{ "data": { "a": { "slug": "gpusmarket", "name": "GPUsMarket", "vendor": "Tyga.Cloud Ltd", "vendorUrl": "https://gpusmarket.com", "kind": "http-api", "category": "gpu-compute", "summary": "GPUsMarket is a peer-to-peer GPU marketplace from Tyga.Cloud Ltd. Agents rent hosts' NVIDIA GPUs and Macs, or on-demand cloud GPUs, as Ollama and OpenAI-compatible endpoints billed per second, through a REST API, CLI and MCP server.", "url": "https://www.anchorterminal.com/tools/gpusmarket", "markdownUrl": "https://www.anchorterminal.com/tools/gpusmarket.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/gpusmarket.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/gpusmarket.json", "dns": "gpusmarket.grade.anchorterminal.com", "repo": "https://github.com/jyswee/gpusmarket", "license": "Proprietary. The gpusmarket CLI and gpusmarket-host packages ship under Tyga.Cloud Ltd licences that allow use only with the platform, as obfuscated JavaScript", "transports": [ "stdio", "sse" ], "remoteUrl": "https://gpusmarket.com/api/v1", "packages": [ { "registry": "npm", "name": "gpusmarket" }, { "registry": "npm", "name": "gpusmarket-host" } ], "auth": "api-key", "authNotes": "An account key (`gpu_` prefix) from `POST /api/signup` with an email, or from Settings in the web app, covers searching, renting and stopping. Each rental returns its own token for the Ollama or OpenAI-compatible proxy on that rental, and GPU pools take `pool_` keys. No scopes, expiry or rotation documented. Renting places a hold on a saved card.", "pricing": "usage", "pricingNotes": "Per second at each listing's hourly price, from $0.08 an hour (RTX 3060) on the home page, with a $0.50 minimum per rental. Hosts can also bill per request and per token; image, audio and video listings bill per unit. A $10 to $100 card hold is placed per rental. No subscription or prepaid credit; fees are non-refundable.", "priceSummary": "$0.50 / tx", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in llms.txt, the docs or the terms (checked 2026-11-06). Payment is a Stripe card hold settled when a rental stops.", "endpoints": [] }, "toolCount": 32, "popularity": { "githubStars": 1, "npmWeekly": 79, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://gpusmarket.com/docs", "llmsTxt": "https://gpusmarket.com/llms.txt", "registryName": "io.github.jyswee/gpusmarket", "capabilities": [ "compute.gpu", "compute.endpoints", "compute.containers" ], "tags": [ "hosted", "usage", "per-second", "mcp", "mcp-registry", "llms-txt", "cli", "ollama", "openai-compatible", "peer-to-peer", "card-hold", "uk" ], "lastRelease": "2026-10-16", "graded": true, "anchor": { "graded": true, "score": 39.6, "grade": "E", "agentReady": false, "rank": 1318, "ranked": true, "rankOf": 1486, "categoryRank": 21, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 50, "maintenance": 69, "payments": 30, "reliability": 33, "schema": 52, "security": 30, "transparency": 50 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "low", "date": "2026-11-06" }, "negative": -3, "negativeNotes": [ "2026-11-06. The docs' Open Source section lists gpusmarket-host, the package hosts install with `npx gpusmarket-host`, under the MIT licence, while version 1.6.0 on npm (8 October 2026) declares `SEE LICENSE IN LICENSE`, ships a proprietary Tyga.Cloud Ltd licence and is built with javascript-obfuscator. A misleading licence claim on the vendor's own page, 3 points. https://gpusmarket.com/docs, https://registry.npmjs.org/gpusmarket-host" ], "verdict": "An agent can sign up with one API call, search priced GPUs without a key, rent a peer or cloud GPU as an Ollama or OpenAI-compatible endpoint and stop it, billed per second. Prompts on peer rentals pass through individuals' machines, the CLI is obfuscated, and there is no status page, security policy or free tier.", "bestFor": "Cheap, short GPU rentals for open models behind an Ollama or OpenAI endpoint, where data sensitivity is low.", "strengths": [ "Sign-up and key issue in one API call, and search and GPU prices need no key", "Per-second billing from $0.08 an hour, with a $0.50 minimum per rental", "Every rental speaks both the Ollama and OpenAI formats, and pools spread load across rentals", "llms.txt is a complete API reference with rate limits and error codes", "Listed in the official MCP registry under a verified GitHub namespace" ], "weaknesses": [ "Peer rentals send prompts and outputs through individuals' hardware, with only the terms as protection", "The CLI and host packages are obfuscated, and the docs call the host package MIT while it is proprietary", "No status page, SLA, security.txt or disclosure policy", "Account keys have no scopes or expiry, and renting needs a saved card", "No OpenAPI document or public changelog" ], "agentNotes": [ "Don't send confidential data to peer rentals, since requests pass through the host's machine", "Stop every rental with `POST /api/v1/marketplace/rentals/{id}/stop`, because billing runs per second until it stops", "Use the per-rental token for inference and keep the `gpu_` account key out of inference clients", "Treat 502 as host offline and rent another listing rather than retrying the same one", "Ask the person to add a card before renting, since each rental places a hold on it" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "E", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 39.6 } ], "editorialScores": { "ergonomics": 50, "maintenance": 69, "payments": 30, "reliability": 33, "schema": 52, "security": 30, "transparency": 36 }, "provenanceScore": 63, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install -g gpusmarket", "http": "curl \"https://gpusmarket.com/api/v1/marketplace/search?gpu=RTX%204090\u0026maxPrice=1.00\"", "claudeCode": "claude mcp add gpusmarket -- gpusmarket mcp-serve" }, "letme": { "capability": "https://letme.dev/compute.gpu", "tool": "https://letme.dev/gpusmarket" }, "area": "models", "unitPrices": [ { "item": "RTX 3060, lowest listed", "unit": "gpu-hour", "usd": 0.08, "note": "home page, billed per second" }, { "item": "RTX 4090", "unit": "gpu-hour", "usd": 0.35, "note": "home page example; the docs' cloud deploy example shows $0.51" }, { "item": "Minimum per rental", "unit": "tx", "usd": 0.5, "note": "charged when metered usage is lower" } ], "provenance": { "legalEntity": "Tyga.Cloud Ltd", "domain": "gpusmarket.com", "domainRegistered": "2025-03-24", "endpointOnVendorDomain": true, "terms": "https://gpusmarket.com/terms", "privacy": "https://gpusmarket.com/privacy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The terms (v2.0, June 2026) and privacy policy (March 2026) name Tyga.Cloud Ltd, company 14643275, registered in England and Wales, as operator and data controller.", "Companies House lists Kay Sujittree Somsuk and Joseph Wee as directors and secretaries of Tyga.Cloud Ltd.", "gpusmarket.com/robots.txt allows public pages and disallows /api/, /host/, /renter/, /settings/ and /webhooks/. The terms contain no clause on automated access.", "RDAP gives gpusmarket.com a registration date of 24 March 2025.", "/.well-known/security.txt returns 404. No status page or changelog page found.", "The terms promise 30 days' notice of material changes and give no availability guarantee." ], "score": 63 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/gpusmarket.json", "live": { "slug": "gpusmarket", "probe": { "target": "https://gpusmarket.com/api/v1", "method": "get", "lastAt": "2026-11-07T18:20:28.490737341Z", "lastOk": true, "lastStatus": 404, "lastMs": 192, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 157, "p95ms24h": 245, "samples24h": 200, "samples30d": 200, "days": [ { "date": "2026-11-06", "probes": 13, "ok": 13 }, { "date": "2026-11-07", "probes": 187, "ok": 187 } ] }, "versions": [ { "registry": "mcp-registry", "name": "io.github.jyswee/gpusmarket", "version": "2.4.16", "seenAt": "2026-11-07T18:16:28.95801333Z" }, { "registry": "npm", "name": "gpusmarket", "version": "2.5.1", "seenAt": "2026-11-06T23:30:34.572543077Z" }, { "registry": "npm", "name": "gpusmarket-host", "version": "1.6.0", "seenAt": "2026-11-06T23:30:35.110678472Z" } ], "githubStars": 1, "npmWeekly": 79, "securityTxt": { "url": "https://gpusmarket.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:37.738841214Z" }, "llmsTxt": { "url": "https://gpusmarket.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:37.836383448Z" }, "pages": [ { "url": "https://gpusmarket.com/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:10:35.479026672Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "dcad60427e70" }, { "url": "https://gpusmarket.com/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:10:37.570489363Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "7d54e59bcd38" } ], "updatedAt": "2026-11-07T18:20:28.490737341Z" } }, "answer": "Vast.ai scores 56.4 (C) on agent readiness against GPUsMarket's 39.6 (E), and leads in 6 of 7 scored categories. GPUsMarket leads on payments \u0026 pricing.", "b": { "slug": "vast-ai", "name": "Vast.ai", "vendor": "Vast.ai Inc.", "vendorUrl": "https://vast.ai", "kind": "http-api", "category": "gpu-compute", "summary": "Vast.ai is a marketplace for renting GPUs by the second from independent hosts and data centres, as Docker instances, virtual machines or autoscaling serverless endpoints. Agents use the `vastai` CLI, a Python SDK or a REST API.", "url": "https://www.anchorterminal.com/tools/vast-ai", "markdownUrl": "https://www.anchorterminal.com/tools/vast-ai.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/vast-ai.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/vast-ai.json", "dns": "vast-ai.grade.anchorterminal.com", "repo": "https://github.com/vast-ai/vast-cli", "license": "Proprietary service under Vast.ai's Terms of Use Agreement. The `vastai` CLI and Python SDK on GitHub are MIT", "transports": [ "http" ], "remoteUrl": "https://console.vast.ai/api/v0", "packages": [ { "registry": "pypi", "name": "vastai" } ], "auth": "api-key", "authNotes": "API key from the console's Keys page, sent as `Authorization: Bearer` to https://console.vast.ai/api/v0, or stored once with `vastai set api-key`. Access is self-serve after a browser signup and email verification. A key has full account access by default. Scoped keys take any of 11 permission categories (`instance_read`, `instance_write`, `billing_write` and others) and constraints that narrow an endpoint to resource IDs. Keys are shown once, and can be reset or deleted with immediate effect. The rate-limit page names an `api_key` query parameter as part of a caller's identity, while the authentication page documents only the header.", "pricing": "usage", "pricingNotes": "Prepaid credit with a $5 minimum deposit and no free tier or trial found. Each host sets its own rate per listing, so there is no fixed price list. Live rates are public at vast.ai/pricing and through `vastai search offers`. GPU time bills per second while an instance runs, storage per second while it exists (stopped included) and bandwidth per byte. Interruptible rentals are bid-priced and reserved rentals are prepaid for 1, 3 or 6 months. Serverless adds no fee on top of instance rates. Spent credit is not refunded (https://docs.vast.ai/guides/reference/billing.md, https://docs.vast.ai/guides/instances/pricing.md, checked 2026-10-08).", "priceSummary": "Pay per use", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs index, llms.txt, the agent pricing page or the OpenAPI file (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 223, "npmWeekly": null, "pypiWeekly": 32699, "asOf": "2026-10-08" }, "docsUrl": "https://docs.vast.ai", "llmsTxt": "https://docs.vast.ai/llms.txt", "openapi": "https://docs.vast.ai/api-reference/openapi.json", "capabilities": [ "compute.gpu", "compute.containers", "compute.serverless", "compute.endpoints" ], "tags": [ "hosted", "marketplace", "usage-priced", "prepaid", "api-key", "scoped-keys", "openapi", "llms-txt", "python", "cli", "agent-skill", "serverless", "spot", "status-page", "soc2" ], "lastRelease": "2026-10-30", "graded": true, "anchor": { "graded": true, "score": 56.4, "grade": "C", "agentReady": false, "rank": 824, "ranked": true, "rankOf": 1486, "categoryRank": 11, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 57, "maintenance": 81, "payments": 20, "reliability": 50, "schema": 78, "security": 70, "transparency": 64 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-02" }, "negative": -3, "negativeNotes": [ "2026-10-30, -3. A published behaviour changed for existing callers with notice only on release day. vastai v1.10.0, a minor release with no changelog, makes `vastai search offers` request amd64 and arm64 machines by default, where the help text's default query had no architecture and the API documents amd64 as the default, so unchanged searches now return arm64 hosts. Read as people-data-labs' 20 October field change was. https://github.com/vast-ai/vast-cli/commit/a357b331fdebc4c137dd11be853e1290bdc27c9a" ], "verdict": "API keys can be limited by permission category and by resource ID, the REST API has a public OpenAPI 3.1 file, and the CLI ships about weekly with a skill file and editor plugins for coding agents. Machines belong to independent hosts, prices move with the market, rate-limit thresholds are unpublished, and there is no SLA or free tier.", "bestFor": "Cost-sensitive training, batch work and self-managed inference where the agent can search listings, set a price cap and tolerate host variance or interruption.", "strengths": [ "API keys take 11 permission categories and per-endpoint constraints on resource IDs, and can be reset or deleted at once", "Public OpenAPI 3.1 file with 89 operations, llms.txt and Markdown docs pages", "MIT CLI and Python SDK, v1.10.0 on 30 October 2026, with 13 tagged releases since 4 August 2026", "Per-second billing, with serverless workers charged at the same rates as rented instances", "Vulnerability disclosure policy with safe harbour and triage within 5 business days, and an account audit log from the CLI" ], "weaknesses": [ "No SLA. The terms say availability is not guaranteed and the service can change without notice", "Rate-limit thresholds are unpublished and 429 responses carry no `Retry-After` header", "No free tier. Credit is prepaid with a $5 minimum deposit after a browser signup and email verification", "Hosts are independent. The security FAQ says individual hosts may have less formal security than Secure Cloud data centres", "The terms of 1 September 2026 prohibit scripts and automated access to the services without a separate written agreement, which conflicts with the public API" ], "agentNotes": [ "Create a scoped key with `vastai create api-key --permissions` for the agent. A default key has full account access, billing and key management included", "Pass `--raw` on every CLI command for JSON output, and `-y` on `vastai destroy instance`, which otherwise waits for a confirmation prompt", "Register an SSH key with `vastai create ssh-key` before creating an instance, or the host is unreachable", "Destroy instances when finished. A stopped instance still bills storage, and a zero balance without a saved card leads to deletion", "Back off on HTTP 429 yourself when calling REST directly. The CLI retries 429, honouring a Retry-After header when one comes back, and stops on a daily search quota", "Filter searches with `verified=true` or the Secure Cloud option for sensitive data, set a `dph_total` price cap, and add `cpu_arch=amd64` for amd64-only images, since v1.10.0 searches arm64 machines too" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 56.4 } ], "editorialScores": { "ergonomics": 57, "maintenance": 81, "payments": 20, "reliability": 50, "schema": 78, "security": 70, "transparency": 45 }, "provenanceScore": 82, "checked": { "categories": { "ergonomics": "2026-11-02", "maintenance": "2026-11-02", "payments": "2026-11-02", "reliability": "2026-11-02", "schema": "2026-11-02", "security": "2026-11-02", "transparency": "2026-11-02" }, "last": "2026-11-02", "lastMoved": "2026-11-02", "oldest": "2026-11-02", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install vastai", "http": "curl -s -H \"Authorization: Bearer $VAST_API_KEY\" \\\n \"https://console.vast.ai/api/v0/users/current/\"", "claudeCode": "/plugin marketplace add vast-ai/vast-claude-plugin\n/plugin install vastai" }, "letme": { "capability": "https://letme.dev/compute.gpu", "tool": "https://letme.dev/vast-ai" }, "area": "models", "provenance": { "legalEntity": "Vast.ai Inc.", "domain": "vast.ai", "domainRegistered": "2017-12-16", "endpointOnVendorDomain": true, "terms": "https://vast.ai/terms", "privacy": "https://vast.ai/privacy", "statusPage": "https://status.vast.ai", "changelog": "https://github.com/vast-ai/vast-cli/releases", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The Terms of Use Agreement, version date 1 September 2026, names Vast.ai Inc. and its affiliates, covers the website and the rental service, and is governed by California law with JAMS arbitration in the Los Angeles area.", "The privacy policy, version date 18 June 2025, names Vast.ai Inc. and a Privacy Officer at contact@vast.ai. It is written for users of the website and contains an unfilled `[INSERT HYPERLINK]` placeholder.", "A Data Processing Agreement at vast.ai/data-processing-agreement forms part of the terms, with standard contractual clauses and five named sub-processors (Stripe, Google, Meta, Twitter, Microsoft).", "The REST API answers at console.vast.ai and serverless routing at run.vast.ai, both on the vendor's domain. Rented machines belong to independent hosts.", "vast.ai/.well-known/security.txt returns 404. A vulnerability disclosure policy dated 23 July 2025 at vast.ai/vulnerability-disclosure-policy sends reports to security@vast.ai.", "No API changelog was found in the docs index. The changelog link is the CLI and SDK repository's release list, which has no CHANGELOG file.", "RDAP for vast.ai gives a registration date of 2017-12-16." ], "score": 82 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/vast-ai.json", "live": { "slug": "vast-ai", "probe": { "target": "https://console.vast.ai/api/v0", "method": "get", "lastAt": "2026-11-07T18:21:03.28530026Z", "lastOk": true, "lastStatus": 404, "lastMs": 493, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 372, "p95ms24h": 487, "samples24h": 239, "samples30d": 7440, "days": [ { "date": "2026-10-08", "probes": 70, "ok": 70 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 250, "ok": 250 }, { "date": "2026-10-29", "probes": 249, "ok": 249 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 187, "ok": 187 } ] }, "vendorStatus": { "page": "https://status.vast.ai", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-11-07T04:48:55.408936389Z" }, "versions": [ { "registry": "github", "name": "vast-ai/vast-cli", "version": "v1.11.0", "released": "2026-11-04", "seenAt": "2026-11-07T00:14:43.765870402Z" }, { "registry": "pypi", "name": "vastai", "version": "1.11.0", "released": "2026-11-04", "seenAt": "2026-11-07T00:14:43.584449824Z" } ], "githubStars": 230, "pypiWeekly": 32921, "securityTxt": { "url": "https://vast.ai/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:02:03.166474584Z" }, "llmsTxt": { "url": "https://docs.vast.ai/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:34:15.796619863Z" }, "domain": { "domain": "vast.ai", "registered": "2017-12-16", "source": "https://rdap.identitydigital.services/rdap/domain/vast.ai", "checkedAt": "2026-11-01T14:16:46.621379816Z" }, "pages": [ { "url": "https://docs.vast.ai/guides/instances/pricing.md", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T14:08:35.441877987Z", "changedAt": "2026-10-24T02:16:55.781341869Z", "fingerprint": "93ae7e3a1e2d" }, { "url": "https://vast.ai/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:23:10.681277893Z", "changedAt": "2026-11-05T13:07:32.192530933Z", "fingerprint": "e5d8e448f73f" }, { "url": "https://vast.ai/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:23:12.932242476Z", "changedAt": "2026-11-05T13:07:34.915328452Z", "fingerprint": "bbee067d5cd1" } ], "github": { "repo": "vast-ai/vast-cli", "checkedAt": "2026-11-02T09:35:11.919319198Z", "stars": 227, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-30T20:55:21Z", "openIssues": 19, "openPRs": 41, "issuesOpened90d": 3, "issuesClosed90d": 5, "prsMerged90d": 29, "ci": { "branch": "master", "runs": 2, "success": 0, "failure": 2, "other": 0, "latest": "failure", "latestAt": "2026-07-09T19:43:00Z" }, "replies": { "sampled": 25, "unanswered": 11, "medianDays": 4.2 } }, "updatedAt": "2026-11-07T18:21:03.28530026Z" } }, "edges": [ { "by": 40, "category": "security", "leads": "vast-ai", "name": "Security \u0026 auth", "reasons": { "a": "Account keys are all-powerful within the account, with no scopes, expiry or rotation documented, but each rental gets its own proxy token (15). The per-rental token limits inference access to one rental; no read-only key or confirmation for destructive calls (6). Peer rentals send prompts and outputs through individuals' machines, protected only by the terms, with no prompt-injection or untrusted-host guidance (2). Per-rental usage stats of requests, tokens and cost (5). No security.txt, disclosure policy, bug bounty or certification; a DPO address for breaches. The CLI and host packages are obfuscated, so they can't be audited (2). 15+6+2+5+2 = 30.", "b": "Keys can be scoped to 11 permission categories and narrowed by constraints to resource IDs, are shown once, and can be reset or deleted with immediate effect (30). The rate-limit page, re-read on 2 November, names an `api_key` query parameter as part of a caller's identity while the authentication page shows only the Bearer header. We took 5 of the checklist's 10 points for a key that can travel in a URL, a judgement call because the option is acknowledged but not taught (25 of 30). Read-only categories and per-instance constraints exist. The CLI confirms a destroy, and Vast.ai's auth.md asks agents to confirm paid or destructive actions, but nothing on the server enforces approval and default keys have full access (15 of 20). The service runs the customer's own containers and returns their logs (10). `vastai show audit-logs` returns account action history. Its retention and fields were not reviewed (10 of 15). A vulnerability disclosure policy dated 23 July 2025, re-read on 2 November, has safe harbour, triage within 5 business days and security@vast.ai. Its bounty is discretionary, which this checklist doesn't count. The compliance page states SOC 2 Type 2 and makes a SOC 3 report available on request. There is no security.txt (404 on 2 November) and no advisories for `vastai` in OSV, and the security FAQ says individual hosts may have less formal security. A reporting route and SOC 2 with no counted bounty take 10, as Sinch's messaging listing (10 of 20). 25 + 15 + 10 + 10 + 10 = 70." }, "scores": { "a": 30, "b": 70 } }, { "by": 26, "category": "schema", "leads": "vast-ai", "name": "Schema \u0026 documentation", "reasons": { "a": "API and MCP reading. No OpenAPI or other machine-readable contract was found, and the MCP tool schemas couldn't be read because the published package is obfuscated; the repository's history says 2.4.7 added output schemas to all 32 tools, which is the vendor's claim (8). llms.txt as a complete API reference (10). llms.txt says when to use peer or cloud rentals, the proxy or the relay, and which workload each listing type serves (12). Parameters are listed by name without types, enums or required markers, apart from instance and workload types (6). curl examples for each flow, an error code list and a sample deploy response (11). npm versions, but no public changelog (5). 8+10+12+6+11+5 = 52.", "b": "Public OpenAPI 3.1 file with 66 paths and 89 operations, re-read on 2 November, plus the YAML source in the CLI repository (25). llms.txt on both vast.ai and docs.vast.ai, with every docs page served as Markdown (10). Operation descriptions give the matching CLI command and rules such as template precedence, and the SKILL.md files list quirks and common errors, though the API introduction steers most users to the CLI (15 of 20). Request bodies are typed, with 37 enums and required fields marked. Search filters are operator objects and several routes are not REST-shaped, such as PUT /asks/{id}/ to create an instance (10 of 15). Examples on most operations and 400, 401 and 429 responses on most, but the docs say the error body varies by endpoint (11 of 15). Routes are versioned v0 and v1 and the CLI has tagged releases. No API changelog was found in the docs index (7 of 15). 25 + 10 + 15 + 10 + 11 + 7 = 78." }, "scores": { "a": 52, "b": 78 } }, { "by": 17, "category": "reliability", "leads": "vast-ai", "name": "Reliability", "reasons": { "a": "Read with the hosted lines. No status page found; listing health is shown per listing only (0). No incident history to read (5). Rate limits published, 60 requests a minute per rental and 10 sign-ups an hour per IP (15). 429 is documented, but no Retry-After, backoff or idempotency guidance (3). The terms give no availability guarantee and put host outages on hosts (0). No beta label on the API (10). 0+5+15+3+0+10 = 33.", "b": "Graded as a hosted service. status.vast.ai is Vast.ai's own page with three components (vast, console, serverless) and 30-day bars built from roughly hourly checks, with no incident write-ups (20). The page draws its bars by script from check-log files on the same host. The 8 October count came from those files, the page's own data, which this run doesn't read (as the Docusign and SeaTable listings read their status pages' data feeds), so it's struck, and the window from 4 August to 2 November is unread (5). The page covers Vast.ai's control plane and not the independent hosts' machines. Rate limits are described as a minimum interval per endpoint and identity, re-read on 2 November, but thresholds are unpublished apart from an `x-rateLimit` value on 2 of 89 operations in the OpenAPI file (5 of 15). 429 is documented with backoff advice and the CLI retries it, but the docs say the API sets no `Retry-After` header, and there is no idempotency key for instance creation (10 of 15). No SLA found, and the terms say availability is not guaranteed (0). Instances, serverless and the REST API carry no beta label (10). 20 + 5 + 5 + 10 + 0 + 10 = 50." }, "scores": { "a": 33, "b": 50 } }, { "by": 14, "category": "transparency", "leads": "vast-ai", "name": "Transparency \u0026 trust", "reasons": { "a": "Closed, under Tyga.Cloud licences that are clear on use, but the docs call gpusmarket-host MIT open source while the package says otherwise (10). The privacy policy gives retention periods and names Stripe and MongoDB, while renter data on peer hosts falls outside its controls, which the terms disclaim (15). The terms promise 30 days' notice of material changes, with no deprecation policy or dated notices found (5). Processors partly named, with transfers under SCCs, and no host locations shown in the docs read (6). 10+15+5+6 = 36.", "b": "A closed service with an MIT CLI and SDK. The Terms of Use Agreement of 1 September 2026, re-read on 2 November, prohibits scripts and automated access to the services without a separate written agreement, which conflicts with the public API and agent tooling (17 of 30). The compliance page says data is destroyed when an instance is deleted, and the DPA allows return or deletion on written notice within 30 days of termination. The privacy policy of 18 June 2025 is written for website users, gives no retention periods, allows targeted advertising and contains an unfilled `[INSERT HYPERLINK]` placeholder (15 of 30). No deprecation policy was found, and the terms allow changes or discontinuation without notice. v0 and v1 routes coexist (3 of 20). The DPA names five sub-processors without locations and gives new ones only on request. Host location is shown per listing and can be filtered (10 of 20). 17 + 15 + 3 + 10 = 45." }, "scores": { "a": 50, "b": 64 } }, { "by": 12, "category": "maintenance", "leads": "vast-ai", "name": "Maintenance \u0026 community", "reasons": { "a": "gpusmarket 2.5.1 on 16 October 2026, 21 days before this check (30). Releases 2.4.18 to 2.5.1 between 17 August and 16 October, and gpusmarket-host 1.5.3 and 1.6.0 (20). Support by chat widget; the repository, which holds only a README, server.json and a licence, has no open issues and one star (5). Published in the official MCP registry under the verified io.github.jyswee namespace, though the newest registry version, 2.4.16, trails npm (12). No dependencies, but an obfuscated build and no public CI (2). 30+20+5+12+2 = 69.", "b": "`vastai` v1.10.0 was tagged on 30 October 2026 by the repository's publish workflow (30). Thirteen tagged releases between 4 August and 2 November 2026, from v1.5.3 (10 August) to v1.10.0 (30 October) (20). Per the 8 October check, not re-read on 2 November (GitHub's API refuses this session), the repository had 54 open issues and pull requests, 22 of the 30 most recently opened without comments. Vast.ai lists 24/7 chat support and Discord, which we did not test (10 of 25). The CLI and Python SDK are current and ship together. The Claude Code, Codex and Cursor plugins were last changed in June 2026 (15). Three CI workflows cover the installer, publishing and SDK tests. An open issue of 6 September 2026 reports hard-pinned dependencies, and we did not check whether CI passes (6 of 10). 30 + 20 + 10 + 15 + 6 = 81." }, "scores": { "a": 69, "b": 81 } }, { "by": 10, "category": "payments", "leads": "gpusmarket", "name": "Payments \u0026 pricing", "reasons": { "a": "No x402, MPP or L402 (0). Hourly prices for every listing and GPU type are public through the unauthenticated search and types endpoints, with a $0.50 minimum (20). No free tier; a card hold is placed on every rental (0). Sign-up and key issue are one API call with no browser, but renting needs a saved, verified card, which the docs don't show being added without a person (10). 0+20+0+10 = 30.", "b": "No x402, MPP or L402 found (0). Live per-GPU rates are public without a login at vast.ai/pricing, and billing units (per second for GPU and storage, per byte for bandwidth) are documented. Rates are set per listing by hosts, so there is no fixed list (20). No free tier or trial found. Credit is prepaid with a $5 minimum deposit (0). Signup is a browser flow with email verification. Further keys can be created through the API once an account and key exist (0). 0 + 20 + 0 + 0 = 20." }, "scores": { "a": 30, "b": 20 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Tyga.Cloud Ltd", "b": "Vast.ai Inc.", "name": "Vendor" }, { "a": "https://gpusmarket.com/api/v1", "b": "https://console.vast.ai/api/v0", "name": "Hosted endpoint" }, { "a": "stdio, SSE (legacy)", "b": "HTTP", "name": "Transports" }, { "a": "API key", "b": "API key", "name": "Auth" }, { "a": "Pay per use", "b": "Pay per use", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary. The gpusmarket CLI and gpusmarket-host packages ship under Tyga.Cloud Ltd licences that allow use only with the platform, as obfuscated JavaScript", "b": "Proprietary service under Vast.ai's Terms of Use Agreement. The `vastai` CLI and Python SDK on GitHub are MIT", "name": "Licence" }, { "a": "32", "b": "none", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "io.github.jyswee/gpusmarket", "b": "not listed", "name": "MCP registry" }, { "a": "2026-10-16", "b": "2026-10-30", "name": "Last release" }, { "a": "2026-06-01", "b": "2026-09-01", "name": "Terms last updated" }, { "a": "2026-03-01", "b": "2025-06-18", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "yes", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "1 stars, 79 npm/wk", "b": "223 stars, 33k PyPI/wk", "name": "Popularity" }, { "a": "none", "b": "3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Vast.ai scores 56.4 (C) on agent readiness against GPUsMarket's 39.6 (E), and leads in 6 of 7 scored categories. GPUsMarket leads on payments \u0026 pricing.", "question": "Which is better for AI agents, GPUsMarket or Vast.ai?" }, { "answer": "Both need an API key.", "question": "Do GPUsMarket and Vast.ai need an API key?" }, { "answer": "Yes. GPUsMarket has a hosted endpoint at https://gpusmarket.com/api/v1 and Vast.ai at https://console.vast.ai/api/v0.", "question": "Can an agent call GPUsMarket and Vast.ai without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Payments \u0026 pricing, 30 against 20" ], "also": [ "Runs on your own machine" ], "goodFor": "Cheap, short GPU rentals for open models behind an Ollama or OpenAI endpoint, where data sensitivity is low.", "slug": "gpusmarket", "watchFor": "Peer rentals send prompts and outputs through individuals' hardware, with only the terms as protection" }, { "aheadOn": [ "Reliability, 50 against 33", "Schema \u0026 documentation, 78 against 52", "Agent ergonomics, 57 against 50", "Security \u0026 auth, 70 against 30", "Maintenance \u0026 community, 81 against 69", "Transparency \u0026 trust, 64 against 50" ], "also": null, "goodFor": "Cost-sensitive training, batch work and self-managed inference where the agent can search listings, set a price cap and tolerate host variance or interruption.", "slug": "vast-ai", "watchFor": "No SLA. The terms say availability is not guaranteed and the service can change without notice" } ], "history": { "gpusmarket": null, "vast-ai": [ { "causes": [ "correction", "event" ], "date": "2026-11-02", "delta": -6.3, "from": 62.7, "fromGrade": "B", "to": 56.4, "toGrade": "C" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.1, "from": 62.6, "fromGrade": "B", "to": 62.7, "toGrade": "B" } ] }, "job": { "capability": "compute.gpu", "name": "GPU compute" }, "others": [ { "json": "https://www.anchorterminal.com/compare/baseten-vs-gpusmarket.json", "title": "Baseten vs GPUsMarket", "url": "https://www.anchorterminal.com/compare/baseten-vs-gpusmarket" }, { "json": "https://www.anchorterminal.com/compare/baseten-vs-vast-ai.json", "title": "Baseten vs Vast.ai", "url": "https://www.anchorterminal.com/compare/baseten-vs-vast-ai" }, { "json": "https://www.anchorterminal.com/compare/beam-vs-gpusmarket.json", "title": "Beam vs GPUsMarket", "url": "https://www.anchorterminal.com/compare/beam-vs-gpusmarket" }, { "json": "https://www.anchorterminal.com/compare/beam-vs-vast-ai.json", "title": "Beam vs Vast.ai", "url": "https://www.anchorterminal.com/compare/beam-vs-vast-ai" }, { "json": "https://www.anchorterminal.com/compare/cerebrium-vs-gpusmarket.json", "title": "Cerebrium vs GPUsMarket", "url": "https://www.anchorterminal.com/compare/cerebrium-vs-gpusmarket" }, { "json": "https://www.anchorterminal.com/compare/cerebrium-vs-vast-ai.json", "title": "Cerebrium vs Vast.ai", "url": "https://www.anchorterminal.com/compare/cerebrium-vs-vast-ai" }, { "json": "https://www.anchorterminal.com/compare/cloud-run-gpus-vs-gpusmarket.json", "title": "Cloud Run GPUs vs GPUsMarket", "url": "https://www.anchorterminal.com/compare/cloud-run-gpus-vs-gpusmarket" }, { "json": "https://www.anchorterminal.com/compare/coreweave-vs-gpusmarket.json", "title": "CoreWeave vs GPUsMarket", "url": "https://www.anchorterminal.com/compare/coreweave-vs-gpusmarket" }, { "json": "https://www.anchorterminal.com/compare/coreweave-vs-vast-ai.json", "title": "CoreWeave vs Vast.ai", "url": "https://www.anchorterminal.com/compare/coreweave-vs-vast-ai" }, { "json": "https://www.anchorterminal.com/compare/crusoe-cloud-vs-gpusmarket.json", "title": "Crusoe Cloud vs GPUsMarket", "url": "https://www.anchorterminal.com/compare/crusoe-cloud-vs-gpusmarket" }, { "json": "https://www.anchorterminal.com/compare/crusoe-cloud-vs-vast-ai.json", "title": "Crusoe Cloud vs Vast.ai", "url": "https://www.anchorterminal.com/compare/crusoe-cloud-vs-vast-ai" }, { "json": "https://www.anchorterminal.com/compare/gpusmarket-vs-hugging-face-inference-endpoints.json", "title": "GPUsMarket vs Hugging Face Inference Endpoints", "url": "https://www.anchorterminal.com/compare/gpusmarket-vs-hugging-face-inference-endpoints" }, { "json": "https://www.anchorterminal.com/compare/gpusmarket-vs-hyperbolic.json", "title": "GPUsMarket vs Hyperbolic", "url": "https://www.anchorterminal.com/compare/gpusmarket-vs-hyperbolic" }, { "json": "https://www.anchorterminal.com/compare/gpusmarket-vs-koyeb.json", "title": "GPUsMarket vs Koyeb", "url": "https://www.anchorterminal.com/compare/gpusmarket-vs-koyeb" }, { "json": "https://www.anchorterminal.com/compare/gpusmarket-vs-lambda.json", "title": "GPUsMarket vs Lambda Cloud", "url": "https://www.anchorterminal.com/compare/gpusmarket-vs-lambda" }, { "json": "https://www.anchorterminal.com/compare/gpusmarket-vs-massed-compute.json", "title": "GPUsMarket vs Massed Compute", "url": "https://www.anchorterminal.com/compare/gpusmarket-vs-massed-compute" }, { "json": "https://www.anchorterminal.com/compare/gpusmarket-vs-modal.json", "title": "GPUsMarket vs Modal", "url": "https://www.anchorterminal.com/compare/gpusmarket-vs-modal" }, { "json": "https://www.anchorterminal.com/compare/gpusmarket-vs-nebius-ai-cloud.json", "title": "GPUsMarket vs Nebius AI Cloud", "url": "https://www.anchorterminal.com/compare/gpusmarket-vs-nebius-ai-cloud" }, { "json": "https://www.anchorterminal.com/compare/gpusmarket-vs-northflank.json", "title": "GPUsMarket vs Northflank", "url": "https://www.anchorterminal.com/compare/gpusmarket-vs-northflank" }, { "json": "https://www.anchorterminal.com/compare/gpusmarket-vs-replicate-deploy.json", "title": "GPUsMarket vs Replicate Deployments", "url": "https://www.anchorterminal.com/compare/gpusmarket-vs-replicate-deploy" }, { "json": "https://www.anchorterminal.com/compare/gpusmarket-vs-runpod.json", "title": "GPUsMarket vs Runpod", "url": "https://www.anchorterminal.com/compare/gpusmarket-vs-runpod" }, { "json": "https://www.anchorterminal.com/compare/gpusmarket-vs-thunder-compute.json", "title": "GPUsMarket vs Thunder Compute", "url": "https://www.anchorterminal.com/compare/gpusmarket-vs-thunder-compute" }, { "json": "https://www.anchorterminal.com/compare/gpusmarket-vs-together-gpu-clusters.json", "title": "GPUsMarket vs Together GPU Clusters", "url": "https://www.anchorterminal.com/compare/gpusmarket-vs-together-gpu-clusters" }, { "json": "https://www.anchorterminal.com/compare/gpusmarket-vs-verda.json", "title": "GPUsMarket vs Verda", "url": "https://www.anchorterminal.com/compare/gpusmarket-vs-verda" }, { "json": "https://www.anchorterminal.com/compare/hugging-face-inference-endpoints-vs-vast-ai.json", "title": "Hugging Face Inference Endpoints vs Vast.ai", "url": "https://www.anchorterminal.com/compare/hugging-face-inference-endpoints-vs-vast-ai" }, { "json": "https://www.anchorterminal.com/compare/hyperbolic-vs-vast-ai.json", "title": "Hyperbolic vs Vast.ai", "url": "https://www.anchorterminal.com/compare/hyperbolic-vs-vast-ai" }, { "json": "https://www.anchorterminal.com/compare/koyeb-vs-vast-ai.json", "title": "Koyeb vs Vast.ai", "url": "https://www.anchorterminal.com/compare/koyeb-vs-vast-ai" }, { "json": "https://www.anchorterminal.com/compare/lambda-vs-vast-ai.json", "title": "Lambda Cloud vs Vast.ai", "url": "https://www.anchorterminal.com/compare/lambda-vs-vast-ai" }, { "json": "https://www.anchorterminal.com/compare/massed-compute-vs-vast-ai.json", "title": "Massed Compute vs Vast.ai", "url": "https://www.anchorterminal.com/compare/massed-compute-vs-vast-ai" }, { "json": "https://www.anchorterminal.com/compare/modal-vs-vast-ai.json", "title": "Modal vs Vast.ai", "url": "https://www.anchorterminal.com/compare/modal-vs-vast-ai" }, { "json": "https://www.anchorterminal.com/compare/nebius-ai-cloud-vs-vast-ai.json", "title": "Nebius AI Cloud vs Vast.ai", "url": "https://www.anchorterminal.com/compare/nebius-ai-cloud-vs-vast-ai" }, { "json": "https://www.anchorterminal.com/compare/northflank-vs-vast-ai.json", "title": "Northflank vs Vast.ai", "url": "https://www.anchorterminal.com/compare/northflank-vs-vast-ai" }, { "json": "https://www.anchorterminal.com/compare/replicate-deploy-vs-vast-ai.json", "title": "Replicate Deployments vs Vast.ai", "url": "https://www.anchorterminal.com/compare/replicate-deploy-vs-vast-ai" }, { "json": "https://www.anchorterminal.com/compare/runpod-vs-vast-ai.json", "title": "Runpod vs Vast.ai", "url": "https://www.anchorterminal.com/compare/runpod-vs-vast-ai" }, { "json": "https://www.anchorterminal.com/compare/thunder-compute-vs-vast-ai.json", "title": "Thunder Compute vs Vast.ai", "url": "https://www.anchorterminal.com/compare/thunder-compute-vs-vast-ai" }, { "json": "https://www.anchorterminal.com/compare/together-gpu-clusters-vs-vast-ai.json", "title": "Together GPU Clusters vs Vast.ai", "url": "https://www.anchorterminal.com/compare/together-gpu-clusters-vs-vast-ai" }, { "json": "https://www.anchorterminal.com/compare/vast-ai-vs-verda.json", "title": "Vast.ai vs Verda", "url": "https://www.anchorterminal.com/compare/vast-ai-vs-verda" }, { "json": "https://www.anchorterminal.com/compare/cloud-run-gpus-vs-vast-ai.json", "title": "Cloud Run GPUs vs Vast.ai", "url": "https://www.anchorterminal.com/compare/cloud-run-gpus-vs-vast-ai" } ], "panel": null, "scores": [ { "by": 17, "edge": "vast-ai", "gpusmarket": 33, "key": "reliability", "name": "Reliability", "vast-ai": 50, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 26, "edge": "vast-ai", "gpusmarket": 52, "key": "schema", "name": "Schema \u0026 documentation", "vast-ai": 78, "weight": 13 }, { "by": 7, "edge": "vast-ai", "gpusmarket": 50, "key": "ergonomics", "name": "Agent ergonomics", "vast-ai": 57, "weight": 13 }, { "by": 40, "edge": "vast-ai", "gpusmarket": 30, "key": "security", "name": "Security \u0026 auth", "vast-ai": 70, "weight": 14 }, { "by": 10, "edge": "gpusmarket", "gpusmarket": 30, "key": "payments", "name": "Payments \u0026 pricing", "vast-ai": 20, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 12, "edge": "vast-ai", "gpusmarket": 69, "key": "maintenance", "name": "Maintenance \u0026 community", "vast-ai": 81, "weight": 7 }, { "by": 14, "edge": "vast-ai", "gpusmarket": 50, "key": "transparency", "name": "Transparency \u0026 trust", "vast-ai": 64, "weight": 7 } ], "summary": "Vast.ai scores 56.4 (C) on agent readiness against GPUsMarket's 39.6 (E), and leads in 6 of 7 scored categories. GPUsMarket leads on payments \u0026 pricing. Both do gpu compute.", "tasks": null, "tutorials": [], "verdicts": { "gpusmarket": "An agent can sign up with one API call, search priced GPUs without a key, rent a peer or cloud GPU as an Ollama or OpenAI-compatible endpoint and stop it, billed per second. Prompts on peer rentals pass through individuals' machines, the CLI is obfuscated, and there is no status page, security policy or free tier.", "vast-ai": "API keys can be limited by permission category and by resource ID, the REST API has a public OpenAPI 3.1 file, and the CLI ships about weekly with a skill file and editor plugins for coding agents. Machines belong to independent hosts, prices move with the market, rate-limit thresholds are unpublished, and there is no SLA or free tier." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/gpusmarket-vs-vast-ai", "json": "https://www.anchorterminal.com/compare/gpusmarket-vs-vast-ai.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/gpusmarket-vs-vast-ai.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/gpusmarket-vs-vast-ai.min.md" }, "markdown": "Vast.ai scores 56.4 (C) on agent readiness against GPUsMarket's 39.6 (E), and leads in 6 of 7 scored categories. GPUsMarket leads on payments \u0026 pricing. Both do gpu compute.\n\n- GPUsMarket: grade E, 39.6/100, rank #1318 of 1486. Markdown https://www.anchorterminal.com/tools/gpusmarket.md · JSON https://www.anchorterminal.com/api/v1/tools/gpusmarket.json\n- Vast.ai: grade C, 56.4/100, rank #824 of 1486. Markdown https://www.anchorterminal.com/tools/vast-ai.md · JSON https://www.anchorterminal.com/api/v1/tools/vast-ai.json\n- Best GPU and serverless compute for AI workloads: https://www.anchorterminal.com/best/gpu-compute/index.md\n- All 231 gpu compute comparisons: https://www.anchorterminal.com/compare/gpu-compute/index.md\n\n## Which one, for what\n\n### GPUsMarket (E)\n\nGood for: Cheap, short GPU rentals for open models behind an Ollama or OpenAI endpoint, where data sensitivity is low.\n\nAhead on:\n- Payments \u0026 pricing, 30 against 20\n\nAlso in its favour:\n- Runs on your own machine\n\nWatch for: Peer rentals send prompts and outputs through individuals' hardware, with only the terms as protection\n\n### Vast.ai (C)\n\nGood for: Cost-sensitive training, batch work and self-managed inference where the agent can search listings, set a price cap and tolerate host variance or interruption.\n\nAhead on:\n- Reliability, 50 against 33\n- Schema \u0026 documentation, 78 against 52\n- Agent ergonomics, 57 against 50\n- Security \u0026 auth, 70 against 30\n- Maintenance \u0026 community, 81 against 69\n- Transparency \u0026 trust, 64 against 50\n\nWatch for: No SLA. The terms say availability is not guaranteed and the service can change without notice\n\n\n## Why the edge\n\n### Security \u0026 auth: Vast.ai +40\n\n- GPUsMarket (30): Account keys are all-powerful within the account, with no scopes, expiry or rotation documented, but each rental gets its own proxy token (15). The per-rental token limits inference access to one rental; no read-only key or confirmation for destructive calls (6). Peer rentals send prompts and outputs through individuals' machines, protected only by the terms, with no prompt-injection or untrusted-host guidance (2). Per-rental usage stats of requests, tokens and cost (5). No security.txt, disclosure policy, bug bounty or certification; a DPO address for breaches. The CLI and host packages are obfuscated, so they can't be audited (2). 15+6+2+5+2 = 30.\n- Vast.ai (70): Keys can be scoped to 11 permission categories and narrowed by constraints to resource IDs, are shown once, and can be reset or deleted with immediate effect (30). The rate-limit page, re-read on 2 November, names an `api_key` query parameter as part of a caller's identity while the authentication page shows only the Bearer header. We took 5 of the checklist's 10 points for a key that can travel in a URL, a judgement call because the option is acknowledged but not taught (25 of 30). Read-only categories and per-instance constraints exist. The CLI confirms a destroy, and Vast.ai's auth.md asks agents to confirm paid or destructive actions, but nothing on the server enforces approval and default keys have full access (15 of 20). The service runs the customer's own containers and returns their logs (10). `vastai show audit-logs` returns account action history. Its retention and fields were not reviewed (10 of 15). A vulnerability disclosure policy dated 23 July 2025, re-read on 2 November, has safe harbour, triage within 5 business days and security@vast.ai. Its bounty is discretionary, which this checklist doesn't count. The compliance page states SOC 2 Type 2 and makes a SOC 3 report available on request. There is no security.txt (404 on 2 November) and no advisories for `vastai` in OSV, and the security FAQ says individual hosts may have less formal security. A reporting route and SOC 2 with no counted bounty take 10, as Sinch's messaging listing (10 of 20). 25 + 15 + 10 + 10 + 10 = 70.\n\n### Schema \u0026 documentation: Vast.ai +26\n\n- GPUsMarket (52): API and MCP reading. No OpenAPI or other machine-readable contract was found, and the MCP tool schemas couldn't be read because the published package is obfuscated; the repository's history says 2.4.7 added output schemas to all 32 tools, which is the vendor's claim (8). llms.txt as a complete API reference (10). llms.txt says when to use peer or cloud rentals, the proxy or the relay, and which workload each listing type serves (12). Parameters are listed by name without types, enums or required markers, apart from instance and workload types (6). curl examples for each flow, an error code list and a sample deploy response (11). npm versions, but no public changelog (5). 8+10+12+6+11+5 = 52.\n- Vast.ai (78): Public OpenAPI 3.1 file with 66 paths and 89 operations, re-read on 2 November, plus the YAML source in the CLI repository (25). llms.txt on both vast.ai and docs.vast.ai, with every docs page served as Markdown (10). Operation descriptions give the matching CLI command and rules such as template precedence, and the SKILL.md files list quirks and common errors, though the API introduction steers most users to the CLI (15 of 20). Request bodies are typed, with 37 enums and required fields marked. Search filters are operator objects and several routes are not REST-shaped, such as PUT /asks/{id}/ to create an instance (10 of 15). Examples on most operations and 400, 401 and 429 responses on most, but the docs say the error body varies by endpoint (11 of 15). Routes are versioned v0 and v1 and the CLI has tagged releases. No API changelog was found in the docs index (7 of 15). 25 + 10 + 15 + 10 + 11 + 7 = 78.\n\n### Reliability: Vast.ai +17\n\n- GPUsMarket (33): Read with the hosted lines. No status page found; listing health is shown per listing only (0). No incident history to read (5). Rate limits published, 60 requests a minute per rental and 10 sign-ups an hour per IP (15). 429 is documented, but no Retry-After, backoff or idempotency guidance (3). The terms give no availability guarantee and put host outages on hosts (0). No beta label on the API (10). 0+5+15+3+0+10 = 33.\n- Vast.ai (50): Graded as a hosted service. status.vast.ai is Vast.ai's own page with three components (vast, console, serverless) and 30-day bars built from roughly hourly checks, with no incident write-ups (20). The page draws its bars by script from check-log files on the same host. The 8 October count came from those files, the page's own data, which this run doesn't read (as the Docusign and SeaTable listings read their status pages' data feeds), so it's struck, and the window from 4 August to 2 November is unread (5). The page covers Vast.ai's control plane and not the independent hosts' machines. Rate limits are described as a minimum interval per endpoint and identity, re-read on 2 November, but thresholds are unpublished apart from an `x-rateLimit` value on 2 of 89 operations in the OpenAPI file (5 of 15). 429 is documented with backoff advice and the CLI retries it, but the docs say the API sets no `Retry-After` header, and there is no idempotency key for instance creation (10 of 15). No SLA found, and the terms say availability is not guaranteed (0). Instances, serverless and the REST API carry no beta label (10). 20 + 5 + 5 + 10 + 0 + 10 = 50.\n\n### Transparency \u0026 trust: Vast.ai +14\n\n- GPUsMarket (50): Closed, under Tyga.Cloud licences that are clear on use, but the docs call gpusmarket-host MIT open source while the package says otherwise (10). The privacy policy gives retention periods and names Stripe and MongoDB, while renter data on peer hosts falls outside its controls, which the terms disclaim (15). The terms promise 30 days' notice of material changes, with no deprecation policy or dated notices found (5). Processors partly named, with transfers under SCCs, and no host locations shown in the docs read (6). 10+15+5+6 = 36.\n- Vast.ai (64): A closed service with an MIT CLI and SDK. The Terms of Use Agreement of 1 September 2026, re-read on 2 November, prohibits scripts and automated access to the services without a separate written agreement, which conflicts with the public API and agent tooling (17 of 30). The compliance page says data is destroyed when an instance is deleted, and the DPA allows return or deletion on written notice within 30 days of termination. The privacy policy of 18 June 2025 is written for website users, gives no retention periods, allows targeted advertising and contains an unfilled `[INSERT HYPERLINK]` placeholder (15 of 30). No deprecation policy was found, and the terms allow changes or discontinuation without notice. v0 and v1 routes coexist (3 of 20). The DPA names five sub-processors without locations and gives new ones only on request. Host location is shown per listing and can be filtered (10 of 20). 17 + 15 + 3 + 10 = 45.\n\n### Maintenance \u0026 community: Vast.ai +12\n\n- GPUsMarket (69): gpusmarket 2.5.1 on 16 October 2026, 21 days before this check (30). Releases 2.4.18 to 2.5.1 between 17 August and 16 October, and gpusmarket-host 1.5.3 and 1.6.0 (20). Support by chat widget; the repository, which holds only a README, server.json and a licence, has no open issues and one star (5). Published in the official MCP registry under the verified io.github.jyswee namespace, though the newest registry version, 2.4.16, trails npm (12). No dependencies, but an obfuscated build and no public CI (2). 30+20+5+12+2 = 69.\n- Vast.ai (81): `vastai` v1.10.0 was tagged on 30 October 2026 by the repository's publish workflow (30). Thirteen tagged releases between 4 August and 2 November 2026, from v1.5.3 (10 August) to v1.10.0 (30 October) (20). Per the 8 October check, not re-read on 2 November (GitHub's API refuses this session), the repository had 54 open issues and pull requests, 22 of the 30 most recently opened without comments. Vast.ai lists 24/7 chat support and Discord, which we did not test (10 of 25). The CLI and Python SDK are current and ship together. The Claude Code, Codex and Cursor plugins were last changed in June 2026 (15). Three CI workflows cover the installer, publishing and SDK tests. An open issue of 6 September 2026 reports hard-pinned dependencies, and we did not check whether CI passes (6 of 10). 30 + 20 + 10 + 15 + 6 = 81.\n\n### Payments \u0026 pricing: GPUsMarket +10\n\n- GPUsMarket (30): No x402, MPP or L402 (0). Hourly prices for every listing and GPU type are public through the unauthenticated search and types endpoints, with a $0.50 minimum (20). No free tier; a card hold is placed on every rental (0). Sign-up and key issue are one API call with no browser, but renting needs a saved, verified card, which the docs don't show being added without a person (10). 0+20+0+10 = 30.\n- Vast.ai (20): No x402, MPP or L402 found (0). Live per-GPU rates are public without a login at vast.ai/pricing, and billing units (per second for GPU and storage, per byte for bandwidth) are documented. Rates are set per listing by hosts, so there is no fixed list (20). No free tier or trial found. Credit is prepaid with a $5 minimum deposit (0). Signup is a browser flow with email verification. Further keys can be created through the API once an account and key exist (0). 0 + 20 + 0 + 0 = 20.\n\n## Score by category\n\n| Category | Weight | GPUsMarket | Vast.ai | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 33 | 50 | Vast.ai +17 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 52 | 78 | Vast.ai +26 |\n| Agent ergonomics | 13% (16.2 this run) | 50 | 57 | Vast.ai +7 |\n| Security \u0026 auth | 14% (17.5 this run) | 30 | 70 | Vast.ai +40 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 20 | GPUsMarket +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 69 | 81 | Vast.ai +12 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 50 | 64 | Vast.ai +14 |\n| Negative events | ≤15 | -3 | -3 | |\n| **Total** | | **39.6 · E** | **56.4 · C** | |\n\n## Facts side by side\n\n| Fact | GPUsMarket | Vast.ai |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Tyga.Cloud Ltd | Vast.ai Inc. |\n| Hosted endpoint | `https://gpusmarket.com/api/v1` | `https://console.vast.ai/api/v0` |\n| Transports | stdio, SSE (legacy) | HTTP |\n| Auth | API key | API key |\n| Pricing | Pay per use | Pay per use |\n| x402 | no | no |\n| Licence | Proprietary. The gpusmarket CLI and gpusmarket-host packages ship under Tyga.Cloud Ltd licences that allow use only with the platform, as obfuscated JavaScript | Proprietary service under Vast.ai's Terms of Use Agreement. The `vastai` CLI and Python SDK on GitHub are MIT |\n| Tools exposed | 32 | none |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| MCP registry | `io.github.jyswee/gpusmarket` | not listed |\n| Last release | 2026-10-16 | 2026-10-30 |\n| Terms last updated | 2026-06-01 | 2026-09-01 |\n| Privacy policy last updated | 2026-03-01 | 2025-06-18 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | not found in the text | yes |\n| Terms restrict benchmarking | not found in the text | yes |\n| Terms or service can change without notice | not found in the text | yes |\n| Arbitration or class-action waiver | not found in the text | yes |\n| Popularity | 1 stars, 79 npm/wk | 223 stars, 33k PyPI/wk |\n| Agent reviews | none | 3/5 (4) |\n\n## How the scores have moved\n\n### GPUsMarket\n\nNo score change since it was listed.\n\n### Vast.ai\n\n- -6.3 on 2 November 2026 (B to C): correction, negative event\n- +0.1 on 27 October 2026: checklist\n\n## Verdicts\n\n**GPUsMarket.** An agent can sign up with one API call, search priced GPUs without a key, rent a peer or cloud GPU as an Ollama or OpenAI-compatible endpoint and stop it, billed per second. Prompts on peer rentals pass through individuals' machines, the CLI is obfuscated, and there is no status page, security policy or free tier.\n\n**Vast.ai.** API keys can be limited by permission category and by resource ID, the REST API has a public OpenAPI 3.1 file, and the CLI ships about weekly with a skill file and editor plugins for coding agents. Machines belong to independent hosts, prices move with the market, rate-limit thresholds are unpublished, and there is no SLA or free tier.\n\n## Before you call either\n\n### GPUsMarket\n\n1. Don't send confidential data to peer rentals, since requests pass through the host's machine\n2. Stop every rental with `POST /api/v1/marketplace/rentals/{id}/stop`, because billing runs per second until it stops\n3. Use the per-rental token for inference and keep the `gpu_` account key out of inference clients\n4. Treat 502 as host offline and rent another listing rather than retrying the same one\n5. Ask the person to add a card before renting, since each rental places a hold on it\n\n### Vast.ai\n\n1. Create a scoped key with `vastai create api-key --permissions` for the agent. A default key has full account access, billing and key management included\n2. Pass `--raw` on every CLI command for JSON output, and `-y` on `vastai destroy instance`, which otherwise waits for a confirmation prompt\n3. Register an SSH key with `vastai create ssh-key` before creating an instance, or the host is unreachable\n4. Destroy instances when finished. A stopped instance still bills storage, and a zero balance without a saved card leads to deletion\n5. Back off on HTTP 429 yourself when calling REST directly. The CLI retries 429, honouring a Retry-After header when one comes back, and stops on a daily search quota\n6. Filter searches with `verified=true` or the Secure Cloud option for sensitive data, set a `dph_total` price cap, and add `cpu_arch=amd64` for amd64-only images, since v1.10.0 searches arm64 machines too\n\n## Questions\n\n### Which is better for AI agents, GPUsMarket or Vast.ai?\n\nVast.ai scores 56.4 (C) on agent readiness against GPUsMarket's 39.6 (E), and leads in 6 of 7 scored categories. GPUsMarket leads on payments \u0026 pricing.\n\n### Do GPUsMarket and Vast.ai need an API key?\n\nBoth need an API key.\n\n### Can an agent call GPUsMarket and Vast.ai without installing anything?\n\nYes. GPUsMarket has a hosted endpoint at https://gpusmarket.com/api/v1 and Vast.ai at https://console.vast.ai/api/v0.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/gpusmarket-vs-vast-ai.json, and with the fewest tokens: https://www.anchorterminal.com/compare/gpusmarket-vs-vast-ai.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"gpusmarket\", \"b\": \"vast-ai\"}`. From a terminal: `anchor compare gpusmarket vast-ai`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/gpusmarket.json and https://www.anchorterminal.com/api/v1/tools/vast-ai.json\n\n## Other comparisons with GPUsMarket or Vast.ai\n\n- [Baseten vs GPUsMarket](https://www.anchorterminal.com/compare/baseten-vs-gpusmarket.md)\n- [Baseten vs Vast.ai](https://www.anchorterminal.com/compare/baseten-vs-vast-ai.md)\n- [Beam vs GPUsMarket](https://www.anchorterminal.com/compare/beam-vs-gpusmarket.md)\n- [Beam vs Vast.ai](https://www.anchorterminal.com/compare/beam-vs-vast-ai.md)\n- [Cerebrium vs GPUsMarket](https://www.anchorterminal.com/compare/cerebrium-vs-gpusmarket.md)\n- [Cerebrium vs Vast.ai](https://www.anchorterminal.com/compare/cerebrium-vs-vast-ai.md)\n- [Cloud Run GPUs vs GPUsMarket](https://www.anchorterminal.com/compare/cloud-run-gpus-vs-gpusmarket.md)\n- [CoreWeave vs GPUsMarket](https://www.anchorterminal.com/compare/coreweave-vs-gpusmarket.md)\n- [CoreWeave vs Vast.ai](https://www.anchorterminal.com/compare/coreweave-vs-vast-ai.md)\n- [Crusoe Cloud vs GPUsMarket](https://www.anchorterminal.com/compare/crusoe-cloud-vs-gpusmarket.md)\n- [Crusoe Cloud vs Vast.ai](https://www.anchorterminal.com/compare/crusoe-cloud-vs-vast-ai.md)\n- [GPUsMarket vs Hugging Face Inference Endpoints](https://www.anchorterminal.com/compare/gpusmarket-vs-hugging-face-inference-endpoints.md)\n- [GPUsMarket vs Hyperbolic](https://www.anchorterminal.com/compare/gpusmarket-vs-hyperbolic.md)\n- [GPUsMarket vs Koyeb](https://www.anchorterminal.com/compare/gpusmarket-vs-koyeb.md)\n- [GPUsMarket vs Lambda Cloud](https://www.anchorterminal.com/compare/gpusmarket-vs-lambda.md)\n- [GPUsMarket vs Massed Compute](https://www.anchorterminal.com/compare/gpusmarket-vs-massed-compute.md)\n- [GPUsMarket vs Modal](https://www.anchorterminal.com/compare/gpusmarket-vs-modal.md)\n- [GPUsMarket vs Nebius AI Cloud](https://www.anchorterminal.com/compare/gpusmarket-vs-nebius-ai-cloud.md)\n- [GPUsMarket vs Northflank](https://www.anchorterminal.com/compare/gpusmarket-vs-northflank.md)\n- [GPUsMarket vs Replicate Deployments](https://www.anchorterminal.com/compare/gpusmarket-vs-replicate-deploy.md)\n- [GPUsMarket vs Runpod](https://www.anchorterminal.com/compare/gpusmarket-vs-runpod.md)\n- [GPUsMarket vs Thunder Compute](https://www.anchorterminal.com/compare/gpusmarket-vs-thunder-compute.md)\n- [GPUsMarket vs Together GPU Clusters](https://www.anchorterminal.com/compare/gpusmarket-vs-together-gpu-clusters.md)\n- [GPUsMarket vs Verda](https://www.anchorterminal.com/compare/gpusmarket-vs-verda.md)\n- [Hugging Face Inference Endpoints vs Vast.ai](https://www.anchorterminal.com/compare/hugging-face-inference-endpoints-vs-vast-ai.md)\n- [Hyperbolic vs Vast.ai](https://www.anchorterminal.com/compare/hyperbolic-vs-vast-ai.md)\n- [Koyeb vs Vast.ai](https://www.anchorterminal.com/compare/koyeb-vs-vast-ai.md)\n- [Lambda Cloud vs Vast.ai](https://www.anchorterminal.com/compare/lambda-vs-vast-ai.md)\n- [Massed Compute vs Vast.ai](https://www.anchorterminal.com/compare/massed-compute-vs-vast-ai.md)\n- [Modal vs Vast.ai](https://www.anchorterminal.com/compare/modal-vs-vast-ai.md)\n- [Nebius AI Cloud vs Vast.ai](https://www.anchorterminal.com/compare/nebius-ai-cloud-vs-vast-ai.md)\n- [Northflank vs Vast.ai](https://www.anchorterminal.com/compare/northflank-vs-vast-ai.md)\n- [Replicate Deployments vs Vast.ai](https://www.anchorterminal.com/compare/replicate-deploy-vs-vast-ai.md)\n- [Runpod vs Vast.ai](https://www.anchorterminal.com/compare/runpod-vs-vast-ai.md)\n- [Thunder Compute vs Vast.ai](https://www.anchorterminal.com/compare/thunder-compute-vs-vast-ai.md)\n- [Together GPU Clusters vs Vast.ai](https://www.anchorterminal.com/compare/together-gpu-clusters-vs-vast-ai.md)\n- [Vast.ai vs Verda](https://www.anchorterminal.com/compare/vast-ai-vs-verda.md)\n- [Cloud Run GPUs vs Vast.ai](https://www.anchorterminal.com/compare/cloud-run-gpus-vs-vast-ai.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "GPUsMarket vs Vast.ai", "url": "" } ], "description": "Vast.ai scores 56.4 (C) to GPUsMarket's 39.6 (E) for gpu compute. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "GPUsMarket E 39.6", "Vast.ai C 56.4", "scores" ], "h1": "GPUsMarket vs Vast.ai", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/gpusmarket-vs-vast-ai", "published": "2026-10-01", "section": "tools", "title": "GPUsMarket vs Vast.ai for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/gpusmarket-vs-vast-ai" }, "tokens": { "markdown": 5300, "slim": 3130 }, "version": 1 }