The only Hetzner MCP with SSH server management. 60 tools — Cloud API + SSH in one MCP server.
Every other Hetzner MCP only wraps the Cloud API. This one adds a full SSH management layer — the tools you actually need when managing production servers.
Layer 1 — Hetzner Cloud API (35 tools): Server power control, metrics, snapshots, backups, firewalls, DNS zones and records, rescue mode, server rebuild, rescale, SSH key management.
Layer 2 — SSH Server Management (25 tools): systemd services, Nginx config and logs, MySQL queries (read-only), disk/memory/CPU monitoring, process lists, supervisor, cron, UFW firewall, syslog, journal logs, and a guarded arbitrary command tool.
Safety features:
- 29 blocked dangerous SSH command patterns
- Read-only SQL enforcement
- Confirm guards on all destructive Cloud API actions
- Tool annotations on every tool (readOnlyHint, destructiveHint)
- Per-IP rate limiting with atomic flock
- Timing-safe API key authentication
Self-hosted PHP 8.1+ with phpseclib3 for SSH. Dynamic multi-server support (1 to N servers). MIT licensed.
Works with Claude.ai, Claude Desktop, Claude Code, VS Code, Cursor, Windsurf, and Zed.
Server Config
{
"mcpServers": {
"hetzner-cloud": {
"url": "https://your-domain.com/api.php?mcp=sse&key=YOUR_MCP_API_KEY"
}
}
}