Prismnetwork MCP server

Read from the package source without running it. The installed server may list more.

• prism_batch_result

  Read the output of a batch lease by lease_id, once its node has reported. Use it to recover a result after prism_batch_run timed out.

• prism_batch_runwrite action

  Fund a lease that runs one command with no interactive access at all: the node executes it and reports the signed output. Matches only suppliers at trust class 'isolated' or above, so it can find no supplier when none is online; prefer prism_lease_and_run for broad availability. Output is capped at 64 KiB per stream.

• prism_budget

  Show the spending limits this server enforces and what it has already spent in the last 24 hours, with the recent charges. Needs no wallet. Check this before a long job; a lease refused for budget says the same numbers.

• prism_end_lease

  Release a lease's local access. The on-chain lease settles at the end of its paid duration.

• prism_inferwrite action

  Buy one LLM generation from Prism's managed inference endpoint. Pays the quoted USDG price from this wallet (about 0.01 USDG), waits through a cold start when no box is warm (up to a few minutes), and returns the generation with token usage. Cheaper and simpler than leasing when all you need is a completion.

• prism_lease

  Lease a GPU and keep it running. Returns a lease_id and SSH access. Use prism_run to execute commands and prism_end_lease when done.

• prism_lease_and_runwrite action

  Lease a GPU, run one shell command on it, and return the output. The lease stays alive (use prism_run for more commands, prism_end_lease to release). Prefer this for a single command; use prism_lease when you'll run several.

• prism_leases

  List this wallet's leases on Prism Network with their current state.

• prism_list_gpus

  List GPUs currently available to lease on Prism Network, with model, VRAM, price per second in USDG, and trust class. Trust class runs open < isolated < attested < confidential; on an 'open' supplier the host operator can read anything the workload touches. Keep secrets and credentials in prism_vault_store rather than on the box, and raise min_trust when the workload itself must not be readable.

• prism_price_index

  Current GPU pricing on Prism Network by model: sourced low/median/high and settled mean, in USDG per hour. Needs no wallet. Use it to estimate what an analysis job will cost before leasing.

• prism_receipts

  Recent settled lease receipts from the public proof feed: GPU model, runtime, what was charged and refunded, and the settlement transaction hash on Robinhood Chain. Needs no wallet. Every Prism lease ends in one of these.

• prism_runwrite action

  Run a shell command on a GPU you already leased with prism_lease.

• prism_vault_deletewrite action

  Permanently delete a vault item. The ciphertext is removed and the value cannot be recovered.

• prism_vault_list

  List the agent's sealed vault items: item_id, label, version and trust floor. Values are not returned and are not readable by Prism.

• prism_vault_read

  Decrypt and return one vault item, in this process, using the wallet-derived key. The plaintext exists only here; do not echo it into a leased workspace, a log, or a message.

• prism_vault_release

  Authorize a vault item into a lease you hold and return its plaintext for use there. Refused when the lease's trust class is below the item's trust floor, which is what stops a secret reaching a host that can read it. Every allowed release is recorded against the account.

• prism_vault_store

  Store private data (a card, an identity document, an API credential) encrypted under a key derived from this agent's wallet on this machine. Prism receives ciphertext only and cannot read it. Use this instead of writing a secret into a workspace or a file. Returns an item_id; the value is not recoverable without the wallet.

• prism_wallet

  Show the agent's wallet address and on-chain balances (USDG and ETH for gas) on Robinhood Chain. Check this before leasing to confirm the wallet can pay.

• Code scan3 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitystatic API keys via environment variables6/15
• Maintenancelast push 12 days ago15/15
• Maintainer identitynamespace and repository owner differ; website matches verified namespace6/10

Safety score

80/100

higher than 60% of 4,460 AI and agents servers

Tools

18

the typical AI and agents server has 6

Tools that change things

28%

typical: 0%. Fewer write tools means less an agent can break

GitHub stars

1

more than 50% of 2,711 AI and agents servers

Downloads a week

165

more than 72% of 1,538 AI and agents servers with a package

Prismnetwork: common questions

Is Prismnetwork MCP server safe?

Mostly: it is graded B (80/100). Read the Prismnetwork safety report

How do I install Prismnetwork?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Prismnetwork need an API key?

Yes. The registry entry asks for PRISM_AGENT_KEY.

Is Prismnetwork maintained?

The last commit was 14 days ago (2026-10-20). The latest release is v0.8.4.

What can I use instead of Prismnetwork?

Servers from other publishers that do the same job: Ausca MCP server, three.ws Marketplace MCP server and NVIDIA Elements MCP server.

How does Prismnetwork compare with other AI and agents MCP servers?

safety score 80/100 (higher than 60% of 4,460 AI and agents servers); tools 18 (the typical AI and agents server has 6); tools that change things 28% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.