Skip to content

v0.2.0

Choose a tag to compare

View all tags
@ni-c ni-c released this 11 Aug 12:14
· 34 commits to main since this release
v0.2.0
This tag was signed with the committer’s verified signature.
ni-c Willi Thiel
GPG key ID: B97D5A9D95CC8EB2
Verified
Learn about vigilant mode.
a3b92c1
This commit was signed with the committer’s verified signature.
ni-c Willi Thiel
GPG key ID: B97D5A9D95CC8EB2
Verified
Learn about vigilant mode.

First public release of hetzner-dns-mcp — a Model Context Protocol (MCP) server for managing DNS zones and records via the Hetzner Cloud API.

Features

  • 22 tools covering zones, RRSets (record sets) and zone actions: list/create/update/delete, zone file import/export, TTLs, protection, primary nameservers
  • Targets the current Hetzner Cloud DNS API (api.hetzner.cloud) — the legacy dns.hetzner.com API (shut down May 2026) is not supported
  • Configuration via HETZNER_API_TOKEN (and optional HETZNER_API_BASE_URL)

Safety & hardening (0.2.0)

  • All destructive tools (delete_zone, delete_rrset, import_zonefile, set_records, remove_records, change_primary_nameservers) require an explicit confirm=true and report the current state when refusing
  • HETZNER_API_BASE_URL is validated (https only, no embedded credentials, warning on non-default hosts)
  • Zone/RRSet name parameters are restricted to a safe character set; ./.. are rejected (URL path traversal)
  • API requests refuse redirects and time out after 30 s
  • CI: GITHUB_TOKEN restricted to contents: read, actions pinned to commit SHAs

Install

claude mcp add hetzner-dns -s user \
  -e HETZNER_API_TOKEN=your-token \
  -- npx -y hetzner-dns-mcp

See the README for Claude Desktop and Codex setup.

Full changelog: CHANGELOG.md

Assets 2
Loading