GenieLocker — Private AI by the Minute
This server provides read-only access to GenieLocker's service status, commercial inventory, pricing, and recipe search—without creating accounts, reserving GPUs, or spending funds.
genie_status: Check current service status, including catalog, capacity, sellability, locker counts, and payment-rail status.
genie_catalog: List lifecycle-verified commercial SKUs eligible for purchase (live inventory only).
genie_quote: Get a live, non-binding price quote for a private locker by specifying envelope, placement, and duration (10–1440 minutes).
genie_recipes: Search public agent and inference recipes by query, maturity stage (
commercial,benchmarked,designed), or category.genie_credit_pricing: Read prepaid credit definitions, burn multipliers, tier pricing, and usage examples.
Limitations: Cannot create accounts, purchase credits, reserve GPUs, or create lockers.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@GenieLocker — Private AI by the MinuteGet a live quote for a 10-minute l16-resident locker."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
GenieLocker
GenieLocker gives an AI agent a private OpenAI-compatible Qwen2.5-7B endpoint by the minute. The locker is quality-gated before the paid duration begins and destroyed automatically at expiry.
Current commercial boundary
One commercial resident SKU:
l16-residentPrepaid credits: live
Direct per-locker x402 settlement: off / fail-closed
One completed locker in the public status counter is an operator canary, not a customer
Trust the live API over copied documentation:
curl -s https://genie.locker/api/status
curl -s 'https://genie.locker/api/quote?envelope=l16&placement=resident&minutes=10'Related MCP server: TokenLab MCP Server
Agent integration
MCP server:
io.github.nhantour/genie-lockerFull purchase and safety procedure: https://genie.locker/agent.md
OpenAPI 3.1: https://genie.locker/openapi.json
Machine-readable site index: https://genie.locker/llms.txt
Install the agent skill after reviewing the script:
curl -sL https://genie.locker/skill.sh | shThe first step can be a free trial credit allocation. No wallet or purchase is created by reading this repository or installing the skill.
MCP connector
The public MCP connector is deliberately read-only. It exposes five tools for service status, commercial inventory, live quotes, recipe search, and credit pricing. It cannot create accounts, reserve GPUs, buy credits, create lockers, or send data to an inference model.
Run it from source:
npm install
npm startOr, after the public image is available:
docker run --rm -i ghcr.io/nhantour/genie-locker-mcp:0.2.0Client configuration:
{
"mcpServers": {
"genie-locker": {
"command": "docker",
"args": ["run", "--rm", "-i", "ghcr.io/nhantour/genie-locker-mcp:0.2.0"]
}
}
}The connector source in this repository is MIT-licensed under LICENSE. The
private broker implementation is not included in this repository or license.
Genie Guard SDK
The package also includes a framework-neutral, in-process spend boundary for async JavaScript/TypeScript tools:
npm install https://github.com/nhantour/genie-locker/releases/download/guard-v0.2.0/nhantour-genie-locker-mcp-0.2.0.tgzIt is also published as @nhantour/genie-locker-mcp@0.2.0 on GitHub
Packages for clients already authenticated to npm.pkg.github.com.
import { createSpendGuard } from '@nhantour/genie-locker-mcp/guard';
const guard = createSpendGuard({ limitUsd: 100, perCallLimitUsd: 5 });
const safeSearch = guard.wrap(paidSearch, { estimateCostUsd: () => 0.02 });Reservations are counted before the tool starts, so concurrent calls cannot all
pass against the same remaining budget. Failed calls release their reservation;
successful calls record the estimated cost or an actualCostUsd returned by
your adapter. Day, UTC-month, and all-time windows are supported.
This is a local SDK guardrail, not a managed wallet, payment processor, durable ledger, multi-signature approval system, or substitute for provider-side spend limits. Its state resets with the process. Put the final hard boundary at the wallet or payment provider whenever the wrapped tool can move real money.
The matching Python wheel and source archive are published on the
guard-v0.2.0 GitHub release.
A matching dependency-free Python package lives in python/.
Security reports should use the repository's private security advisory form.
Minimal flow
# 1. Create a trial account and save the returned gk_... key securely.
curl -s -X POST https://genie.locker/api/credits/trial
# 2. Request a ten-minute locker with a stable idempotency key.
curl -s -X POST https://genie.locker/api/lockers \
-H 'authorization: Bearer gk_REDACTED' \
-H 'idempotency-key: your-stable-order-id' \
-H 'content-type: application/json' \
-d '{"envelope":"l16","placement":"resident","minutes":10}'The order is asynchronous. Poll the returned status_url with the same API key
until the state is live; only then does the paid duration begin.
Copyright © Intelix Systems LLC. This repository documents the public service; it does not grant a license to the private broker implementation.
Available Tools
5 toolsgenie_catalogList commercial GenieLocker inference SKUsARead-onlyIdempotent
Read only the lifecycle-verified SKUs that are currently eligible for purchase. Designed or benchmarked recipes are not represented as commercial inventory.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already provide readOnlyHint, idempotentHint, and destructiveHint=false, so safety is clear. The description adds valuable context about 'lifecycle-verified' and 'currently eligible for purchase,' implying the catalog is dynamic and curated. It also clarifies the commercial inventory scope beyond what annotations convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, no redundancy, front-loaded with the key purpose. Every word contributes: 'Read only' reinforces safety, 'lifecycle-verified' and 'eligible for purchase' define scope, and the exclusion sentence removes ambiguity without extra length.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a simple parameterless list tool. The description fully explains what is and isn't included, and annotations cover safety and volatility. The sibling tools for recipes and pricing complete the context, so no important behavior is left undisclosed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters, so the schema is trivially fully covered. The description doesn't need to explain parameters. It provides semantic context about the output (eligible SKUs) which is sufficient given the tool's simplicity.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool lists 'lifecycle-verified SKUs that are currently eligible for purchase' with a specific verb (read/list) and resource (commercial GenieLocker inference SKUs). It distinguishes from siblings by explicitly excluding designed/benchmarked recipes, which aligns with the genie_recipes sibling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use this tool: when you need commercial, purchasable SKUs, not recipes. It explicitly states recipes are not represented, providing a clear exclusion. It doesn't name alternative tools directly, but the context is sufficient for an agent to differentiate from siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
genie_credit_pricingRead GenieLocker prepaid credit pricingARead-onlyIdempotent
Read the current credit definition, burn multipliers, tier pricing, and examples. This never creates a wallet or buys credits.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, idempotentHint=true, and openWorldHint=true. The description adds specific behavioral context by stating it never creates a wallet or buys credits, and notes the data is 'current,' which aligns with openWorldHint. This goes slightly beyond the annotations without contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the core purpose and followed by a concise safety clarification. Every sentence earns its place with no redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple read-only tool with no parameters or output schema, the description is fully complete. It enumerates exactly what data is returned (credit definition, burn multipliers, tier pricing, examples) and is backed by comprehensive safety annotations.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, and schema coverage is 100%. Per the rubric, the baseline for 0 params is 4. The description adds no parameter-level detail (not needed), but the baseline applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool reads credit definition, burn multipliers, tier pricing, and examples. It uses a specific verb ('Read') and resource ('GenieLocker prepaid credit pricing'), and distinguishes itself from siblings by emphasizing it never creates wallets or buys credits.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context for when to use the tool (to read current credit pricing) and an explicit when-not ('never creates a wallet or buys credits'). However, it does not name alternative sibling tools, so it lacks the explicit alternative naming that would earn a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
genie_quoteQuote a private inference lockerARead-onlyIdempotent
Get a live, non-binding price quote. This is read-only and does not reserve capacity, create an account, or spend funds.
| Name | Required | Description | Default |
|---|---|---|---|
| minutes | No | Requested paid duration in minutes. | |
| envelope | No | GenieLocker model-footprint envelope. | l16 |
| placement | No | Inference placement. Only the commercial resident route is currently exposed. | resident |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, and non-destructive, but the description adds valuable context beyond them: 'does not reserve capacity, create an account, or spend funds.' This clarifies side effects and safety, aligning with annotations without contradiction. The 'live' qualifier indicates real-time behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the main action, and every word adds value. It avoids redundancy and clearly communicates purpose and behavioral boundaries in a compact form.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple tool with 3 optional parameters, good annotations, and no output schema, the description is largely complete. It covers purpose, safety, and what the quote is not. However, it does not explicitly state what the returned quote contains (e.g., total price in currency/credits), which could be useful given no output schema exists. Minor gap keeps it from a 5.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 100% parameter description coverage, so the baseline is 3. The tool description does not add any additional meaning about parameters (minutes, envelope, placement) beyond what the schema provides, but the schema itself already explains each parameter well, including defaults and enums.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: 'Get a live, non-binding price quote.' The verb 'get' and resource 'price quote' are specific, and the title 'Quote a private inference locker' adds context. It distinguishes from siblings by emphasizing non-binding and read-only nature, setting it apart from status, catalog, recipes, and credit pricing.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context: use this tool to obtain a live, non-binding quote without reserving capacity or spending funds. However, it does not explicitly name alternatives or state when not to use it, such as 'use genie_credit_pricing for credit prices' or 'use genie_status for current state.' The context implies usage but lacks explicit exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
genie_recipesFind GenieLocker agent and inference recipesARead-onlyIdempotent
Search the public recipe menu by maturity, category, or text. The stage field is authoritative: only stage=commercial is live inventory.
| Name | Required | Description | Default |
|---|---|---|---|
| query | No | Case-insensitive search across use case, buyer, promise, and recipe name. | |
| stage | No | Filter by evidence/commercial maturity. | |
| category | No | Case-insensitive category substring. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, and openWorld hints. The description adds valuable behavioral context by noting that the stage field is authoritative and only stage=commercial represents live inventory, going beyond the annotations. No contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, immediately states the action, and contains zero filler. It is perfectly concise and front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the small number of optional parameters (3), complete schema coverage, and rich annotations, the description provides sufficient context. It covers search dimensions and the key stage nuance. The lack of an output schema is not an issue since this is a search tool, and return format is implied. Minor room for improvement could be mentioning pagination or result scope.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema covers all parameters with 100% description coverage, so the baseline is 3. The description adds semantic value by mapping 'maturity, category, or text' to parameters and specifically highlighting that stage is authoritative, which enriches the stage parameter's meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Search the public recipe menu by maturity, category, or text' which is a specific verb+resource. It does not explicitly distinguish from sibling tools like genie_catalog, so it falls short of a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context for when to use the tool ('Search the public recipe menu') and adds important guidance about the stage field being authoritative, with only stage=commercial being live inventory. However, it does not mention alternatives or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
genie_statusCheck GenieLocker service statusARead-onlyIdempotent
Read current catalog, capacity, sellability, locker counts, and payment-rail status. This never creates or purchases a locker.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and destructiveHint=false, and the description adds the behavioral detail 'This never creates or purchases a locker,' which goes beyond annotations by explicitly ruling out purchase side effects. It also lists the specific data points included, providing useful context for what the read operation covers. No contradictions with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences: the first states the tool's function and lists outputs, the second clarifies the non-mutating behavior. It is front-loaded with the verb 'Read' and contains no filler or repetition. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only status tool with no parameters and no output schema, the description adequately covers the key information: what data is accessible (catalog, capacity, sellability, locker counts, payment-rail status) and the non-mutating guarantee. It does not describe the output format, but the enumerated list gives a strong expectation. The rich annotations compensate for any missing behavioral details.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the input schema is empty. Per the baseline for 0 params, the description need not add parameter details. The description does not mention any parameters, which is appropriate and adds no confusion.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific action: 'Read current catalog, capacity, sellability, locker counts, and payment-rail status.' It uses the verb 'read' and enumerates the resources, making it distinct from sibling tools like genie_catalog or genie_quote. The additional sentence 'This never creates or purchases a locker' further differentiates it from mutation-oriented tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool is for checking service status by saying 'Read current... status.' It also provides an explicit exclusion: 'never creates or purchases a locker,' signaling it is not for purchasing or creation tasks. However, it does not explicitly name alternative tools or state 'use this when you need an aggregate status view,' so it lacks full when/when-not guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
5 tool updates
v0.1.0- First observed
genie_catalog - First observed
genie_credit_pricing - First observed
genie_quote - First observed
genie_recipes - First observed
genie_status
TDQS
Each tool targets a distinct aspect: overall status, purchasable catalog, quotes, recipes, and credit pricing. The descriptions clearly differentiate catalog (commercial-only) from recipes (all stages), eliminating ambiguity.
All tools follow the consistent 'genie_' prefix followed by a descriptive noun (status, catalog, quote, recipes, credit_pricing). This uniform pattern is predictable and easy to navigate.
Five tools is an ideal size for a read-only information server, covering the essential domain areas without unnecessary bloat or sparsity.
The surface comprehensively covers the informational needs of the domain: overall status, available inventory, live pricing, recipe search, and credit definitions. Since all tools are explicitly read-only, there are no missing write operations for this server's stated purpose.
Maintenance
Related MCP Connectors
Read-only MCP server for The Quiet Protocol's engines, benchmarks, proof, and business data.
Read-only MCP server for AIStatusDashboard status, incidents, metrics, and fallback recommendations.
Public, read-only MCP server for FarmNeural company facts, packages, and capabilities.
Read-only MCP server for ClassQuill, a tutoring-business-management platform.
Related MCP Servers
- AlicenseAqualityBmaintenanceRead-only MCP server for Blocksize market data discovery, pricing, documentation, and x402 endpoint lookup across crypto, equities, FX, and metals.71MIT
- AlicenseCqualityAmaintenanceRead-only MCP server that exposes public TokenLab model catalog tools for agents to discover models, inspect request contracts, and compare pricing.31164MIT
- FlicenseNot gradedqualityBmaintenanceRead-only MCP server providing 5 tools for hybrid search, clause retrieval, policy versioning, code lookup, and plan rider override queries over a synthetic medical-policy corpus.-
- FlicenseNot gradedqualityAmaintenanceRead-only MCP server that performs deterministic local preflights of agent-payment boundary documents and x402 v2 PaymentRequired JSON, and prepares unsubmitted public quote-request drafts without network calls or fund movement.-
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/nhantour/genie-locker'
If you have feedback or need assistance with the MCP directory API, please join our Discord server