← Back to search

hetzner-mcp-server

nityesh Scanned 6d ago

MCP server for managing Hetzner Cloud infrastructure from Claude Code

B
77.9 / 100

Versions

1.0.0latest
Jan 6, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 14

hetzner_list_server_types
annotations: verified low

List all available server types (instance sizes) with their specs and pricing. Returns information about available server configurations including: - Name (e.g., "cx22", "cpx11") - CPU cores and type - Memory (GB) - Disk size (GB) - Hourly and monthly pricing Use this to find the right server type when creating a new server.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
hetzner_list_images
annotations: verified low

List available OS images for creating servers. Returns system images (operating systems) like Ubuntu, Debian, CentOS, etc. Each image includes: - Name (e.g., "ubuntu-24.04") - OS flavor and version - Architecture (x86 or arm) Use this to find the right image when creating a new server.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
hetzner_list_locations
annotations: verified low

List available datacenter locations. Returns all Hetzner datacenter locations where you can create servers: - Location code (e.g., "fsn1", "nbg1", "hel1") - City and country - Network zone Use this to choose where to deploy your server.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
hetzner_list_ssh_keys
annotations: verified low

List all SSH keys in the project. Returns all SSH public keys that have been added to this project. SSH keys are used to authenticate when connecting to servers.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
hetzner_get_ssh_key
annotations: verified low

Get details of a specific SSH key by ID.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
hetzner_create_ssh_key
annotations: verified low

Add a new SSH public key to the project. The SSH key can then be used when creating servers to enable SSH access. Args: - name: A name for the SSH key (e.g., "my-laptop") - public_key: The SSH public key content (starts with "ssh-rsa", "ssh-ed25519", etc.) - labels: Optional key-value labels for organization

readOnlyHint false openWorldHint true idempotentHint false destructiveHint false
hetzner_delete_ssh_key
annotations: verified low

Delete an SSH key from the project. This does NOT affect existing servers that were created with this key. They will continue to work with the key.

readOnlyHint false openWorldHint true idempotentHint true destructiveHint true
hetzner_list_servers
annotations: verified low

List all servers in the project. Returns all servers with their: - Name and ID - Status (running, off, etc.) - IP addresses - Server type (CPU, RAM, disk) - Location - Image/OS

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
hetzner_get_server
annotations: verified low

Get detailed information about a specific server.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
hetzner_create_server
annotations: verified low

Create a new server. Required parameters: - name: Server name (letters, digits, hyphens) - server_type: Instance size (e.g., "cx22", "cpx11"). Use hetzner_list_server_types to see options. - image: OS image (e.g., "ubuntu-24.04"). Use hetzner_list_images to see options. Optional parameters: - location: Datacenter (e.g., "fsn1", "nbg1"). Use hetzner_list_locations to see options. - ssh_keys: List of SSH key names or IDs for server access - labels: Key-value labels for organization Returns the new server details including IP address and root password (if no SSH keys specified).

readOnlyHint false openWorldHint true idempotentHint false destructiveHint false
hetzner_delete_server
annotations: verified low

Delete a server permanently. ⚠️ This action is irreversible. All data on the server will be lost.

readOnlyHint false openWorldHint true idempotentHint true destructiveHint true
hetzner_power_on_server
annotations: verified low

Power on a server that is currently off.

readOnlyHint false openWorldHint true idempotentHint true destructiveHint false
hetzner_power_off_server
annotations: verified low

Power off a server (hard shutdown). This is like pulling the power cord. For a graceful shutdown, SSH into the server and run 'shutdown'.

readOnlyHint false openWorldHint true idempotentHint true destructiveHint true
hetzner_reboot_server
annotations: verified low

Reboot a server (hard reset). This is like pressing the reset button. For a graceful reboot, SSH into the server and run 'reboot'.

readOnlyHint false openWorldHint true idempotentHint true destructiveHint true

Permissions 1

env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 72

info
Tool 'hetzner_list_server_types' annotations are consistent annotation_checker · 80%
info
Tool 'hetzner_list_images' annotations are consistent annotation_checker · 80%
info
Tool 'hetzner_list_locations' annotations are consistent annotation_checker · 80%
info
Tool 'hetzner_list_ssh_keys' annotations are consistent annotation_checker · 80%
info
Tool 'hetzner_get_ssh_key' annotations are consistent annotation_checker · 80%
info
Tool 'hetzner_create_ssh_key' annotations are consistent annotation_checker · 80%
info
Tool 'hetzner_delete_ssh_key' annotations are consistent annotation_checker · 80%
info
Tool 'hetzner_list_servers' annotations are consistent annotation_checker · 80%
info
Tool 'hetzner_get_server' annotations are consistent annotation_checker · 80%
info
Tool 'hetzner_create_server' annotations are consistent annotation_checker · 80%
info
Tool 'hetzner_delete_server' annotations are consistent annotation_checker · 80%
info
Tool 'hetzner_power_on_server' annotations are consistent annotation_checker · 80%
info
Tool 'hetzner_power_off_server' annotations are consistent annotation_checker · 80%
info
Tool 'hetzner_reboot_server' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.6.1 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.6.1 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-35jp-ww65-95wh) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-3g43-6gmg-66jw) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-3p68-rc4w-qgx5) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-3w6x-2g7m-8v23) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-42h9-826w-cgv3) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-43fc-jf86-j433) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-445q-vr5w-6q77) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-4hjh-wcwx-xvwj) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-5c9x-8gcm-mpgx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-62hf-57xw-28j9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-6chq-wfr3-2hj9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-777c-7fjr-54vf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-7q8q-rj6j-mhjq) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-898c-q2cr-xwhg) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-9fr6-4gfg-395g) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-fvcv-3m26-pcqx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-hfxv-24rg-xrqf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-j5f8-grm9-p9fc) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-j8rh-479h-cp32) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-jqh4-m9w3-8hp9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-jr5f-v2jv-69x6) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-m7pr-hjqh-92cm) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-mmx7-hfxf-jppx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-p92q-9vqr-4j8v) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-pf86-5x62-jrwf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-pmv8-rq9r-6j72) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-pmwg-cvhr-8vh7) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-q8qp-cvcw-x6jj) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-vf2m-468p-8v99) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-vh66-26gq-q6x8) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-w9j2-pvgh-6h63) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-xhjh-pmcv-23jw) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.9 (GHSA-xx6v-rp6x-q39c) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: hetzner_list_server_types manifest_parser · 85%
info
Tool: hetzner_list_images manifest_parser · 85%
info
Tool: hetzner_list_locations manifest_parser · 85%
info
Tool: hetzner_list_ssh_keys manifest_parser · 85%
info
Tool: hetzner_get_ssh_key manifest_parser · 85%
info
Tool: hetzner_create_ssh_key manifest_parser · 85%
info
Tool: hetzner_delete_ssh_key manifest_parser · 85%
info
Tool: hetzner_list_servers manifest_parser · 85%
info
Tool: hetzner_get_server manifest_parser · 85%
info
Tool: hetzner_create_server manifest_parser · 85%
info
Tool: hetzner_delete_server manifest_parser · 85%
info
Tool: hetzner_power_on_server manifest_parser · 85%
info
Tool: hetzner_power_off_server manifest_parser · 85%
info
Tool: hetzner_reboot_server manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (1) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Invisible Unicode characters in 'hetzner_delete_server' poisoning · 92%
info
SBOM generated: 135 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%