
Runpod MCP server
Lets your AI assistant create, run and manage Runpod GPU Pods, Serverless endpoints, storage and billing.
This is Runpod's own server. Point your client at the hosted address and sign in with Runpod, or run it on your machine with an API key.
Your assistant can start, stop and delete Pods, deploy endpoints, send jobs, read logs and check spend. Pods, endpoints, clusters and volumes cost money while they exist, and delete tools remove them for good. Use it with a key and a client that asks before each change.
Good for
- ML engineers who rent GPUs on Runpod
- Developers deploying Serverless endpoints
- Teams that track GPU spend
Works in
14 should work
Tap an app to see how to set it up and any known problems.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports hosted MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports hosted MCP servers.
Install runpod MCP
Claude Code
- 1
Copy this prompt.
Add the runpod MCP server to Claude Code. Run this command: claude mcp add --transport http runpod -s user https://mcp.runpod.io/ Ask me for RUNPOD_API_KEY and only put the values in that config, nowhere else. Then check that it loaded and tell me if I need to sign in or restart.
- 2
Paste it into Claude Code. It shows the change and asks before running it.
The hosted address asks you to sign in with Runpod the first time, so no API key is stored on your machine. The local version needs Node.js 20 or higher and a Runpod API key. The plugin route and the .mcp.json config are not tied to the hosted or local choice above them; the plugin wires up the hosted server. The .mcp.json snippet is generated from the README command.
From the project README. Source.
Tools
Lists your Pods
Returns the Pods in your account, newest first. Pods that belong to a cluster are left out unless you ask for them.
Try: “Show me all my Runpod Pods and which are running.”
Read ·
list-podsShows one Pod in detail
Returns a single Pod by its id, including its status, hardware and which actions are allowed right now.
Try: “Get the details of my pod abc123, including its status.”
Read ·
get-podLists your Serverless endpoints
Returns a trimmed summary of each Serverless endpoint: name, image, compute setup, worker counts, scaling and data centers.
Try: “Which Serverless endpoints do I have, and how many workers does each run?”
Read ·
list-endpointsShows one Serverless endpoint
Returns the full record of one Serverless endpoint by its id.
Try: “Show the full config of my endpoint my-endpoint.”
Read ·
get-endpointLists your templates
Returns each template you can see with its name, image and whether it is for Serverless, 20 per page.
Try: “List my Runpod templates.”
Read ·
list-templatesShows one template
Returns the full container setup of a template, whether it is yours or from the public catalog.
Try: “Show me the setup of my pytorch template.”
Read ·
get-templateBrowses the public template catalog
Lists templates Runpod curated, templates the community shared, or ones Runpod has verified, for both Pods and Serverless.
Try: “Find an official Runpod template for ComfyUI.”
Read ·
list-public-templatesLists your network volumes
Returns the network-attached storage volumes you own, newest first.
Try: “What network volumes do I have and how big are they?”
Read ·
list-network-volumesShows one network volume
Returns one network volume by id.
Try: “Show details for network volume nv-123.”
Read ·
get-network-volumeLists your global volumes
Returns your global volumes, the storage that mounts in any data center.
Try: “List my global volumes.”
Read ·
list-global-volumesShows one global volume
Returns one global volume by id.
Try: “Show my global volume called datasets.”
Read ·
get-global-volumeLists your Instant Clusters
Returns the multi-Pod clusters you own, newest first.
Try: “Do I have any Instant Clusters running?”
Read ·
list-clustersShows one cluster
Returns one cluster with a summary of its Pods by status.
Try: “Give me the status of cluster cl-1.”
Read ·
get-clusterLists the Pods inside a cluster
Returns each member Pod of a cluster as a full Pod record, not just counts.
Try: “Which Pods belong to cluster cl-1?”
Read ·
list-cluster-podsLists GPU types with prices
Returns the available GPU types and their pricing, and can add live stock for a product. Can narrow to GPUs deployable in given countries.
Try: “Which GPUs can I rent in the EU and what do they cost per hour?”
Read ·
list-gpu-typesShows one GPU type
Returns one GPU type with its pricing, and its stock if you ask for availability.
Try: “How much is an NVIDIA GeForce RTX 4090 per hour?”
Read ·
get-gpu-typeLists CPU types
Returns the CPU flavors you can rent, with pricing, and stock when you ask for it.
Try: “What CPU types does Runpod offer?”
Read ·
list-cpu-typesShows one CPU type
Returns one CPU type with pricing and optional availability.
Try: “Show pricing for the cpu3c CPU type.”
Read ·
get-cpu-typeLists Runpod data centers
Returns each location with region, compliance and supported storage tiers, and can add GPU or CPU stock per location.
Try: “Which data centers have H100s in stock right now?”
Read ·
list-data-centersShows one data center
Returns one data center, with GPU or CPU stock if you ask for it.
Try: “Show the EU-RO-1 data center and its GPU stock.”
Read ·
get-data-centerShows GPU stock by CUDA version
Builds a matrix of GPU stock across host CUDA versions, or probes chosen CUDA versions for graded stock and lowest price. Helps tell a stock problem from a compatibility problem.
Try: “Why does my endpoint have no workers? Check GPU capacity for CUDA 12.8.”
Read ·
get-capacityShows your spend over time
Returns total spend grouped into time buckets, split into Pods, Serverless and storage.
Try: “How much did I spend on Runpod over the last 7 days?”
Read ·
list-billingShows Pod billing
Returns Pod-only charges per time bucket, for all Pods or one Pod.
Try: “What did my pod abc123 cost this week?”
Read ·
list-pod-billingShows Serverless billing
Returns Serverless charges per time bucket. With many endpoints the default output is huge, so ask for the last bucket only.
Try: “Total Serverless spend for the last month, one bucket.”
Read ·
list-serverless-billingShows storage billing
Returns network volume charges per time bucket, for all volumes or one.
Try: “What does my network storage cost per day?”
Read ·
list-network-volume-billingShows cluster billing
Returns Instant Cluster charges per time bucket, for all clusters or one.
Try: “What did cluster cl-1 cost this week?”
Read ·
list-cluster-billingShows Public Endpoint billing
Returns what you spent on Runpod Public Endpoints per time bucket.
Try: “How much did I spend on public endpoint calls this month?”
Read ·
list-endpoint-billingReads the account audit trail
Returns who did what to which resource in your account, newest first, with filters and paging.
Try: “Who deleted a network volume in the last 3 days?”
Read ·
list-audit-logsShows your organization
Returns the organization you currently belong to.
Try: “What organization am I in?”
Read ·
get-organizationLists organization members
Returns every member of your organization with their role.
Try: “Who is in my Runpod organization?”
Read ·
list-organization-usersShows one organization member
Returns one member by user id with the role they hold.
Try: “What role does user u-12 have?”
Read ·
get-organization-userLists your registered SSH keys
Returns the public SSH keys on your account, which are put into Pods that start with SSH.
Try: “Which SSH keys are registered on my account?”
Read ·
get-ssh-keysLists your secrets
Returns the names and metadata of your account secrets. Values are never returned.
Try: “What secrets do I have stored on Runpod?”
Read ·
list-secretsShows one secret
Returns one secret record by id. The value is write-only and is never returned.
Try: “Show the details of my HF_TOKEN secret.”
Read ·
get-secretLists container registry logins
Returns the private container registry credentials you saved, without usernames or passwords.
Try: “Which container registries have I connected?”
Read ·
list-registriesShows one registry login
Returns one saved registry credential record, without the username or password.
Try: “Show my docker hub registry entry.”
Read ·
get-registryLists ECR delegations
Returns the AWS ECR delegations registered for your account.
Try: “List my ECR delegations.”
Read ·
list-delegationsLists workers on an endpoint
Returns the active workers of a Serverless endpoint with their state, plus counts by state. Best for finding out why a job is stuck.
Try: “Why is my endpoint stuck? List its workers and their states.”
Read ·
list-endpoint-workersShows endpoint release history
Returns the endpoint release history, newest first, each with a diff of what changed and how many workers run the current version.
Try: “What changed in the last release of my endpoint?”
Read ·
list-endpoint-releasesLists endpoint GitHub builds
Returns the endpoint GitHub build history, newest first.
Try: “Did the last build of my endpoint succeed?”
Read ·
list-endpoint-buildsShows one endpoint build
Returns one GitHub build of an endpoint by id, however old it is.
Try: “Show build b-77 for my endpoint.”
Read ·
get-endpoint-buildShows endpoint health
Returns worker counts by state and job queue numbers for a Serverless endpoint. The tool notes this view can lag, so list the workers when a job is stuck.
Try: “Is my endpoint healthy? How many jobs are queued?”
Read ·
endpoint-healthChecks a Serverless job
Returns the status and output of a job. It can wait on the server until the job finishes, which avoids repeated polling through a cold start.
Try: “Check job j-123 and wait up to a minute for the result.”
Read ·
get-job-statusCollects streamed job output
Reads streamed output from a job until it ends or a time budget runs out, then returns the chunks so far. The worker must support streaming.
Try: “Stream the output of job j-123.”
Read ·
stream-jobReads a Pod's logs
Returns a short snapshot of a Pod's container or system logs as parsed lines. A flag says when the output was cut at the size cap.
Try: “Show me the last logs from pod abc123.”
Read ·
stream-pod-logsReads a worker's logs
Returns a short snapshot of a Serverless worker's logs. Use it when a job stays in the queue while workers exist.
Try: “Show logs for worker w-9 on my endpoint.”
Read ·
stream-worker-logsBrowses Runpod Public Endpoints
Lists ready-made, pay-per-use model APIs for text, image, video and audio that need no deployment. The catalog is public.
Try: “Which Runpod Public Endpoints can generate images?”
Read ·
list-public-endpointsBrowses the Runpod Hub
Lists prebuilt Serverless workers and Pod templates such as vLLM and ComfyUI, most deployed first. Can include each release config.
Try: “What are the most popular repos on the Runpod Hub?”
Read ·
list-hub-reposLists Runpod guides
Lists the official guides the server bundles: tool skills, reference docs and step-by-step walkthroughs.
Try: “What Runpod guides are available?”
Read ·
list-guidesReads one Runpod guide
Returns a whole guide by its id from the list of guides.
Try: “Read the Runpod guide on dev pods.”
Read ·
read-guideLooks up a Runpod concept
Returns what a concept like pod, worker or network volume is, with its rules and the public source for each.
Try: “What does a stopped pod keep on Runpod?”
Read ·
lookup-conceptSearches Runpod rules
Finds the rules in the concept set that match your words and returns them with their sources.
Try: “Search for rules about network volumes and data centers.”
Read ·
search-conceptsShows a tool's full argument list
Returns one tool's complete definition. Some tools list only their basic shape, and the assistant calls this before using them.
Try: “Describe the create-endpoint tool.”
Read ·
describe-toolSearches Runpod docs
Searches Runpod documentation, support knowledge and blog and returns passages with links. The query goes to the hosted Runpod server, even when you run the server locally.
Try: “How do I attach a network volume to a Serverless endpoint?”
Network ·
search-docsRents a new Pod
Creates a GPU or CPU Pod. It bills by the hour from the moment it is created until you stop or terminate it.
Try: “Create a pod named test-pod with one RTX 4090 and the pytorch image.”
Write ·
create-podChanges a Pod's settings
Changes only the fields you send on a Pod. Sending an empty value, such as an empty ports list, clears that field.
Try: “Change the container disk of pod abc123 to 50 GB.”
Delete ·
update-podStarts, stops, restarts or terminates a Pod
Moves a Pod to a new state with one action. Terminate deletes the Pod for good, and stop or restart wipe the container disk.
Try: “Stop pod abc123.”
Delete ·
pod-actionTerminates a Pod permanently
Deletes a Pod and loses its container disk. The tool text says to check the id first.
Try: “Terminate pod abc123.”
Delete ·
delete-podCreates a Serverless endpoint
Creates an endpoint from an image and a GPU pool or CPU setup. It is billable, and the tool text says to quote the hourly price first.
Try: “Create a Serverless endpoint named my-endpoint on AMPERE_80, 0 min and 3 max workers.”
Write ·
create-endpointChanges a Serverless endpoint
Changes only the fields you send. Sending GPU pools without exclusions clears exclusions set elsewhere.
Try: “Raise max workers on my-endpoint to 5.”
Delete ·
update-endpointDeletes an endpoint
Removes a Serverless endpoint permanently and immediately.
Try: “Delete the endpoint test-endpoint.”
Delete ·
delete-endpointSets which GPUs an endpoint uses
Replaces the GPU choice of a Serverless endpoint, including pinning one GPU type, and leaves its other settings alone. Exclusions you do not resend are cleared.
Try: “Pin my-endpoint to NVIDIA L40S workers only.”
Delete ·
set-endpoint-gpusSubmits a job to an endpoint
Sends a job to a Serverless endpoint and returns a job id right away. Results stay available for 30 minutes after the job completes.
Try: “Run my-endpoint with the prompt "a red fox in snow".”
Write ·
run-endpointRuns a job and waits for the result
Sends a job and waits for the answer. It suits warm endpoints and quick jobs, and falls back to a job id when the job takes longer.
Try: “Run a quick test on my-endpoint and show me the output.”
Write ·
runsync-endpointCancels a job
Stops a Serverless job that is queued or running.
Try: “Cancel job j-123.”
Delete ·
cancel-jobRetries a failed job
Requeues a job that failed or timed out. Its earlier output is removed.
Try: “Retry job j-123.”
Delete ·
retry-jobClears an endpoint's waiting jobs
Removes all pending jobs from an endpoint queue. Jobs already running continue.
Try: “Purge the queue on my-endpoint.”
Delete ·
purge-endpoint-queueDeploys a Hub repo as an endpoint
Creates a new Serverless endpoint from a Hub release, as if you had clicked Deploy on the Hub. It uses Runpod's GraphQL API.
Try: “Deploy runpod-workers/worker-comfyui from the Hub.”
Write ·
deploy-hub-repoCreates a template
Saves a reusable container setup of image, disk, ports, env and mounts that Pods and endpoints can use.
Try: “Create a template called my-vllm from the vllm image.”
Write ·
create-templateChanges a template
Changes only the fields you send on a template you own.
Try: “Add port 8888 to my-vllm.”
Delete ·
update-templateDeletes a template
Deletes a template permanently. The tool text warns against deleting one a live endpoint uses.
Try: “Delete my old template pytorch-old.”
Delete ·
delete-templateCreates a network volume
Creates persistent storage with a name, size in GB and data center. It is billable.
Try: “Create a 100 GB network volume called models in EU-RO-1.”
Write ·
create-network-volumeChanges a network volume
Updates a network volume's name or size. The size can only grow.
Try: “Grow volume models to 200 GB.”
Write ·
update-network-volumeDeletes a network volume
Deletes a network volume and its storage.
Try: “Delete network volume nv-123.”
Delete ·
delete-network-volumeCreates a global volume
Creates storage that mounts in any data center. Accounts have a cap on how many they can hold.
Try: “Create a global volume called datasets.”
Write ·
create-global-volumeChanges a global volume
Updates the fields you send on a global volume.
Try: “Rename global volume datasets to training-data.”
Write ·
update-global-volumeDeletes a global volume
Deletes a global volume and its data. It fails while the volume is still mounted.
Try: “Delete global volume gv-1.”
Delete ·
delete-global-volumeCreates an Instant Cluster
Rents several identical Pods with fast interconnect at once, all billable from creation. The tool text says to quote the total hourly price and wait for your go.
Try: “Create a cluster of 2 pods with 8 H100s each.”
Write ·
create-clusterRenames a cluster
Changes only the name of a cluster. Its size and setup are fixed at creation.
Try: “Rename cluster cl-1 to training.”
Write ·
update-clusterDeletes a cluster
Deletes a cluster and terminates every Pod in it.
Try: “Delete cluster cl-1.”
Delete ·
delete-clusterStores a secret
Saves an encrypted value under a unique name. The value cannot be read back, and Pods can use it through an environment variable placeholder.
Try: “Store my Hugging Face token as a secret named HF_TOKEN.”
Write ·
create-secretRotates a secret
Changes a secret's value or description. Running Pods keep the old value until their next boot.
Try: “Rotate the value of HF_TOKEN.”
Delete ·
update-secretDeletes a secret
Deletes a secret. Environment variables that use it stop resolving at the next Pod or worker boot.
Try: “Delete secret HF_TOKEN.”
Delete ·
delete-secretSaves a registry login
Stores credentials for a private container registry. They are write-only.
Try: “Add my GitHub Container Registry login.”
Write ·
create-registryDeletes a registry login
Deletes saved registry credentials. It is refused if a Pod uses them, but templates that use them silently lose the link.
Try: “Delete my old docker registry login.”
Delete ·
delete-registryRegisters an ECR delegation
Registers an AWS ECR delegation for your account.
Try: “Register an ECR delegation for my AWS account.”
Write ·
create-delegationRevokes an ECR delegation
Revokes a registered ECR delegation.
Try: “Revoke ECR delegation d-1.”
Delete ·
revoke-delegationReplaces your SSH keys
Replaces the whole set of public SSH keys on your account. Any key you leave out is removed, and an empty list removes all.
Try: “Add my new public key to my Runpod SSH keys.”
Delete ·
update-ssh-keys
Read from the source code
Permissions
high risk · 5 things to watch
High risk
It can rent billable GPUs and permanently delete Pods, endpoints, clusters, volumes and secrets in your Runpod account. Approve each change by hand, and use a client that shows tool calls before they run.
What it can do
- Read your data
- Create and change things
- Delete things
- Read-only mode
Watch out for
It can delete Pods, endpoints and volumes
Several tools delete or terminate resources for good, including delete-pod, delete-endpoint, delete-cluster and delete-network-volume. Set your client to ask before each call. github.com
It can start billable GPUs
create-pod, create-endpoint, create-cluster and create-network-volume start charges that run until you stop or delete them. The server text tells the assistant to quote the price first, but nothing in the code stops a call. github.com
It acts with your full account rights
The README says the server acts with the full permissions of the key or sign-in. There is no read-only switch. github.com
It tells the assistant to load playbooks first
The server instructions say to read a routed guide before the first Runpod call and call a reply without it out of contract. Expect extra guide reads at the start of a session.
The hosted server records anonymous tool use
It logs tool name, status, duration and transport for each call, and drops arguments except on guide and concept tools. Send the X-Runpod-Analytics: off header to opt out. The local server sends none of this, but docs search still goes to the hosted server. github.com
Security advisories
No published security advisories as of Nov 1, 2026.
Technical details
| Talks to | api.runpod.io. api.runpod.ai. mcp.runpod.io (docs search) |
|---|---|
| Scopes |
|
Questions
Is the Runpod MCP server official?
Yes. Runpod publishes it from its own GitHub organization, and the README calls it the official Runpod MCP server.
Do I need an API key?
Not for the hosted server. You sign in with your Runpod account and the server gets a key scoped to that session. The local version needs a Runpod API key from your account settings. You can also send your own key to the hosted server in an Authorization header.
What is the Runpod MCP server URL?
The hosted address is https://mcp.runpod.io/. Add it as a remote server in your client and approve the Runpod sign-in.
Hosted or local, which should I pick?
Hosted is the one the README recommends, since nothing is stored on your machine. Pick local if you want the server to run as your own process. Both call the Runpod API with your account rights.
Which account does the sign-in use?
The one your browser console session has selected when you approve. If you belong to several teams, switch to the right profile in the Runpod console first.
Can it run read-only?
No read-only switch is documented. Every tool carries read-only and destructive hints, so a client can auto-approve reads and ask you before deletes.
Can it delete my Pods?
Yes. It can terminate Pods and delete endpoints, clusters, volumes and secrets for good. Keep your client set to ask before each change.
Why does sign-in fail with HTTP 403?
The hosted firewall can block your IP for up to an hour after a burst of unauthenticated requests, often from Codex. Wait, then use your API key in a header instead of OAuth.
Is this the full list of tools?
The page lists the tools the local npm package registers. The hosted server also offers feedback and journal tools that send notes to Runpod, and a smaller set is served to the ChatGPT and Claude directory listings.
Information
updated Nov 2, 2026
- Publisher
- Official
- Package
@runpod/mcp-server- Registry
- npm
- Transport
- stdio, Streamable HTTP
- Auth
- OAuth
- Version
- 4.9.0
- License
- Apache-2.0
- Last commit
- Oct 30, 2026
- Open issues
- 2
Sources
Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.
Show all 2Hide
- Runpod MCP server README · github.com
- @runpod/mcp-server 4.9.0 (dist and changelog) · npmjs.com