Skip to content

gpu.nz GPU cloud

by gpu.nz · remote · local (oci) · no sign-in to list tools · v1.0.0 · published by nz.gpu

Rent cloud GPUs from AI agents: live prices, VRAM estimates, launch, logs and stop.

Deletes · 1Changes · 6

16 tools: 1 can delete or cancel things, 6 change things and 9 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http gpu-cloud https://gpu.nz/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • The server marks "topup_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "topup_link" says "link": a word for a change.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

16 tools

Deletes or cancels 1Claude Code: deny
  • destroy_instanceDestroys a server and deletes its disk for good; billing stops completely.No findings

    Why it is in this group

    • The name "destroy_instance" says "destroy": a word for removing or ending something.
    • The description says "Irreversible".
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Destroys a server and deletes its disk for good; billing stops completely. Irreversible: confirm with the user. Needs instances:write.

    Annotations the server declares

    • title: Destroy a server
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
Changes things 6Claude Code: ask
  • add_ssh_keyAdds an SSH public key (a line from a .pub file) to the account.No findings

    Why it is in this group

    • The name "add_ssh_key" says "add": a word for a change.
    Description, as the server wrote it
    Adds an SSH public key (a line from a .pub file) to the account. Needs user:write.

    Annotations the server declares

    • title: Add an SSH key
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • create_instanceRents the server of an offer and starts it with a template.No findings

    Why it is in this group

    • The name "create_instance" says "create": a word for a change.
    Description, as the server wrote it
    Rents the server of an offer and starts it with a template. Billing starts right away and runs every minute until you stop or destroy it. Confirm the price with the user first. Needs instances:write. The response has the instance id; poll get_instance until status is running (usually 1–5 minutes).

    Annotations the server declares

    • title: Rent a GPU server
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • estimate_vramHow much GPU memory an AI model needs (LLMs such as Qwen, DeepSeek, Llama, Gemma, GPT-OSS; image and video models such as FLUX, SDXL, Wan) at a given precision and context length, …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    How much GPU memory an AI model needs (LLMs such as Qwen, DeepSeek, Llama, Gemma, GPT-OSS; image and video models such as FLUX, SDXL, Wan) at a given precision and context length, and which GPUs on gpu.nz fit it with their current price. Call without `model` to list the known models.

    Annotations the server declares

    • title: Estimate VRAM
    • readOnlyHint: true
    • openWorldHint: false
  • start_instanceStarts a stopped server again; GPU billing resumes.No findings

    Why it is in this group

    • The name "start_instance" says "start": a word for a change.
    Description, as the server wrote it
    Starts a stopped server again; GPU billing resumes. Confirm with the user. Needs instances:write.

    Annotations the server declares

    • title: Start a server
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • stop_instanceStops a running server: the GPU is released and billing drops to the disk only.No findings

    Why it is in this group

    • The name "stop_instance" says "stop": a word for a change.
    Description, as the server wrote it
    Stops a running server: the GPU is released and billing drops to the disk only. Data on the disk is kept and the server can be started again (the GPU may then be taken by someone else; gpu.nz finds a replacement when it is). Needs instances:write.

    Annotations the server declares

    • title: Stop a server
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Only reads 9Claude Code: allow
  • get_accountThe signed-in account and its balance, hourly burn and runway.No findings

    Why it is in this group

    • The name "get_account" says "get": a word for reading.
    Description, as the server wrote it
    The signed-in account and its balance, hourly burn and runway. Needs a key with user:read and billing:read.

    Annotations the server declares

    • title: Account and balance
    • readOnlyHint: true
    • openWorldHint: true
  • get_instanceStatus, SSH command, app URLs (ComfyUI, Jupyter, chat…), price and cost so far of one server.No findings

    Why it is in this group

    • The name "get_instance" says "get": a word for reading.
    Description, as the server wrote it
    Status, SSH command, app URLs (ComfyUI, Jupyter, chat…), price and cost so far of one server. The root password is left out unless include_password is true (your SSH keys are installed on every server).

    Annotations the server declares

    • title: Get one server
    • readOnlyHint: true
    • openWorldHint: true
  • get_instance_logsThe last lines of a server's container log: boot progress, app start-up, errors.No findings

    Why it is in this group

    • The name "get_instance_logs" says "get": a word for reading.
    Description, as the server wrote it
    The last lines of a server's container log: boot progress, app start-up, errors. Needs instances:read.

    Annotations the server declares

    • title: Server logs
    • readOnlyHint: true
    • openWorldHint: true
  • get_offerDetails and the current price of one offer by id (from search_offers).No findings

    Why it is in this group

    • The name "get_offer" says "get": a word for reading.
    Description, as the server wrote it
    Details and the current price of one offer by id (from search_offers).

    Annotations the server declares

    • title: Get one offer
    • readOnlyHint: true
    • openWorldHint: true
  • list_gpu_modelsGPU models available on gpu.nz right now with VRAM, class and the cheapest hourly price per GPU.No findings

    Why it is in this group

    • The name "list_gpu_models" says "list": a word for reading.
    Description, as the server wrote it
    GPU models available on gpu.nz right now with VRAM, class and the cheapest hourly price per GPU. Use it to pick a gpu_slug for search_offers.

    Annotations the server declares

    • title: List GPU models
    • readOnlyHint: true
    • openWorldHint: true
  • list_instancesYour rented servers with status, GPU, price and SSH command.No findings

    Why it is in this group

    • The name "list_instances" says "list": a word for reading.
    Description, as the server wrote it
    Your rented servers with status, GPU, price and SSH command. Needs instances:read.

    Annotations the server declares

    • title: List my servers
    • readOnlyHint: true
    • openWorldHint: true
  • list_ssh_keysSSH public keys on the account; they are installed on new servers.No findings

    Why it is in this group

    • The name "list_ssh_keys" says "list": a word for reading.
    Description, as the server wrote it
    SSH public keys on the account; they are installed on new servers. Needs user:read.

    Annotations the server declares

    • title: List SSH keys
    • readOnlyHint: true
    • openWorldHint: true
  • list_templatesReady environments a server can start with: ComfyUI, Stable Diffusion Forge, Ollama + Open WebUI, vLLM, Jupyter/PyTorch, Kohya, FluxGym, Unsloth, chats with preloaded models, plain…No findings

    Why it is in this group

    • The name "list_templates" says "list": a word for reading.
    Description, as the server wrote it
    Ready environments a server can start with: ComfyUI, Stable Diffusion Forge, Ollama + Open WebUI, vLLM, Jupyter/PyTorch, Kohya, FluxGym, Unsloth, chats with preloaded models, plain Ubuntu + CUDA, or a custom Docker image. Pass `slug` as `template` to create_instance.

    Annotations the server declares

    • title: List templates
    • readOnlyHint: true
    • openWorldHint: true
  • search_offersSearch rentable GPU servers (offers) with live prices.No findings

    Why it is in this group

    • The name "search_offers" says "search": a word for reading.
    Description, as the server wrote it
    Search rentable GPU servers (offers) with live prices. Returns the cheapest matches first unless `order` says otherwise. Each result has an offer id for create_instance.

    Annotations the server declares

    • title: Search GPU servers
    • readOnlyHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http gpu-cloud https://gpu.nz/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__gpu-cloud__list_gpu_models",
      "mcp__gpu-cloud__search_offers",
      "mcp__gpu-cloud__get_offer",
      "mcp__gpu-cloud__list_templates",
      "mcp__gpu-cloud__get_account",
      "mcp__gpu-cloud__list_instances",
      "mcp__gpu-cloud__get_instance",
      "mcp__gpu-cloud__get_instance_logs",
      "mcp__gpu-cloud__list_ssh_keys"
    ],
    "ask": [
      "mcp__gpu-cloud__estimate_vram",
      "mcp__gpu-cloud__create_instance",
      "mcp__gpu-cloud__stop_instance",
      "mcp__gpu-cloud__start_instance",
      "mcp__gpu-cloud__add_ssh_key",
      "mcp__gpu-cloud__topup_link"
    ],
    "deny": [
      "mcp__gpu-cloud__destroy_instance"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as gpu-cloud. Review it before you use it.