Prism MCP Server

Prism Network

Prism Network is open infrastructure for metered GPU compute. The current system implements account and wallet onboarding, GPU offer discovery, USDG escrow, workload provisioning, time-limited access, metering, settlement and public receipt generation.

Prism has two execution paths:

• Independent nodes: Ubuntu 24.04 x86-64 hosts run public OCI images in Kata VM-backed containers with exclusive NVIDIA VFIO passthrough. Access uses short-lived SSH or Jupyter credentials through an outbound-only mTLS tunnel.
• Vast broker: a bonded broker provisions disposable L40S instances and exposes direct SSH. This path relies on provider-reported readiness and evidence; it does not provide Kata/VFIO isolation, the Prism gateway, or Jupyter access.

Only interactive raw GPU leases are in scope today. Batch containers and managed inference are not implemented.

Current state

Verified on 2026-07-20:

This is an unaudited pre-production system. Do not deposit funds or use Prism for confidential workloads, regulated data, valuable model weights or production traffic. A permissionless supplier is not a trusted computing environment, and Kata isolation is not confidential-computing attestation.

Mainnet contracts

The V1 contracts are non-upgradeable and LeaseEscrowV1 is live. Their source has not been verified on the explorer and they have not received an independent audit.

Administration, emergency pause and dispute resolution are held by a 2-of-2 governance Safe. Network settings and the USDG address should always be checked against the official Robinhood Chain documentation and contract registry.

Architecture

Browser + wallet
       |
       v
Next.js web -----> Rust control plane -----> PostgreSQL
                         |
              +----------+-----------+
              |                      |
              v                      v
      lifecycle worker       settlement/proof workers
              |                      |
       +------+-------+              v
       |              |       Robinhood Chain
       v              v
Vast instance    access gateway
direct SSH       mTLS tunnel/relay
                       |
                       v
               prismd + Kata/VFIO

The repository contains:

• apps/web: Next.js account, marketplace, supplier, operator and proof UI.
• crates: shared Rust protocol and persistence libraries.
• services: Rust control plane, access gateway and operations monitor.
• workers: lifecycle, settlement and proof workers.
• node/prismd: independent-node runtime and workspace supervisor.
• contracts: USDG bond, escrow and administration contracts.
• sdk: headless agent SDK for wallet-signature USDG leasing.
• mcp: Model Context Protocol server exposing leasing to MCP clients.
• x402: pay-per-job GPU execution over HTTP 402.
• deploy/ec2: lean Vast launch topology with the web application on Render.
• deploy/lightsail: full single-host reference topology.
• deploy/node: Ubuntu node service units and configuration.
• infra: an AWS reference architecture, not the active lean deployment.
• docs: design, security boundary, proof format and release documentation.

See architecture, security model and release gates before operating the system.

Agent access

Autonomous agents integrate without a browser. An agent proves control of its funding wallet by signing a short-lived challenge, exchanges it for a bearer session, and drives the same renter surface — offer discovery and the lease lifecycle — over the /api/agent endpoints. Escrow, readiness, metering and settlement are identical to the browser path, and the agent boundary reaches only renter routes.

• sdk — @prismnetwork/agent-sdk, headless USDG-funded leasing for Node.
• mcp — @prismnetwork/mcp, the same leasing exposed as Model Context Protocol tools.
• x402 — @prismnetwork/x402, pay-per-job GPU execution over HTTP 402.

All three are published on npm under the @prismnetwork scope. The data-classification limits above apply unchanged. An agent workspace is a disposable environment, not confidential computing.

Verification

The fast pull-request gate checks the web application, production build, secrets and repository isolation:

pnpm install --frozen-lockfile
pnpm check

The full local gate additionally runs the Rust and Solidity suites, audits and security scanners, PostgreSQL and Valkey integrations, Anvil lifecycle tests, mTLS relay tests, load and recovery checks, deployment validation and observability checks:

pnpm check:full

The full gate passed locally on 2026-07-20 with 23 web tests, 57 Rust tests and 18 Foundry tests, including fuzz and invariant coverage. That run used simulated/containerized infrastructure; it is not evidence of physical NVIDIA/Kata/VFIO execution or a funded mainnet lease.

The hosted full gate is manual and has not yet produced a public run:

gh workflow run full-validate.yml --ref <branch>

Required toolchains are Node.js 24.14, pnpm 10.34.5, Rust 1.94.1, Foundry 1.5, Docker with Compose and ripgrep.

Remaining release gates

• Keep the escrow paused until a capped, funded mainnet canary completes from deposit through refund or settlement.
• Validate CUDA readiness, Kata isolation, VFIO assignment, egress controls and teardown on physical NVIDIA hardware.
• Complete live KMS signing and failure-recovery evidence for lifecycle and settlement workers.
• Exercise real Privy signup, external and embedded wallets, SSH access and Jupyter access against the release deployment.
• Publish the first confirmed proof receipt and test the independent daily X digest outbox.
• Run applied-host backup/restore, load, failover and incident-response drills.
• Obtain independent smart-contract and infrastructure security review before raising contract caps.

Copy only the example environment files needed for your target. Never commit environment files, credentials, deployment outputs or generated artifacts.

Contributing

Read CONTRIBUTING.md, the Code of Conduct and governance before opening a change. Security reports must follow SECURITY.md and must not be filed as public issues.

License

Code is licensed under the Apache License 2.0. The Prism Network name and visual identity are governed separately by TRADEMARKS.md.