Hostodo MCP is a hosted MCP server provided by Hostodo, allowing AI assistants and MCP-compatible clients to manage Hostodo VPS infrastructure through Hostodo's hosted Streamable HTTP MCP endpoint. Hosted endpoint:https://api.hostodo.com/mcp；文档：https://hostodo.com/docs/mcp；创建令牌：https://console.hostodo.com/settings/developer-access?tab=tokens&client=claude-code。
Purpose Hostodo MCP is intended for authenticated Hostodo customers and exposes real VPS, account, support, and DNS management tools, enabling MCP-compatible clients to operate infrastructure in a controlled manner.
Main capabilities
- VPS management: list owned VPS instances and capability flags; read detailed virtual machine metadata; list enabled OS templates for reinstall workflows; power control (start, shutdown, reboot, stop, reset); rename a VPS using an explicit confirmation phrase; reinstall a VPS to an OS template using an explicit confirmation phrase; view virtual machine metrics, bandwidth usage, health checks, and events; manage snapshots where supported.
- Agent execution and deployment: enable or disable MCP/QEMU guest-agent command execution per virtual machine; run bounded synchronous commands inside a virtual machine through the QEMU guest agent; start, poll, read logs from, and cancel asynchronous virtual machine commands; upload artifacts and installation files to owned virtual machines with SHA-256 verification; inspect deployments, service logs, roll back deployments, and restart services where available.
- Account and support workflows: list invoices, view invoice details, and pay invoices; list payment methods and account balance; apply account credit where supported; list, create, reply to, and close support tickets; upload ticket attachments.
- DNS and access management: list DNS zones and manage DNS records; list and set rDNS records; list, add, and delete SSH keys.
Usage Create a Hostodo MCP developer token in the Hostodo Console, then send it as a bearer token. Tokens are authorized by scope, and clients should be granted only the scopes they need: vms:read — list virtual machines, view virtual machine metadata, list OS templates, and read virtual machine/account status; vms:power — power operations, rename, reinstall, and other workflows that change virtual machine state; vms:exec — command execution, asynchronous commands, service operations, and artifact installation workflows.
Command execution is disabled by default on each virtual machine and must be explicitly enabled on that virtual machine before exec/artifact tools can run.
Running this MCP server locally This repository contains a small runnable MCP wrapper that allows registries such as Glama to start and introspect Hostodo MCP while the production implementation resides in the Hostodo hosted API.tools/list works without a token for registry evaluation; real tool calls require HOSTODO_MCP_TOKEN and are proxied to https://api.hostodo.com/mcp。
MCP Client Configuration The managed Streamable HTTP endpoint can be used directly. For a Claude Code example, see the repository documentation.
Security and Auditing Hostodo MCP verifies token scope and VM ownership on every request. Destructive workflows such as reinstall, rename, enable/disable execution, and power operations require explicit user intent and/or an exact confirmation phrase. Command execution is opt-in per VM. MCP operations are audited. Audit logs are encrypted and privacy-protected: operation details remain in the Hostodo audit logs, while product analytics receive only security metadata.
Registry Metadata This repository is used to publish metadata for the Hostodo managed MCP server to MCP registries such as Glama and the official MCP Registry. The server implementation is located in Hostodo's private OdoPanel backend. Tool metadata is stored in src/tools.json and can be refreshed from the live managed MCP endpoint.
Limitations
- Only for authenticated Hostodo customers.
- Real tool calls require HOSTODO_MCP_TOKEN.
- Command execution is disabled by default on each VM and must be explicitly enabled.
- Destructive operations require explicit user intent or an exact confirmation phrase.
- Information not provided in the materials, such as specific charges, prices, platform support scope, and effects, is not currently available.
