English Français العربية

io.github.hostkey-cloud/mcp-server

Official registry Search and web

MCP server for Hostkey .com (InvAPI): servers, power, order, DNS, S3, billing

Source code Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http io-github-hostkey-cloud-mcp-server 'https://mcp.hostkey.com/mcp' --header 'Authorization: <Bearer <InvAPI API key> for the .com portal (invapi.hostkey.com)>'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "io-github-hostkey-cloud-mcp-server": {
            "type": "http",
            "url": "https://mcp.hostkey.com/mcp",
            "headers": {
                "Authorization": "<Bearer <InvAPI API key> for the .com portal (invapi.hostkey.com)>"
            }
        }
    }
}
NPM package hostkey-mcp-server
Claude Code 
claude mcp add io-github-hostkey-cloud-mcp-server -e 'HOSTKEY_API_KEY=<your hostkey_api_key>' -e 'HOSTKEY_TOKEN_TTL=<HOSTKEY_TOKEN_TTL>' -e 'HOSTKEY_ALLOW_DESTRUCTIVE=<HOSTKEY_ALLOW_DESTRUCTIVE>' -- npx -y hostkey-mcp-server@1.0.8
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "io-github-hostkey-cloud-mcp-server": {
            "command": "npx",
            "args": [
                "-y",
                "hostkey-mcp-server@1.0.8"
            ],
            "env": {
                "HOSTKEY_API_KEY": "<your hostkey_api_key>",
                "HOSTKEY_TOKEN_TTL": "<HOSTKEY_TOKEN_TTL>",
                "HOSTKEY_ALLOW_DESTRUCTIVE": "<HOSTKEY_ALLOW_DESTRUCTIVE>"
            }
        }
    }
}

Environment variables

  • HOSTKEY_API_KEY required secret InvAPI API key for the .com portal (invapi.hostkey.com); per-server keys supported
  • HOSTKEY_TOKEN_TTL Session token TTL in seconds (default 3600)
  • HOSTKEY_ALLOW_DESTRUCTIVE Set to 1 to allow destructive operations (OS reinstall, PXE cycle, service cancellation)

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. Hostkey MCP Server
  2. 1. Get an API key
  3. 2. Install
  4. 3. Confirming dangerous operations
  5. 4. Tools
  6. Prompts
  7. Docs

Hostkey MCP Server

MCP server for Hostkey (.com portal, InvAPI invapi.hostkey.com). Runs locally over stdio — Cursor, VS Code, and other MCP clients. Hosted remote: https://mcp.hostkey.com/mcp (cloud agents).
Endpointhttps://invapi.hostkey.com (hardcoded)
AuthHOSTKEY_API_KEY
Tools132 typed tools + call_api_raw

Gives the model access to your Hostkey account: servers, catalog and ordering, power, OS reinstall, network, DNS, snapshots, IPMI/console, ISO, S3, Remote Hands, billing, and API keys.

1. Get an API key

InvAPI → API keys → create a key.

Prefer a dedicated key for MCP. Per-server keys limit access to one server. DNS writes need the pdns/edit permission.

2. Install

Cursor

Click the button, replace YOUR_API_KEY with your InvAPI key, then confirm.

Or add to .cursor/mcp.json manually:

{
  "mcpServers": {
    "hostkey-mcp-server": {
      "command": "npx",
      "args": ["-y", "hostkey-mcp-server"],
      "env": {
        "HOSTKEY_API_KEY": "your-api-key"
      }
    }
  }
}
Remote (cloud agents)

No local Node/npx. Point the client at the hosted endpoint and send your InvAPI key:

{
  "mcpServers": {
    "hostkey": {
      "url": "https://mcp.hostkey.com/mcp",
      "headers": {
        "Authorization": "Bearer your-api-key"
      }
    }
  }
}
VS Code

.vscode/mcp.json:

{
  "servers": {
    "hostkey-mcp-server": {
      "command": "npx",
      "args": ["-y", "hostkey-mcp-server"],
      "env": {
        "HOSTKEY_API_KEY": "your-api-key"
      }
    }
  }
}

Optional: HOSTKEY_TOKEN_TTL, HOSTKEY_HTTP_TIMEOUT, HOSTKEY_ALLOW_DESTRUCTIVE (see .env.example).

From source (Node.js ≥ 22.18): npm install && npm run build.

3. Confirming dangerous operations

Every write call needs confirm=true. Without it, nothing changes.

Also:

  • order_server defaults to dry_run — a real order only after explicit consent;
  • OS reinstall, PXE, and service cancellation require HOSTKEY_ALLOW_DESTRUCTIVE=1;
  • passwords and tokens are masked in responses.

Long jobs (deploy, reinstall) return a callback key — poll with check_task.

4. Tools

Groups (full list via tools/list):

GroupExamples
Serversget_servers, get_server, get_power_status
Cataloglist_presets, list_os, list_traffic_plans
Power & orderpower_on, power_off, order_server, reinstall_server
PXEcreate_reinstall_task → … → clear_pxe_config
Network / DNSports, PTR, zones and records
Snapshots, ISO, S3VM snapshots, images, buckets
Remote Handsduty-shift tickets (request_rh_*, rhr_*)
Billinginvoices, payments, contacts
Misccheck_task, call_api_raw

Prompts

PromptPurpose
order_server_promptguided server order
reinstall_server_promptOS reinstall
troubleshoot_server_promptdiagnostics

Or just ask: “list my servers” / “order a VPS in NL”.

Docs

Frequently asked questions

What is io.github.hostkey-cloud/mcp-server?

MCP server for Hostkey .com (InvAPI): servers, power, order, DNS, S3, billing

How do I install io.github.hostkey-cloud/mcp-server?

It runs as a remote server. In Claude Code: claude mcp add --transport http io-github-hostkey-cloud-mcp-server 'https://mcp.hostkey.com/mcp' --header 'Authorization: <Bearer <InvAPI API key> for the .com portal (invapi.hostkey.com)>'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.hostkey-cloud/mcp-server need an API key?

Yes. It expects HOSTKEY_API_KEY, Authorization, which you set in its configuration.

Is io.github.hostkey-cloud/mcp-server open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains io.github.hostkey-cloud/mcp-server?

It is published by hostkey-cloud. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.