Back to Browse

Compute Wick MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Live GPU rental market: 2,500+ offers across a dozen provider feeds. History, watches, limit orders.

About

Live GPU rental market: 2,500+ offers across a dozen provider feeds. History, watches, limit orders.

Remote endpoints: streamable-http: https://compute.pangle.online/mcp/

Security Report

4.2
Use Caution4.2High Risk

The MCP server for compute.pangle.online is well-architected with strong security practices in credential handling and API request validation. However, there are moderate-risk issues: the broker stores provider API keys in process memory for budget guards without clear cleanup guarantees, uses broad exception handling in critical placement code, and lacks comprehensive input validation on some user-controlled fields. The permissions are appropriate for a GPU marketplace aggregator. Code quality is generally high with intentional secret scrubbing and thoughtful error handling, though some patterns could be more defensive. Supply chain analysis found 11 known vulnerabilities in dependencies (1 critical, 9 high severity).

4 files analyzed · 18 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

database

Check that this permission is expected for this type of plugin.

process_spawn

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

compute.pangle.online — GPU compute meta-aggregator

live H100 spot live RTX 4090 idle

One process: provider pollers + SQLite store + ranked REST API + MCP server + the site. Live at https://compute.pangle.online · API /api/offers, /api/history, /api/idle-history, /api/watches · MCP /mcp/ (streamable HTTP).

Run anywhere (the VPS lift)

docker compose up          # or:
python3 -m venv venv && venv/bin/pip install -r requirements.txt
venv/bin/uvicorn app:app --port 8956

No external services, no keys required (keys in .env deepen Vast/RunPod results; DataCrunch and Akash need none).

The fee levers — there are two, and confusing them corrupts the data

FEE_BPS (core/economics.py) marks up displayed prices, and it is 0, permanently. The book, the tape, the index and the per-chip prices are published as THE MARKET's numbers — check any of them against the provider's own page. A markup here would quietly make every published price ours instead of theirs, so this lever stays off.

EXEC_FEE_BPS is the platform fee, charged on what we settle, never on what the provider charges: 2.5%, one cent minimum, capped at $5 per lease per UTC day (core/meter.py). Renters place on their own provider key and pay the provider directly; this is the only thing we take, and it is disclosed in the quote and the receipt before anything is placed.

REF_VAST / REF_RUNPOD referral slots ride the same seam.

Layout

providers/ one drop-in module per marketplace · core/ schema, rank, economics, stats · db.py SQLite (WAL) with provider_health honesty table · app.py FastAPI + scheduler + MCP mount · web/ the hand-written site (see DESIGN-DIRECTION.md).

Tests: venv/bin/python -m tests.test_pipeline

Generated pages

web/gpu/, web/vs/ and web/sitemap.xml are built artifacts — regenerate with venv/bin/python gen_gpu_pages.py (the deployment runs it hourly).

Fonts

Martian Mono ships in web/fonts/ (SIL OFL). The display serif (Erode, by Indian Type Foundry via Fontshare) is not redistributed here — its license doesn't allow it; fetch it from https://www.fontshare.com/fonts/erode into web/fonts/ as erode-400.woff2 / erode-600.woff2, or let the stack fall back to Georgia.

License

AGPL-3.0 — see LICENSE. Run it, fork it, learn from it; if you serve a modified version, share your changes the same way.

Reviews

No reviews yet

Be the first to review this server!