← Back to directory
H

Hostinger API MCP Server

Official
Official MCP server for Hostinger API.
Category
Other
Stars
★ 160 Very popular
Transport
stdio (local process) · Streamable HTTP
Runtime
Node.js 24+
Credentials
API key / credential required
License
MIT
Last commit
Tools
100
70FMRS · B

Official MCP server from Hostinger, feature-rich but requires careful use to avoid errors.

Strongest · Maintenance 16/20 Weakest · Reliability 11/20

Reliability
11/20
Security and permissions
14/20
Maintenance
16/20
Documentation
15/20
Setup experience
14/20
Why each score
Reliability 11/20
Evidence: The manifest declares a unified binary and multiple domain-specific binaries, version 1.32.0, with matching npm package. The source provides comprehensive tool descriptions with correct HTTP methods and paths consistent with Hostinger's public API. The repo contains subdirectories for each domain, likely containing actual implementation, and includes CI workflows and tests (unverified since not executed). Deductions: No executable verification evidence (CI workflows and committed tests covering key server paths) was present in the reviewed files, so reliability is capped at 12 per static calibration.
Security and permissions 14/20
Evidence: Supports two auth methods - API token (preferred, via HOSTINGER_API_TOKEN env var) and interactive OAuth PKCE. Token marked secret, credentials stored with mode 0600. Dangerous operations (e.g., deploy, delete website, change DNS, purchase, renew, delete) are not explicitly gated by confirmation prompts but carry warnings in descriptions (e.g., 'cannot be undone') and require explicit user action to invoke. OAuth flow requires user interaction. Deductions: No explicit damage control or data flow disclosure, and no enforced confirmation layer beyond warnings, so deduct for incomplete permissions/confirmation scoping.
Maintenance 16/20
Evidence: MIT license, recent release version 1.32.0, active release history, relatively low open issues (4), 137 stars. npm package exists and matches. Deductions: Lack of explicit governance info (maintainer identity, contributing guide) and security response channel, so not full marks.
Documentation 15/20
Evidence: README provides detailed installation, update, configuration, authentication, usage, and tools overview with per-binary tool counts. Tool descriptions are highly detailed with purposes, limitations, and warnings. Deductions: Missing troubleshooting guide and explicit cost/limits disclosure, and the README embeds a large tool list which may hinder navigation.
Setup experience 14/20
Evidence: Clear install steps (npm global install), JSON config examples for multiple clients, support for stdio and HTTP transports with CLI options. Deductions: Requires Node.js >=24 which may be limiting; setup relies on README only with no automated install verification, so setup capped at 15 per static calibration.

Static review · not runListed 2026-08-07

Read the FMRS scoring method →

Fit and risk

What it can accessUses the networkChanges third-party account data

Best for

  • Developers using Hostinger services.
  • Users who want to automate hosting tasks through AI assistants.

Not for

  • Users not on Hostinger.
  • Those needing to manage other cloud providers.

Required permissions

  • Requires a Hostinger API token or OAuth authorization.
  • Can read and modify domains, hosting resources, etc., depending on token scopes.

Risks and side effects

  • High-risk operations (e.g., deleting websites) are irreversible.
  • API token leakage could allow misuse of resources.
  • Mistakes could cause website or service outages.

Setup

Before you start

Runtime:Node.js 24+

HOSTINGER_API_TOKEN optionalsecret Hostinger API token, generated in hPanel's API section; when unset, the server falls back to interactive OAuth sign-in.
API_TOKEN optionalsecret Deprecated alias for HOSTINGER_API_TOKEN; will be removed in a future version.
Other optional settings (2)
DEBUG optional Enables debug logging (true/false), default false.
OAUTH_ISSUER optional OAuth server base URL, defaults to https://auth.hostinger.com; only used when HOSTINGER_API_TOKEN is not set.
  1. Ensure Node.js 24 or higher is installed.
  2. Install hostinger-api-mcp globally using npm, yarn, or pnpm.
  3. Set the HOSTINGER_API_TOKEN environment variable (optional, interactive OAuth also available).
  4. Add the server to your MCP client configuration using the JSON example.
  5. Restart your client and test the connection.
claude_desktop_config.json
{
  "mcpServers": {
    "hostinger-api": {
      "command": "hostinger-api-mcp",
      "env": {
        "DEBUG": "false",
        "HOSTINGER_API_TOKEN": "YOUR API TOKEN"
      }
    }
  }
}

Shown for Claude Desktop. Other clients may use a different file or key (VS Code uses "servers") — the configurator below converts it.

.vscode/mcp.json
{
  "servers": {
    "hostinger-api": {
      "command": "hostinger-api-mcp",
      "env": {
        "DEBUG": "false",
        "HOSTINGER_API_TOKEN": "YOUR API TOKEN"
      }
    }
  }
}

Goes in your project's .vscode/mcp.json (VS Code uses a "servers" key).

Terminal
claude mcp add hostinger-api -e DEBUG=false -e 'HOSTINGER_API_TOKEN=YOUR API TOKEN' -- hostinger-api-mcp

Run it in a terminal; replace any <…> placeholders with your own values first.

Check that it works

After adding hostinger-api-mcp to the client config, tools like billing_getCatalogItemListV1 should appear in the tool list; calling domains_getDomainListV1 and getting your domains proves the connection and auth work.

Troubleshooting

  1. Ensure Node.js version is >= 24.
  2. Check that `HOSTINGER_API_TOKEN` is set correctly.
  3. For OAuth, ensure browser access is available for sign-in.
  4. When using `--http`, an API token must be set.

Things to try

Once connected, you can ask your AI assistant things like:

  • List all domains in my Hostinger account
  • Show me the DNS records for example.com
  • List my current billing subscriptions and payment methods
  • Create a cron job on my website that runs nightly

Tools 100

agencyHosting_deployNodeStaticWebsite destructive
agencyHosting_deployPhpApplication destructive
agency-hosting_listAvailableDatacentersForAnAgencyPlanOrderV1 read-only
agency-hosting_changeAgencyPlanWebsiteDomainV1 writes
agency-hosting_linkDomainToAgencyPlanWebsiteV1 writes
agency-hosting_listAgencyPlanDomainsV1 read-only
agency-hosting_unlinkDomainFromAgencyPlanWebsiteV1 writes
agency-hosting_importAgencyPlanWebsiteFromArchiveV1 destructive
Show 92 more tools
agency-hosting_listAgencyPlanOrdersV1 read-only
agency-hosting_provisionANewAgencyPlanWebsiteV1 writes
agency-hosting_getAgencyPlanWebsiteSetupStatusV1 read-only
agency-hosting_buildAgencyPlanWebsiteNodeJSAssetsV1 destructive
agency-hosting_clearAgencyPlanWebsiteCacheV1 writes
agency-hosting_listAgencyPlanWebsiteCronJobsV1 read-only
agency-hosting_createAgencyPlanWebsiteCronJobV1 writes
agency-hosting_deleteAgencyPlanWebsiteCronJobV1 destructive
agency-hosting_listAgencyPlanWebsiteDatabasesV1 read-only
agency-hosting_createAgencyPlanWebsiteDatabaseV1 writes
agency-hosting_deleteAgencyPlanWebsiteDatabaseV1 destructive
agency-hosting_createAgencyPlanWebsiteDatabaseUserV1 writes
agency-hosting_deleteAgencyPlanWebsiteDatabaseUserV1 destructive
agency-hosting_getAgencyPlanWebsiteDetailsV1 read-only
agency-hosting_deleteAgencyPlanWebsiteV1 destructive
agency-hosting_listRunningAgencyPlanWebsiteProcessesV1 read-only
agency-hosting_changeAgencyPlanWebsiteWordPressCoreVersionV1 writes
agency-hosting_getAgencyPlanWebsiteWordPressSettingsV1 read-only
agency-hosting_listAvailableWordPressVersionsForAnAgencyPlanWebsiteV1 read-only
billing_getCatalogItemListV1 read-only
billing_createPurchaseOrderV1 destructive
Place a purchase order for any Hostinger product.
billing_setDefaultPaymentMethodV1 writes
billing_deletePaymentMethodV1 destructive
billing_getPaymentMethodListV1 read-only
billing_getSubscriptionListV1 read-only
billing_disableAutoRenewalV1 writes
billing_enableAutoRenewalV1 writes
billing_renewSubscriptionV1 destructive
DNS_getDNSSnapshotV1 read-only
DNS_getDNSSnapshotListV1 read-only
DNS_restoreDNSSnapshotV1 writes
DNS_getDNSRecordsV1 read-only
DNS_updateDNSRecordsV1 writes
DNS_deleteDNSRecordsV1 destructive
DNS_resetDNSRecordsV1 destructive
DNS_validateDNSRecordsV1 read-only
v2_getDomainVerificationsDIRECT read-only
domains_checkDomainAvailabilityV1 read-only
domains_getDomainForwardingV1 read-only
domains_updateDomainForwardingV1 writes
domains_deleteDomainForwardingV1 destructive
domains_createDomainForwardingV1 writes
domains_getPendingIRTPVerificationV1 read-only
domains_cancelPendingIRTPVerificationV1 writes
domains_getIncomingDomainMoveV1 read-only
domains_acceptIncomingDomainMoveV1 writes
domains_rejectIncomingDomainMoveV1 writes
domains_getIncomingDomainMoveListV1 read-only
domains_getOutgoingDomainMoveV1 read-only
domains_startOutgoingDomainMoveV1 writes
domains_cancelOutgoingDomainMoveV1 writes
domains_getOutgoingDomainMoveListV1 read-only
domains_getDomainAuthorizationCodeV1 read-only
domains_claimFreeDomainV1 destructive
domains_enableDomainLockV1 writes
domains_disableDomainLockV1 writes
domains_getDomainDetailsV1 read-only
domains_getDomainListV1 read-only
domains_purchaseNewDomainV1 destructive
domains_enablePrivacyProtectionV1 writes
domains_disablePrivacyProtectionV1 writes
domains_getDomainRenewalInformationV1 read-only
domains_updateDomainNameserversV1 writes
domains_claimFreeDomainTransferV1 destructive
domains_getTransferV1 read-only
domains_getTransferListV1 read-only
domains_changeWHOISProfileForDomainV1 writes
domains_setWHOISProfileAsDefaultV1 writes
domains_unsetDefaultWHOISProfileV1 writes
domains_getWHOISProfileV1 read-only
domains_deleteWHOISProfileV1 destructive
domains_getWHOISProfileListV1 read-only
domains_createWHOISProfileV1 writes
domains_getWHOISProfileUsageV1 read-only
ecommerce_getCustomStorefrontSetupInstructionsV1 read-only
ecommerce_enableManualPaymentMethodV1 writes
ecommerce_createDigitalProductV1 writes
ecommerce_createPhysicalProductV1 writes
ecommerce_listSalesChannelsV1 read-only
ecommerce_createCustomSalesChannelV1 writes
ecommerce_updateSalesChannelV1 writes
ecommerce_setStoreShippingV1 writes
ecommerce_deleteStoreV1 destructive
ecommerce_getStoresV1 read-only
ecommerce_createStoreV1 writes
ecommerce_getStoreMetadataV1 read-only
horizons_createWebsiteV1 writes
horizons_getWebsiteV1 read-only
hosting_importWordpressWebsite writes
hosting_deployWordpressPlugin writes
hosting_deployWordpressTheme writes
hosting_deployJsApplication writes
Deploy a JavaScript application from an archive. The server builds it automatically.

Use cases

Automate management of Hostinger domains, DNS, and hosting resources.
Deploy WordPress, Node.js, or static websites via AI assistants.
Manage VPS, email services, and e-commerce stores.

Supported clients

Claude Desktop
Cursor
Gemini CLI

Listed from the project's documentation, not tested by this site.

Overview

This is the official Model Context Protocol server for the Hostinger API, enabling MCP clients like Claude and Cursor to interact with Hostinger services. It exposes over 300 tools covering domains, DNS, web hosting (including WordPress and Node.js deployment), VPS, email, e-commerce, billing, and more. Authentication supports API tokens or OAuth 2.0 with PKCE.

Similar servers

Telegram MCP server powered by Telethon to let MCP clients read chats, manage groups, and send/modify messages, media, contacts, and settings.

★ 1.8k · Tools 76 Compare with this →

Source revision f190ed69b396 Data synced 2026-10-13 Read the FMRS scoring method