Hetzner Cloud MCP
An unofficial local Model Context Protocol (MCP) server exposing the entire Hetzner Cloud API as 201 typed tools for read and write operations. It includes code-generated tools from the API specification, hand-tuned wrappers for common server operations, and features like automatic pagination, capped backoff, and optional write guards for safety.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- List and manage cloud servers
- Configure Cloud DNS zones and records
- Manage load balancers and firewalls
- Execute raw API requests via escape hatch
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
@mguttmann/hetzner-cloud-mcp 0.2.0
{
"version": "0.2.0",
"transport": "stdio",
"identifier": "@mguttmann/hetzner-cloud-mcp",
"runtimeHint": "npx",
"registryType": "npm",
"environmentVariables": [
{
"name": "HETZNER_API_TOKEN",
"format": "string",
"isRequired": true,
"description": "Hetzner Cloud API token from the Cloud Console (project > Security > API tokens). The server can do exactly what this token allows; use a Read token if the client only needs to read."
},
{
"name": "HETZNER_READ_ONLY",
"format": "boolean",
"default": "false",
"description": "true: every tool that is not read-only, and hcloud_raw_request with a method other than GET, returns an error without sending a request. Any value other than true, 1, yes, false, 0, no or empty stops the server at startup."
},
{
"name": "HETZNER_CONFIRM_WRITES",
"format": "boolean",
"default": "false",
"description": "true: every tool that is not read-only returns a preview unless the call carries confirm \"YES\". Friction against mistakes, not a security boundary."
},
{
"name": "HETZNER_DENY_TOOLS",
"format": "string",
"description": "Comma-separated tool name globs (for example hcloud_delete_*,hcloud_raw_request) that always return an error. Deny hcloud_raw_request as well, otherwise denied endpoints stay reachable through it. A pattern that matches no tool stops the server at startup."
},
{
"name": "LOG_LEVEL",
"format": "string",
"choices": [
"debug",
"info",
"warn",
"error"
],
"default": "warn",
"description": "Log level of the JSON logs on stderr."
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"hetzner-cloud-mcp": {
"command": "npx",
"args": [
"-y",
"@mguttmann/hetzner-cloud-mcp@0.2.0"
],
"env": {
"HETZNER_API_TOKEN": "<YOUR_HETZNER_API_TOKEN>",
"HETZNER_READ_ONLY": "<YOUR_HETZNER_READ_ONLY>",
"HETZNER_CONFIRM_WRITES": "<YOUR_HETZNER_CONFIRM_WRITES>",
"HETZNER_DENY_TOOLS": "<YOUR_HETZNER_DENY_TOOLS>",
"LOG_LEVEL": "<YOUR_LOG_LEVEL>"
}
}
}
}Cline
{
"mcpServers": {
"hetzner-cloud-mcp": {
"command": "npx",
"args": [
"-y",
"@mguttmann/hetzner-cloud-mcp@0.2.0"
],
"env": {
"HETZNER_API_TOKEN": "<YOUR_HETZNER_API_TOKEN>",
"HETZNER_READ_ONLY": "<YOUR_HETZNER_READ_ONLY>",
"HETZNER_CONFIRM_WRITES": "<YOUR_HETZNER_CONFIRM_WRITES>",
"HETZNER_DENY_TOOLS": "<YOUR_HETZNER_DENY_TOOLS>",
"LOG_LEVEL": "<YOUR_LOG_LEVEL>"
}
}
}
}VS Code
{
"servers": {
"hetzner-cloud-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@mguttmann/hetzner-cloud-mcp@0.2.0"
],
"env": {
"HETZNER_API_TOKEN": "<YOUR_HETZNER_API_TOKEN>",
"HETZNER_READ_ONLY": "<YOUR_HETZNER_READ_ONLY>",
"HETZNER_CONFIRM_WRITES": "<YOUR_HETZNER_CONFIRM_WRITES>",
"HETZNER_DENY_TOOLS": "<YOUR_HETZNER_DENY_TOOLS>",
"LOG_LEVEL": "<YOUR_LOG_LEVEL>"
}
}
}
}Claude Desktop
{
"mcpServers": {
"hetzner-cloud-mcp": {
"command": "npx",
"args": [
"-y",
"@mguttmann/hetzner-cloud-mcp@0.2.0"
],
"env": {
"HETZNER_API_TOKEN": "<YOUR_HETZNER_API_TOKEN>",
"HETZNER_READ_ONLY": "<YOUR_HETZNER_READ_ONLY>",
"HETZNER_CONFIRM_WRITES": "<YOUR_HETZNER_CONFIRM_WRITES>",
"HETZNER_DENY_TOOLS": "<YOUR_HETZNER_DENY_TOOLS>",
"LOG_LEVEL": "<YOUR_LOG_LEVEL>"
}
}
}
}Let your agent find its tools
Find servers like Hetzner Cloud MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.