{
  "name": "io.github.hostinger/api-mcp-server",
  "description": "Hostinger's official MCP wraps their public API — domain search and registration, DNS zones with snapshots, shared and VPS hosting, WordPress, the Horizons site builder, email and billing — behind three tools since v2.0.0 (2026-09-28): `search` finds an operation by keyword, `execute` runs one, `multi-execute` chains up to twenty. 403 operations sit behind them. It is the rare server where \"register a name, point it at a deploy, and publish a site\" is one credential rather than three.",
  "status": "active",
  "version": "latest",
  "_meta": {
    "com.top-mcps/lastVerified": "2026-09-29",
    "com.top-mcps/score": {
      "value": 82,
      "rubricVersion": "2026-09",
      "lastComputed": "2026-10-15T10:09:13.487Z",
      "methodology": "https://top-mcps.com/about/methodology"
    },
    "com.top-mcps/stats": {
      "fetchedAt": "2026-10-15T10:09:13.484Z",
      "githubStars": 155,
      "lastCommitAt": "2026-09-16T13:59:32Z",
      "npmWeeklyDownloads": 118476,
      "githubFetchedAt": "2026-10-15T10:09:13.484Z",
      "npmFetchedAt": "2026-10-15T10:09:13.484Z",
      "githubRepo": "hostinger/api-mcp-server",
      "npmPackage": "hostinger-api-mcp"
    }
  },
  "repository": {
    "url": "https://github.com/hostinger/api-mcp-server",
    "source": "github"
  },
  "homepage": "https://developers.hostinger.com/",
  "author": {
    "name": "Hostinger"
  },
  "packages": [
    {
      "registryType": "npm",
      "registryBaseUrl": "https://registry.npmjs.org",
      "identifier": "hostinger-api-mcp@latest",
      "version": "latest",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": [
        {
          "name": "HOSTINGER_API_TOKEN",
          "description": "HOSTINGER_API_TOKEN — required credential for Hostinger.",
          "isRequired": true,
          "isSecret": true
        }
      ]
    }
  ],
  "capabilities": {
    "tools": [
      {
        "name": "search",
        "description": "Find API operations by keyword; returns each match with its operation name, input schema and readOnly / destructive flags.",
        "sideEffect": "read"
      },
      {
        "name": "execute",
        "description": "Run one operation found with search, e.g. `domains_availability_check`, `dns_records_update` or `hosting_deploy-static-website`. Writes and purchases go through here.",
        "sideEffect": "write"
      },
      {
        "name": "multi-execute",
        "description": "Run up to twenty operations in order, stopping at the first failure; a later step can reference an earlier result with `$steps.<i>.<path>`.",
        "sideEffect": "write"
      }
    ],
    "security": {
      "scope": "read-write",
      "sandbox": "No sandbox. Operations act on the live Hostinger account the token belongs to.",
      "gotchas": [
        "Purchases are one `execute` away: `domains_portfolio_purchase` registers a name and bills the account, and `billing_orders_create-purchase` orders any catalog item on the default payment method. Neither has a dry run. Keep both behind a confirmation, or install a scoped bin that excludes billing.",
        "`dns_records_update` with `overwrite = true` replaces the whole zone and `dns_records_reset` wipes it. Take a snapshot first — `dns_snapshots_get` and `dns_snapshots_restore` exist for exactly this — and run `dns_records_validate` before applying.",
        "OAuth sign-in is not supported in `--http` mode; set `HOSTINGER_API_TOKEN` before using it.",
        "The three-tool design means a `tools/list` probe tells you nothing about what the account can do. Search results carry `readOnly` and `destructive` flags — that is where the capability information lives now."
      ]
    }
  },
  "_links": {
    "html": "https://top-mcps.com/mcp/hostinger",
    "markdown": "https://top-mcps.com/mcp/hostinger.md",
    "methodology": "https://top-mcps.com/about/methodology"
  }
}