Hetzner Cloud MCP by usefulapi

by usefulapi.io · remote · no sign-in to list tools · v1.16.3 · published by io.usefulapi

Servers, volumes, networks, firewalls, load balancers, pricing and safe power operations.

Deletes · 8

Compare Registry entry

32 tools: 8 can delete or cancel things and 24 only read.

Scanned Oct 21, 2026

Deletes or cancels8Claude Code: deny: see these tools
Can't be undone0Claude Code: ask
Changes things0Claude Code: ask
Only reads24Claude Code: allow: see these tools

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http hetzner-cloud https://hetzner-cloud.usefulapi.io/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

32 tools

Deletes or cancels 8Removes, cancels or revokes something.Claude Code: deny

hetzner_change_server_protectionTurn deletion and rebuild protection on or off for a server.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Turn deletion and rebuild protection on or off for a server. Turning protection ON is the safest write in this server. Hetzner Cloud: POST /servers/{id}/actions/change_protection.
Annotations the server declares
- title: Change a server's protection
- destructiveHint: true
hetzner_create_image_from_serverCreate a snapshot image from a server's disk — the safe thing to do BEFORE a risky change.No findings
Why it is in this group
- The name "hetzner_create_image_from_server" says "create": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Create a snapshot image from a server's disk — the safe thing to do BEFORE a risky change. Snapshots are billed for the space they use. Hetzner Cloud: POST /servers/{id}/actions/create_image.
Annotations the server declares
- title: Snapshot a server to an image
- destructiveHint: true
hetzner_create_serverProvision a new server.No findings
Why it is in this group
- The name "hetzner_create_server" says "create": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Provision a new server. THIS STARTS BILLING: the chosen server type is charged by the hour from the moment it boots. Call hetzner_list_server_types first to see prices, and hetzner_list_images for a bootable image. Hetzner Cloud: POST /servers.
Annotations the server declares
- title: Create a server
- destructiveHint: true
hetzner_disable_server_backupTurn off automatic backups for a server.No findings
Why it is in this group
- The name "hetzner_disable_server_backup" says "disable": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Turn off automatic backups for a server. Existing backups are DELETED. Hetzner Cloud: POST /servers/{id}/actions/disable_backup.
Annotations the server declares
- title: Disable server backups
- destructiveHint: true
hetzner_enable_server_backupTurn on automatic backups for a server.No findings
Why it is in this group
- The name "hetzner_enable_server_backup" says "enable": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Turn on automatic backups for a server. This adds roughly 20% to the server's price. Hetzner Cloud: POST /servers/{id}/actions/enable_backup.
Annotations the server declares
- title: Enable server backups
- destructiveHint: true
hetzner_poweron_serverPower on a stopped server.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Power on a stopped server. Returns an action id — poll it with hetzner_get_action. Hetzner Cloud: POST /servers/{id}/actions/poweron.
Annotations the server declares
- title: Power on a server
- destructiveHint: true
hetzner_reboot_serverReboot a server gracefully via ACPI.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Reboot a server gracefully via ACPI. Hetzner Cloud: POST /servers/{id}/actions/reboot.
Annotations the server declares
- title: Reboot a server
- destructiveHint: true
hetzner_shutdown_serverAsk the guest OS to shut down gracefully via ACPI.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Ask the guest OS to shut down gracefully via ACPI. Prefer this over a hard power-off. Note that a stopped server still costs money — only deleting it stops the bill. Hetzner Cloud: POST /servers/{id}/actions/shutdown.
Annotations the server declares
- title: Shut down a server
- destructiveHint: true

Only reads 24Looks things up and changes nothing.Claude Code: allow

hetzner_get_actionFetch the status of one asynchronous action.No findings
Why it is in this group
- The name "hetzner_get_action" says "get": a word for reading.
Description, as the server wrote it
Fetch the status of one asynchronous action. Every write tool here returns an action id — poll it with this to see whether the operation finished. Hetzner Cloud: GET /actions/{id}.
Annotations the server declares
- title: Get one action
- readOnlyHint: true
hetzner_get_certificatesFetch a single resource by id.No findings
Why it is in this group
- The name "hetzner_get_certificates" says "get": a word for reading.
Description, as the server wrote it
Fetch a single resource by id. Hetzner Cloud: GET /certificates/{id}.
Annotations the server declares
- title: Get one certificate
- readOnlyHint: true
hetzner_get_firewallsFetch a single resource by id.No findings
Why it is in this group
- The name "hetzner_get_firewalls" says "get": a word for reading.
Description, as the server wrote it
Fetch a single resource by id. Hetzner Cloud: GET /firewalls/{id}.
Annotations the server declares
- title: Get one firewall
- readOnlyHint: true
hetzner_get_floating_ipsFetch a single resource by id.No findings
Why it is in this group
- The name "hetzner_get_floating_ips" says "get": a word for reading.
Description, as the server wrote it
Fetch a single resource by id. Hetzner Cloud: GET /floating_ips/{id}.
Annotations the server declares
- title: Get one floating IP
- readOnlyHint: true
hetzner_get_load_balancersFetch a single resource by id.No findings
Why it is in this group
- The name "hetzner_get_load_balancers" says "get": a word for reading.
Description, as the server wrote it
Fetch a single resource by id. Hetzner Cloud: GET /load_balancers/{id}.
Annotations the server declares
- title: Get one load balancer
- readOnlyHint: true
hetzner_get_networksFetch a single resource by id.No findings
Why it is in this group
- The name "hetzner_get_networks" says "get": a word for reading.
Description, as the server wrote it
Fetch a single resource by id. Hetzner Cloud: GET /networks/{id}.
Annotations the server declares
- title: Get one network
- readOnlyHint: true
hetzner_get_pricingFetch the full price list for the project's currency — server types, volumes, traffic, floating IPs, load balancers and backups.No findings
Why it is in this group
- The name "hetzner_get_pricing" says "get": a word for reading.
Description, as the server wrote it
Fetch the full price list for the project's currency — server types, volumes, traffic, floating IPs, load balancers and backups. Hetzner Cloud: GET /pricing.
Annotations the server declares
- title: Get pricing
- readOnlyHint: true
hetzner_get_primary_ipsFetch a single resource by id.No findings
Why it is in this group
- The name "hetzner_get_primary_ips" says "get": a word for reading.
Description, as the server wrote it
Fetch a single resource by id. Hetzner Cloud: GET /primary_ips/{id}.
Annotations the server declares
- title: Get one primary IP
- readOnlyHint: true
hetzner_get_serverFetch a single server with its type, image, IPs, volumes, networks and protection flags.No findings
Why it is in this group
- The name "hetzner_get_server" says "get": a word for reading.
Description, as the server wrote it
Fetch a single server with its type, image, IPs, volumes, networks and protection flags. Hetzner Cloud: GET /servers/{id}.
Annotations the server declares
- title: Get one server
- readOnlyHint: true
hetzner_get_server_metricsFetch CPU, disk or network time series for one server over a window.No findings
Why it is in this group
- The name "hetzner_get_server_metrics" says "get": a word for reading.
Description, as the server wrote it
Fetch CPU, disk or network time series for one server over a window. Hetzner Cloud: GET /servers/{id}/metrics.
Annotations the server declares
- title: Get server metrics
- readOnlyHint: true
hetzner_get_ssh_keysFetch a single resource by id.No findings
Why it is in this group
- The name "hetzner_get_ssh_keys" says "get": a word for reading.
Description, as the server wrote it
Fetch a single resource by id. Hetzner Cloud: GET /ssh_keys/{id}.
Annotations the server declares
- title: Get one SSH key
- readOnlyHint: true
hetzner_get_volumesFetch a single resource by id.No findings
Why it is in this group
- The name "hetzner_get_volumes" says "get": a word for reading.
Description, as the server wrote it
Fetch a single resource by id. Hetzner Cloud: GET /volumes/{id}.
Annotations the server declares
- title: Get one volume
- readOnlyHint: true
hetzner_list_certificatesList TLS certificates, managed or uploaded, and their expiry.No findings
Why it is in this group
- The name "hetzner_list_certificates" says "list": a word for reading.
Description, as the server wrote it
List TLS certificates, managed or uploaded, and their expiry. Hetzner Cloud: GET /certificates.
Annotations the server declares
- title: List certificates
- readOnlyHint: true
hetzner_list_firewallsList firewalls, their rules and which resources they are applied to.No findings
Why it is in this group
- The name "hetzner_list_firewalls" says "list": a word for reading.
Description, as the server wrote it
List firewalls, their rules and which resources they are applied to. Hetzner Cloud: GET /firewalls.
Annotations the server declares
- title: List firewalls
- readOnlyHint: true
hetzner_list_floating_ipsList floating IPs and which server each is assigned to.No findings
Why it is in this group
- The name "hetzner_list_floating_ips" says "list": a word for reading.
Description, as the server wrote it
List floating IPs and which server each is assigned to. Hetzner Cloud: GET /floating_ips.
Annotations the server declares
- title: List floating IPs
- readOnlyHint: true
hetzner_list_imagesList OS images, snapshots and backups you can boot or restore from.No findings
Why it is in this group
- The name "hetzner_list_images" says "list": a word for reading.
Description, as the server wrote it
List OS images, snapshots and backups you can boot or restore from. Hetzner Cloud: GET /images.
Annotations the server declares
- title: List images
- readOnlyHint: true
hetzner_list_load_balancersList load balancers, their services, targets and health status.No findings
Why it is in this group
- The name "hetzner_list_load_balancers" says "list": a word for reading.
Description, as the server wrote it
List load balancers, their services, targets and health status. Hetzner Cloud: GET /load_balancers.
Annotations the server declares
- title: List load balancers
- readOnlyHint: true
hetzner_list_locationsList the datacentre locations (city, country, network zone) servers can run in.No findings
Why it is in this group
- The name "hetzner_list_locations" says "list": a word for reading.
Description, as the server wrote it
List the datacentre locations (city, country, network zone) servers can run in. Hetzner Cloud: GET /locations.
Annotations the server declares
- title: List locations
- readOnlyHint: true
hetzner_list_networksList private networks, their IP ranges, subnets and routes.No findings
Why it is in this group
- The name "hetzner_list_networks" says "list": a word for reading.
Description, as the server wrote it
List private networks, their IP ranges, subnets and routes. Hetzner Cloud: GET /networks.
Annotations the server declares
- title: List networks
- readOnlyHint: true
hetzner_list_primary_ipsList primary IPs and their assignments.No findings
Why it is in this group
- The name "hetzner_list_primary_ips" says "list": a word for reading.
Description, as the server wrote it
List primary IPs and their assignments. Hetzner Cloud: GET /primary_ips.
Annotations the server declares
- title: List primary IPs
- readOnlyHint: true
hetzner_list_server_typesList the available server types with their cores, memory, disk and hourly and monthly prices — read this before creating a server.No findings
Why it is in this group
- The name "hetzner_list_server_types" says "list": a word for reading.
Description, as the server wrote it
List the available server types with their cores, memory, disk and hourly and monthly prices — read this before creating a server. Hetzner Cloud: GET /server_types.
Annotations the server declares
- title: List server types
- readOnlyHint: true
hetzner_list_serversList the servers in the token's project, optionally filtered by name, status or a label selector.No findings
Why it is in this group
- The name "hetzner_list_servers" says "list": a word for reading.
Description, as the server wrote it
List the servers in the token's project, optionally filtered by name, status or a label selector. Hetzner Cloud: GET /servers.
Annotations the server declares
- title: List servers
- readOnlyHint: true
hetzner_list_ssh_keysList the SSH public keys available to inject when creating a server.No findings
Why it is in this group
- The name "hetzner_list_ssh_keys" says "list": a word for reading.
Description, as the server wrote it
List the SSH public keys available to inject when creating a server. Hetzner Cloud: GET /ssh_keys.
Annotations the server declares
- title: List SSH keys
- readOnlyHint: true
hetzner_list_volumesList block-storage volumes, their size and which server they are attached to.No findings
Why it is in this group
- The name "hetzner_list_volumes" says "list": a word for reading.
Description, as the server wrote it
List block-storage volumes, their size and which server they are attached to. Hetzner Cloud: GET /volumes.
Annotations the server declares
- title: List volumes
- readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.16.3. Values in angle brackets are yours to fill in.

claude mcp add --transport http hetzner-cloud https://hetzner-cloud.usefulapi.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__hetzner-cloud__hetzner_list_servers",
      "mcp__hetzner-cloud__hetzner_get_server",
      "mcp__hetzner-cloud__hetzner_get_server_metrics",
      "mcp__hetzner-cloud__hetzner_list_server_types",
      "mcp__hetzner-cloud__hetzner_list_images",
      "mcp__hetzner-cloud__hetzner_list_locations",
      "mcp__hetzner-cloud__hetzner_get_pricing",
      "mcp__hetzner-cloud__hetzner_get_action",
      "mcp__hetzner-cloud__hetzner_list_volumes",
      "mcp__hetzner-cloud__hetzner_get_volumes",
      "mcp__hetzner-cloud__hetzner_list_networks",
      "mcp__hetzner-cloud__hetzner_get_networks",
      "mcp__hetzner-cloud__hetzner_list_firewalls",
      "mcp__hetzner-cloud__hetzner_get_firewalls",
      "mcp__hetzner-cloud__hetzner_list_load_balancers",
      "mcp__hetzner-cloud__hetzner_get_load_balancers",
      "mcp__hetzner-cloud__hetzner_list_ssh_keys",
      "mcp__hetzner-cloud__hetzner_get_ssh_keys",
      "mcp__hetzner-cloud__hetzner_list_floating_ips",
      "mcp__hetzner-cloud__hetzner_get_floating_ips",
      "mcp__hetzner-cloud__hetzner_list_primary_ips",
      "mcp__hetzner-cloud__hetzner_get_primary_ips",
      "mcp__hetzner-cloud__hetzner_list_certificates",
      "mcp__hetzner-cloud__hetzner_get_certificates"
    ],
    "ask": [],
    "deny": [
      "mcp__hetzner-cloud__hetzner_create_server",
      "mcp__hetzner-cloud__hetzner_poweron_server",
      "mcp__hetzner-cloud__hetzner_shutdown_server",
      "mcp__hetzner-cloud__hetzner_reboot_server",
      "mcp__hetzner-cloud__hetzner_create_image_from_server",
      "mcp__hetzner-cloud__hetzner_enable_server_backup",
      "mcp__hetzner-cloud__hetzner_disable_server_backup",
      "mcp__hetzner-cloud__hetzner_change_server_protection"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as hetzner-cloud. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.usefulapi/hetzner-cloud/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

8 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 19:23 UTC.

For agents: Markdown · JSON · report this listing