Hetzner Cloud (unofficial)

claude mcp add hetzner-cloud-unofficial -e 'HETZNER_API_TOKEN=<your hetzner_api_token>' -e 'HETZNER_READ_ONLY=false' -e 'HETZNER_CONFIRM_WRITES=false' -e 'HETZNER_DENY_TOOLS=<HETZNER_DENY_TOOLS>' -e 'LOG_LEVEL=warn' -- npx -y @mguttmann/hetzner-cloud-mcp@0.2.0

{
    "mcpServers": {
        "hetzner-cloud-unofficial": {
            "command": "npx",
            "args": [
                "-y",
                "@mguttmann/hetzner-cloud-mcp@0.2.0"
            ],
            "env": {
                "HETZNER_API_TOKEN": "<your hetzner_api_token>",
                "HETZNER_READ_ONLY": "false",
                "HETZNER_CONFIRM_WRITES": "false",
                "HETZNER_DENY_TOOLS": "<HETZNER_DENY_TOOLS>",
                "LOG_LEVEL": "warn"
            }
        }
    }
}

متغيرات البيئة

• HETZNER_API_TOKEN إلزامي سري Hetzner Cloud API token from the Cloud Console (project > Security > API tokens). The server can do exactly what this token allows; use a Read token if the client only needs to read.
• HETZNER_READ_ONLY true: every tool that is not read-only, and hcloud_raw_request with a method other than GET, returns an error without sending a request. Any value other than true, 1, yes, false, 0, no or empty stops the server at startup.
• HETZNER_CONFIRM_WRITES true: every tool that is not read-only returns a preview unless the call carries confirm "YES". Friction against mistakes, not a security boundary.
• HETZNER_DENY_TOOLS Comma-separated tool name globs (for example hcloud_delete_*,hcloud_raw_request) that always return an error. Deny hcloud_raw_request as well, otherwise denied endpoints stay reachable through it. A pattern that matches no tool stops the server at startup.
• LOG_LEVEL Log level of the JSON logs on stderr.