Hostinger Api
UnverifiedNPMhostinger-api-mcp
F
Catalogue entry updated 3 days ago
Auth postureNot probedno remote endpoint probed yet
Tools3825 Financial · 55 Destructive · 39 Execute · 113 Write · 170 Read
Worst categoryFinancialgrade tracks the peak, not the average
Capability mix
Financial 5Destructive 55Execute 39Write 113Read 170
What it can reach
Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money
Lethal trifectaReads attacker-controllable content, holds secrets, and can run code + reach the network — a full exfiltration/RCE path if unconstrained.
Tools 382
billing_createPurchaseOrderV1billing_renewSubscriptionV1billing_setDefaultPaymentMethodV1domains_purchaseNewDomainV1VPS_purchaseNewVirtualMachineV1
View all 382 tools
agency-hosting_clearWebsiteCacheV1agency-hosting_deleteWebsiteCronJobV1agency-hosting_deleteWebsiteDatabaseUserV1agency-hosting_deleteWebsiteDatabaseV1agency-hosting_deleteWebsiteV1agency-hosting_deployNodeStaticWebsiteagency-hosting_deployPhpApplicationbilling_deletePaymentMethodV1DNS_deleteDNSRecordsV1DNS_resetDNSRecordsV1domains_cancelPendingIRTPVerificationV1domains_deleteDomainForwardingV1domains_deleteWHOISProfileV1ecommerce_cancelAnOrderV1ecommerce_deleteAProductV1ecommerce_deleteAProductVariantV1ecommerce_deleteStoreV1hosting_clearNode_jsRuntimeLogsV1hosting_clearWebsiteCacheV1hosting_deleteAccountCronJobV1hosting_deleteAccountDatabaseV1hosting_deleteDatabaseRemoteConnectionV1hosting_deleteWebsiteParkedDomainV1hosting_deleteWebsiteRedirectV1hosting_deleteWebsiteSubdomainV1hosting_deleteWebsiteV1hosting_deleteWordPressInstallationV1hosting_deployStaticSiteArchiveV1hosting_importWordPressWebsiteV1hosting_startNode_jsBuildV1hosting_uninstallWordPressPluginsV1hosting_uninstallWordPressThemesV1mail_deleteAliasV1mail_deleteAutoreplyV1mail_deleteCatchAllV1mail_deleteForwarderV1mail_deleteMailboxV1mail_deleteWebhookV1mail_revokeAPITokenV1reach_deleteAContactFieldV1reach_deleteAContactV1reach_deleteAProfileContactV1reach_deleteAProfileSegmentV1reach_deleteATagV1reach_deleteFormV1VPS_deleteFirewallRuleV1VPS_deleteFirewallV1VPS_deletePostInstallScriptV1VPS_deleteProjectV1VPS_deletePTRRecordV1VPS_deletePublicKeyV1VPS_deleteSnapshotV1VPS_recreateVirtualMachineV1VPS_restoreBackupV1VPS_uninstallMonarxV1agency-hosting_buildWebsiteNodeJSAssetsV1agency-hosting_updateWebsitePHPVersionV1hosting_activateWordPressPluginV1hosting_createLoginLinksV1hosting_deactivateWordPressPluginV1hosting_deployJsApplicationhosting_deployStaticWebsitehosting_deployWordpressPluginhosting_deployWordPressPluginV1hosting_deployWordpressThemehosting_deployWordPressThemeV1hosting_detectWordPressInstallationsV1hosting_importWordpressWebsitehosting_installWordPressPluginsV1hosting_installWordPressThemeV1hosting_installWordPressV1hosting_purgeLiteSpeedCacheV1hosting_repairDatabaseV1hosting_restartNode_jsApplicationV1hosting_updateHostingerWordPressPluginV1hosting_updatePHPVersionV1hosting_updateWordPressPluginsV1mail_testWebhookV1VPS_activateFirewallV1VPS_createNewProjectV1VPS_deactivateFirewallV1VPS_installMonarxV1VPS_restartProjectV1VPS_restartVirtualMachineV1VPS_setupPurchasedVirtualMachineV1VPS_startProjectV1VPS_startRecoveryModeV1VPS_startVirtualMachineV1VPS_stopProjectV1VPS_stopRecoveryModeV1VPS_stopVirtualMachineV1VPS_syncFirewallToAllAssignedVMsV1VPS_syncFirewallV1VPS_updateProjectV1agency-hosting_changeWebsiteDomainV1agency-hosting_changeWordPressVersionV1agency-hosting_createANewWebsiteV1agency-hosting_createWebsiteCronJobV1agency-hosting_createWebsiteDatabaseUserV1agency-hosting_createWebsiteDatabaseV1agency-hosting_generateUploadURLV1agency-hosting_importWebsiteFromArchiveV1agency-hosting_linkDomainToWebsiteV1agency-hosting_replaceWebsitePHPExtensionsV1agency-hosting_replaceWebsitePHPOptionsV1billing_disableAutoRenewalV1billing_enableAutoRenewalV1DNS_restoreDNSSnapshotV1DNS_updateDNSRecordsV1domains_acceptIncomingDomainMoveV1domains_cancelOutgoingDomainMoveV1domains_changeWHOISProfileForDomainV1domains_claimFreeDomainTransferV1domains_createDomainForwardingV1domains_createWHOISProfileV1domains_disableDomainLockV1domains_disablePrivacyProtectionV1domains_enableDomainLockV1domains_enablePrivacyProtectionV1domains_rejectIncomingDomainMoveV1domains_setWHOISProfileAsDefaultV1domains_startOutgoingDomainMoveV1domains_unsetDefaultWHOISProfileV1domains_updateDomainForwardingV1domains_updateDomainNameserversV1ecommerce_createADiscountV1ecommerce_createAPaymentProviderConnectLinkV1ecommerce_createAProductImageUploadURLV1ecommerce_createAProductVariantV1ecommerce_createASalesChannelV1ecommerce_createDigitalProductV1ecommerce_createPhysicalProductV1ecommerce_createStoreV1ecommerce_enableManualPaymentMethodV1ecommerce_fulfilAnOrderV1ecommerce_setStoreShippingV1ecommerce_updateAProductV1ecommerce_updateProductVariantsInBatchV1ecommerce_updateSalesChannelV1ecommerce_uploadAndAttachAProductImageV1horizons_createWebsiteV1hosting_activateWordPressThemeV1hosting_changeDatabasePasswordV1hosting_createAccountCronJobV1hosting_createAccountDatabaseV1hosting_createDatabaseRemoteConnectionV1hosting_createWebsiteParkedDomainV1hosting_createWebsiteRedirectV1hosting_createWebsiteSubdomainV1hosting_createWebsiteV1hosting_generateAFreeSubdomainV1hosting_generateUploadURLV1hosting_patchNode_jsVulnerabilitiesV1hosting_replaceNode_jsEnvironmentVariablesV1hosting_resetPHPExtensionsV1hosting_setAIOptionStatusV1hosting_toggleWebsiteCacheV1hosting_updateNode_jsBuildSettingsV1hosting_updatePHPExtensionsV1hosting_updatePHPOptionsV1hosting_updateWordPressCoreV1hosting_updateWordPressThemesV1mail_changeMailboxPasswordV1mail_createAliasV1mail_createAPITokenV1mail_createAutoreplyV1mail_createCatchAllV1mail_createForwarderV1mail_createMailboxV1mail_createWebhookV1mail_updateAutoreplyV1mail_updateForwarderKeepCopySettingV1mail_updateWebhookV1reach_assignAContactToATagV1reach_assignContactsToATagV1reach_createAContactFieldV1reach_createADraftCampaignV1reach_createAnEmailTemplateV1reach_createANewContactSegmentV1reach_createANewContactV1reach_createAProfileSegmentV1reach_createContactsInBulkV1reach_createNewContactsV1reach_createOrFindTagsV1reach_previewContactsMatchingConditionsV1reach_removeAContactFromATagV1reach_removeContactsFromATagV1reach_renameATagV1reach_updateAContactFieldV1reach_updateAContactV1reach_updateAProfileSegmentV1VPS_attachPublicKeyV1VPS_createFirewallRuleV1VPS_createNewFirewallV1VPS_createPostInstallScriptV1VPS_createPTRRecordV1VPS_createPublicKeyV1VPS_createSnapshotV1VPS_replaceAllFirewallRulesInGroupV1VPS_resetHostnameV1VPS_restoreSnapshotV1VPS_setHostnameV1VPS_setNameserversV1VPS_setPanelPasswordV1VPS_setRootPasswordV1VPS_updateFirewallRuleV1VPS_updatePostInstallScriptV1agency-hosting_getWebsiteDetailsV1agency-hosting_getWebsiteSetupStatusV1agency-hosting_getWordPressSettingsV1agency-hosting_listAgencyPlanOrderDiskUsageMetricsV1agency-hosting_listAgencyPlanWebsitesV1agency-hosting_listAvailableDatacentersV1agency-hosting_listAvailablePHPVersionsForAnOrderV1agency-hosting_listAvailablePHPVersionsForAWebsiteV1agency-hosting_listAvailableWordPressVersionsV1agency-hosting_listDomainsV1agency-hosting_listOrderResourceUsageMetricsV1agency-hosting_listOrdersV1agency-hosting_listPHPExtensionsForAWebsiteV1agency-hosting_listPHPOptionsForAWebsiteV1agency-hosting_listWebsiteCronJobsV1agency-hosting_listWebsiteDatabasesV1agency-hosting_listWebsiteProcessesV1agency-hosting_unlinkDomainFromWebsiteV1billing_getCatalogItemListV1billing_getPaymentMethodListV1billing_getSubscriptionListV1DNS_getDNSRecordsV1DNS_getDNSSnapshotListV1DNS_getDNSSnapshotV1DNS_validateDNSRecordsV1domains_checkDomainAvailabilityV1domains_claimFreeDomainV1domains_getDomainAuthorizationCodeV1domains_getDomainDetailsV1domains_getDomainForwardingV1domains_getDomainListV1domains_getDomainRenewalInformationV1domains_getIncomingDomainMoveListV1domains_getIncomingDomainMoveV1domains_getOutgoingDomainMoveListV1domains_getOutgoingDomainMoveV1domains_getPendingIRTPVerificationV1domains_getTransferListV1domains_getTransferV1domains_getWHOISProfileListV1domains_getWHOISProfileUsageV1domains_getWHOISProfileV1domains_suggestDomainNamesFromADescriptionV1domains_suggestDomainNamesFromADomainV1ecommerce_getCustomStorefrontSetupInstructionsV1ecommerce_getStoreMetadataV1ecommerce_getStoresV1ecommerce_listDiscountsV1ecommerce_listProductsV1ecommerce_listProductVariantsV1ecommerce_listSalesChannelsV1ecommerce_listStoreOrdersV1ecommerce_listStorePaymentProvidersV1ecommerce_retrieveAnOrderV1horizons_getWebsiteV1hosting_analyseFailedNode_jsBuildV1hosting_checkIfWooCommerceIsInstalledV1hosting_checkIfWordPressInstallationsAreValidV1hosting_getCronJobOutputV1hosting_getInstallationJWTTokenV1hosting_getNode_jsBuildDetailsV1hosting_getNode_jsBuildSettingsFromArchiveV1hosting_getNode_jsBuildSettingsV1hosting_getNode_jsRuntimeLogsV1hosting_getNodeJSBuildLogsV1hosting_getPHPDetailsV1hosting_getPHPInfoV1hosting_getPhpMyAdminLinkV1hosting_getWebsiteFileContentV1hosting_listAccountCronJobsV1hosting_listAccountDatabasesV1hosting_listAvailableDatacentersV1hosting_listAvailableWordPressCoreUpdatesV1hosting_listAvailableWordPressPluginsV1hosting_listDatabaseRemoteConnectionsV1hosting_listInstalledWordPressPluginsV1hosting_listInstalledWordPressThemesV1hosting_listJsDeploymentshosting_listNode_jsEnvironmentVariablesV1hosting_listNode_jsVulnerabilitiesV1hosting_listNodeJSBuildsV1hosting_listOrdersV1hosting_listSuggestedWordPressPluginsV1hosting_listWebsiteFilesAndDirectoriesV1hosting_listWebsiteParkedDomainsV1hosting_listWebsiteRedirectsV1hosting_listWebsiteSubdomainsV1hosting_listWebsitesV1hosting_listWordPressInstallationsV1hosting_listWordPressThemesV1hosting_searchWordPressPluginsV1hosting_showAIOptionStatusV1hosting_showJsDeploymentLogshosting_showLiteSpeedCacheStatusV1hosting_showMaintenanceStatusV1hosting_showMemcachedObjectCacheStatusV1hosting_showWordPressCoreVersionV1hosting_toggleCachelessModeV1hosting_toggleMaintenanceModeV1hosting_toggleMemcachedObjectCacheV1hosting_verifyDomainOwnershipV1mail_getOrderPlanV1mail_getWebhookV1mail_listAccessLogsV1mail_listActionLogsV1mail_listAliasesV1mail_listAPITokensV1mail_listAutorepliesV1mail_listCatchAllsV1mail_listForwardersV1mail_listInboundLogsV1mail_listMailboxActionLogsV1mail_listMailboxesV1mail_listOrdersV1mail_listOutboundLogsV1mail_listWebhookDeliveryLogsV1mail_listWebhooksV1mail_regenerateWebhookSecretV1mail_resendCatchAllConfirmationV1mail_resendForwarderConfirmationV1reach_countProfileSegmentContactsV1reach_getAutomationDetailsV1reach_getCampaignDetailsV1reach_getCampaignPerformanceV1reach_getConnectedSendingDomainV1reach_getContactDetailsV1reach_getFormDetailsV1reach_getProfileDomainDNSStatusV1reach_getProfileSegmentDetailsV1reach_getRemainingPlanLimitsV1reach_getSegmentDetailsV1reach_listAutomationStepsV1reach_listAutomationsV1reach_listCampaignsV1reach_listContactFieldsV1reach_listContactGroupsV1reach_listContactsV1reach_listEmailTemplatesV1reach_listFormsV1reach_listPlanFeatureAccessV1reach_listProfileContactsV1reach_listProfileSegmentContactsV1reach_listProfileSegmentsV1reach_listProfilesV1reach_listProfileTagsV1reach_listSegmentContactsV1reach_listSegmentFilterAttributesV1reach_listSegmentsV1v2_getDomainVerificationsDIRECTVPS_getActionDetailsV1VPS_getActionsV1VPS_getAttachedPublicKeysV1VPS_getBackupsV1VPS_getDataCenterListV1VPS_getFirewallDetailsV1VPS_getFirewallListV1VPS_getMetricsV1VPS_getPostInstallScriptsV1VPS_getPostInstallScriptV1VPS_getProjectContainersV1VPS_getProjectContentsV1VPS_getProjectListV1VPS_getProjectLogsV1VPS_getPublicKeysV1VPS_getScanMetricsV1VPS_getSnapshotV1VPS_getTemplateDetailsV1VPS_getTemplatesV1VPS_getVirtualMachineDetailsV1VPS_getVirtualMachinesV1
Change history
No change history on record for this server.
Recommended policy
billing_createPurchaseOrderV1require approval
agency-hosting_clearWebsiteCacheV1deny
agency-hosting_buildWebsiteNodeJSAssetsV1require approval
agency-hosting_changeWebsiteDomainV1rate limit
Read-only toolsallow
Full policy breakdown with enforcement rules →