
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@paraloncloud/mcp
Advanced tools
ParalonCloud MCP server: rent GPUs, and as a GPU provider manage your own nodes, prices and earnings, from an AI agent.
Rent GPUs from inside your AI agent, and, if you provide GPUs, run your own nodes from it. This is an MCP server for the ParalonCloud Rental API and Provider API: it lets Claude Code, Claude Desktop, Cursor, or any MCP client
using natural language.
One key for everything: the same
prlc_key powers ParalonCloud's OpenAI-compatible inference API. Build an agent that calls a model and rents the GPU to run the heavy job.
Formerly
@paraloncloud/mcp-rentals. That package is deprecated: switch your config to@paraloncloud/mcp.
rental scope)| Tool | What it does | Cost |
|---|---|---|
list_gpus | List rentable GPUs with price, VRAM, compute capability, country | free |
get_balance | Your credit balance | free |
create_rental | Start a Jupyter rental (async → poll) | spends credits |
get_rental | Status + connection URL once running | free |
list_rentals | Your active rentals (status: "all" for history) | free |
destroy_rental | Stop a rental and stop billing | — |
nodes scope)| Tool | What it does |
|---|---|
list_my_nodes | Your nodes: state (available, rented, paused, offline, …), GPUs, price and its allowed range, the current rental, live per-GPU load, temperature, power and memory |
get_my_node | One node, same fields |
add_node | Add a node; returns the docker command that installs the agent (it holds the node's token) |
get_node_install_command | The install command of an existing node, again |
set_node_available | Take a node off the market, or put it back; a running rental goes on to its end |
set_node_price | Set the price in USD per hour for the node, or null for the default |
update_node | Change name, spot, availability and price in one call |
reclaim_spot_node | Take a spot node back for your own use; a spot rental on it stops in 2 minutes |
get_node_access | Who can rent a node: everyone, or only the people, domains and organizations listed |
set_node_access | Keep a node private for chosen renters (email, domain, organization), or open it to everyone ([]) |
get_earnings | Earnings by day (rentals per node, inference per account) and the withdrawable balance |
Payouts are not reachable from the API or this server. Deleting a node stays on the site.
Use a dedicated key for the agent, not your production key.
The client passes your key via the PARALON_API_KEY env var — you never edit the server.
Claude Desktop — claude_desktop_config.json:
{
"mcpServers": {
"paraloncloud": {
"command": "npx",
"args": ["-y", "@paraloncloud/mcp"],
"env": {
"PARALON_API_KEY": "prlc_your_key_here"
}
}
}
}
Claude Code — one command:
claude mcp add paraloncloud \
--env PARALON_API_KEY=prlc_your_key_here \
-- npx -y @paraloncloud/mcp
Cursor — .cursor/mcp.json (same shape as Claude Desktop above).
Optional env: PARALON_BASE_URL (defaults to https://paraloncloud.com/api/v1).
"List the cheapest GPUs I can rent, then start a 2-hour Jupyter rental on one with at least 24GB of VRAM."
The agent calls list_gpus, picks a node, and calls create_rental with hours: 2. It then
polls get_rental for the Jupyter URL. Say "stop it" and it calls destroy_rental.
As a provider:
"How are my nodes doing? Is any GPU running hot?"
"Take rig-2 off the market for the afternoon, and set rig-1 to $0.60 an hour."
"How much did I earn this week, and from which node?"
create_rental and destroy_rental change what you're billed — your MCP client will ask you
to approve them (Claude Code/Desktop confirm tool calls by default). Keep that on.create_rental auto-generates an idempotency key, so a retried call never starts a second GPU.hours so a rental auto-stops even if the agent forgets to.max_active_rentals limit (set in the Console) caps concurrency regardless.add_node, set_node_available, set_node_price,
update_node, reclaim_spot_node, set_node_access) tell the agent to confirm with you first;
reclaim_spot_node stops a renter's spot rental two minutes later.add_node and get_node_install_command return a command with the node's secret token:
keep it private.npm install
PARALON_API_KEY=prlc_your_key_here node smoke-test.mjs
It calls the read-only tools, and the node tools only on a node that does not exist, so it changes nothing.
PARALON_API_KEY=prlc_your_key_here node server.js
MIT
FAQs
ParalonCloud MCP server: rent GPUs, and as a GPU provider manage your own nodes, prices and earnings, from an AI agent.
We found that @paraloncloud/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.