Home › Cloud & Monitoring › Hetzner DNS

Hetzner DNS

Manage DNS zones and records (zonefiles, RRSets, TTL, protection) via the Hetzner Cloud API

TypeScript Cloud macOSWindowsLinux

★ 0 stars Last pushed 2026-09-23 License: MIT

View repository → Website →

Connect

Review any command before running it. Package names and URLs come from the server's own registry entry.

Package (npm 0.6.0)

npx -y [email protected]

Or add to your MCP client config:

{
  "mcpServers": {
    "hetzner-dns-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "HETZNER_API_TOKEN": "<YOUR_VALUE>",
        "HETZNER_READ_ONLY": "<YOUR_VALUE>",
        "HETZNER_ALLOW_TOOLS": "<YOUR_VALUE>",
        "HETZNER_DENY_TOOLS": "<YOUR_VALUE>",
        "HETZNER_API_BASE_URL": "<YOUR_VALUE>"
      }
    }
  }
}

HETZNER_API_TOKEN required secret — Hetzner Cloud API token (project-scoped, Cloud Console -> Security -> API tokens)
HETZNER_READ_ONLY — Set to true to register only the read-only tools (default: false)
HETZNER_ALLOW_TOOLS — Comma-separated tool names or list_* prefixes to register; 'essential' selects a curated preset (default: all tools)
HETZNER_DENY_TOOLS — Comma-separated tool names or list_* prefixes to remove from whatever HETZNER_ALLOW_TOOLS left
HETZNER_API_BASE_URL — Override the Hetzner Cloud API base URL (default: https://api.hetzner.cloud/v1)

Package (oci)

docker run -i --rm ghcr.io/ni-c/hetzner-dns-mcp:0.6.0

Or add to your MCP client config:

{
  "mcpServers": {
    "hetzner-dns-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/ni-c/hetzner-dns-mcp:0.6.0"
      ],
      "env": {
        "HETZNER_API_TOKEN": "<YOUR_VALUE>",
        "HETZNER_READ_ONLY": "<YOUR_VALUE>",
        "HETZNER_ALLOW_TOOLS": "<YOUR_VALUE>",
        "HETZNER_DENY_TOOLS": "<YOUR_VALUE>",
        "HETZNER_API_BASE_URL": "<YOUR_VALUE>"
      }
    }
  }
}

HETZNER_API_TOKEN required secret — Hetzner Cloud API token (project-scoped, Cloud Console -> Security -> API tokens)
HETZNER_READ_ONLY — Set to true to register only the read-only tools (default: false)
HETZNER_ALLOW_TOOLS — Comma-separated tool names or list_* prefixes to register; 'essential' selects a curated preset (default: all tools)
HETZNER_DENY_TOOLS — Comma-separated tool names or list_* prefixes to remove from whatever HETZNER_ALLOW_TOOLS left
HETZNER_API_BASE_URL — Override the Hetzner Cloud API base URL (default: https://api.hetzner.cloud/v1)