Hetzner Cloud MCP server

Servers, volumes, networks, firewalls, load balancers, pricing and safe power operations. Hosted by usefulapi — connect from Claude, Cursor, or any MCP client.

Claude claude.ai · Desktop

  1. Open Customize → Connectors, then click + Add → Add custom connector.
  2. Enter the name Hetzner Cloud and this URL, then click Add:
    https://hetzner-cloud.usefulapi.io/mcp
  3. Claude opens the login page: enter your Hetzner Cloud API token.
  4. In a chat, click + → Connectors and turn on Hetzner Cloud.

Team and Enterprise: an Owner adds the connector for the organization first.

Claude Code

Run this command, then run /mcp in Claude Code to log in:

claude mcp add --transport http hetzner-cloud https://hetzner-cloud.usefulapi.io/mcp

Cursor

Add to Cursor or add this to ~/.cursor/mcp.json:

{
  "mcpServers": {
    "hetzner-cloud": {
      "url": "https://hetzner-cloud.usefulapi.io/mcp"
    }
  }
}

VS Code

Add to VS Code or add this to .vscode/mcp.json:

{
  "servers": {
    "hetzner-cloud": {
      "type": "http",
      "url": "https://hetzner-cloud.usefulapi.io/mcp"
    }
  }
}

Other MCP clients (Windsurf, Cline, Zed and more): add the URL as a remote MCP server (Streamable HTTP). The client then opens the login page in your browser. Do not add an Authorization header: see Before you connect.

live36 toolsFree 100 tool calls / monthPro $9/mo · $90/yr

Before you connect

The login page asks for your Hetzner Cloud API token.

Create one in the Hetzner Cloud Console → your project → Security → API tokens. Your token is used only to call the API on your behalf and to derive a private account id; it is never shown to anyone.

Add only the URL. Do not add an Authorization header or an API key to the client config. The server signs you in with OAuth: the login page asks for your Hetzner Cloud API token. If the config has such a header, remove it: some clients then send that header instead of the login token, and every call fails with 401.

Example prompts

Turn on the Hetzner Cloud connector, then ask in plain words. The AI picks the tools.

Tools 36

ToolTypeWhat it does
hetzner_list_serversread
List servers
List the servers in the token's project, optionally filtered by name, status or a label selector. Hetzner Cloud: GET /servers.
hetzner_get_serverread
Get one server
Fetch a single server with its type, image, IPs, volumes, networks and protection flags. Hetzner Cloud: GET /servers/{id}.
hetzner_get_server_metricsread
Get server metrics
Fetch CPU, disk or network time series for one server over a window. Hetzner Cloud: GET /servers/{id}/metrics.
hetzner_list_server_typesread
List server types
List the available server types with their cores, memory, disk and hourly and monthly prices — read this before creating a server. Hetzner Cloud: GET /server_types.
hetzner_list_imagesread
List images
List OS images, snapshots and backups you can boot or restore from. Hetzner Cloud: GET /images.
hetzner_list_locationsread
List locations
List the datacentre locations (city, country, network zone) servers can run in. Hetzner Cloud: GET /locations.
hetzner_get_pricingread
Get pricing
Fetch the full price list for the project's currency — server types, volumes, traffic, floating IPs, load balancers and backups. Hetzner Cloud: GET /pricing.
hetzner_get_actionread
Get one action
Fetch the status of one asynchronous action. Every write tool here returns an action id — poll it with this to see whether the operation finished. Hetzner Cloud: GET /actions/{id}.
hetzner_list_volumesread
List volumes
List block-storage volumes, their size and which server they are attached to. Hetzner Cloud: GET /volumes.
hetzner_get_volumesread
Get one volume
Fetch a single resource by id. Hetzner Cloud: GET /volumes/{id}.
hetzner_list_networksread
List networks
List private networks, their IP ranges, subnets and routes. Hetzner Cloud: GET /networks.
hetzner_get_networksread
Get one network
Fetch a single resource by id. Hetzner Cloud: GET /networks/{id}.
hetzner_list_firewallsread
List firewalls
List firewalls, their rules and which resources they are applied to. Hetzner Cloud: GET /firewalls.
hetzner_get_firewallsread
Get one firewall
Fetch a single resource by id. Hetzner Cloud: GET /firewalls/{id}.
hetzner_list_load_balancersread
List load balancers
List load balancers, their services, targets and health status. Hetzner Cloud: GET /load_balancers.
hetzner_get_load_balancersread
Get one load balancer
Fetch a single resource by id. Hetzner Cloud: GET /load_balancers/{id}.
hetzner_list_ssh_keysread
List SSH keys
List the SSH public keys available to inject when creating a server. Hetzner Cloud: GET /ssh_keys.
hetzner_get_ssh_keysread
Get one SSH key
Fetch a single resource by id. Hetzner Cloud: GET /ssh_keys/{id}.
hetzner_list_floating_ipsread
List floating IPs
List floating IPs and which server each is assigned to. Hetzner Cloud: GET /floating_ips.
hetzner_get_floating_ipsread
Get one floating IP
Fetch a single resource by id. Hetzner Cloud: GET /floating_ips/{id}.
hetzner_list_primary_ipsread
List primary IPs
List primary IPs and their assignments. Hetzner Cloud: GET /primary_ips.
hetzner_get_primary_ipsread
Get one primary IP
Fetch a single resource by id. Hetzner Cloud: GET /primary_ips/{id}.
hetzner_list_certificatesread
List certificates
List TLS certificates, managed or uploaded, and their expiry. Hetzner Cloud: GET /certificates.
hetzner_get_certificatesread
Get one certificate
Fetch a single resource by id. Hetzner Cloud: GET /certificates/{id}.
hetzner_create_serverwrite
Create a server
Provision a new server. THIS STARTS BILLING: the chosen server type is charged by the hour from the moment it boots. Call hetzner_list_server_types first to see prices, and hetzner_list_images for a bootable image. Hetzner Cloud: POST /servers.
hetzner_poweron_serverwrite
Power on a server
Power on a stopped server. Returns an action id — poll it with hetzner_get_action. Hetzner Cloud: POST /servers/{id}/actions/poweron.
hetzner_shutdown_serverwrite
Shut down a server
Ask the guest OS to shut down gracefully via ACPI. Prefer this over a hard power-off. Note that a stopped server still costs money — only deleting it stops the bill. Hetzner Cloud: POST /servers/{id}/actions/shutdown.
hetzner_reboot_serverwrite
Reboot a server
Reboot a server gracefully via ACPI. Hetzner Cloud: POST /servers/{id}/actions/reboot.
hetzner_create_image_from_serverwrite
Snapshot a server to an image
Create a snapshot image from a server's disk — the safe thing to do BEFORE a risky change. Snapshots are billed for the space they use. Hetzner Cloud: POST /servers/{id}/actions/create_image.
hetzner_enable_server_backupwrite
Enable server backups
Turn on automatic backups for a server. This adds roughly 20% to the server's price. Hetzner Cloud: POST /servers/{id}/actions/enable_backup.
hetzner_disable_server_backupwrite
Disable server backups
Turn off automatic backups for a server. Existing backups are DELETED. Hetzner Cloud: POST /servers/{id}/actions/disable_backup.
hetzner_change_server_protectionwrite
Change a server's protection
Turn deletion and rebuild protection on or off for a server. Turning protection ON is the safest write in this server. Hetzner Cloud: POST /servers/{id}/actions/change_protection.
hetzner_cloud_usage_statusmeta
Usage status (free-tier meter)
Report the caller's current free-tier usage this month: calls used, monthly limit, remaining, and whether the cap is reached. Read-only; does not count against the meter.
hetzner_cloud_request_featuremeta
Request a missing feature
Tell usefulapi that the user needs something the Hetzner Cloud tools cannot do yet (a missing tool, field or filter). Call it only when the user asks for something none of the tools can do, and tell the user that you send the request. Do not call it for errors or for normal requests. Do not include personal data, credentials or customer records. Stored with the product name and the client type (for example Claude or Cursor), without the user's account. At most 5 requests per day. Does not count against the meter.
hetzner_cloud_upgrademeta
Upgrade to Pro (unlimited)
Subscribe to the Pro plan for UNLIMITED Hetzner Cloud tool calls (the free tier caps monthly usage). Choose monthly ($9/month) or yearly ($90/year — 2 months free) billing. Returns a Stripe Checkout link to open in your browser; after payment your account upgrades automatically. Does not count against the meter.
hetzner_cloud_cancel_subscriptionmeta
Cancel the Pro subscription
Cancel the caller's Hetzner Cloud Pro subscription at the end of the paid period (no refund for the current period; unlimited calls continue until then, then the free tier applies). Requires confirm: true. Run hetzner_cloud_upgrade later to undo the cancel before the period ends. Does not count against the meter.

Pricing

PlanPriceLimit
Free$0100 tool calls / month
Pro$9/mo · $90/yrUnlimited

Pro covers this Hetzner Cloud server only. Subscribe with hetzner_cloud_upgrade (it returns a Stripe Checkout link). Cancel any time with hetzner_cloud_cancel_subscription: Pro continues to the end of the paid period, with no refund for the current period, and running hetzner_cloud_upgrade before then undoes the cancel. Or write to [email protected].

FAQ

Is this an official Hetzner Cloud product?

No. usefulapi is an independent service. It is not affiliated with or endorsed by Hetzner Cloud. The server calls the Hetzner Cloud API with your own Hetzner Cloud access, so it sees only the data that your account can see.

What do I need to connect?

The login page asks for your Hetzner Cloud API token. See Before you connect for where to find it.

Do I put my Hetzner Cloud key or an Authorization header in the client config?

No. Add only the URL. Do not add an Authorization header or an API key to the client config. The server signs you in with OAuth: the login page asks for your Hetzner Cloud API token. If the config has such a header, remove it: some clients then send that header instead of the login token, and every call fails with 401.

How do you keep my Hetzner Cloud credentials?

The login stores them encrypted in the authorization grant of your connection. The server uses them to call the Hetzner Cloud API for you and to derive a private account id for usage metering. usefulapi does not show them on any page or in any reply. To stop all access, remove the connector and change or delete these credentials in Hetzner Cloud.

Can the AI change my Hetzner Cloud data?

Yes, if you approve it. 8 of the 32 Hetzner Cloud tools can create or change data. The other 24 are marked read-only. Most MCP clients ask you to approve a tool call before it runs.

What does it cost?

The Free plan gives 100 tool calls / month. Pro costs $9/mo or $90/yr, with unlimited tool calls, for this Hetzner Cloud server only. Run hetzner_cloud_usage_status to see how many calls you used.

How do I subscribe or cancel?

Ask the AI to run hetzner_cloud_upgrade: it returns a Stripe Checkout link. To cancel, run hetzner_cloud_cancel_subscription. Pro continues to the end of the paid period.

What if a Hetzner Cloud tool that I need is missing?

Tell the AI what you wanted to do. It can send the request with hetzner_cloud_request_feature. We store the text with the server name, the type of AI client and the tool you tried, not with your account, and read every request when we plan new tools. You can send up to 5 requests per day.

Which AI clients can I use?

Any client that supports remote MCP servers (Streamable HTTP) with OAuth login: Claude (web and desktop), Claude Code, Cursor, VS Code, Windsurf and others.

This is a Model Context Protocol endpoint — meant to be connected from an AI client, not opened in a browser. An invalid_token response at the URL is the auth gate working as designed; clients authenticate automatically.

More Developer Tools & Infrastructure MCP servers

AblyApiFlashbunny.netCivoCodecovCodemagicCrowdinDepotdeSECDNSimpleDubEstuary FlowExoscaleGeoapifyHypertuneInngestKindeKinstaKisiKnackLaravel ForgeLocalazyMapTilerNorthflankNS1packagecloudRelease RadarRunCloudScalingoSpinupWPSvixTailscaleTrigger.devUnkeyUpCloudWakaTimeWeblate

All Developer Tools & Infrastructure servers →