{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-09", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "tool": { "slug": "thunder-compute", "name": "Thunder Compute", "vendor": "Thunder Compute", "vendorUrl": "https://www.thundercompute.com", "kind": "http-api", "category": "gpu-compute", "summary": "Thunder Compute is a US GPU cloud renting RTX A6000, L40, A100 and H100 instances by the minute and GPU sandboxes by the second. Agents use its REST API, a hosted MCP server with OAuth, or the `tnr` CLI.", "url": "https://www.anchorterminal.com/tools/thunder-compute", "markdownUrl": "https://www.anchorterminal.com/tools/thunder-compute.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/thunder-compute.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/thunder-compute.json", "repo": "https://github.com/Thunder-Compute/thunder-cli", "license": "Proprietary service under Thunder Compute's Terms and Conditions. The `tnr` CLI on GitHub is MIT", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.thundercompute.com:8443/v1", "packages": [ { "registry": "go", "name": "github.com/Thunder-Compute/thunder-cli" }, { "registry": "pypi", "name": "thunder-sandbox" } ], "auth": "mixed", "authNotes": "Self-serve. The hosted MCP server uses OAuth 2.0 with discovery. The first connection opens a browser to sign in and approve, tokens refresh, and the scopes are `instances:read`, `instances:write`, `snapshots:read`, `snapshots:write`, `sandboxes:read`, `sandboxes:write`, `billing:read` and `org:read`. The REST API takes a named API token as a Bearer header. Tokens are created and revoked one at a time in the console, or with the MCP `create_token` tool, and no token scopes were found. The CLI and the sandbox SDK read `TNR_API_TOKEN` for headless use. Price, specification, availability and template endpoints need no token.", "pricing": "usage", "pricingNotes": "No general free tier. Instances are billed by the minute while they run, paid by saved card or preloaded credit that is non-refundable. Per GPU an hour on 9 October 2026, RTX A6000 is $0.35, L40 $0.79, A100 80 GB $1.09 and H100 $3.20. Sandboxes are billed by the second and need access enabled by the vendor. Students with a US university email get $20 of credit for A6000 and L40 GPUs. Reserved capacity is by quote (https://www.thundercompute.com/pricing).", "priceSummary": "$0.04 / vCPU-hr", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs corpus, the OpenAPI document or the pricing page (checked 2026-10-09).", "endpoints": [] }, "toolCount": 28, "popularity": { "githubStars": 34, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://www.thundercompute.com/docs", "llmsTxt": "https://www.thundercompute.com/docs/llms.txt", "openapi": "https://api.thundercompute.com:8443/openapi.json", "registryName": "io.github.Thunder-Compute/thunder-compute", "capabilities": [ "compute.gpu", "compute.containers" ], "tags": [ "hosted", "usage-priced", "openapi", "llms-txt", "mcp", "cli", "oauth", "api-key", "python", "go", "status-page", "card-required", "closed-source" ], "lastRelease": "2026-09-16", "graded": true, "anchor": { "graded": true, "score": 56.1, "grade": "C", "agentReady": false, "rank": 576, "ranked": true, "rankOf": 842, "categoryRank": 10, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 48, "maintenance": 79, "payments": 20, "reliability": 65, "schema": 70, "security": 51, "transparency": 64 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 65, "points": 13, "reason": "Graded on the hosted lines for the REST API and the hosted MCP server. Status page on incident.io at status.thundercompute.com with Website, API and Instances components and monthly history (20). No incidents listed for July to October 2026, and each component shows 100 per cent (30). No rate limits with numbers were found in the docs or the OpenAPI document (0). No 429 or retry guidance in the docs. The CLI source reads a `Retry-After` header on errors, adding a duplicate SSH key is a no-op and port updates are atomic, but instance creation has no idempotency key (5 of 15). No SLA found, and the terms say availability is not guaranteed (0). The API and MCP server carry no beta label. Sandboxes need access enabled for each organisation (10)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 70, "points": 11.38, "reason": "Public OpenAPI 3.1 document at api.thundercompute.com:8443/openapi.json with 41 operations and 72 schemas (25). `llms.txt`, `llms-full.txt` and a Markdown copy of every docs page (10). 28 of 41 operations have a description. Instance operations state side effects such as the private key being returned once, while most sandbox operations have a summary only (12 of 20). Required fields are marked, but the document has six enums, `gpu_type` and `template` are free strings and the instance list is a map keyed by ID (8 of 15). 12 examples and one error schema with `code`, `error` and `message`. Most operations document 400, 401 and 500, and none documents 429 (9 of 15). `/v1` and `/v2` paths, with legacy endpoints and the `mode` field marked as retained or deprecated. No API changelog was found. The CLI has a dated one (6 of 15). The MCP tool definitions need a signed-in session and were not read." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 48, "points": 7.8, "reason": "No field selection, and `GET /instances/list` returns every instance in one map. The MCP server has 28 tools in one set, with no toolsets found (12 of 25). `limit` up to 100, `page_token` and a status filter on sandboxes and sandbox logs. No pagination on instances, snapshots or keys (8 of 20). Errors carry a numeric `code`, a string `error` such as `invalid_request` and a `message`, documented per operation (14 of 20). Duplicate SSH keys are a no-op and port changes are deduplicated in one transaction, but create calls have no idempotency key. MCP tool annotations were not read (7 of 20). A create call needs five fields. The official Python SDK covers sandboxes only, and the Go CLI covers instances (7 of 15)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 51, "points": 8.93, "reason": "The MCP server uses OAuth 2.0 with discovery, refresh tokens and ten scopes that separate read from write for instances, snapshots and sandboxes. The REST API uses named API tokens that are created and revoked one at a time, with no scopes found. No secret travels in a URL (25 of 30). Read scopes exist, and the CLI requires `--yes` to delete without a prompt. No confirmation step for `delete_instance` or `delete_snapshot` was found in the MCP docs, and both are described as irreversible (8 of 20). Responses are infrastructure metadata, except `run_command` output and sandbox logs, with no guidance found on untrusted output (8 of 15). `GET /tokens` returns creation and last-used times and sandbox logs are listed by API. No audit log was found (4 of 15). No security.txt, disclosure policy or bug bounty was found. `llms.txt` states SOC 2 Type II and GDPR compliance with no report or trust page linked, and the DPA promises an audit summary on written request and incident notice within 72 hours (6 of 20)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 20, "points": 2.5, "reason": "No x402, MPP or L402 in the docs, the OpenAPI document or the pricing page (0). Per-GPU-hour, per-vCPU-hour and storage prices are public on the pricing page and from `GET /v2/pricing` without a token (20). No general free tier or trial. A $20 credit is limited to students with a US university email, and the MCP quickstart asks for a payment method before connecting (0). Signup and the first OAuth consent happen in a browser. `create_token` issues API tokens only after that sign-in (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 79, "points": 6.91, "reason": "The newest CLI release is v2.1.0 of 16 September 2026, and the terms and privacy policy were updated on 28 September 2026 (30). Four CLI releases in the last 90 days, on 15 July, 30 July, 15 September and 16 September 2026 (20). A dated CLI changelog, a support address and a Discord server the docs say the founders answer. No API changelog, and the CLI repository shows no open issues (10 of 15). Listed in the official MCP registry as `io.github.Thunder-Compute/thunder-compute`, version 1.0.0 from 9 April 2026, with a remote address that differs from the one in the docs. The CLI and the `thunder-sandbox` SDK are current (13 of 15). The CLI repository has tests, a lint configuration and release checksum verification. No public CI workflow was found in it (6 of 10)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 64, "points": 5.6, "note": "editorial 51, provenance 77", "reason": "Closed service under Terms and Conditions dated 28 September 2026 and Delaware law. The CLI is MIT. The OpenAPI document names Apache 2.0 and a placeholder terms address (15 of 30). The privacy policy of 28 September 2026 says instance data is not used to train AI models, the terms say instance data may be deleted 60 days after the account was last active, and a DPA is published. The sub-processor list names Firebase for sign-in while the MCP docs name Stytch, and the FAQ says instances are EC2 while the list names Azure (18 of 30). No deprecation policy. The terms allow changes without notice, and the billing docs say rates can change without notice. Legacy endpoints are marked as retained for compatibility (6 of 20). Five sub-processors with locations are listed and the DPA sets 10 business days' notice of changes. The list is dated 27 August 2025 and omits Stytch and Sentry, which the MCP docs and the CLI source name (12 of 20)." } ], "assessment": { "date": "2026-10-09", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "No field selection, and `GET /instances/list` returns every instance in one map. The MCP server has 28 tools in one set, with no toolsets found (12 of 25). `limit` up to 100, `page_token` and a status filter on sandboxes and sandbox logs. No pagination on instances, snapshots or keys (8 of 20). Errors carry a numeric `code`, a string `error` such as `invalid_request` and a `message`, documented per operation (14 of 20). Duplicate SSH keys are a no-op and port changes are deduplicated in one transaction, but create calls have no idempotency key. MCP tool annotations were not read (7 of 20). A create call needs five fields. The official Python SDK covers sandboxes only, and the Go CLI covers instances (7 of 15).", "maintenance": "The newest CLI release is v2.1.0 of 16 September 2026, and the terms and privacy policy were updated on 28 September 2026 (30). Four CLI releases in the last 90 days, on 15 July, 30 July, 15 September and 16 September 2026 (20). A dated CLI changelog, a support address and a Discord server the docs say the founders answer. No API changelog, and the CLI repository shows no open issues (10 of 15). Listed in the official MCP registry as `io.github.Thunder-Compute/thunder-compute`, version 1.0.0 from 9 April 2026, with a remote address that differs from the one in the docs. The CLI and the `thunder-sandbox` SDK are current (13 of 15). The CLI repository has tests, a lint configuration and release checksum verification. No public CI workflow was found in it (6 of 10).", "payments": "No x402, MPP or L402 in the docs, the OpenAPI document or the pricing page (0). Per-GPU-hour, per-vCPU-hour and storage prices are public on the pricing page and from `GET /v2/pricing` without a token (20). No general free tier or trial. A $20 credit is limited to students with a US university email, and the MCP quickstart asks for a payment method before connecting (0). Signup and the first OAuth consent happen in a browser. `create_token` issues API tokens only after that sign-in (0).", "reliability": "Graded on the hosted lines for the REST API and the hosted MCP server. Status page on incident.io at status.thundercompute.com with Website, API and Instances components and monthly history (20). No incidents listed for July to October 2026, and each component shows 100 per cent (30). No rate limits with numbers were found in the docs or the OpenAPI document (0). No 429 or retry guidance in the docs. The CLI source reads a `Retry-After` header on errors, adding a duplicate SSH key is a no-op and port updates are atomic, but instance creation has no idempotency key (5 of 15). No SLA found, and the terms say availability is not guaranteed (0). The API and MCP server carry no beta label. Sandboxes need access enabled for each organisation (10).", "schema": "Public OpenAPI 3.1 document at api.thundercompute.com:8443/openapi.json with 41 operations and 72 schemas (25). `llms.txt`, `llms-full.txt` and a Markdown copy of every docs page (10). 28 of 41 operations have a description. Instance operations state side effects such as the private key being returned once, while most sandbox operations have a summary only (12 of 20). Required fields are marked, but the document has six enums, `gpu_type` and `template` are free strings and the instance list is a map keyed by ID (8 of 15). 12 examples and one error schema with `code`, `error` and `message`. Most operations document 400, 401 and 500, and none documents 429 (9 of 15). `/v1` and `/v2` paths, with legacy endpoints and the `mode` field marked as retained or deprecated. No API changelog was found. The CLI has a dated one (6 of 15). The MCP tool definitions need a signed-in session and were not read.", "security": "The MCP server uses OAuth 2.0 with discovery, refresh tokens and ten scopes that separate read from write for instances, snapshots and sandboxes. The REST API uses named API tokens that are created and revoked one at a time, with no scopes found. No secret travels in a URL (25 of 30). Read scopes exist, and the CLI requires `--yes` to delete without a prompt. No confirmation step for `delete_instance` or `delete_snapshot` was found in the MCP docs, and both are described as irreversible (8 of 20). Responses are infrastructure metadata, except `run_command` output and sandbox logs, with no guidance found on untrusted output (8 of 15). `GET /tokens` returns creation and last-used times and sandbox logs are listed by API. No audit log was found (4 of 15). No security.txt, disclosure policy or bug bounty was found. `llms.txt` states SOC 2 Type II and GDPR compliance with no report or trust page linked, and the DPA promises an audit summary on written request and incident notice within 72 hours (6 of 20).", "transparency": "Closed service under Terms and Conditions dated 28 September 2026 and Delaware law. The CLI is MIT. The OpenAPI document names Apache 2.0 and a placeholder terms address (15 of 30). The privacy policy of 28 September 2026 says instance data is not used to train AI models, the terms say instance data may be deleted 60 days after the account was last active, and a DPA is published. The sub-processor list names Firebase for sign-in while the MCP docs name Stytch, and the FAQ says instances are EC2 while the list names Azure (18 of 30). No deprecation policy. The terms allow changes without notice, and the billing docs say rates can change without notice. Legacy endpoints are marked as retained for compatibility (6 of 20). Five sub-processors with locations are listed and the DPA sets 10 business days' notice of changes. The list is dated 27 August 2025 and omits Stytch and Sentry, which the MCP docs and the CLI source name (12 of 20)." }, "sources": [ { "what": "site llms.txt, with SOC 2 claim and guidance addressed to AI models", "url": "https://www.thundercompute.com/llms.txt", "seen": "2026-10-09" }, { "what": "docs index for agents", "url": "https://www.thundercompute.com/docs/llms.txt", "seen": "2026-10-09" }, { "what": "whole docs corpus (MCP server, billing, restrictions, sandboxes, DPA, stopping instances)", "url": "https://www.thundercompute.com/docs/llms-full.txt", "seen": "2026-10-09" }, { "what": "MCP server guide with tools, prompts and setup", "url": "https://www.thundercompute.com/docs/guides/mcp-server.md", "seen": "2026-10-09" }, { "what": "MCP quickstart", "url": "https://www.thundercompute.com/docs/mcp-server/quickstart.md", "seen": "2026-10-09" }, { "what": "MCP OAuth protected resource metadata with scopes", "url": "https://www.thundercompute.com/.well-known/oauth-protected-resource", "seen": "2026-10-09" }, { "what": "OpenAPI document", "url": "https://api.thundercompute.com:8443/openapi.json", "seen": "2026-10-09" }, { "what": "public price endpoint", "url": "https://api.thundercompute.com:8443/v2/pricing", "seen": "2026-10-09" }, { "what": "CLI authentication and API tokens", "url": "https://www.thundercompute.com/docs/cli/operations/authentication.md", "seen": "2026-10-09" }, { "what": "pricing", "url": "https://www.thundercompute.com/pricing", "seen": "2026-10-09" }, { "what": "student credit", "url": "https://www.thundercompute.com/students", "seen": "2026-10-09" }, { "what": "billing docs", "url": "https://www.thundercompute.com/docs/billing.md", "seen": "2026-10-09" }, { "what": "Terms and Conditions", "url": "https://www.thundercompute.com/terms-and-conditions", "seen": "2026-10-09" }, { "what": "privacy policy", "url": "https://www.thundercompute.com/privacy-policy", "seen": "2026-10-09" }, { "what": "sub-processors", "url": "https://www.thundercompute.com/sub-processors", "seen": "2026-10-09" }, { "what": "Data Processing Addendum", "url": "https://www.thundercompute.com/docs/guides/data-processing-addendum.md", "seen": "2026-10-09" }, { "what": "status page", "url": "https://status.thundercompute.com/", "seen": "2026-10-09" }, { "what": "status history", "url": "https://status.thundercompute.com/history", "seen": "2026-10-09" }, { "what": "security.txt, answered 404", "url": "https://www.thundercompute.com/.well-known/security.txt", "seen": "2026-10-09" }, { "what": "CLI repository, changelog, tags and client source", "url": "https://github.com/Thunder-Compute/thunder-cli", "seen": "2026-10-09" }, { "what": "official MCP registry entry", "url": "https://registry.modelcontextprotocol.io/v0/servers?search=thunder", "seen": "2026-10-09" }, { "what": "RDAP for thundercompute.com", "url": "https://rdap.verisign.com/com/v1/domain/thundercompute.com", "seen": "2026-10-09" } ], "openQuestions": [ "The lead was right about the interfaces. It did not mention sandboxes, which are a second product on the same API and need access enabled for each organisation.", "unchecked: the MCP tool definitions, input schemas and annotations. `tools/list` answers 401 without a signed-in session, so the 28 tools are counted from the docs table.", "unchecked: the PyPI pages for `thunder-sandbox` and `tnr`. The project page needs scripts and PyPI's robots.txt disallows the JSON API, so versions, dates and downloads were not read.", "unchecked: the SOC 2 Type II and GDPR claims in `llms.txt`. No report, auditor or trust page was found on the site.", "The docs give the MCP address as `https://www.thundercompute.com/mcp`. The official registry entry of 9 April 2026 gives `https://api.thundercompute.com:8443/mcp`. We did not test the second.", "`llms.txt` has sections titled Preferred Summary Style for AI and Additional Guidance for AI that tell models how to describe the company. Recorded as a fact. We did not act on them and took no deduction.", "The CLI source initialises Sentry error reporting when a DSN is built in. No opt-out or mention was found in the docs, and Sentry is not on the sub-processor list. The CLI is not the surface graded, so no deduction was taken.", "The FAQ says instances are EC2 instances, the sub-processor list names Azure, and the technical specifications say only North America. The hosting provider and regions are not established.", "`llms.txt` describes prototyping and production modes. The OpenAPI document marks `mode` as deprecated and the pricing page no longer shows modes.", "Whether a user can grant only read scopes at the OAuth consent screen is unknown." ] }, "negative": 0, "verdict": "The hosted MCP server signs in with OAuth and separate read and write scopes, and the REST API has a public OpenAPI 3.1 document with keyless price and availability endpoints. No rate limits, SLA or API changelog were found, instance creation has no idempotency key, and instances cannot be stopped, only deleted.", "bestFor": "Agents in coding tools that rent a single persistent GPU machine for development, fine-tuning or a model server, at low hourly prices and over MCP.", "strengths": [ "Hosted MCP server at `https://www.thundercompute.com/mcp` with OAuth and ten scopes that separate read from write for instances, snapshots and sandboxes", "Public OpenAPI 3.1 document with 41 operations, plus `llms.txt`, `llms-full.txt` and a Markdown copy of every docs page", "`GET /v2/pricing`, `GET /v2/specs` and `GET /v2/status` return prices, configurations and live availability without a token", "Section 28 of the terms, dated 28 September 2026, permits access by AI agents, scripts and SDKs through the account holder's own credentials", "The status page lists no incidents for July to October 2026 on its Website, API and Instances components" ], "weaknesses": [ "No rate limits, 429 guidance or SLA were found in the reviewed documentation, and the terms disclaim availability", "`POST /instances/create` has no idempotency key, so a retried launch can start a second billed instance", "Instances cannot be stopped. Pausing means taking a snapshot, deleting the instance and restoring later", "No general free tier. The $20 credit is limited to students with a US university email", "No security.txt or disclosure policy was found, and the SOC 2 Type II claim in `llms.txt` has no report or trust page linked", "The sub-processor list, last updated 27 August 2025, names Firebase for sign-in while the MCP docs name Stytch" ], "agentNotes": [ "Call `GET /v2/status` or the `get_availability` tool before creating an instance. Availability can change before launch, and creation fails when a type is sold out.", "List instances before retrying a failed create, because the call has no idempotency key.", "Pass `public_key` on create. If omitted, the response carries a generated private key that is returned once.", "To pause work, create a snapshot, delete the instance and later create a new instance from the snapshot. Snapshot storage keeps billing until deleted.", "For headless use set `TNR_API_TOKEN` to a token from the console. The MCP server needs a browser sign-in on first connection." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 56.1 } ], "editorialScores": { "ergonomics": 48, "maintenance": 79, "payments": 20, "reliability": 65, "schema": 70, "security": 51, "transparency": 51 }, "provenanceScore": 77 }, "connect": { "install": "curl -fsSL https://raw.githubusercontent.com/Thunder-Compute/thunder-cli/main/scripts/install.sh | bash", "http": "curl https://api.thundercompute.com:8443/v2/pricing", "claudeCode": "claude mcp add --transport http thunder-compute https://www.thundercompute.com/mcp", "config": { "mcpServers": { "thunder-compute": { "url": "https://www.thundercompute.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/compute.gpu", "tool": "https://letme.dev/thunder-compute" }, "notable": [ "The MCP server is hosted at `https://www.thundercompute.com/mcp` over Streamable HTTP with OAuth, and the docs list 28 tools and eight prompts (https://www.thundercompute.com/docs/guides/mcp-server.md)", "The OAuth metadata lists ten scopes, with separate read and write scopes for instances, snapshots and sandboxes (https://www.thundercompute.com/.well-known/oauth-protected-resource)", "Section 28 of the terms permits access through AI agents, bots, scripts, CLIs, SDKs and APIs on the account holder's own credentials, and makes the holder responsible for the agent's actions (https://www.thundercompute.com/terms-and-conditions)", "Instances have no stop action. The docs describe snapshot, delete and restore as the way to pause (https://www.thundercompute.com/docs/guides/stopping-instances.md)", "The docs list managed memory, CUDA MPS, FFmpeg GPU acceleration and GPU profilers as incompatible with the platform (https://www.thundercompute.com/docs/compatibility.md)", "The service is unavailable in 18 countries and needs a VAT ID in 27 more. Cryptocurrency mining leads to a ban (https://www.thundercompute.com/docs/restrictions.md)", "Instance data may be deleted 60 days after the account was last active, per section 27 of the terms (https://www.thundercompute.com/terms-and-conditions)", "`llms.txt` carries sections addressed to AI models on how to summarise the company. Recorded as a fact (https://www.thundercompute.com/llms.txt)", "The home page reports a $13 million Series A round on 19 August 2026 (https://www.thundercompute.com/)" ], "area": "models", "details": [ { "label": "Surface graded", "value": "The REST API at https://api.thundercompute.com:8443/v1 (OpenAPI 3.1, 41 operations) together with the hosted MCP server, whose tool list comes from the docs because the definitions need sign-in" }, { "label": "MCP server", "value": "Hosted, Streamable HTTP, OAuth. 28 tools. `list_instances`, `create_instance`, `delete_instance`, `modify_instance`, `run_command`, `get_specs`, `get_availability`, `get_pricing`, `list_templates`, `list_snapshots`, `create_snapshot`, `delete_snapshot`, `list_ssh_keys`, `create_ssh_key`, `delete_ssh_key`, `add_ssh_key_to_instance`, `list_ports`, `forward_port`, `delete_port`, `get_ssh_command`, `get_scp_command`, `get_meter_data`, `get_upcoming_invoice`, `get_invoice_history`, `get_subscription`, `list_tokens`, `create_token`, `delete_token`" }, { "label": "Free tier", "value": "None in general. $20 of credit for students with a US university email, usable on A6000 and L40" }, { "label": "GPUs", "value": "RTX A6000 48 GB (one per instance), L40 48 GB, A100 80 GB and H100 80 GB in 1, 2, 4 or 8 GPU shapes, per the pricing page" }, { "label": "Scale to zero", "value": "Not for instances, which bill until deleted and cannot be stopped. Sandboxes end at a timeout and bill by the second" }, { "label": "Cold start", "value": "No figure published. The pricing page says instances are ready to SSH into in minutes" }, { "label": "Billing basis", "value": "Instances per minute while running, sandboxes per second, snapshots and extra disk per GB metered hourly. No egress fee" }, { "label": "Rate limits", "value": "Not found in the reviewed documentation" }, { "label": "Errors", "value": "`code`, `error` and `message`, for example 400 with `invalid_request`" }, { "label": "Regions", "value": "North America per the technical specifications. No region list found" }, { "label": "SDKs", "value": "`tnr` CLI in Go, v2.1.0 (16 September 2026), MIT. `thunder-sandbox` for Python 3.10 or newer, covering sandboxes only. VS Code and Cursor extension" }, { "label": "Sandboxes", "value": "Firecracker microVMs with 3 to 40 vCPUs, an optional H100 or A100, images from a registry or Dockerfile and an outbound network policy. Access is enabled for each organisation on request" }, { "label": "Preinstalled", "value": "CUDA 13.0, driver 580, PyTorch 2.9.0 and JupyterLab, with templates for Ollama, ComfyUI, Forge Neo and Unsloth" }, { "label": "Status", "value": "status.thundercompute.com on incident.io, with Website, API and Instances components" } ], "unitPrices": [ { "item": "RTX A6000 48 GB instance", "unit": "gpu-hour", "usd": 0.35, "note": "Billed per minute. One GPU per instance" }, { "item": "L40 48 GB instance", "unit": "gpu-hour", "usd": 0.79, "note": "Billed per minute" }, { "item": "A100 80 GB instance", "unit": "gpu-hour", "usd": 1.09, "note": "Billed per minute. 4 and 8 GPU shapes cost $1.49 a GPU per the price endpoint" }, { "item": "H100 80 GB instance", "unit": "gpu-hour", "usd": 3.2, "note": "Billed per minute" }, { "item": "H100 80 GB sandbox", "unit": "gpu-hour", "usd": 2.95, "note": "Billed per second, plus vCPU and memory. Access on request" }, { "item": "A100 80 GB sandbox", "unit": "gpu-hour", "usd": 1.95, "note": "Billed per second, plus vCPU and memory. Access on request" }, { "item": "Extra instance vCPU", "unit": "vcpu-hour", "usd": 0.04, "note": "Above the vCPUs included with each GPU" }, { "item": "Sandbox vCPU", "unit": "vcpu-hour", "usd": 0.051, "note": "Memory is $0.016 per GiB an hour" }, { "item": "Instance disk above 100 GB per GPU", "unit": "gb-month", "usd": 0.219, "note": "Billed only while the instance runs" }, { "item": "Snapshot storage", "unit": "gb-month", "usd": 0.05, "note": "Kept until deleted" } ], "provenance": { "legalEntity": "Thunder GPU, Inc.", "domain": "thundercompute.com", "domainRegistered": "2024-02-29", "endpointOnVendorDomain": true, "terms": "https://www.thundercompute.com/terms-and-conditions", "privacy": "https://www.thundercompute.com/privacy-policy", "statusPage": "https://status.thundercompute.com", "changelog": "https://github.com/Thunder-Compute/thunder-cli/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-09", "notes": [ "The Terms and Conditions, last updated 28 September 2026, name Thunder GPU, Inc., doing business as Thunder Compute, a Delaware company, and apply Delaware law. They cover the site and the services, with sections on automated access, usage billing and instance data deletion.", "The privacy policy, last updated 28 September 2026, covers the website and the GPU platform, including access by AI agents.", "The API answers at api.thundercompute.com on port 8443, and the MCP server at www.thundercompute.com/mcp, both on the vendor domain.", "/.well-known/security.txt answers 404.", "RDAP for thundercompute.com gives a registration date of 2024-02-29.", "The changelog linked is the CLI's. No API changelog was found.", "A Data Processing Addendum is published in the docs and a sub-processor list on the site, last updated 27 August 2025." ], "score": 77, "checks": [ { "check": "Legal entity named", "value": "Thunder GPU, Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "thundercompute.com, registered 2024-02-29 (2 years)", "points": 7, "max": 15, "state": "part" }, { "check": "Endpoint on the vendor's domain", "value": "api.thundercompute.com:8443", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 6 of the 7 things a reader expects, and has 2 clauses that cost points", "points": 5.1, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 8 of the 8 things a reader expects", "points": 10, "max": 10, "state": "ok" }, { "check": "Status page", "value": "status.thundercompute.com", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" } ], "policies": [ { "kind": "terms", "url": "https://www.thundercompute.com/terms-and-conditions", "state": "read", "readAt": "2026-10-08", "statedDate": "2026-09-28", "words": 7159, "points": 5.1, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last updated September 28, 2026", "says": "Last updated 2026-09-28" }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "These Legal Terms and your use of the Services are governed by and construed in accordance with the laws of the State of Delaware applicable to agreements made and to be entirely performed within the State of Delaware, without regard to its conflict of law principles.", "says": "The law of the State of Delaware" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "NOTWITHSTANDING ANYTHING TO THE CONTRARY CONTAINED HEREIN, OUR LIABILITY TO YOU FOR ANY CAUSE WHATSOEVER AND REGARDLESS OF THE FORM OF THE ACTION, WILL AT ALL TIMES BE LIMITED TO THE AMOUNT PAID, IF ANY, BY YOU TO US DURING THE six (6) mONTH PERIOD PRIOR TO ANY CAUSE OF ACTION ARISING.", "says": "Capped at the fees paid in the 6 months before the claim" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "Any breach of these Intellectual Property Rights will constitute a material breach of our Legal Terms and your right to use our Services will terminate immediately." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": true, "quote": "We will alert you about any changes by updating the \"Last updated\" date of these Legal Terms, and you waive any right to receive specific notice of each such change.", "says": "Says it gives notice of a change" }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "The Services are not tailored to comply with industry-specific regulations (Health Insurance Portability and Accountability Act (HIPAA), Federal Information Security Management Act (FISMA), etc.), so if your interactions would be subjected to such laws, you may not use the Services." }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ], "toKnow": [ { "key": "terms.benchmark", "label": "Restricts benchmarking or competitive use", "found": true, "quote": "Use the Services as part of any effort to compete with us or otherwise use the Services and/or the Content for any revenue-generating endeavor or commercial enterprise.", "costsPoints": true }, { "key": "terms.nonotice", "label": "Says the terms or the service can change without notice", "found": true, "quote": "We reserve the right to change, modify, or remove the contents of the Services at any time or for any reason at our sole discretion without notice.", "costsPoints": true }, { "key": "terms.cutoff", "label": "Says access can be ended without notice or for any reason", "found": true, "quote": "WE MAY TERMINATE YOUR USE OR PARTICIPATION IN THE SERVICES OR DELETE YOUR ACCOUNT AND ANY CONTENT OR INFORMATION THAT YOU POSTED AT ANY TIME, WITHOUT WARNING, IN OUR SOLE DISCRETION." }, { "key": "terms.arbitration", "label": "Requires arbitration or waives class actions", "found": true, "quote": "If the Parties are unable to resolve a Dispute through informal negotiations, the Dispute (except those Disputes expressly excluded below) will be finally and exclusively resolved by binding arbitration." } ], "notes": [ { "date": "2026-10-08", "text": "Section 28 permits access by AI agents, bots, scripts, command-line tools, SDKs and APIs through the customer's own account, and says it controls where other sections conflict.", "quote": "you may access and use the Services through automated or non-human means, including AI agents, bots, scripts, command-line tools, SDKs, and our APIs, including to provision, manage, and pay for Services" }, { "date": "2026-10-08", "text": "The customer is responsible for every action an automated system or agent takes on its behalf, as if the customer had taken it.", "quote": "You are responsible for all actions taken by any automated system or agent operating on your behalf as if you had taken them yourself." }, { "date": "2026-10-08", "text": "Instance data, including storage volumes and snapshots, may be deleted 60 days after the account was last active.", "quote": "Instance data, including storage volumes, snapshots, and any relevant account data, may be deleted 60 days after account was last active." } ] }, { "kind": "privacy", "url": "https://www.thundercompute.com/privacy-policy", "state": "read", "readAt": "2026-10-08", "statedDate": "2026-09-28", "words": 7671, "points": 10, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last updated September 28, 2026", "says": "Last updated 2026-09-28" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "Want to learn more about what we do with any information we collect?" }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.", "says": "For as long as needed, with no period named" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "We may share information in specific situations and with specific categories of third parties." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months.", "says": "Says it does not sell personal data" }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "In certain circumstances, you may also have the right to object to the processing of your personal information." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "If you have questions or comments about your privacy rights, you may email us at support@thundercompute.com.", "says": "support@thundercompute.com" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "We have implemented measures to protect your personal information, including by using the European Commission's Standard Contractual Clauses for transfers of personal information between our group companies and between us and our third-party providers.", "says": "Relies on standard contractual clauses" } ], "notes": [ { "date": "2026-10-08", "text": "The policy says content stored or processed on instances is not used to train AI models and is accessed only to run and support the service, prevent abuse or meet legal requirements.", "quote": "We do not access, inspect, or use Instance Data except as needed to provide and support the Services at your request, to protect the Services against abuse, fraud, or security threats, or as required by law, and we do not use Instance Data to train AI models." }, { "date": "2026-10-08", "text": "Activity by an AI agent, script or other automated tool is processed in the same way as the customer's own activity and is tied to the customer's account.", "quote": "If you use an AI agent, script, command-line tool, or other automated means to access the Services on your behalf, we process the resulting activity (such as API requests and instance actions) in the same way as activity you perform directly, and it is associated with your account." } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/thunder-compute.json", "live": { "slug": "thunder-compute", "probe": { "target": "https://api.thundercompute.com:8443/v1", "method": "get", "lastAt": "2026-10-09T10:14:29.737349045Z", "lastOk": true, "lastStatus": 404, "lastMs": 253, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 618, "p95ms24h": 730, "samples24h": 28, "samples30d": 28, "days": [ { "date": "2026-10-09", "probes": 28, "ok": 28 } ] }, "vendorStatus": { "page": "https://status.thundercompute.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-09T10:11:21.883802999Z" }, "updatedAt": "2026-10-09T10:14:29.737349045Z" } } }