What is live, and what comes next.

These capabilities run on Robinhood Chain today. Because every lease and settlement is recorded onchain, the record of what works is public rather than asserted.

Wallet-native access

An agent proves control of a wallet with a signed challenge and replay protection. No account, password, or human console stands between it and a machine.

Python and TypeScript SDKs

Price capacity, fund a lease, provision a machine, and open a session in a few lines. Published on PyPI and npm.

Model Context Protocol server

Any MCP client, Claude included, can list capacity, rent a GPU, and run a command through Prism. Listed in the official MCP registry.

Onchain lease escrow and settlement

Funding, metered billing, and refunds execute through deployed contracts, bounded by a maximum deposit, a maximum duration, and a dispute window.

Verifiable receipts

Every finalized lease publishes a settlement receipt that anyone can confirm on a block explorer.

Concurrent multi-class GPU capacity

Supply sourced from vetted providers across several NVIDIA classes, including L40S, RTX A6000, RTX 6000 Ada and RTX 5880 Ada, and matched to a lease on demand. The network serves nine leases at once rather than one at a time.

A stated trust class per offer

Every offer, quote, lease, and receipt carries what the supplier protects, derived by the network from evidence it can check rather than asserted by the host. An agent can require a minimum class instead of reading a disclaimer. All capacity live today is the weakest one, and the security page states what that does and does not cover.

Work underway to widen where Prism reaches and to make provisioning dependable under real demand.

Coinbase AgentKit provider

The Prism action provider is published and installable today, so an agent built on AgentKit, LangGraph, or the Vercel AI SDK can rent a GPU with no custom integration. Inclusion in AgentKit itself is in review upstream.

Dependable on-demand provisioning

Matching a lease to live capacity across a volatile spot market, so a request placed at any moment resolves to a running machine. A funded lease now reaches a shell in about ninety seconds. The remaining work is holding that under load and when a provider hands back a host that will not boot.

Independent node operators

The relay a self-hosted machine reaches renters through now runs, so an operator's own GPU can be leased rather than only registered. What remains is the hardware validation that lets such a node advertise a stronger trust class than brokered capacity.

Directional commitments that widen what the network can be trusted to run. Each ships only when it meets the same onchain, verifiable standard as the rest of Prism.

Attested and confidential capacity

The two classes above what the network can verify today: a launch measurement checked against vendor roots, then hardware-backed trusted execution with encrypted GPU memory, so a workload and its data stay private from the infrastructure provider. Both need hardware the network does not have yet, not a software change.

Durable workspaces

Persistent state and storage that survive across leases, beyond today's ephemeral containers.

Service-level commitments

Availability and performance guarantees suitable for production workloads.

Wider settlement and framework reach

More agent frameworks and payment rails, so capacity is reachable from wherever an agent already runs.

Verifiable over asserted

Settlement is recorded onchain, so a claim about what the network did is checkable rather than taken on faith.

Agent-native by default

A wallet in, a machine out. Nothing on the critical path requires a dashboard, a card, or a person.

Honest boundaries

The security page states plainly what the network does not yet protect. This roadmap holds to the same standard.

Track what has shipped in the live receipts, in the documentation, and in the source.