Hetzner (lazyants) MCP Server
@lazyants/hetzner-mcp-server
npm
v2.5.0
Source verified
Published by lazyants — publish provenance cryptographically ties this package to that repository. That is proof of origin, not an official vendor package.
MCP server for the Hetzner Cloud API — manage servers, networks, volumes, and more
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 0 = 100. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
✓ No adoption-risk deductions — minimal blast radius, verified enough, and fully inspected.
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 1
low Shell/command execution in packaging/dev tooling (dist/tests/resources.test.js)MTC-SRC-002
In a packaging/dev/install script (shipped, but not the server runtime) (`dist/tests/resources.test.js:2`): Spawning a shell/process is command-execution capability; with unsanitized tool input it is command injection / RCE. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: { execSync } from 'node:child_process'; import { readFileSync, rmSync } from 'node:fs'; import { fileURLToPath, pathToFi
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server dist/tests/resources.test.js
Tools 185
Each tool and what it can reach — statically extracted from the published source.
hetzner_add_lb_serviceno sensitive capabilityhetzner_add_lb_targetno sensitive capabilityhetzner_add_routeno sensitive capabilityhetzner_add_server_to_placement_groupno sensitive capabilityhetzner_add_subnetno sensitive capabilityhetzner_add_zone_rrset_recordsno sensitive capabilityhetzner_apply_firewallno sensitive capabilityhetzner_assign_floating_ipno sensitive capabilityhetzner_assign_primary_ipno sensitive capabilityhetzner_attach_isono sensitive capability
Show 175 more tools ↓
hetzner_attach_lb_to_networkno sensitive capabilityhetzner_attach_server_to_networkno sensitive capabilityhetzner_attach_volumeno sensitive capabilityhetzner_change_alias_ipsno sensitive capabilityhetzner_change_dns_ptrno sensitive capabilityhetzner_change_floating_ip_protectionno sensitive capabilityhetzner_change_floating_ip_rdnsno sensitive capabilityhetzner_change_image_protectionno sensitive capabilityhetzner_change_ip_rangeno sensitive capabilityhetzner_change_lb_algorithmno sensitive capabilityhetzner_change_lb_dns_ptrno sensitive capabilityhetzner_change_lb_typeno sensitive capabilityhetzner_change_load_balancer_protectionno sensitive capabilityhetzner_change_network_protectionno sensitive capabilityhetzner_change_primary_ip_protectionno sensitive capabilityhetzner_change_primary_ip_rdnsno sensitive capabilityhetzner_change_server_protectionno sensitive capabilityhetzner_change_storage_box_protectionno sensitive capabilityhetzner_change_storage_box_subaccount_home_directoryno sensitive capabilityhetzner_change_storage_box_typeno sensitive capabilityhetzner_change_volume_protectionno sensitive capabilityhetzner_change_zone_primary_nameserversno sensitive capabilityhetzner_change_zone_protectionno sensitive capabilityhetzner_change_zone_rrset_protectionno sensitive capabilityhetzner_change_zone_rrset_ttlno sensitive capabilityhetzner_change_zone_ttlno sensitive capabilityhetzner_create_certificateno sensitive capabilityhetzner_create_firewallno sensitive capabilityhetzner_create_floating_ipno sensitive capabilityhetzner_create_imageno sensitive capabilityhetzner_create_load_balancerno sensitive capabilityhetzner_create_networkno sensitive capabilityhetzner_create_placement_groupno sensitive capabilityhetzner_create_primary_ipno sensitive capabilityhetzner_create_serverno sensitive capabilityhetzner_create_ssh_keyno sensitive capabilityhetzner_create_storage_boxno sensitive capabilityhetzner_create_storage_box_snapshotno sensitive capabilityhetzner_create_storage_box_subaccountno sensitive capabilityhetzner_create_volumeno sensitive capabilityhetzner_create_zoneno sensitive capabilityhetzner_create_zone_rrsetno sensitive capabilityhetzner_delete_certificateno sensitive capabilityhetzner_delete_firewallno sensitive capabilityhetzner_delete_floating_ipno sensitive capabilityhetzner_delete_imageno sensitive capabilityhetzner_delete_lb_serviceno sensitive capabilityhetzner_delete_load_balancerno sensitive capabilityhetzner_delete_networkno sensitive capabilityhetzner_delete_placement_groupno sensitive capabilityhetzner_delete_primary_ipno sensitive capabilityhetzner_delete_routeno sensitive capabilityhetzner_delete_serverno sensitive capabilityhetzner_delete_ssh_keyno sensitive capabilityhetzner_delete_storage_boxno sensitive capabilityhetzner_delete_storage_box_snapshotno sensitive capabilityhetzner_delete_storage_box_subaccountno sensitive capabilityhetzner_delete_subnetno sensitive capabilityhetzner_delete_volumeno sensitive capabilityhetzner_delete_zoneno sensitive capabilityhetzner_delete_zone_rrsetno sensitive capabilityhetzner_detach_isono sensitive capabilityhetzner_detach_lb_from_networkno sensitive capabilityhetzner_detach_server_from_networkno sensitive capabilityhetzner_detach_volumeno sensitive capabilityhetzner_disable_backupno sensitive capabilityhetzner_disable_lb_public_interfaceno sensitive capabilityhetzner_disable_rescueno sensitive capabilityhetzner_disable_storage_box_snapshot_planno sensitive capabilityhetzner_enable_backupno sensitive capabilityhetzner_enable_lb_public_interfaceno sensitive capabilityhetzner_enable_rescueno sensitive capabilityhetzner_enable_storage_box_snapshot_planno sensitive capabilityhetzner_export_zonefileno sensitive capabilityhetzner_get_certificateno sensitive capabilityhetzner_get_datacenterno sensitive capabilityhetzner_get_firewallno sensitive capabilityhetzner_get_floating_ipno sensitive capabilityhetzner_get_imageno sensitive capabilityhetzner_get_isono sensitive capabilityhetzner_get_lb_metricsno sensitive capabilityhetzner_get_load_balancerno sensitive capabilityhetzner_get_locationno sensitive capabilityhetzner_get_networkno sensitive capabilityhetzner_get_placement_groupno sensitive capabilityhetzner_get_pricingno sensitive capabilityhetzner_get_primary_ipno sensitive capabilityhetzner_get_serverno sensitive capabilityhetzner_get_server_metricsno sensitive capabilityhetzner_get_server_typeno sensitive capabilityhetzner_get_ssh_keyno sensitive capabilityhetzner_get_storage_boxno sensitive capabilityhetzner_get_storage_box_snapshotno sensitive capabilityhetzner_get_storage_box_subaccountno sensitive capabilityhetzner_get_storage_box_typeno sensitive capabilityhetzner_get_volumeno sensitive capabilityhetzner_get_zoneno sensitive capabilityhetzner_get_zone_rrsetno sensitive capabilityhetzner_import_zonefileno sensitive capabilityhetzner_list_certificate_actionsno sensitive capabilityhetzner_list_certificatesno sensitive capabilityhetzner_list_datacentersno sensitive capabilityhetzner_list_firewall_actionsno sensitive capabilityhetzner_list_firewallsno sensitive capabilityhetzner_list_floating_ip_actionsno sensitive capabilityhetzner_list_floating_ipsno sensitive capabilityhetzner_list_image_actionsno sensitive capabilityhetzner_list_imagesno sensitive capabilityhetzner_list_isosno sensitive capabilityhetzner_list_lb_typesno sensitive capabilityhetzner_list_load_balancer_actionsno sensitive capabilityhetzner_list_load_balancersno sensitive capabilityhetzner_list_locationsno sensitive capabilityhetzner_list_network_actionsno sensitive capabilityhetzner_list_networksno sensitive capabilityhetzner_list_placement_groupsno sensitive capabilityhetzner_list_primary_ip_actionsno sensitive capabilityhetzner_list_primary_ipsno sensitive capabilityhetzner_list_server_actionsno sensitive capabilityhetzner_list_server_typesno sensitive capabilityhetzner_list_serversno sensitive capabilityhetzner_list_ssh_keysno sensitive capabilityhetzner_list_storage_box_actionsno sensitive capabilityhetzner_list_storage_box_foldersno sensitive capabilityhetzner_list_storage_box_snapshotsno sensitive capabilityhetzner_list_storage_box_subaccountsno sensitive capabilityhetzner_list_storage_box_typesno sensitive capabilityhetzner_list_storage_boxesno sensitive capabilityhetzner_list_volume_actionsno sensitive capabilityhetzner_list_volumesno sensitive capabilityhetzner_list_zone_actionsno sensitive capabilityhetzner_list_zone_rrsetsno sensitive capabilityhetzner_list_zonesno sensitive capabilityhetzner_power_offno sensitive capabilityhetzner_power_onno sensitive capabilityhetzner_rebootno sensitive capabilityhetzner_rebuild_serverno sensitive capabilityhetzner_remove_firewallno sensitive capabilityhetzner_remove_lb_targetno sensitive capabilityhetzner_remove_server_from_placement_groupno sensitive capabilityhetzner_remove_zone_rrset_recordsno sensitive capabilityhetzner_request_consoleno sensitive capabilityhetzner_resetno sensitive capabilityhetzner_reset_server_passwordno sensitive capabilityhetzner_reset_storage_box_passwordno sensitive capabilityhetzner_reset_storage_box_subaccount_passwordno sensitive capabilityhetzner_resize_serverno sensitive capabilityhetzner_resize_volumeno sensitive capabilityhetzner_retry_certificateno sensitive capabilityhetzner_rollback_storage_box_snapshotno sensitive capabilityhetzner_set_firewall_rulesno sensitive capabilityhetzner_set_zone_rrset_recordsno sensitive capabilityhetzner_shutdownno sensitive capabilityhetzner_unassign_floating_ipno sensitive capabilityhetzner_unassign_primary_ipno sensitive capabilityhetzner_update_certificateno sensitive capabilityhetzner_update_firewallno sensitive capabilityhetzner_update_floating_ipno sensitive capabilityhetzner_update_imageno sensitive capabilityhetzner_update_lb_serviceno sensitive capabilityhetzner_update_load_balancerno sensitive capabilityhetzner_update_networkno sensitive capabilityhetzner_update_placement_groupno sensitive capabilityhetzner_update_primary_ipno sensitive capabilityhetzner_update_serverno sensitive capabilityhetzner_update_ssh_keyno sensitive capabilityhetzner_update_storage_boxno sensitive capabilityhetzner_update_storage_box_access_settingsno sensitive capabilityhetzner_update_storage_box_snapshotno sensitive capabilityhetzner_update_storage_box_subaccountno sensitive capabilityhetzner_update_storage_box_subaccount_access_settingsno sensitive capabilityhetzner_update_volumeno sensitive capabilityhetzner_update_zoneno sensitive capabilityhetzner_update_zone_rrsetno sensitive capabilityhetzner_update_zone_rrset_recordsno sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (185 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 2
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v2.5.0 latest |
A 100/100 | 1 | 1.13.0 | 2026-09-07 |
v2.3.1 |
A 100/100 | 1 | 1.12.1 | 2026-08-20 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan @lazyants/hetzner-mcp-server --onlineOther implementations of Hetzner 4
Independent packages implementing the same tool, scanned with the same engine. Compare all 5 side by side →
MCP server for the full Hetzner platform: Cloud servers, networks, volumes, firewalls, load balancers, IPs, DNS, Storage Box, and Robot dedicated servers.
MCP server for managing Hetzner Cloud infrastructure from Claude Code
A Model Context Protocol (MCP) server for the Hetzner Cloud API — manage servers, volumes, firewalls, and SSH keys from Claude Code, Codex, Cursor, and any MCP client.
MCP server for managing Hetzner Cloud infrastructure
More in Cloud & DevOps
Operator control CLI for AdGuard Home with an MCP adapter
interacting with Aliyun (Alibaba Cloud) services through This MCP server provides tools.
MCP server for the Aspro.Cloud REST API
MCP server for Atlassian Confluence and Jira Cloud APIs
AuroraCloud-first MCP server that exposes AuroraDocs workspace data to Claude Desktop and other AI agents
The official AWS Knowledge Base retrieval server using Bedrock Agent Runtime.