Hostinger Api
UnverifiedNPMhostinger-api-mcp
F
Catalogue entry updated under an hour ago
Auth postureNot probedno remote endpoint probed yet
Tools2583 Financial · 37 Destructive · 34 Execute · 70 Write · 114 Read
Worst categoryFinancialgrade tracks the peak, not the average
Capability mix
Financial 3Destructive 37Execute 34Write 70Read 114
What it can reach
Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money
Lethal trifectaReads attacker-controllable content, holds secrets, and can run code + reach the network — a full exfiltration/RCE path if unconstrained.
Tools 258
billing_setDefaultPaymentMethodV1domains_purchaseNewDomainV1VPS_purchaseNewVirtualMachineV1agency-hosting_clearAgencyPlanWebsiteCacheV1agency-hosting_deleteAgencyPlanWebsiteCronJobV1
View all 258 tools
agency-hosting_deleteAgencyPlanWebsiteDatabaseUserV1agency-hosting_deleteAgencyPlanWebsiteDatabaseV1agency-hosting_deleteAgencyPlanWebsiteV1agencyHosting_deployNodeStaticWebsiteagencyHosting_deployPhpApplicationbilling_deletePaymentMethodV1DNS_deleteDNSRecordsV1DNS_resetDNSRecordsV1domains_deleteDomainForwardingV1domains_deleteWHOISProfileV1ecommerce_deleteStoreV1hosting_clearWebsiteCacheV1hosting_deleteAccountCronJobV1hosting_deleteAccountDatabaseRemoteConnectionV1hosting_deleteAccountDatabaseV1hosting_deleteWebsiteParkedDomainV1hosting_deleteWebsiteSubdomainV1hosting_deleteWebsiteV1hosting_deleteWordPressInstallationV1hosting_uninstallWordPressPluginsV1hosting_uninstallWordPressThemesV1mail_deleteMailboxV1mail_deleteWebhookV1mail_revokeAPITokenV1reach_deleteAContactV1VPS_deleteFirewallRuleV1VPS_deleteFirewallV1VPS_deletePostInstallScriptV1VPS_deleteProjectV1VPS_deletePTRRecordV1VPS_deletePublicKeyV1VPS_deleteSnapshotV1VPS_recreateVirtualMachineV1VPS_restoreBackupV1VPS_uninstallMonarxV1agency-hosting_buildAgencyPlanWebsiteNodeJSAssetsV1hosting_activateWordPressPluginV1hosting_createLoginLinksV1hosting_createNodeJSBuildFromArchiveV1hosting_deactivateWordPressPluginV1hosting_deployJsApplicationhosting_deployStaticWebsitehosting_deployWordpressPluginhosting_deployWordpressThemehosting_detectWordPressInstallationsV1hosting_installWordPressPluginsV1hosting_installWordPressThemeV1hosting_installWordPressV1hosting_purgeLiteSpeedCacheV1hosting_repairDatabaseV1hosting_restartNode_jsApplicationV1hosting_updateHostingerWordPressPluginV1hosting_updatePHPVersionV1hosting_updateWordPressPluginsV1VPS_activateFirewallV1VPS_createNewProjectV1VPS_deactivateFirewallV1VPS_installMonarxV1VPS_restartProjectV1VPS_restartVirtualMachineV1VPS_setupPurchasedVirtualMachineV1VPS_startProjectV1VPS_startRecoveryModeV1VPS_startVirtualMachineV1VPS_stopProjectV1VPS_stopRecoveryModeV1VPS_stopVirtualMachineV1VPS_syncFirewallV1VPS_updateProjectV1agency-hosting_changeAgencyPlanWebsiteDomainV1agency-hosting_changeAgencyPlanWebsiteWordPressCoreVersionV1agency-hosting_createAgencyPlanWebsiteCronJobV1agency-hosting_createAgencyPlanWebsiteDatabaseUserV1agency-hosting_createAgencyPlanWebsiteDatabaseV1agency-hosting_importAgencyPlanWebsiteFromArchiveV1agency-hosting_linkDomainToAgencyPlanWebsiteV1agency-hosting_provisionANewAgencyPlanWebsiteV1agency-hosting_unlinkDomainFromAgencyPlanWebsiteV1billing_createPurchaseOrderV1billing_disableAutoRenewalV1billing_enableAutoRenewalV1DNS_restoreDNSSnapshotV1DNS_updateDNSRecordsV1domains_createDomainForwardingV1domains_createWHOISProfileV1domains_disableDomainLockV1domains_disablePrivacyProtectionV1domains_enableDomainLockV1domains_enablePrivacyProtectionV1domains_updateDomainForwardingV1domains_updateDomainNameserversV1ecommerce_createCustomSalesChannelV1ecommerce_createDigitalProductV1ecommerce_createPhysicalProductV1ecommerce_createStoreV1ecommerce_enableManualPaymentMethodV1ecommerce_setStoreShippingV1ecommerce_updateSalesChannelV1horizons_createWebsiteV1hosting_activateWordPressThemeV1hosting_changeDatabasePasswordV1hosting_createAccountCronJobV1hosting_createAccountDatabaseRemoteConnectionV1hosting_createAccountDatabaseV1hosting_createWebsiteParkedDomainV1hosting_createWebsiteSubdomainV1hosting_createWebsiteV1hosting_generateAFreeSubdomainV1hosting_importWordpressWebsitehosting_patchNode_jsVulnerabilitiesV1hosting_resetPHPExtensionsV1hosting_setAIOptionStatusV1hosting_toggleWebsiteCacheV1hosting_updatePHPExtensionsV1hosting_updatePHPOptionsV1hosting_updateWordPressCoreV1hosting_updateWordPressThemesV1mail_createAPITokenV1mail_createMailboxV1mail_createWebhookV1mail_updateWebhookV1reach_createANewContactSegmentV1reach_createANewContactV1reach_createNewContactsV1VPS_attachPublicKeyV1VPS_createFirewallRuleV1VPS_createNewFirewallV1VPS_createPostInstallScriptV1VPS_createPTRRecordV1VPS_createPublicKeyV1VPS_createSnapshotV1VPS_resetHostnameV1VPS_restoreSnapshotV1VPS_setHostnameV1VPS_setNameserversV1VPS_setPanelPasswordV1VPS_setRootPasswordV1VPS_updateFirewallRuleV1VPS_updatePostInstallScriptV1agency-hosting_getAgencyPlanWebsiteDetailsV1agency-hosting_getAgencyPlanWebsiteSetupStatusV1agency-hosting_getAgencyPlanWebsiteWordPressSettingsV1agency-hosting_listAgencyPlanDomainsV1agency-hosting_listAgencyPlanWebsiteCronJobsV1agency-hosting_listAgencyPlanWebsiteDatabasesV1agency-hosting_listAvailableDatacentersForAnAgencyPlanOrderV1agency-hosting_listAvailableWordPressVersionsForAnAgencyPlanWebsiteV1agency-hosting_listRunningAgencyPlanWebsiteProcessesV1billing_getCatalogItemListV1billing_getPaymentMethodListV1billing_getSubscriptionListV1DNS_getDNSRecordsV1DNS_getDNSSnapshotListV1DNS_getDNSSnapshotV1DNS_validateDNSRecordsV1domains_checkDomainAvailabilityV1domains_getDomainAuthorizationCodeV1domains_getDomainDetailsV1domains_getDomainForwardingV1domains_getDomainListV1domains_getDomainRenewalInformationV1domains_getTransferListV1domains_getTransferV1domains_getWHOISProfileListV1domains_getWHOISProfileUsageV1domains_getWHOISProfileV1ecommerce_getCustomStorefrontSetupInstructionsV1ecommerce_getStoreMetadataV1ecommerce_getStoresV1ecommerce_listSalesChannelsV1horizons_getWebsiteV1hosting_checkIfWooCommerceIsInstalledV1hosting_checkIfWordPressInstallationsAreValidV1hosting_getCronJobOutputV1hosting_getInstallationJWTTokenV1hosting_getNodeJSBuildLogsV1hosting_getPHPDetailsV1hosting_getPHPInfoV1hosting_getPhpMyAdminLinkV1hosting_listAccountCronJobsV1hosting_listAccountDatabaseRemoteConnectionsV1hosting_listAccountDatabasesV1hosting_listAvailableDatacentersV1hosting_listAvailableWordPressCoreUpdatesV1hosting_listAvailableWordPressPluginsV1hosting_listInstalledWordPressPluginsV1hosting_listInstalledWordPressThemesV1hosting_listJsDeploymentshosting_listNode_jsVulnerabilitiesV1hosting_listNodeJSBuildsV1hosting_listOrdersV1hosting_listSuggestedWordPressPluginsV1hosting_listWebsiteParkedDomainsV1hosting_listWebsiteSubdomainsV1hosting_listWebsitesV1hosting_listWordPressInstallationsV1hosting_listWordPressThemesV1hosting_searchWordPressPluginsV1hosting_showAIOptionStatusV1hosting_showJsDeploymentLogshosting_showLiteSpeedCacheStatusV1hosting_showMaintenanceStatusV1hosting_showMemcachedObjectCacheStatusV1hosting_showWordPressCoreVersionV1hosting_toggleCachelessModeV1hosting_toggleMaintenanceModeV1hosting_toggleMemcachedObjectCacheV1hosting_verifyDomainOwnershipV1mail_changeMailboxPasswordV1mail_getOrderPlanV1mail_getWebhookV1mail_listAccessLogsV1mail_listActionLogsV1mail_listAPITokensV1mail_listInboundLogsV1mail_listMailboxActionLogsV1mail_listMailboxesV1mail_listOrdersV1mail_listOutboundLogsV1mail_listWebhookDeliveryLogsV1mail_listWebhooksV1mail_regenerateWebhookSecretV1mail_testWebhookV1reach_getProfileDomainDNSStatusV1reach_getSegmentDetailsV1reach_listContactGroupsV1reach_listContactsV1reach_listProfileSegmentContactsV1reach_listProfilesV1reach_listSegmentContactsV1reach_listSegmentsV1v2_getDomainVerificationsDIRECTVPS_getActionDetailsV1VPS_getActionsV1VPS_getAttachedPublicKeysV1VPS_getBackupsV1VPS_getDataCenterListV1VPS_getFirewallDetailsV1VPS_getFirewallListV1VPS_getMetricsV1VPS_getPostInstallScriptsV1VPS_getPostInstallScriptV1VPS_getProjectContainersV1VPS_getProjectContentsV1VPS_getProjectListV1VPS_getProjectLogsV1VPS_getPublicKeysV1VPS_getScanMetricsV1VPS_getSnapshotV1VPS_getTemplateDetailsV1VPS_getTemplatesV1VPS_getVirtualMachineDetailsV1VPS_getVirtualMachinesV1
Change history
No change history on record for this server.
Recommended policy
billing_setDefaultPaymentMethodV1require approval
agency-hosting_clearAgencyPlanWebsiteCacheV1deny
agency-hosting_buildAgencyPlanWebsiteNodeJSAssetsV1require approval
agency-hosting_changeAgencyPlanWebsiteDomainV1rate limit
Read-only toolsallow
Full policy breakdown with enforcement rules →