io.github.hostinger/hostinger-api-mcp
NPM · HOSTINGER-API-MCP · SCANNED AUG 3
MCP server for Hostinger API
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →
Supply Chain Security88
- No malware found by supply-chain analysis.Pass
- Only part of the dependency tree could be resolved (130 of 131), so this covers what we could see, not the whole tree.Partial
- No install/post-install scripts declared.Pass
- Only part of the dependency tree could be resolved (130 of 131), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency97
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to hostinger/api-mcp-server). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 0 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability0
- Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.Unverified
Stability & Change Management0
- Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.Unverified
Tool Coverage0
- Tool coverage not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.Unverified
Capabilities0
- Protocol version not yet verified: we do not have a sandbox capture of the MCP handshake this version of the package performs yet.Unverified
Unverified: 4 categories
Categories scored 0 because our sandbox run of this package has not given us the schema these checks need to read. That is a gap on our side rather than a finding about the package, and we only credit what we can confirm, so the score stands at 0 until the capture succeeds. We are working through the fleet, so this normally clears without any action from you. How we score packages →
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
npm · hostinger-api-mcp
claude mcp add hostinger-hostinger-api-mcp -- npx -y hostinger-api-mcp
codex mcp add hostinger-hostinger-api-mcp -- npx -y hostinger-api-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"hostinger-hostinger-api-mcp": {
"type": "local",
"command": [
"npx",
"-y",
"hostinger-api-mcp"
],
"enabled": true
}
}
} openclaw mcp add hostinger-hostinger-api-mcp --command npx --arg -y --arg hostinger-api-mcp
mcp_servers:
hostinger-hostinger-api-mcp:
command: "npx"
args: ["-y", "hostinger-api-mcp"] {
"mcpServers": {
"hostinger-hostinger-api-mcp": {
"command": "npx",
"args": [
"-y",
"hostinger-api-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Aug 26 −30
- Stability: fail → unverified ▼ security
- Tool coverage: 100 → unverified ▼ functional
- Capabilities: pass → unverified ▼ functional
- Package version: 1.26.0 → 1.27.0 functional
- 2 Aug 26 +55
- Stability: unverified → fail ▼ security
- Known CVEs: unverified → partial ▲ security
- Install scripts: unverified → pass ▲ security
- Provenance: unverified → pass ▲ security
- Malware scan: unverified → pass ▲ security
- The attested source repository moved: hostinger/api-mcp-server security
- License: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- Schema quality: unverified → good ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Licence: MIT functional
- 31 Jul 26 +15
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 30 Jul 26 0
- Schema quality: Schema quality not yet verified: our sandbox run of this package did not complete, so we have no schema to assess. functional
- Tool coverage: Tool coverage not yet verified: our sandbox run of this package did not complete, so we have no tool definitions to assess. functional
- Package version: 1.25.0 → 1.26.0 functional
- 28 Jul 26 0
- Security disclosure: unverified → fail ▼ functional
- Package version: 1.23.0 → 1.25.0 functional
- 27 Jul 26 6
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Analysed npm/[email protected]
Provenance verified
Ecosystem: npm · Outcome: verified
Reason: verified
- Source repo:
- hostinger/api-mcp-server
- Certificate issuer:
- https://token.actions.githubusercontent.com
- Certificate SAN:
- https://github.com/hostinger/api-mcp-server/.github/workflows/build-release.yaml@refs/heads/main
- Rekor log index:
- 2334886922
- Predicate type:
- https://slsa.dev/provenance/v1
- Subject digest:
- sha512:2b5d7cc090533a4eae671a13600534a331a295d7ddb47f14838f4472f69a4607c124e868414c2453c43023e8c7c4e71d4d639301722a399c2f1671a10
- Discovery method:
- attestation_endpoint
Dependencies 130 packages
130 packages in the resolved dependency tree · 115 deprecated · 52 stale.
The dependency tree was only partially resolved, so these counts may be incomplete.
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
VPS_getTemplateDetailsV1 ~45
Retrieve detailed information about a specific OS template for virtual machines. Use this endpoint to view specific template specifications before deployment.
| Name | Type | Req | Description |
|---|---|---|---|
| templateId | integer | yes | Template ID |
No output schema declared.
No examples provided.
VPS_getTemplatesV1 ~35
Retrieve available OS templates for virtual machines. Use this endpoint to view operating system options before creating or recreating VPS instances.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
VPS_getVirtualMachineDetailsV1 ~45
Retrieve detailed information about a specified virtual machine. Use this endpoint to view comprehensive VPS configuration and status.
| Name | Type | Req | Description |
|---|---|---|---|
| virtualMachineId | integer | yes | Virtual Machine ID |
No output schema declared.
No examples provided.
VPS_getVirtualMachinesV1 ~27
Retrieve all available virtual machines. Use this endpoint to view available VPS instances.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
VPS_installMonarxV1 ~105
Install the Monarx malware scanner on a specified virtual machine. [Monarx](https://www.monarx.com/) is a security tool designed to detect and prevent malware infections on virtual machines. By installing Monarx, users can enhance the security of their virtual machines, ensuring that they are protected against malicious software. Use this endpoint to enable malware protection on VPS instances.
| Name | Type | Req | Description |
|---|---|---|---|
| virtualMachineId | integer | yes | Virtual Machine ID |
No output schema declared.
No examples provided.
VPS_purchaseNewVirtualMachineV1 ~126
Purchase and setup a new virtual machine. If virtual machine setup fails for any reason, login to [hPanel](https://hpanel.hostinger.com/) and complete the setup manually. If no payment method is provided, your default payment method will be used automatically. Use this endpoint to create new VPS instances.
| Name | Type | Req | Description |
|---|---|---|---|
| coupons | array | — | Discount coupon codes |
| item_id | string | yes | Catalog price item ID |
| payment_method_id | integer | — | Payment method ID, default will be used if not provided |
| setup | string | yes | setup parameter |
No output schema declared.
No examples provided.
VPS_recreateVirtualMachineV1 ~263
Recreate a virtual machine from scratch. The recreation process involves reinstalling the operating system and resetting the virtual machine to its initial state. Snapshots, if there are any, will be deleted. ## Password Requirements Password will be checked against leaked password databases. Requirements for the password are: - At least 12 characters long - At least one uppercase letter - At least one lowercase letter - At least one number - Is not leaked publicly **This operation is irreversible and will result in the loss of all data stored on the virtual machine!** Use this endpoint to completely rebuild VPS instances with fresh OS installation.
| Name | Type | Req | Description |
|---|---|---|---|
| panel_password | string | — | Panel password for the panel-based OS template. If not provided, random password will be generated. If OS does not support panel_password this field will be ignored. Password will not be shown in the… |
| password | string | — | Root password for the virtual machine. If not provided, random password will be generated. Password will not be shown in the response. |
| post_install_script_id | integer | — | Post-install script to execute after virtual machine was recreated |
| template_id | integer | yes | Template ID |
| virtualMachineId | integer | yes | Virtual Machine ID |
No output schema declared.
No examples provided.
VPS_resetHostnameV1 ~49
Reset hostname and PTR record of a specified virtual machine to default value. Use this endpoint to restore default hostname configuration for VPS instances.
| Name | Type | Req | Description |
|---|---|---|---|
| virtualMachineId | integer | yes | Virtual Machine ID |
No output schema declared.
No examples provided.
VPS_restartProjectV1 ~94
Restarts all services in a Docker Compose project by stopping and starting containers in the correct dependency order. This operation preserves data volumes and network configurations while refreshing the running containers. Use this to apply configuration changes or recover from service failures.
| Name | Type | Req | Description |
|---|---|---|---|
| projectName | string | yes | Docker Compose project name using alphanumeric characters, dashes, and underscores only |
| virtualMachineId | integer | yes | Virtual Machine ID |
No output schema declared.
No examples provided.
VPS_restartVirtualMachineV1 ~56
Restart a specified virtual machine by fully stopping and starting it. If the virtual machine was stopped, it will be started. Use this endpoint to reboot VPS instances.
| Name | Type | Req | Description |
|---|---|---|---|
| virtualMachineId | integer | yes | Virtual Machine ID |
No output schema declared.
No examples provided.
VPS_restoreBackupV1 ~93
Restore a backup for a specified virtual machine. The system will then initiate the restore process, which may take some time depending on the size of the backup. **All data on the virtual machine will be overwritten with the data from the backup.** Use this endpoint to recover VPS data from backup points.
| Name | Type | Req | Description |
|---|---|---|---|
| backupId | integer | yes | Backup ID |
| virtualMachineId | integer | yes | Virtual Machine ID |
No output schema declared.
No examples provided.
VPS_restoreSnapshotV1 ~78
Restore a specified virtual machine to a previous state using a snapshot. Restoring from a snapshot allows users to revert the virtual machine to that state, which is useful for system recovery, undoing changes, or testing. Use this endpoint to revert VPS instances to previous saved states.
| Name | Type | Req | Description |
|---|---|---|---|
| virtualMachineId | integer | yes | Virtual Machine ID |
No output schema declared.
No examples provided.
VPS_setHostnameV1 ~92
Set hostname for a specified virtual machine. Changing hostname does not update PTR record automatically. If you want your virtual machine to be reachable by a hostname, you need to point your domain A/AAAA records to virtual machine IP as well. Use this endpoint to configure custom hostnames for VPS instances.
| Name | Type | Req | Description |
|---|---|---|---|
| hostname | string | yes | hostname parameter |
| virtualMachineId | integer | yes | Virtual Machine ID |
No output schema declared.
No examples provided.
VPS_setNameserversV1 ~101
Set nameservers for a specified virtual machine. Be aware, that improper nameserver configuration can lead to the virtual machine being unable to resolve domain names. Use this endpoint to configure custom DNS resolvers for VPS instances.
| Name | Type | Req | Description |
|---|---|---|---|
| ns1 | string | yes | ns1 parameter |
| ns2 | string | — | ns2 parameter |
| ns3 | string | — | ns3 parameter |
| virtualMachineId | integer | yes | Virtual Machine ID |
No output schema declared.
No examples provided.
VPS_setPanelPasswordV1 ~121
Set panel password for a specified virtual machine. If virtual machine does not use panel OS, the request will still be processed without any effect. Requirements for password are same as in the [recreate virtual machine endpoint](/#tag/vps-virtual-machine/POST/api/vps/v1/virtual-machines/{virtualMachineId}/recreate). Use this endpoint to configure control panel access credentials for VPS instances.
| Name | Type | Req | Description |
|---|---|---|---|
| password | string | yes | Panel password for the virtual machine |
| virtualMachineId | integer | yes | Virtual Machine ID |
No output schema declared.
No examples provided.
VPS_setRootPasswordV1 ~100
Set root password for a specified virtual machine. Requirements for password are same as in the [recreate virtual machine endpoint](/#tag/vps-virtual-machine/POST/api/vps/v1/virtual-machines/{virtualMachineId}/recreate). Use this endpoint to update administrator credentials for VPS instances.
| Name | Type | Req | Description |
|---|---|---|---|
| password | string | yes | Root password for the virtual machine |
| virtualMachineId | integer | yes | Virtual Machine ID |
No output schema declared.
No examples provided.
VPS_setupPurchasedVirtualMachineV1 ~195
Setup newly purchased virtual machine with `initial` state. Use this endpoint to configure and initialize purchased VPS instances.
| Name | Type | Req | Description |
|---|---|---|---|
| data_center_id | integer | yes | Data center ID |
| enable_backups | boolean | — | Enable weekly backup schedule |
| hostname | string | — | Override default hostname of the virtual machine |
| install_monarx | boolean | — | Install Monarx malware scanner (if supported) |
| ns1 | string | — | Name server 1 |
| ns2 | string | — | Name server 2 |
| password | string | — | Password for the virtual machine. If not provided, random password will be generated. Password will not be shown in the response. |
| post_install_script_id | integer | — | Post-install script ID |
| public_key | object | — | Use SSH key |
| template_id | integer | yes | Template ID |
| virtualMachineId | integer | yes | Virtual Machine ID |
No output schema declared.
No examples provided.
VPS_startProjectV1 ~97
Starts all services in a Docker Compose project that are currently stopped. This operation brings up containers in the correct dependency order as defined in the compose file. Use this to resume a project that was previously stopped or to start services after a system reboot.
| Name | Type | Req | Description |
|---|---|---|---|
| projectName | string | yes | Docker Compose project name using alphanumeric characters, dashes, and underscores only |
| virtualMachineId | integer | yes | Virtual Machine ID |
No output schema declared.
No examples provided.
VPS_startRecoveryModeV1 ~120
Initiate recovery mode for a specified virtual machine. Recovery mode is a special state that allows users to perform system rescue operations, such as repairing file systems, recovering data, or troubleshooting issues that prevent the virtual machine from booting normally. Virtual machine will boot recovery disk image and original disk image will be mounted in `/mnt` directory. Use this endpoint to enable system rescue operations on VPS instances.
| Name | Type | Req | Description |
|---|---|---|---|
| root_password | string | yes | Temporary root password for recovery mode |
| virtualMachineId | integer | yes | Virtual Machine ID |
No output schema declared.
No examples provided.
VPS_startVirtualMachineV1 ~58
Start a specified virtual machine. If the virtual machine is already running, the request will still be processed without any effect. Use this endpoint to power on stopped VPS instances.
| Name | Type | Req | Description |
|---|---|---|---|
| virtualMachineId | integer | yes | Virtual Machine ID |
No output schema declared.
No examples provided.
VPS_stopProjectV1 ~89
Stops all running services in a Docker Compose project while preserving container configurations and data volumes. This operation gracefully shuts down containers in reverse dependency order. Use this to temporarily halt a project without removing data or configurations.
| Name | Type | Req | Description |
|---|---|---|---|
| projectName | string | yes | Docker Compose project name using alphanumeric characters, dashes, and underscores only |
| virtualMachineId | integer | yes | Virtual Machine ID |
No output schema declared.
No examples provided.
VPS_stopRecoveryModeV1 ~62
Stop recovery mode for a specified virtual machine. If virtual machine is not in recovery mode, this operation will fail. Use this endpoint to exit system rescue mode and return VPS to normal operation.
| Name | Type | Req | Description |
|---|---|---|---|
| virtualMachineId | integer | yes | Virtual Machine ID |
No output schema declared.
No examples provided.
VPS_stopVirtualMachineV1 ~87
Stop a specified virtual machine. If the virtual machine is already stopped, the request will still be processed without any effect. This is a compute-only power state change and does not affect billing. To stop future charges, disable auto-renewal on the owning subscription. Use this endpoint to power off running VPS instances.
| Name | Type | Req | Description |
|---|---|---|---|
| virtualMachineId | integer | yes | Virtual Machine ID |
No output schema declared.
No examples provided.
VPS_syncFirewallV1 ~73
Sync a firewall for a specified virtual machine. Firewall can lose sync with virtual machine if the firewall has new rules added, removed or updated. Use this endpoint to apply updated firewall rules to VPS instances.
| Name | Type | Req | Description |
|---|---|---|---|
| firewallId | integer | yes | Firewall ID |
| virtualMachineId | integer | yes | Virtual Machine ID |
No output schema declared.
No examples provided.
VPS_uninstallMonarxV1 ~69
Uninstall the Monarx malware scanner on a specified virtual machine. If Monarx is not installed, the request will still be processed without any effect. Use this endpoint to remove malware scanner from VPS instances.
| Name | Type | Req | Description |
|---|---|---|---|
| virtualMachineId | integer | yes | Virtual Machine ID |
No output schema declared.
No examples provided.
VPS_updateFirewallRuleV1 ~133
Update a specific firewall rule from a specified firewall. Any virtual machine that has this firewall activated will lose sync with the firewall and will have to be synced again manually. Use this endpoint to modify existing firewall rules.
| Name | Type | Req | Description |
|---|---|---|---|
| firewallId | integer | yes | Firewall ID |
| port | string | yes | Port or port range, ex: 1024:2048 |
| protocol | string | yes | protocol parameter |
| ruleId | integer | yes | Firewall Rule ID |
| source | string | yes | source parameter |
| source_detail | string | yes | IP range, CIDR, single IP or `any` |
No output schema declared.
No examples provided.
VPS_updatePostInstallScriptV1 ~65
Update a specific post-install script. Use this endpoint to modify existing automation scripts.
| Name | Type | Req | Description |
|---|---|---|---|
| content | string | yes | Content of the script |
| name | string | yes | Name of the script |
| postInstallScriptId | integer | yes | Post-install script ID |
No output schema declared.
No examples provided.
VPS_updateProjectV1 ~101
Updates a Docker Compose project by pulling the latest image versions and recreating containers with new configurations. This operation preserves data volumes while applying changes from the compose file. Use this to deploy application updates, apply configuration changes, or refresh container images to their latest versions.
| Name | Type | Req | Description |
|---|---|---|---|
| projectName | string | yes | Docker Compose project name using alphanumeric characters, dashes, and underscores only |
| virtualMachineId | integer | yes | Virtual Machine ID |
No output schema declared.
No examples provided.