Hostinger

hostinger-api-mcp

Model Context Protocol (MCP) server for Hostinger API.

Quick start: Hosted remote server

If you don't want to install or run anything locally, connect directly to Hostinger's hosted MCP server:

https://mcp.hostinger.com

Claude Code

claude mcp add --transport http hostinger https://mcp.hostinger.com

This opens a browser window to authorize via OAuth. Once approved, the operations below are reachable through execute in your session.

Codex

codex mcp add hostinger --url https://mcp.hostinger.com

codex mcp login hostinger

login opens the same OAuth flow in your browser.

Other MCP-compatible clients

Add https://mcp.hostinger.com as a remote Streamable HTTP MCP server in your client's configuration and complete the OAuth prompt when it appears. Refer to your client's docs for how it exposes "add remote MCP server" / "custom connector" settings.

Prerequisites

• Node.js version 24 or higher

If you don't have Node.js installed, you can download it from the official website. Alternatively, you can use a package manager like Homebrew (for macOS) or Chocolatey (for Windows) to install Node.js.

We recommend using NVM (Node Version Manager) to install and manage installed Node.js versions. After installing NVM, you can install Node.js with the following command:

nvm install v24

nvm use v24

Installation

To install the MCP server, run one of the following command, depending on your package manager:

# Install globally from npm

npm install -g @hostinger/mcp

Or with yarn

yarn global add @hostinger/mcp

Or with pnpm

pnpm add -g @hostinger/mcp

Update

To update the MCP server to the latest version, use one of the following commands, depending on your package manager:

# Update globally from npm

npm update -g @hostinger/mcp

Or with yarn

yarn global upgrade @hostinger/mcp

Or with pnpm

pnpm update -g @hostinger/mcp

Binaries

This package installs the following MCP server commands:

• hostinger-api-mcp — unified server over every operation (414 total)
• hostinger-agency-hosting-mcp — 43 operations for agency-hosting
• hostinger-agent-readiness-mcp — 4 operations for agent-readiness
• hostinger-billing-mcp — 10 operations for billing
• hostinger-dns-mcp — 9 operations for dns
• hostinger-domains-mcp — 43 operations for domains
• hostinger-ecommerce-mcp — 30 operations for ecommerce
• hostinger-gpu-mcp — 5 operations for gpu
• hostinger-horizons-mcp — 7 operations for horizons
• hostinger-hosting-mcp — 59 operations for hosting
• hostinger-mail-mcp — 39 operations for mail
• hostinger-reach-mcp — 71 operations for reach
• hostinger-vps-mcp — 68 operations for vps
• hostinger-wordpress-mcp — 41 operations for wordpress

Every binary exposes the same three tools; a scoped binary only searches and executes its own group's operations. hostinger-api-mcp remains the backwards-compatible default.

Configuration

The following environment variables can be configured when running the server:

• DEBUG: Enable debug logging (true/false) (default: false)
• HOSTINGER_API_TOKEN: Your API token, which will be sent in the Authorization header. When set, OAuth is bypassed entirely.
• API_TOKEN: Deprecated alias for HOSTINGER_API_TOKEN. Will be removed in a future version — prefer HOSTINGER_API_TOKEN.
• OAUTH_ISSUER: OAuth server base URL (default: https://auth.hostinger.com). Only used when HOSTINGER_API_TOKEN is not set.

Authentication

The server supports two authentication methods:

API Token (recommended for CI/scripts)

Set HOSTINGER_API_TOKEN in the environment (the MCP client's env block). When present it always takes precedence — no OAuth code runs.

OAuth 2.0 with PKCE (interactive sign-in)

When HOSTINGER_API_TOKEN is not set and the server runs in stdio mode, OAuth 2.0 with PKCE is used automatically on the first authenticated tool call:

1. A dynamic OAuth client is registered with the issuer (RFC 7591) — once per machine.
2. A browser window opens to the authorization page.
3. After sign-in, the server captures the redirect on a local ephemeral port, exchanges the code for tokens, and stores them.
4. Subsequent calls reuse the stored access token; expired tokens are refreshed automatically. If a refresh token is revoked, the browser flow is re-launched.

Credentials are stored at:

• macOS / Linux: ~/.config/hostinger-mcp/credentials.json (mode 0600)
• Windows: %APPDATA%\hostinger-mcp\credentials.json

Credentials are shared across all Hostinger MCP binaries (hostinger-api-mcp, hostinger-vps-mcp, etc.).

Manual commands:

# Run the OAuth sign-in flow immediately (don't wait for the first tool call)

hostinger-api-mcp --login

Revoke stored credentials

hostinger-api-mcp --logout

HTTP transport note: OAuth sign-in is not supported in --http mode. Set HOSTINGER_API_TOKEN before using --http.

Usage

JSON configuration for Claude, Cursor, etc.

Register Node and the server script by absolute path, never npx or a bare node/hostinger-api-mcp: tools start the server in your project, where npx puts the project's node_modules/.bin first on PATH, a version manager (asdf, mise) runs whatever Node the project's .tool-versions names, and Windows looks a bare name up in the project folder first. Any of these lets a cloned repository run its own code with your Hostinger credentials. After the global install, node -p process.execPath prints the Node path and npm root -g the folder that holds @hostinger/mcp. Run both from your home folder.

{

"mcpServers": { "hostinger-api": { "command": "/absolute/path/to/node", "args": ["/absolute/path/to/global/node_modules/@hostinger/mcp/src/servers/all.js"], "env": { "DEBUG": "false", "HOSTINGER_API_TOKEN": "YOUR API TOKEN" } } } }

Transport Options

The MCP server supports two transport modes:

Standard I/O Transport

The server can use standard input / output (stdio) transport (default). This provides local streaming:

Streamable HTTP Transport

The server can use HTTP streaming transport. This provides bidirectional streaming over HTTP:

# Default HTTP transport on localhost:8100

hostinger-api-mcp --http

Specify custom host and port

hostinger-api-mcp --http --host 0.0.0.0 --port 8150

Command Line Options

Options:

--http Use HTTP streaming transport (requires HOSTINGER_API_TOKEN env var) --stdio Use Server-Sent Events transport (default) --host {host} Hostname or IP address to listen on (default: 127.0.0.1) --port {port} Port to bind to (default: 8100) --login Run OAuth sign-in flow and exit --logout Revoke stored OAuth credentials and exit --help Show help message

Using as an MCP Tool Provider

This server implements the Model Context Protocol (MCP) and can be used with any MCP-compatible consumer.

Example of connecting to this server using HTTP streaming transport:

import { Client } from "@modelcontextprotocol/sdk/client/index.js";

import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";

// Create HTTP transport const transport = new StreamableHTTPClientTransport({ url: "http://localhost:8100/", headers: { "Authorization": Bearer ${process.env.HOSTINGER_API_TOKEN} } });

// Connect to the MCP server const client = new Client({ name: "my-client", version: "1.0.0" }, { capabilities: {} });

await client.connect(transport);

// List available tools const { tools } = await client.listTools(); console.log("Available tools:", tools);

// Execute an operation const result = await client.callTool({ name: "execute", arguments: { operation: "billing_catalog_list", params: { category: "DOMAIN" } } }); console.log("Tool result:", result);

Tools

Every server exposes three tools:

• search — find operations by keyword; returns each match with its inputSchema.
• execute — run one operation: { "operation": " ", "params": { ... } }.
• multi-execute — run up to 20 operations in order, stopping at the first failure. A params value that is exactly "$steps. . " is replaced by that value from an earlier step's result.

Operations

The operations search offers, by binary:

Operations that newer tools replace are hidden from search, and not documented, in every binary that also offers the replacing tool. Some keep working through execute until they are removed. Others only run inside the tool that replaced them: execute refuses them and names that tool.

hostinger-agency-hosting-mcp

changelog_list-entries

What's new and what's coming at Hostinger: list entries of the public Hostinger changelog (release notes, product updates, recent changes, new features and improvements) and of the public roadmap (upcoming features not released yet). Released entries come newest first; upcoming items come soonest expected release first. Reads released changelog entries by default; pick upcoming for the roadmap or all for both. Filter by product or date. Each entry has its title, summary, product, URL, status (released or upcoming), and plan when the entry states one; released entries have their date, upcoming items their expected release date when set. Needs no API token.

• Method: custom
• Path: custom

agency-hosting_deploy-node-static-website

Deploy a node-static Agency Plan (h5g) website from an archive file. WARNING: this overwrites the website's existing contents and cannot be undone — always confirm with the user before proceeding. Use this for Agency Plan websites of type node-static (a Node.js-built static site that requires a build step or a plain simple static site). The tool resolves the website from its domain, uploads the archive to the website's file browser over TUS, and triggers the build-assets process which builds the site and deploys the result to public_html. This operation is synchronous: the build and deployment complete before the tool returns, so the website is live as soon as the tool finishes successfully — there is no separate asynchronous build to wait for or poll. Upload credentials are generated and used internally — do not call a separate upload-url endpoint or upload the archive yourself, this tool does it end-to-end. For plain PHP applications that should be extracted as-is, use agency-hosting_deploy-php-application instead. The website UID is automatically resolved from the domain.

• Method: custom
• Path: custom

agency-hosting_deploy-php-application

Deploy a PHP (or other non-build) Agency Plan (h5g) website from an archive file. WARNING: this overwrites the website's existing contents and cannot be undone — always confirm with the user before proceeding. Use this for Agency Plan websites where the archive contents should be extracted and served as-is with no build step (e.g., PHP applications). The tool resolves the website from its domain, uploads the archive to the website's file browser over TUS, and triggers the import-archive process which overwrites the website contents with the archive contents. This operation is synchronous: the archive is extracted and deployed before the tool returns, so the website is live as soon as the tool finishes successfully — there is no separate asynchronous build to wait for or poll. Upload credentials are generated and used internally — do not call a separate upload-url endpoint or upload the archive yourself, this tool does it end-to-end. For node-static websites that require a build step, use agency-hosting_deploy-node-static-website instead. The w