Xcelsior GPU Cloud is answering right now. Last checked 10 min ago. 6 installs a week from npm. Last commit 7 Nov 2026.
Rent GPUs, launch spot instances and run serverless inference on the Xcelsior marketplace.
What the code does
We read the source, 1 h ago · rules 995398eba69f
A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.
inspect = subprocess.run(
Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.
f"mkfs.ext4 -q -L vol-{volume_id[:8]} /dev/mapper/{safe_mapper}",
return os.path.exists("/.dockerenv")
const result = await client.eval(INCREMENT_WITH_TTL_LUA, {
result = subprocess.run(
path = os.path.join(OUT_DIR, name)
<select id="alert-mining-thresh">
<option value="0.8">High (80%+ util for 5 min)</option>
shell=True,
ARG NEXT_PUBLIC_POSTHOG_PROJECT_TOKEN= ARG NEXT_PUBLIC_POSTHOG_HOST=https://us.i.posthog.com
…hsJrHbfI2als+m+IHJKtNs8oBAAA="},"3c8bd1f7-3c21-4fb0-8bd7-f7353e1235f7":{"mime":"image/svg+xml","compressed":true,"data":"H4sIAAAAAAAAE21XS48bNwz+K4J71ixfoqRidw89jw+6+lYgaXaBtAmaRTY/vyCpseU0Ptj8Zii+9JGSH799/5R+/P35n29Pp5e3t6+/Pzy8v79v77x9+ffTAwHAw7fvn07p++vH9z++/Hg65bJJylhwa6lW2CC…
- /var/run/docker.sock:/var/run/docker.sock:ro
"/data/.ssh/known_hosts",
document.getElementById('hosts-table').innerHTML = d.hosts.map(h => {
url = f"https://api.telegram.org/bot{cfg['telegram_bot_token']}/sendMessage"
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
A tool parameter here reaches a dangerous call
That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.
Connect this server
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 10 min ago.
claude mcp add xcelsior --transport http https://mcp.xcelsior.ca/mcphttps://mcp.xcelsior.ca/mcp[mcp_servers.xcelsior]
url = "https://mcp.xcelsior.ca/mcp"{
"mcpServers": {
"xcelsior": {
"url": "https://mcp.xcelsior.ca/mcp"
}
}
}{
"servers": {
"xcelsior": {
"type": "http",
"url": "https://mcp.xcelsior.ca/mcp"
}
}
}This endpoint answered with an authorization challenge. The server is running, and it signs you in through your browser: there is no API key to paste.
Endpoints
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://mcp.xcelsior.ca/mcp | streamable-http | sign-in | 182 ms | 10 min ago |
Alternatives to Xcelsior GPU Cloud
same job, measured the same waySearch, install and compose AI agent skills, loops and bundles from the LoopSkill marketplace.
Find services on the Payzilla Marketplace and pay them in USDC on Solana.
Launch, inspect and stop multiplayer game server sessions on Gameye from any MCP client.
Search, discover, and install 500+ AI agent skills from the SkillFlow marketplace.
Launch, scale, and manage GPU pods and serverless endpoints across regions
MCP server for Verus on-chain marketplace — create, browse, accept, and close offers
Book, reschedule and cancel appointments at any business on the BookingMaven marketplace.
Search and book agricultural contracting services on the Purple Grain marketplace.
Xcelsior GPU Cloud — questions
Answers built from our own checks of this server.