Install
$ agentstack add mcp-hostinger-api-mcp-server ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ● Environment & secrets Used
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
hostinger-api-mcp
Model Context Protocol (MCP) server for Hostinger API.
Prerequisites
- Node.js version 24 or higher
If you don't have Node.js installed, you can download it from the official website. Alternatively, you can use a package manager like Homebrew (for macOS) or Chocolatey (for Windows) to install Node.js.
We recommend using NVM (Node Version Manager) to install and manage installed Node.js versions. After installing NVM, you can install Node.js with the following command:
nvm install v24
nvm use v24
Installation
To install the MCP server, run one of the following command, depending on your package manager:
# Install globally from npm
npm install -g hostinger-api-mcp
# Or with yarn
yarn global add hostinger-api-mcp
# Or with pnpm
pnpm add -g hostinger-api-mcp
Update
To update the MCP server to the latest version, use one of the following commands, depending on your package manager:
# Update globally from npm
npm update -g hostinger-api-mcp
# Or with yarn
yarn global upgrade hostinger-api-mcp
# Or with pnpm
pnpm update -g hostinger-api-mcp
Binaries
This package installs the following MCP server commands:
hostinger-api-mcp— unified server with every tool (146 total)hostinger-billing-mcp— 7 tools for billinghostinger-dns-mcp— 8 tools for dnshostinger-domains-mcp— 18 tools for domainshostinger-ecommerce-mcp— 7 tools for ecommercehostinger-horizons-mcp— 2 tools for horizonshostinger-hosting-mcp— 30 tools for hostinghostinger-reach-mcp— 12 tools for reachhostinger-vps-mcp— 62 tools for vps
Pick the binary that matches your agent's scope. hostinger-api-mcp remains the backwards-compatible default.
Configuration
The following environment variables can be configured when running the server:
DEBUG: Enable debug logging (true/false) (default: false)HOSTINGER_API_TOKEN: Your API token, which will be sent in theAuthorizationheader. When set, OAuth is bypassed entirely.API_TOKEN: Deprecated alias forHOSTINGER_API_TOKEN. Will be removed in a future version — preferHOSTINGER_API_TOKEN.OAUTH_ISSUER: OAuth server base URL (default:https://auth.hostinger.com). Only used whenHOSTINGER_API_TOKENis not set.
Authentication
The server supports two authentication methods:
API Token (recommended for CI/scripts)
Set HOSTINGER_API_TOKEN in the environment or .env file. When present it always takes precedence — no OAuth code runs.
OAuth 2.0 with PKCE (interactive sign-in)
When HOSTINGER_API_TOKEN is not set and the server runs in stdio mode, OAuth 2.0 with PKCE is used automatically on the first authenticated tool call:
- A dynamic OAuth client is registered with the issuer (RFC 7591) — once per machine.
- A browser window opens to the authorization page.
- After sign-in, the server captures the redirect on a local ephemeral port, exchanges the code for tokens, and stores them.
- Subsequent calls reuse the stored access token; expired tokens are refreshed automatically. If a refresh token is revoked, the browser flow is re-launched.
Credentials are stored at:
- macOS / Linux:
~/.config/hostinger-mcp/credentials.json(mode 0600) - Windows:
%APPDATA%\hostinger-mcp\credentials.json
Credentials are shared across all Hostinger MCP binaries (hostinger-api-mcp, hostinger-vps-mcp, etc.).
Manual commands:
# Run the OAuth sign-in flow immediately (don't wait for the first tool call)
hostinger-api-mcp --login
# Revoke stored credentials
hostinger-api-mcp --logout
HTTP transport note: OAuth sign-in is not supported in --http mode. Set HOSTINGER_API_TOKEN before using --http.
Usage
JSON configuration for Claude, Cursor, etc.
{
"mcpServers": {
"hostinger-api": {
"command": "hostinger-api-mcp",
"env": {
"DEBUG": "false",
"HOSTINGER_API_TOKEN": "YOUR API TOKEN"
}
}
}
}
Transport Options
The MCP server supports two transport modes:
Standard I/O Transport
The server can use standard input / output (stdio) transport (default). This provides local streaming:
Streamable HTTP Transport
The server can use HTTP streaming transport. This provides bidirectional streaming over HTTP:
# Default HTTP transport on localhost:8100
hostinger-api-mcp --http
# Specify custom host and port
hostinger-api-mcp --http --host 0.0.0.0 --port 8150
Command Line Options
Options:
--http Use HTTP streaming transport (requires HOSTINGER_API_TOKEN env var)
--stdio Use Server-Sent Events transport (default)
--host {host} Hostname or IP address to listen on (default: 127.0.0.1)
--port {port} Port to bind to (default: 8100)
--login Run OAuth sign-in flow and exit
--logout Revoke stored OAuth credentials and exit
--help Show help message
Using as an MCP Tool Provider
This server implements the Model Context Protocol (MCP) and can be used with any MCP-compatible consumer.
Example of connecting to this server using HTTP streaming transport:
import { Client } from "@modelcontextprotocol/sdk/client/index.js";
import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
// Create HTTP transport
const transport = new StreamableHTTPClientTransport({
url: "http://localhost:8100/",
headers: {
"Authorization": `Bearer ${process.env.HOSTINGER_API_TOKEN}`
}
});
// Connect to the MCP server
const client = new Client({
name: "my-client",
version: "1.0.0"
}, {
capabilities: {}
});
await client.connect(transport);
// List available tools
const { tools } = await client.listTools();
console.log("Available tools:", tools);
// Call a tool
const result = await client.callTool({
name: "billing_getCatalogItemListV1",
arguments: { category: "DOMAIN" }
});
console.log("Tool result:", result);
Available Tools
This MCP server provides the following tools:
hostinger-billing-mcp
billing_getCatalogItemListV1
Retrieve catalog items available for order.
Prices in catalog items is displayed as cents (without floating point), e.g: float 17.99 is displayed as integer 1799.
Use this endpoint to view available services and pricing before placing orders.
- Method:
GET - Path:
/api/billing/v1/catalog
billing_setDefaultPaymentMethodV1
Set the default payment method for your account.
Use this endpoint to configure the primary payment method for future orders.
- Method:
POST - Path:
/api/billing/v1/payment-methods/{paymentMethodId}
billing_deletePaymentMethodV1
Delete a payment method from your account.
Use this endpoint to remove unused payment methods from user accounts.
- Method:
DELETE - Path:
/api/billing/v1/payment-methods/{paymentMethodId}
billing_getPaymentMethodListV1
Retrieve available payment methods that can be used for placing new orders.
If you want to add new payment method, please use hPanel.
Use this endpoint to view available payment options before creating orders.
- Method:
GET - Path:
/api/billing/v1/payment-methods
billing_getSubscriptionListV1
Retrieve a list of all subscriptions associated with your account.
Use this endpoint to monitor active services and billing status.
- Method:
GET - Path:
/api/billing/v1/subscriptions
billing_disableAutoRenewalV1
Disable auto-renewal for a subscription.
Use this endpoint when disable auto-renewal for a subscription.
- Method:
DELETE - Path:
/api/billing/v1/subscriptions/{subscriptionId}/auto-renewal/disable
billing_enableAutoRenewalV1
Enable auto-renewal for a subscription.
Use this endpoint when enable auto-renewal for a subscription.
- Method:
PATCH - Path:
/api/billing/v1/subscriptions/{subscriptionId}/auto-renewal/enable
hostinger-dns-mcp
DNS_getDNSSnapshotV1
Retrieve particular DNS snapshot with contents of DNS zone records.
Use this endpoint to view historical DNS configurations for domains.
- Method:
GET - Path:
/api/dns/v1/snapshots/{domain}/{snapshotId}
DNS_getDNSSnapshotListV1
Retrieve DNS snapshots for a domain.
Use this endpoint to view available DNS backup points for restoration.
- Method:
GET - Path:
/api/dns/v1/snapshots/{domain}
DNS_restoreDNSSnapshotV1
Restore DNS zone to the selected snapshot.
Use this endpoint to revert domain DNS to a previous configuration.
- Method:
POST - Path:
/api/dns/v1/snapshots/{domain}/{snapshotId}/restore
DNS_getDNSRecordsV1
Retrieve DNS zone records for a specific domain.
Use this endpoint to view current DNS configuration for domain management.
- Method:
GET - Path:
/api/dns/v1/zones/{domain}
DNS_updateDNSRecordsV1
Update DNS records for the selected domain.
Using overwrite = true will replace existing records with the provided ones. Otherwise existing records will be updated and new records will be added.
Use this endpoint to modify domain DNS configuration.
- Method:
PUT - Path:
/api/dns/v1/zones/{domain}
DNS_deleteDNSRecordsV1
Delete DNS records for the selected domain.
To filter which records to delete, add the name of the record and type to the filter. Multiple filters can be provided with single request.
If you have multiple records with the same name and type, and you want to delete only part of them, refer to the Update zone records endpoint.
Use this endpoint to remove specific DNS records from domains.
- Method:
DELETE - Path:
/api/dns/v1/zones/{domain}
DNS_resetDNSRecordsV1
Reset DNS zone to the default records.
Use this endpoint to restore domain DNS to original configuration.
- Method:
POST - Path:
/api/dns/v1/zones/{domain}/reset
DNS_validateDNSRecordsV1
Validate DNS records prior to update for the selected domain.
If the validation is successful, the response will contain 200 Success code. If there is validation error, the response will fail with 422 Validation error code.
Use this endpoint to verify DNS record validity before applying changes.
- Method:
POST - Path:
/api/dns/v1/zones/{domain}/validate
hostinger-domains-mcp
v2_getDomainVerificationsDIRECT
Retrieve a list of pending and completed domain verifications.
- Method:
GET - Path:
/api/v2/direct/verifications/active
domains_checkDomainAvailabilityV1
Check availability of domain names across multiple TLDs.
Multiple TLDs can be checked at once. If you want alternative domains with response, provide only one TLD and set with_alternatives to true. TLDs should be provided without leading dot (e.g. com, net, org).
Endpoint has rate limit of 10 requests per minute.
Use this endpoint to verify domain availability before purchase.
- Method:
POST - Path:
/api/domains/v1/availability
domains_getDomainForwardingV1
Retrieve domain forwarding data.
Use this endpoint to view current redirect configuration for domains.
- Method:
GET - Path:
/api/domains/v1/forwarding/{domain}
domains_deleteDomainForwardingV1
Delete domain forwarding data.
Use this endpoint to remove redirect configuration from domains.
- Method:
DELETE - Path:
/api/domains/v1/forwarding/{domain}
domains_createDomainForwardingV1
Create domain forwarding configuration.
Use this endpoint to set up domain redirects to other URLs.
- Method:
POST - Path:
/api/domains/v1/forwarding
domains_enableDomainLockV1
Enable domain lock for the domain.
When domain lock is enabled, the domain cannot be transferred to another registrar without first disabling the lock.
Use this endpoint to secure domains against unauthorized transfers.
- Method:
PUT - Path:
/api/domains/v1/portfolio/{domain}/domain-lock
domains_disableDomainLockV1
Disable domain lock for the domain.
Domain lock needs to be disabled before transferring the domain to another registrar.
Use this endpoint to prepare domains for transfer to other registrars.
- Method:
DELETE - Path:
/api/domains/v1/portfolio/{domain}/domain-lock
domains_getDomainDetailsV1
Retrieve detailed information for specified domain.
Use this endpoint to view comprehensive domain configuration and status.
- Method:
GET - Path:
/api/domains/v1/portfolio/{domain}
domains_getDomainListV1
Retrieve all domains associated with your account.
Use this endpoint to view user's domain portfolio.
- Method:
GET - Path:
/api/domains/v1/portfolio
domains_purchaseNewDomainV1
Purchase and register a new domain name.
If registration fails, login to hPanel and check domain registration status.
If no payment method is provided, your default payment method will be used automatically.
If no WHOIS information is provided, default contact information for that TLD will be used. Before making request, ensure WHOIS information for desired TLD exists in your account.
Some TLDs require additional_details to be provided and these will be validated before completing purchase.
Use this endpoint to register new domains for users.
- Method:
POST - Path:
/api/domains/v1/portfolio
domains_enablePrivacyProtectionV1
Enable privacy protection for the domain.
When privacy protection is enabled, domain owner's personal information is hidden from public WHOIS database.
Use this endpoint to protect domain owner's personal information from public view.
- Method:
PUT - Path:
/api/domains/v1/portfolio/{domain}/privacy-protection
domains_disablePrivacyProtectionV1
Disable privacy protection for the domain.
When privacy protection is disabled, domain owner's personal information is visible in public WHOIS database.
Use this endpoint to make domain owner's information publicly visible.
- Method:
DELETE - Path:
/api/domains/v1/portfolio/{domain}/privacy-protection
domains_updateDomainNameserversV1
Set nameservers for a specified domain.
Be aware, that improper nameserver configuration can lead to the domain being unresolvable or unavailable.
Use this endpoint to configure custom DNS hosting for domains.
- Method:
PUT - Path:
/api/domains/v1/portfolio/{domain}/nameservers
domains_getWHOISProfileV1
Retrieve a WHOIS contact profile.
Use this endpoint to view domain registration contact information.
- Method:
GET - Path:
/api/domains/v1/whois/{whoisId}
domains_deleteWHOISProfileV1
Delete WHOIS contact profile.
Use this endpoint to remove unused contact profiles from account.
- Method:
DELETE - Path:
/api/domains/v1/whois/{whoisId}
domains_getWHOISProfileListV1
Retrieve WHOIS contact profiles.
Use this endpoint to view available contact profiles for domain registration.
- Method:
GET - Path:
/api/domains/v1/whois
domains_createWHOISProfileV1
Create WHOIS contact profile.
Use this endpoint to add new contact information for domain registration.
- Method:
POST - Path:
/api/domains/v1/whois
domains_getWHOISProfileUsageV1
Retrieve domain list where provided WHOIS contact profile is used.
Use this endpoint to view which domains use specific contact profiles.
- Method:
GET - Path:
/api/domains/v1/whois/{whoisId}/usage
hostinger-ecommerce-mcp
ecommerce_enableManualPaymentMethodV1
Enable a manual payment method so the store can accept orders without an online payment provider.
- Method:
POST - Path:
…
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: hostinger
- Source: hostinger/api-mcp-server
- License: MIT
- Homepage: https://developers.hostinger.com
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.