ionos-cloud/ionoscloud-mcp

A **read-only-by-default** Model Context Protocol (MCP) server that connects your IONOS CLOUD account to any MCP-compatible AI assistant or autonomous AI agent: Claude Desktop, Cursor, VS Code (GitHub Copilot), Windsurf, Cline, Continue, OpenCode, and 5+ others. **118 read-only tools across 7 IONOS CLOUD products** — list, inspect, and audit your infrastructure through natural-language prompts or programmatic agentic loops. Write operations across Compute (servers, volumes, networking, load balancing), Managed Kubernetes (clusters, node pools, nodes), DNS (zones, records, reverse records, DNSSEC) and Certificate Manager (certificates, auto-certificates, providers) are strictly opt-in and create real, billable resources — see Write operations.
Built and maintained by the IONOS Cloud team. The server runs as a local binary on your workstation, a CI runner, or inside a container. IONOS CLOUD API calls go directly to IONOS over HTTPS; no third-party AI provider sits in the data path.
**Compatibility:** MCP spec 2024-11-05 · Go 1.25+ for builds · OCI images for linux/amd64 and linux/arm64.
> 📚 **Full product documentation, per-client setup guides, FAQ, and tutorials:** docs.ionos.com/cloud/ai/mcp-server
**Get started in 60 seconds** (macOS or Linux, via Homebrew):
For other install paths (Docker, pre-built binary, go install, source), see Installation.
Why •
Registries •
Products •
Install •
Config •
Tool loading •
Transport •
Write ops •
Demo •
Dev •
Related •
Changelog
Why
* **Read-only by default, writes strictly opt-in** — out of the box every tool is an inspection operation (list_*, get_*, head_*), so it's safe to connect to production accounts and to deploy inside unattended agent loops on CI runners. Write tools (create_*, update_*, delete_*) register only when you set IONOS_MCP_TOOL_SCOPE, and even then every create and delete requires a two-phase confirmation (preview → one-time token → execute). See Write operations.
* **Local binary, no proxy** — IONOS CLOUD API calls go directly from your machine to IONOS Cloud. No third-party AI vendor in the data path.
* **EU-sovereign option** — pair the server with the IONOS CLOUD AI Model Hub and both the API calls *and* the LLM inference terminate inside IONOS's German data centres. See the Fully Sovereign AI Workflow guide.
* **Open source** — Apache 2.0. Read the source, audit the behaviour, contribute, or fork.
Registries & Directories
This server is published across multiple MCP registries and IDE marketplaces:
| Registry | Link |
|----------|------|
| Official MCP Registry | io.github.ionos-cloud/ionoscloud-mcp |
| Smithery | ionos-cloud/ionoscloud-mcp |
| mcp.so | ionos-cloud-mcp-server |
| Glama | ionoscloud-mcp |
| Cursor | ionoscloud-mcp |
| mcpservers.org | ionoscloud-mcp |
| PulseMCP | ionoscloud |
| MCPMarket | ionos-cloud |
| punkpeye/awesome-mcp-servers | ionos-cloud/ionoscloud-mcp |
Supported products
Read tools are named list_*, get_* and head_*; the opt-in write tools are create_*, update_*, delete_* plus domain verbs such as start_* and attach_*. In the default eager mode all tools register at startup; lazy mode defers Compute and Object Storage behind loader tools; dynamic mode exposes only three search/describe/call meta-tools for clients with hard tool caps. See Tool loading mode.
| Product | Tools | Capabilities |
|---|---|---|
| Compute Engine | 50 + 69 write | Data centers, servers, volumes, NICs, LANs, firewall rules, IP blocks, load balancers (basic / network / application), NAT gateways, security groups, private cross-connects, snapshots, images, templates, locations, requests, contract |
| Kubernetes | 8 + 8 write | Clusters, node pools, nodes, available versions |
| Object Storage | 23 | Buckets, bucket configuration (CORS, encryption, lifecycle, policy, public access block, replication, tagging, versioning, Object Lock), objects, access keys, regions |
| DNS | 14 + 16 write | Zones, zone files (+ BIND import), records, reverse records, secondary zones (+ zone transfer), DNSSEC, quota |
| Billing | 15 | Profile, invoices, EVN (provisioning intervals), traffic, usage, utilization, product pricing catalog, FOCUS v1.3 spec |