Itô Compute

Use the canonical Itô compute CLI or MCP server. ECC does not implement a parallel client, local simulation, reservation, workload runner, or inference server. ECC itself does no browser automation.

Install the canonical local package

ito-compute-cli is currently unpublished. Build it from its canonical repository instead of using npx, npm exec, or an unverified package:

git clone https://github.com/Ito-Markets/ito-cloud-runtime.git
cd ito-cloud-runtime/cli/ito-compute-cli
npm ci
npm run check

Set ECC_ITO_CLI_EXECUTABLE to the explicit absolute built entry:

/absolute/path/to/ito-cloud-runtime/cli/ito-compute-cli/dist/bin/ito.js

ECC never discovers this credential-bearing client through PATH. ecc ito login performs device authorization and never inherits ITO_API_KEY. The validation-only auth, plus find and status, forward ITO_API_KEY directly when configured; ITO_AUTH_MODE=legacy is not required. Never put a key or token in arguments, tracked files, MCP results, logs, or chat.

CLI workflow

1. Run ecc ito login before the first operation. ECC delegates this to the canonical CLI's device authorization, which opens the Itô verification page by default and persists a device token in macOS Keychain. Use ecc ito login --no-browser to suppress the page handoff. ECC itself does no browser automation. If the originating agent cannot complete the signed-in browser step, hand the exact command to the user; after approval finishes, return to the originating task and continue with ecc ito auth. Device tokens use macOS Keychain by default. File-token fallback is explicit and its directory and token file must remain owner-only (0700 and 0600).

2. Run ecc ito auth to validate existing credentials; it never starts login and rejects --no-browser.

3. Before ecc ito find, obtain explicit buyer authority to submit an RFQ.

   • Require gpu, count, whole days, max-rate, nodes, gpus-per-node, storage-tb, start-window, form-factor, contract-type, fabric, region, and the split-fill decision.
   • Require count == nodes * gpus-per-node; never derive topology.
   • Use any only when the buyer explicitly accepts any fabric or region.
   • Omitted --allow-split means false.

4. Run the live RFQ command:

   ecc ito find \
     --gpu h200 \
     --count 8 \
     --nodes 1 \
     --gpus-per-node 8 \
     --days 30 \
     --storage-tb 1 \
     --start-window 2099-08-15 \
     --max-rate 3.00 \
     --form-factor bare_metal \
     --contract-type reservation \
     --fabric infiniband \
     --region us-east-1
   

5. Run ecc ito status to inspect RFQs and procurement orders. After an ambiguous transport failure, check status before repeating find.

6. When a quote is ready and the buyer explicitly approves, accept it:

   ecc ito accept rfq_<ticket-id>
   

   This routes the ticket to the desk for human review. It does not move funds or reserve capacity. Do not accept without explicit buyer authority.

7. Run ecc ito logout when the user explicitly asks to revoke this device. The canonical CLI keeps the local credential when remote revocation fails so the operator can retry; never delete the token manually as a substitute.

Inventory prices are indicative. An RFQ is not reserved capacity. Treat a rate as fixed only when the canonical result contains a non-null firm quote.

Live node qualification

ecc ito evals exposes the canonical CLI's narrow live adapter to a separately installed sixtytwo-cli==0.3.33. It does not expose local fixture execution through ECC. Require all of the following before invoking it:

• operator authorization to contact the named nodes;
• ITO_ENABLE_SIXTYTWO_LIVE=1;
• --live-sixtytwo;
• an explicit node list; and
• an existing absolute config directory containing sixtytwo.yaml.

ecc ito evals \
  --cluster clu_prod_example \
  --live-sixtytwo \
  --nodes gpu-01,gpu-02 \
  --config-dir /absolute/path/to/qualification-config

The canonical adapter can run only the pinned version check and sixtytwo test --full against the explicit nodes. It cannot rent, launch, recover, repair, reset, purchase, or order resources. ECC does not forward ITO_API_KEY or model/cloud credentials into node qualification.

MCP workflow

Build the canonical package, then configure the stdio server with an absolute path:

{
  "mcpServers": {
    "ito-compute": {

  "command": "node",
  "args": [
    "/absolute/path/to/ito-cloud-runtime/cli/ito-compute-cli/dist/bin/ito-mcp.js"
  ]
}

The server exposes only:

- `ito_auth`
- `ito_find`
- `ito_status`
- `ito_accept`

`ito_auth` validates existing credentials; it does not start device login. Use
`ito_auth`, gather explicit buyer authority and every hard constraint, call
`ito_find`, then poll with `ito_status` when needed. When a quote is ready and
the buyer explicitly approves, call `ito_accept` with the ticket id. Desk
quotes are usually indicative and nonbinding until the desk confirms; the
result carries `quote_class`.

## Rent or purchase semantics

`find` submits an RFQ and may return a firm quote, but it does not rent,
purchase, reserve, provision, or move funds. `accept` routes a quote to the desk
for human review; it does not move funds or reserve capacity. `status` is
read-oriented, though the provider endpoint may reconcile an existing procurement
order. The passive dashboard link in ECC help is a separate user-operated web
route; do not open or operate it as a substitute for a missing CLI capability.

## Unsupported operations

The supported client surface cannot lock quotes, reserve capacity, execute
workloads, or serve inference. `accept` is a desk handoff, not a purchase. The
MCP server does not expose qualification; use the explicit CLI command above. Do
not invent additional tools or a purchase path. Do not substitute a browser or
fixture when the local CLI is missing or a live operation fails. Report the
missing capability and stop.