Hetzner DNS MCP
A community Model Context Protocol server that allows AI agents to manage DNS zones and records via the Hetzner Cloud API. It supports listing, creating, updating, and deleting zones and record sets, importing and exporting BIND zone files, managing TTLs and protection settings, and handling asynchronous zone actions. The server includes safety features like elicitation for destructive calls and input sanitization.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- List, create, update and delete DNS zones and record sets
- Import and export BIND zone files
- Manage DNS record TTLs and protection settings
- Track asynchronous zone actions queued by Hetzner
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
ghcr.io/ni-c/hetzner-dns-mcp:0.6.0
{
"transport": "stdio",
"identifier": "ghcr.io/ni-c/hetzner-dns-mcp:0.6.0",
"registryType": "oci",
"environmentVariables": [
{
"name": "HETZNER_API_TOKEN",
"format": "string",
"isRequired": true,
"description": "Hetzner Cloud API token (project-scoped, Cloud Console -> Security -> API tokens)"
},
{
"name": "HETZNER_READ_ONLY",
"format": "boolean",
"description": "Set to true to register only the read-only tools (default: false)"
},
{
"name": "HETZNER_ALLOW_TOOLS",
"format": "string",
"description": "Comma-separated tool names or list_* prefixes to register; 'essential' selects a curated preset (default: all tools)"
},
{
"name": "HETZNER_DENY_TOOLS",
"format": "string",
"description": "Comma-separated tool names or list_* prefixes to remove from whatever HETZNER_ALLOW_TOOLS left"
},
{
"name": "HETZNER_API_BASE_URL",
"format": "string",
"description": "Override the Hetzner Cloud API base URL (default: https://api.hetzner.cloud/v1)"
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"hetzner-dns-mcp-0-6-0": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"HETZNER_API_TOKEN=<YOUR_HETZNER_API_TOKEN>",
"-e",
"HETZNER_READ_ONLY=<YOUR_HETZNER_READ_ONLY>",
"-e",
"HETZNER_ALLOW_TOOLS=<YOUR_HETZNER_ALLOW_TOOLS>",
"-e",
"HETZNER_DENY_TOOLS=<YOUR_HETZNER_DENY_TOOLS>",
"-e",
"HETZNER_API_BASE_URL=<YOUR_HETZNER_API_BASE_URL>",
"ghcr.io/ni-c/hetzner-dns-mcp:0.6.0"
],
"env": {
"HETZNER_API_TOKEN": "<YOUR_HETZNER_API_TOKEN>",
"HETZNER_READ_ONLY": "<YOUR_HETZNER_READ_ONLY>",
"HETZNER_ALLOW_TOOLS": "<YOUR_HETZNER_ALLOW_TOOLS>",
"HETZNER_DENY_TOOLS": "<YOUR_HETZNER_DENY_TOOLS>",
"HETZNER_API_BASE_URL": "<YOUR_HETZNER_API_BASE_URL>"
}
}
}
}Cline
{
"mcpServers": {
"hetzner-dns-mcp-0-6-0": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"HETZNER_API_TOKEN=<YOUR_HETZNER_API_TOKEN>",
"-e",
"HETZNER_READ_ONLY=<YOUR_HETZNER_READ_ONLY>",
"-e",
"HETZNER_ALLOW_TOOLS=<YOUR_HETZNER_ALLOW_TOOLS>",
"-e",
"HETZNER_DENY_TOOLS=<YOUR_HETZNER_DENY_TOOLS>",
"-e",
"HETZNER_API_BASE_URL=<YOUR_HETZNER_API_BASE_URL>",
"ghcr.io/ni-c/hetzner-dns-mcp:0.6.0"
],
"env": {
"HETZNER_API_TOKEN": "<YOUR_HETZNER_API_TOKEN>",
"HETZNER_READ_ONLY": "<YOUR_HETZNER_READ_ONLY>",
"HETZNER_ALLOW_TOOLS": "<YOUR_HETZNER_ALLOW_TOOLS>",
"HETZNER_DENY_TOOLS": "<YOUR_HETZNER_DENY_TOOLS>",
"HETZNER_API_BASE_URL": "<YOUR_HETZNER_API_BASE_URL>"
}
}
}
}VS Code
{
"servers": {
"hetzner-dns-mcp-0-6-0": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"HETZNER_API_TOKEN=<YOUR_HETZNER_API_TOKEN>",
"-e",
"HETZNER_READ_ONLY=<YOUR_HETZNER_READ_ONLY>",
"-e",
"HETZNER_ALLOW_TOOLS=<YOUR_HETZNER_ALLOW_TOOLS>",
"-e",
"HETZNER_DENY_TOOLS=<YOUR_HETZNER_DENY_TOOLS>",
"-e",
"HETZNER_API_BASE_URL=<YOUR_HETZNER_API_BASE_URL>",
"ghcr.io/ni-c/hetzner-dns-mcp:0.6.0"
],
"env": {
"HETZNER_API_TOKEN": "<YOUR_HETZNER_API_TOKEN>",
"HETZNER_READ_ONLY": "<YOUR_HETZNER_READ_ONLY>",
"HETZNER_ALLOW_TOOLS": "<YOUR_HETZNER_ALLOW_TOOLS>",
"HETZNER_DENY_TOOLS": "<YOUR_HETZNER_DENY_TOOLS>",
"HETZNER_API_BASE_URL": "<YOUR_HETZNER_API_BASE_URL>"
}
}
}
}Claude Desktop
{
"mcpServers": {
"hetzner-dns-mcp-0-6-0": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"HETZNER_API_TOKEN=<YOUR_HETZNER_API_TOKEN>",
"-e",
"HETZNER_READ_ONLY=<YOUR_HETZNER_READ_ONLY>",
"-e",
"HETZNER_ALLOW_TOOLS=<YOUR_HETZNER_ALLOW_TOOLS>",
"-e",
"HETZNER_DENY_TOOLS=<YOUR_HETZNER_DENY_TOOLS>",
"-e",
"HETZNER_API_BASE_URL=<YOUR_HETZNER_API_BASE_URL>",
"ghcr.io/ni-c/hetzner-dns-mcp:0.6.0"
],
"env": {
"HETZNER_API_TOKEN": "<YOUR_HETZNER_API_TOKEN>",
"HETZNER_READ_ONLY": "<YOUR_HETZNER_READ_ONLY>",
"HETZNER_ALLOW_TOOLS": "<YOUR_HETZNER_ALLOW_TOOLS>",
"HETZNER_DENY_TOOLS": "<YOUR_HETZNER_DENY_TOOLS>",
"HETZNER_API_BASE_URL": "<YOUR_HETZNER_API_BASE_URL>"
}
}
}
}Let your agent find its tools
Find servers like Hetzner DNS MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.