- The name "submit_image_job" says "submit": a word for a change.
Description, as the server wrote it Queue a free text-to-image task from a complete scene description. Each task is independent, not an edit of a previous image. Returns a job ID; poll get_studio_job then get_studio_image for the PNG. Configured model and size appear in service status/results. No external AI fallback.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
Only reads 5Show 5 read-only tools
get_compute_jobRead a previously submitted job by job_id.No findings
Why it is in this group
- The name "get_compute_job" says "get": a word for reading.
Description, as the server wrote it Read a previously submitted job by job_id. Returns status, transcript, runtime and reference quality when complete. For queued or running jobs, wait poll_after_seconds before checking again. Failed or expired jobs are not successful results.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_compute_statusCheck whether the GPU provider can accept audio transcription work.No findings
Why it is in this group
- The name "get_compute_status" says "get": a word for reading.
Description, as the server wrote it Check whether the GPU provider can accept audio transcription work. Returns availability, permitted task types, and limits. Does not start a job.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_service_statusPublic live availability, model catalog, free-trial limits and polling guidance.No findings
Why it is in this group
- The name "get_service_status" says "get": a word for reading.
Description, as the server wrote it Public live availability, model catalog, free-trial limits and polling guidance. No token required. Check before submitting; an offline GPU cannot execute work.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_studio_imageReturn the completed image as an MCP image content block.No findings
Why it is in this group
- The name "get_studio_image" says "get": a word for reading.
Description, as the server wrote it Return the completed image as an MCP image content block. Requires the same token/identity that submitted the job. Images expire after 24 hours from submission; download before expiry.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_studio_jobRead your own chat/image job.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_studio_job" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "read" and "chat": it reads messages.
- untrusted-inputThe description's first sentence says "read" and "chat": it reads messages, which other people can write.
Description, as the server wrote it Read your own chat/image job. Includes partial text while running, final text or image availability, GPU runtime and server timings. Wait poll_after_seconds between checks; stop on succeeded, failed or expired. Does not create or retry work.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.
- Reads private data1
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write1
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out0
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 0.8.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http agentcompute https://u8x5gpk0ul.execute-api.eu-north-1.amazonaws.com/v1/mcpclaude mcp add --transport http agentcompute https://u8x5gpk0ul.execute-api.eu-north-1.amazonaws.com/v1/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__agentcompute__get_compute_status",
"mcp__agentcompute__get_compute_job",
"mcp__agentcompute__get_service_status",
"mcp__agentcompute__get_studio_job",
"mcp__agentcompute__get_studio_image"
],
"ask": [
"mcp__agentcompute__create_trial_access",
"mcp__agentcompute__submit_compute_job",
"mcp__agentcompute__submit_chat_job",
"mcp__agentcompute__submit_image_job"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as agentcompute. Review it before you use it.
Capability tags behind 1 rule
- mcp__agentcompute__get_studio_job private-data, untrusted-input
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/io.github.Ockram4444/agentcompute/verify?hash=c3cf301a7558ea9ccbb97a60bc526c8501c71408a2c582b94d7225724eee81c0" | jq -e '.changed == false'Pinned hash c3cf301a7558, from Oct 23, 2026, 16:25 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/io.github.Ockram4444/agentcompute/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/io.github.Ockram4444/agentcompute)Source: MCP Registry. Synced Oct 23, 2026, 16:24 UTC.