gpu.nz GPU cloud
by gpu.nz · remote · local (oci) · no sign-in to list tools · v1.0.0 · published by nz.gpu
Rent cloud GPUs from AI agents: live prices, VRAM estimates, launch, logs and stop.
16 tools: 1 can delete or cancel things, 6 change things and 9 only read.
Scanned Oct 21, 2026
- Deletes or cancels1Claude Code: deny: see these tools
- Can't be undone0Claude Code: ask
- Changes things6Claude Code: ask: see these tools
- Only reads9Claude Code: allow: see these tools
1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http gpu-cloud https://gpu.nz/mcpFindings
Matches of fixed checks, with the text they matched.
- Warntopup_link
The server marks "topup_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "topup_link" says "link": a word for a change.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
16 tools
Deletes or cancels 1Claude Code: deny
destroy_instanceDestroys a server and deletes its disk for good; billing stops completely.No findings
Why it is in this group
- The name "destroy_instance" says "destroy": a word for removing or ending something.
- The description says "Irreversible".
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Destroys a server and deletes its disk for good; billing stops completely. Irreversible: confirm with the user. Needs instances:write.
Annotations the server declares
- title: Destroy a server
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
Changes things 6Claude Code: ask
add_ssh_keyAdds an SSH public key (a line from a .pub file) to the account.No findings
Why it is in this group
- The name "add_ssh_key" says "add": a word for a change.
Description, as the server wrote it Adds an SSH public key (a line from a .pub file) to the account. Needs user:write.
Annotations the server declares
- title: Add an SSH key
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
create_instanceRents the server of an offer and starts it with a template.No findings
Why it is in this group
- The name "create_instance" says "create": a word for a change.
Description, as the server wrote it Rents the server of an offer and starts it with a template. Billing starts right away and runs every minute until you stop or destroy it. Confirm the price with the user first. Needs instances:write. The response has the instance id; poll get_instance until status is running (usually 1–5 minutes).
Annotations the server declares
- title: Rent a GPU server
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
estimate_vramHow much GPU memory an AI model needs (LLMs such as Qwen, DeepSeek, Llama, Gemma, GPT-OSS; image and video models such as FLUX, SDXL, Wan) at a given precision and context length, …No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it How much GPU memory an AI model needs (LLMs such as Qwen, DeepSeek, Llama, Gemma, GPT-OSS; image and video models such as FLUX, SDXL, Wan) at a given precision and context length, and which GPUs on gpu.nz fit it with their current price. Call without `model` to list the known models.
Annotations the server declares
- title: Estimate VRAM
- readOnlyHint: true
- openWorldHint: false
start_instanceStarts a stopped server again; GPU billing resumes.No findings
Why it is in this group
- The name "start_instance" says "start": a word for a change.
Description, as the server wrote it Starts a stopped server again; GPU billing resumes. Confirm with the user. Needs instances:write.
Annotations the server declares
- title: Start a server
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
stop_instanceStops a running server: the GPU is released and billing drops to the disk only.No findings
Why it is in this group
- The name "stop_instance" says "stop": a word for a change.
Description, as the server wrote it Stops a running server: the GPU is released and billing drops to the disk only. Data on the disk is kept and the server can be started again (the GPU may then be taken by someone else; gpu.nz finds a replacement when it is). Needs instances:write.
Annotations the server declares
- title: Stop a server
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
topup_linkA link to the balance top-up page (SBP, crypto) for the user to open in a browser; payments never happen through the API.1 finding
Why it is in this group
- The name "topup_link" says "link": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "topup_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "topup_link" says "link": a word for a change.
Description, as the server wrote it A link to the balance top-up page (SBP, crypto) for the user to open in a browser; payments never happen through the API. Optionally pre-fills the amount.
Annotations the server declares
- title: Top-up link
- readOnlyHint: true
- openWorldHint: false
Only reads 9Claude Code: allow
get_accountThe signed-in account and its balance, hourly burn and runway.No findings
Why it is in this group
- The name "get_account" says "get": a word for reading.
Description, as the server wrote it The signed-in account and its balance, hourly burn and runway. Needs a key with user:read and billing:read.
Annotations the server declares
- title: Account and balance
- readOnlyHint: true
- openWorldHint: true
get_instanceStatus, SSH command, app URLs (ComfyUI, Jupyter, chat…), price and cost so far of one server.No findings
Why it is in this group
- The name "get_instance" says "get": a word for reading.
Description, as the server wrote it Status, SSH command, app URLs (ComfyUI, Jupyter, chat…), price and cost so far of one server. The root password is left out unless include_password is true (your SSH keys are installed on every server).
Annotations the server declares
- title: Get one server
- readOnlyHint: true
- openWorldHint: true
get_instance_logsThe last lines of a server's container log: boot progress, app start-up, errors.No findings
Why it is in this group
- The name "get_instance_logs" says "get": a word for reading.
Description, as the server wrote it The last lines of a server's container log: boot progress, app start-up, errors. Needs instances:read.
Annotations the server declares
- title: Server logs
- readOnlyHint: true
- openWorldHint: true
get_offerDetails and the current price of one offer by id (from search_offers).No findings
Why it is in this group
- The name "get_offer" says "get": a word for reading.
Description, as the server wrote it Details and the current price of one offer by id (from search_offers).
Annotations the server declares
- title: Get one offer
- readOnlyHint: true
- openWorldHint: true
list_gpu_modelsGPU models available on gpu.nz right now with VRAM, class and the cheapest hourly price per GPU.No findings
Why it is in this group
- The name "list_gpu_models" says "list": a word for reading.
Description, as the server wrote it GPU models available on gpu.nz right now with VRAM, class and the cheapest hourly price per GPU. Use it to pick a gpu_slug for search_offers.
Annotations the server declares
- title: List GPU models
- readOnlyHint: true
- openWorldHint: true
list_instancesYour rented servers with status, GPU, price and SSH command.No findings
Why it is in this group
- The name "list_instances" says "list": a word for reading.
Description, as the server wrote it Your rented servers with status, GPU, price and SSH command. Needs instances:read.
Annotations the server declares
- title: List my servers
- readOnlyHint: true
- openWorldHint: true
list_ssh_keysSSH public keys on the account; they are installed on new servers.No findings
Why it is in this group
- The name "list_ssh_keys" says "list": a word for reading.
Description, as the server wrote it SSH public keys on the account; they are installed on new servers. Needs user:read.
Annotations the server declares
- title: List SSH keys
- readOnlyHint: true
- openWorldHint: true
list_templatesReady environments a server can start with: ComfyUI, Stable Diffusion Forge, Ollama + Open WebUI, vLLM, Jupyter/PyTorch, Kohya, FluxGym, Unsloth, chats with preloaded models, plain…No findings
Why it is in this group
- The name "list_templates" says "list": a word for reading.
Description, as the server wrote it Ready environments a server can start with: ComfyUI, Stable Diffusion Forge, Ollama + Open WebUI, vLLM, Jupyter/PyTorch, Kohya, FluxGym, Unsloth, chats with preloaded models, plain Ubuntu + CUDA, or a custom Docker image. Pass `slug` as `template` to create_instance.
Annotations the server declares
- title: List templates
- readOnlyHint: true
- openWorldHint: true
search_offersSearch rentable GPU servers (offers) with live prices.No findings
Why it is in this group
- The name "search_offers" says "search": a word for reading.
Description, as the server wrote it Search rentable GPU servers (offers) with live prices. Returns the cheapest matches first unless `order` says otherwise. Each result has an offer id for create_instance.
Annotations the server declares
- title: Search GPU servers
- readOnlyHint: true
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http gpu-cloud https://gpu.nz/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__gpu-cloud__list_gpu_models",
"mcp__gpu-cloud__search_offers",
"mcp__gpu-cloud__get_offer",
"mcp__gpu-cloud__list_templates",
"mcp__gpu-cloud__get_account",
"mcp__gpu-cloud__list_instances",
"mcp__gpu-cloud__get_instance",
"mcp__gpu-cloud__get_instance_logs",
"mcp__gpu-cloud__list_ssh_keys"
],
"ask": [
"mcp__gpu-cloud__estimate_vram",
"mcp__gpu-cloud__create_instance",
"mcp__gpu-cloud__stop_instance",
"mcp__gpu-cloud__start_instance",
"mcp__gpu-cloud__add_ssh_key",
"mcp__gpu-cloud__topup_link"
],
"deny": [
"mcp__gpu-cloud__destroy_instance"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as gpu-cloud. Review it before you use it.