New Your team’s decisions, in one playbook every coding agent works from. Never answer your agent twice

Hostinger

284 tools. 158 can modify or destroy data without limits.

46 destructive tools with no built-in limits. Policy required.

Last updated:

158 can modify or destroy data
126 read-only
284 tools total

Community server · catalogue entry checked 30/07/2026

How to control Hostinger ↓

What Hostinger exposes to your agents

Read (126) Write / Execute (112) Destructive / Financial (46)
Critical Risk

The most dangerous Hostinger tools

158 of Hostinger's 284 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

How to control Hostinger

PolicyLayer is an MCP gateway — it sits between your AI agents and Hostinger, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default
{
  "billing_create_order": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations
{
  "agency_cache_clear": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "agency_cron_create": {
    "limits": [
      {
        "counter": "agency_cron_create_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "account_overview": {
    "limits": [
      {
        "counter": "account_overview_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Hostinger — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON HOSTINGER →

Instant setup, no code required.

All 284 Hostinger tools

DESTRUCTIVE 39 tools
Destructive agency_cache_clear Clear cache for an Agency Plan website. Destructive agency_cron_delete Delete a cron job. Destructive agency_db_delete Delete a database. Destructive agency_db_delete_user Delete a database user. Destructive agency_website_delete Delete an Agency Plan website. Destructive billing_delete_payment_method Delete a payment method. Destructive clear_api_cache Clear the internal response cache. Use when you need fresh data after making changes. Destructive dns_delete_records Delete specific DNS records from a domain. Destructive dns_reset_records Reset all DNS records for a domain to defaults. Destructive domains_delete_forwarding Remove domain forwarding. Destructive domains_delete_whois_profile Delete a WHOIS profile. Destructive ecommerce_stores_delete Delete an ecommerce store. Destructive hosting_cron_delete Delete a cron job. Destructive hosting_db_delete Delete a database. Destructive hosting_db_remote_delete Remove a remote database connection. Destructive hosting_parked_delete Remove a parked domain. Destructive hosting_subdomains_delete Delete a subdomain. Destructive hosting_websites_delete Delete a website. Destructive mail_aliases_delete Delete an email alias. Destructive mail_autoreplies_delete Delete an autoreply. Destructive mail_catchalls_delete Delete a catch-all. Destructive mail_forwarders_delete Delete an email forwarder. Destructive mail_mailboxes_delete Delete a mailbox. Destructive mail_tokens_revoke Revoke a mail API token. Destructive mail_webhooks_delete Delete a webhook. Destructive reach_contacts_delete Delete a contact. Destructive vps_delete_snapshot Delete the VPS snapshot. Destructive vps_docker_delete Delete a Docker project. Destructive vps_firewall_delete Delete a firewall. Destructive vps_firewall_delete_rule Remove a firewall rule. Destructive vps_keys_delete Delete an SSH public key. Destructive vps_malware_uninstall Remove Monarx malware scanner from a VPS. Destructive vps_ptr_delete Delete a PTR record from a VPS IP. Destructive vps_recreate Recreate (reinstall) a virtual machine. DESTROYS ALL DATA. Destructive vps_restore_backup Restore a backup. Destructive vps_scripts_delete Delete a post-install script. Destructive wp_delete Delete a WordPress installation. Destructive wp_plugins_uninstall Uninstall WordPress plugins. Destructive wp_themes_uninstall Uninstall WordPress themes.
EXECUTE 38 tools
Execute agency_deploy_node_static Deploy a node-static Agency Plan website from an archive. Uploads archive, triggers build, deploys to public_h Execute agency_deploy_php Deploy a PHP application to an Agency Plan website from an archive. Extracts and serves as-is (no build step). Execute agency_website_build_assets Build Node.js assets for an Agency Plan website. Execute batch_vps_restart Restart multiple VPS instances at once. Execute hosting_cache_clear Clear cache for a hosted website. Execute hosting_db_repair Repair a corrupted database. Execute hosting_deploy_js_app Deploy a JavaScript application from an archive. The archive must contain source files only (no node_modules, Execute hosting_deploy_static Deploy a static website from an archive (HTML/CSS/JS/images). Archive must contain pre-built files ready to se Execute hosting_deploy_wp_import Import a WordPress website from an archive and database dump. Files are extracted and site deployed automatica Execute hosting_deploy_wp_plugin Deploy a custom WordPress plugin from a directory/archive. Uploads plugin files and triggers deployment. Execute hosting_deploy_wp_theme Deploy a custom WordPress theme from a directory/archive. Uploads theme files and optionally activates. Execute hosting_nodejs_build_from_archive Create a Node.js build from an uploaded archive. Execute hosting_nodejs_patch_vulnerabilities Auto-patch known Node.js vulnerabilities. Execute hosting_nodejs_restart Restart a Node.js application. Execute hosting_php_update_extensions Enable/disable PHP extensions. Execute mail_webhooks_test Send a test event to a webhook. Execute vps_docker_restart Restart a Docker project. Execute vps_docker_start Start a Docker project. Execute vps_docker_stop Stop a Docker project. Execute vps_docker_update Update a Docker project (re-deploy). Execute vps_firewall_activate Activate a firewall on a VPS. Execute vps_firewall_deactivate Deactivate a firewall from a VPS. Execute vps_firewall_sync Sync firewall rules to a VPS. Execute vps_malware_install Install Monarx malware scanner on a VPS. Execute vps_recovery_start Boot VPS into recovery mode. Execute vps_recovery_stop Exit recovery mode and reboot normally. Execute vps_restart Restart a virtual machine. Execute vps_set_root_password Set root password for a virtual machine. Execute vps_setup Setup a purchased virtual machine with OS and credentials. Execute vps_start Start a virtual machine. Execute vps_stop Stop a virtual machine. Execute wp_install Install WordPress on a hosting account. Execute wp_litespeed_purge Purge the LiteSpeed Cache. Execute wp_maintenance_toggle Toggle maintenance mode on/off. Execute wp_memcached_toggle Toggle Memcached object cache on/off. Execute wp_plugins_activate Activate a WordPress plugin. Execute wp_plugins_install Install plugins by slug. Execute wp_update_core Update WordPress core to latest version.
WRITE 74 tools
Write agency_cron_create Create a cron job. Write agency_db_create Create a database. Write agency_db_create_user Create a database user. Write agency_import_archive Import an Agency Plan website from an archive. Write agency_website_change_domain Change the primary domain of an Agency Plan website. Write agency_website_link_domain Link a domain to an Agency Plan website. Write agency_website_provision Provision a new Agency Plan website. Write batch_dns_update Update DNS records for multiple domains at once. Useful for applying the same records across many domains. Write billing_disable_auto_renewal Disable auto-renewal for a subscription. Write dns_restore_snapshot Restore a DNS snapshot for a domain. Write dns_update_records Update/replace DNS records for a domain. Write domains_create_forwarding Create a domain forwarding/redirect. Write domains_create_whois_profile Create a new WHOIS profile for domain registration. Write domains_disable_lock Disable registrar lock. Write domains_disable_privacy Disable WHOIS privacy protection. Write domains_enable_lock Enable registrar lock (transfer protection). Write domains_enable_privacy Enable WHOIS privacy protection. Write domains_update_forwarding Update domain forwarding/redirect. Write domains_update_nameservers Update nameservers for a domain. Write ecommerce_channels_create Create a custom sales channel. Write ecommerce_channels_update Update a sales channel. Write ecommerce_products_create_digital Create a digital product in a store. Write ecommerce_products_create_physical Create a physical product in a store. Write ecommerce_shipping_set Set shipping configuration for a store. Write ecommerce_stores_create Create a new ecommerce store. Write horizons_create_website Create a new website using Hostinger Horizons (AI website builder). Write hosting_cacheless_toggle Toggle cacheless (bypass) mode for a website. Write hosting_cron_create Create a cron job. Write hosting_db_change_password Change a database password. Write hosting_db_create Create a new database. Write hosting_db_remote_create Allow a remote IP to connect to a database. Write hosting_free_subdomain Generate a free subdomain for testing. Write hosting_parked_create Park a domain on a website. Write hosting_php_reset_extensions Reset PHP extensions to defaults. Write hosting_php_update_options Update PHP options (ini settings). Write hosting_php_update_version Change PHP version for a website. Write hosting_subdomains_create Create a subdomain. Write hosting_websites_create Create a new website. Write mail_aliases_create Create an email alias. Write mail_autoreplies_create Create an autoreply. Write mail_autoreplies_update Update an autoreply. Write mail_catchalls_create Create a catch-all for a mailbox. Write mail_forwarders_create Create an email forwarder. Write mail_forwarders_keep_copy Update whether forwarder keeps a copy. Write mail_mailboxes_change_password Change a mailbox password. Write mail_mailboxes_create Create a new mailbox. Write mail_tokens_create Create an API token for a mail order. Write mail_webhooks_create Create a webhook for a mailbox. Write mail_webhooks_update Update a webhook. Write reach_contacts_create Create a new contact. Write reach_contacts_create_bulk Create multiple contacts for a profile. Write reach_segments_create Create a new contact segment. Write vps_create_snapshot Create a snapshot of a virtual machine. Write vps_docker_create Create a new Docker Compose project. Write vps_firewall_create Create a new firewall. Write vps_firewall_create_rule Add a rule to a firewall. Write vps_firewall_update_rule Update an existing firewall rule. Write vps_keys_attach Attach an SSH public key to a virtual machine. Write vps_keys_create Upload a new SSH public key. Write vps_ptr_create Create a PTR (reverse DNS) record for a VPS IP. Write vps_reset_hostname Reset hostname to default. Write vps_restore_snapshot Restore a VPS from snapshot. Write vps_scripts_create Create a new post-install script. Write vps_scripts_update Update an existing post-install script. Write vps_set_hostname Set hostname for a virtual machine. Write vps_set_nameservers Set nameservers for a virtual machine. Write vps_set_panel_password Set panel password for a VPS (e.g. cPanel/Plesk). Write wp_ai_toggle Enable or disable AI tools for WordPress. Write wp_login_link Create a one-click WP admin login link. Write wp_plugins_update Update WordPress plugins. Write wp_plugins_update_hostinger Update the Hostinger WordPress plugin. Write wp_themes_activate Activate a WordPress theme. Write wp_themes_install Install a WordPress theme. Write wp_themes_update Update WordPress themes.
READ 126 tools
Read account_overview Get a comprehensive overview of all Hostinger services: VPS count, domains, websites, mail, subscriptions, and Read agency_cron_list List cron jobs for an Agency Plan website. Read agency_datacenters List available datacenters for an Agency Plan order. Read agency_db_list List databases for an Agency Plan website. Read agency_domains_list List all Agency Plan domains. Read agency_orders_list List Agency Plan orders. Read agency_website_get Get Agency Plan website details. Read agency_website_processes List running processes on an Agency Plan website. Read agency_website_setup_status Get Agency Plan website setup status. Read agency_website_unlink_domain Unlink a domain from an Agency Plan website. Read agency_wp_change_version Change WordPress core version for an Agency Plan website. Read agency_wp_settings Get WordPress settings for an Agency Plan website. Read agency_wp_versions List available WordPress versions for an Agency Plan website. Read billing_get_catalog Browse available Hostinger products and pricing. Optionally filter by category or name. Read billing_get_payment_methods List all configured payment methods. Read billing_get_subscriptions List all active subscriptions. Read dns_get_records Get all DNS records for a domain. Read dns_get_snapshot Get a specific DNS snapshot details. Read dns_get_snapshots List DNS snapshots for a domain. Read dns_validate_records Validate DNS records before applying them. Read domains_check_availability Check if a domain is available for registration. Read domains_get_auth_code Get domain authorization/EPP code for transfers. Read domains_get_details Get detailed info about a specific domain. Read domains_get_forwarding Get forwarding config for a domain. Read domains_get_list List all domains in your portfolio. Read domains_get_renewal_info Get renewal information for a domain. Read domains_get_transfer Get details of a specific domain transfer. Read domains_get_transfers List all domain transfers. Read domains_get_verifications Get active domain verification requests. Read domains_get_whois_profile Get a specific WHOIS profile. Read domains_get_whois_profile_usage Get domains using a specific WHOIS profile. Read domains_get_whois_profiles List all WHOIS profiles. Read ecommerce_channels_list List sales channels for a store. Read ecommerce_storefront_instructions Get custom storefront setup instructions. Read ecommerce_stores_list Get all ecommerce stores. Read ecommerce_stores_metadata Get metadata for a store. Read health_check Check connectivity and authentication with Hostinger API. Returns account info and service status summary. Read horizons_get_website Get details of a Horizons website. Read hosting_cache_toggle Toggle cache on/off for a website. Read hosting_cron_get_output Get output of a cron job execution. Read hosting_cron_list List cron jobs for a hosting account. Read hosting_datacenters_list List available datacenters. Read hosting_db_list List databases for a hosting account. Read hosting_db_phpmyadmin Get a phpMyAdmin access link for a database. Read hosting_db_remote_list List remote database connections. Read hosting_deploy_js_logs Get logs for a JavaScript deployment build. Use for debugging failed deployments. Read hosting_deploy_list_js List JavaScript application deployments with their status. Use to check if deployment is pending, running, com Read hosting_nodejs_build_logs Get logs for a Node.js build. Read hosting_nodejs_builds_list List Node.js builds for a website. Read hosting_nodejs_vulnerabilities List known vulnerabilities in Node.js dependencies. Read hosting_orders_list List all hosting orders. Read hosting_parked_list List parked domains for a website. Read hosting_php_details Get PHP configuration for a website. Read hosting_php_info Get full phpinfo() output. Read hosting_subdomains_list List subdomains for a website. Read hosting_verify_domain Verify ownership of a domain for hosting. Read hosting_websites_list List all websites on your hosting account. Read list_all_domains_paginated Auto-paginate to fetch ALL domains in portfolio (handles pagination automatically). Read list_all_subscriptions_paginated Auto-paginate to fetch ALL billing subscriptions. Read list_all_websites_paginated Auto-paginate to fetch ALL hosting websites (handles pagination automatically). Read mail_aliases_list List email aliases for an order. Read mail_autoreplies_list List autoreplies for an order. Read mail_catchalls_list List catch-all configurations. Read mail_catchalls_resend_confirmation Resend the confirmation email for an unconfirmed catch-all. Read mail_forwarders_list List email forwarders for an order. Read mail_forwarders_resend_confirmation Resend the confirmation email for an unconfirmed forwarder. Read mail_logs_access List mail access logs. Read mail_logs_action List mail action logs. Read mail_logs_inbound List inbound mail logs. Read mail_logs_mailbox_actions List mailbox-level action logs. Read mail_logs_outbound List outbound mail logs. Read mail_mailboxes_list List mailboxes for a mail order. Read mail_orders_get_plan Get the plan for a mail order. Read mail_orders_list List all mail/email orders. Read mail_tokens_list List API tokens for mail. Read mail_webhooks_delivery_logs List webhook delivery logs. Read mail_webhooks_get Get webhook details. Read mail_webhooks_list List webhooks for a mail order. Read mail_webhooks_regenerate_secret Regenerate the signing secret for a webhook. Read reach_contacts_groups List contact groups. Read reach_contacts_list List all email marketing contacts. Read reach_profiles_dns_status Check DNS configuration status for a profile domain. Read reach_profiles_list List email marketing profiles. Read reach_segments_contacts List contacts in a segment. Read reach_segments_get Get segment details. Read reach_segments_list List contact segments. Read reach_segments_profile_contacts List contacts for a segment within a specific profile. Read vps_datacenters_list Get available VPS data centers. Read vps_docker_containers Get containers of a Docker project. Read vps_docker_get Get Docker project contents (compose file). Read vps_docker_list List Docker projects on a VPS. Read vps_docker_logs Get logs of a Docker project. Read vps_firewall_get Get firewall details with rules. Read vps_firewall_list Get all firewalls. Read vps_get Get details of a specific virtual machine. Read vps_get_action Get details of a specific VPS action. Read vps_get_actions Get list of actions/operations for a VPS. Read vps_get_attached_keys Get SSH public keys attached to a VPS. Read vps_get_backups List backups for a virtual machine. Read vps_get_metrics Get performance metrics (CPU, RAM, disk, network). Read vps_get_snapshot Get snapshot details. Read vps_keys_list Get all SSH public keys. Read vps_list Get list of all virtual machines. Read vps_malware_metrics Get malware scan statistics for a VPS. Read vps_scripts_get Get a specific post-install script. Read vps_scripts_list Get all post-install scripts. Read vps_templates_get Get details of a specific OS template. Read vps_templates_list Get available OS templates for VPS. Read wp_ai_status Show AI tools option status for WordPress. Read wp_check_valid Check if WordPress installations are valid/intact. Read wp_detect_installations Auto-detect WordPress installations on a hosting account. Read wp_get_version Show WordPress core version. Read wp_installations_list List all WordPress installations across all hosting accounts. Read wp_jwt_token Get installation JWT token for API access. Read wp_list_updates List available WordPress core updates. Read wp_litespeed_status Show LiteSpeed Cache status. Read wp_maintenance_status Show maintenance mode status. Read wp_memcached_status Show Memcached object cache status. Read wp_plugins_available List plugins available for installation. Read wp_plugins_deactivate Deactivate a WordPress plugin. Read wp_plugins_list List installed WordPress plugins. Read wp_plugins_search Search the WordPress plugin repository. Read wp_plugins_suggested Get suggested WordPress plugins. Read wp_themes_list_available Browse WordPress themes. Read wp_themes_list_installed List installed WordPress themes. Read wp_woocommerce_check Check if WooCommerce is installed.

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Questions about Hostinger

Can an AI agent move money through the Hostinger MCP server? +

Yes. The Hostinger server exposes 7 financial tools including billing_create_order, billing_enable_auto_renewal, billing_renew_subscription. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Hostinger MCP server? +

Yes. The Hostinger server exposes 39 destructive tools including agency_cache_clear, agency_cron_delete, agency_db_delete. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Hostinger? +

The Hostinger server has 74 write tools including agency_cron_create, agency_db_create, agency_db_create_user. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Hostinger.

How many tools does the Hostinger MCP server expose? +

284 tools across 4 categories: Destructive, Execute, Read, Write. 126 are read-only. 158 can modify, create, or delete data.

How do I enforce a policy on Hostinger? +

Register the Hostinger MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Hostinger tool call.

Deterministic rules across all 284 Hostinger tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

Instant setup, no code required.

284 Hostinger tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Hostinger's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.