@mguttmann/hetzner-cloud-mcp 0.1.0

package/.env.example

@@ -0,0 +1,25 @@
+# --- Hetzner Cloud API ----------------------------------------------------
+# Project-bound API token with read & write permissions.
+# How to create one: https://docs.hetzner.com/cloud/api/getting-started/generating-api-token/
+HETZNER_API_TOKEN=
+
+# API base URL. The default is fine; only override for tests/mock servers.
+HETZNER_API_BASE=https://api.hetzner.cloud/v1
+
+# --- Optional write guard -------------------------------------------------
+# false: write tools execute directly.
+# true:  write tools return a preview only unless `confirm: "YES"` is set.
+HETZNER_CONFIRM_WRITES=false
+
+# --- Logging --------------------------------------------------------------
+# pino level: debug | info | warn | error
+LOG_LEVEL=warn
+
+# --- Timeouts / Polling ---------------------------------------------------
+HTTP_TIMEOUT_MS=30000
+ACTION_POLL_TIMEOUT_MS=60000
+ACTION_POLL_INTERVAL_MS=2000
+
+# --- Pagination Soft-Cap --------------------------------------------------
+PAGINATION_MAX_ITEMS=500
+PAGINATION_MAX_PAGES=10

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Manuel Guttmann
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,148 @@
+# the-real-hetzner-mcp
+
+Local MCP server (stdio) that exposes the **Hetzner Cloud API 100% as tools — read and write**.
+
+> Consistent with the UniFi-MCP and Lokka: Node/TypeScript, stdio transport, locally embedded connector.
+
+## Features
+
+- Full coverage of the Hetzner Cloud API via codegen from `specs/cloud.spec.json` (189 generated tools + 12 hand-tuned wrappers = 201 tools total).
+- 12 hand-tuned power wrappers for the common server operations.
+- `hcloud_raw_request` as a generic escape hatch for any endpoint.
+- 429 backoff, automatic pagination with a soft-cap, action polling with a 60-second timeout.
+- Optional write guard `HETZNER_CONFIRM_WRITES=true` that returns a preview for destructive tools unless `confirm: "YES"` is set.
+
+## Out of Scope
+
+Hetzner Robot, Hetzner DNS, Hetzner Storage Boxes (separate APIs).
+
+## Installation
+
+### As an npm package (recommended for MCP-client use)
+
+```bash
+npm install -g @mguttmann/hetzner-cloud-mcp
+```
+
+Then in your MCP client config, the `command` is just `hetzner-cloud-mcp` (no path needed).
+
+### From source
+
+```bash
+git clone https://github.com/mguttmann/the-real-hetzner-mcp.git
+cd the-real-hetzner-mcp
+npm install
+npm run build
+```
+
+## Setup
+
+```bash
+cp .env.example .env
+# Add HETZNER_API_TOKEN to .env (Read & Write token from the Hetzner Cloud Console)
+npm run refresh-spec
+npm run generate
+npm run build
+```
+
+Optional smoke test against the real API (four read-only calls):
+
+```bash
+npm run test:live
+```
+
+## MCP Connector Setup (Claude Desktop / Claude Code)
+
+Append to your client's MCP config (`~/Library/Application Support/Claude/claude_desktop_config.json` for Claude Desktop, or the equivalent in Claude Code).
+
+### Variant A — installed via npm
+
+```json
+{
+  "mcpServers": {
+    "hetzner-cloud": {
+      "command": "hetzner-cloud-mcp",
+      "env": {
+        "HETZNER_API_TOKEN": "...",
+        "HETZNER_CONFIRM_WRITES": "false",
+        "LOG_LEVEL": "warn"
+      }
+    }
+  }
+}
+```
+
+### Variant B — from source
+
+```json
+{
+  "mcpServers": {
+    "hetzner-cloud": {
+      "command": "node",
+      "args": ["/absolute/path/to/the-real-hetzner-mcp/dist/index.js"],
+      "env": {
+        "HETZNER_API_TOKEN": "...",
+        "HETZNER_CONFIRM_WRITES": "false",
+        "LOG_LEVEL": "warn"
+      }
+    }
+  }
+}
+```
+
+Restart the client to pick up the change. `tools/list` should expose 201 tools whose names start with `hcloud_`.
+
+## Tools — overview
+
+### Hand-tuned Wrappers
+
+| Tool                              | What it does                                                                  |
+|-----------------------------------|-------------------------------------------------------------------------------|
+| `hcloud_list_servers`             | Server list with `name_contains` filter and default sort by `name`.           |
+| `hcloud_get_server`               | Fetch a server by `id` OR `name`.                                             |
+| `hcloud_server_power`             | poweron / poweroff / reboot / shutdown / reset in a single tool.              |
+| `hcloud_server_rebuild`           | Rebuild a server, `image_id` OR `image_name`.                                 |
+| `hcloud_server_snapshot`          | `create_image` with default `type=snapshot`.                                  |
+| `hcloud_server_backup`            | Toggle automatic backups.                                                     |
+| `hcloud_server_rescue`            | Toggle rescue mode, default `type=linux64`.                                   |
+| `hcloud_server_change_type`       | Change server type, default `upgrade_disk=false`.                             |
+| `hcloud_get_server_metrics`       | Server metrics, `id` OR `name`, default time window "last hour".              |
+| `hcloud_apply_firewall_to_server` | Apply a firewall to a server, by-id OR by-name.                               |
+| `hcloud_raw_request`              | Arbitrary request against the API.                                            |
+| `hcloud_wait_action`              | Poll an action until success/error or timeout.                                |
+
+### Generated Tools
+
+One tool per OpenAPI operation, naming scheme `hcloud_<verb>_<resource>` or `hcloud_<resource>_<action>_action`. On name collision with a wrapper the generated tool gets the suffix `_raw` (`hcloud_list_servers_raw`, `hcloud_get_server_raw`, `hcloud_get_server_metrics_raw`).
+
+Run `tools/list` in the Inspector to see the full list.
+
+## Spec Updates
+
+When Hetzner updates the OpenAPI:
+
+```bash
+npm run refresh-spec       # re-downloads specs/cloud.spec.json
+npm run generate           # rebuilds src/tools/generated/operations.ts
+npm test                   # codegen snapshot shows the diff
+npm run refresh-snapshot   # rewrite the snapshot deliberately (after review)
+git add specs/cloud.spec.json src/tools/generated/operations.ts tests/snapshots/tool-registry.json
+git commit -m "chore(spec): refresh from Hetzner"
+```
+
+## Manual Verification Recipe
+
+Run before declaring a release ready:
+
+1. `npm run inspector` — opens the MCP Inspector with this server.
+2. `tools/list` — verify count ≥ 200 and that all 12 wrapper names appear.
+3. `hcloud_list_servers` (no args) — verify against at least one known server in your account.
+4. `hcloud_get_server` with `name: "<one of your server names>"` — should return id, type, ip.
+5. `hcloud_create_ssh_key` with `{ name: "mcp-smoke", public_key: "<your test key>" }` — note the returned id.
+6. `hcloud_delete_ssh_key` with that id — confirm clean removal.
+
+Do **not** run power/rebuild/snapshot operations against production servers as part of a smoke test.
+
+## License
+
+MIT — see [LICENSE](./LICENSE).

package/dist/config.js

@@ -0,0 +1,53 @@
+import "dotenv/config";
+const DEFAULTS = {
+    baseUrl: "https://api.hetzner.cloud/v1",
+    confirmWrites: false,
+    logLevel: "warn",
+    httpTimeoutMs: 30_000,
+    actionPollTimeoutMs: 60_000,
+    actionPollIntervalMs: 2_000,
+    paginationMaxItems: 500,
+    paginationMaxPages: 10,
+};
+function parseBool(value, fallback) {
+    if (value === undefined)
+        return fallback;
+    const v = value.trim().toLowerCase();
+    if (v === "true" || v === "1" || v === "yes")
+        return true;
+    if (v === "false" || v === "0" || v === "no")
+        return false;
+    return fallback;
+}
+function parsePositiveInt(value, fallback) {
+    if (value === undefined)
+        return fallback;
+    const n = Number(value);
+    if (!Number.isFinite(n) || n <= 0)
+        return fallback;
+    return Math.trunc(n);
+}
+function parseLogLevel(value) {
+    if (value === "debug" || value === "info" || value === "warn" || value === "error") {
+        return value;
+    }
+    return DEFAULTS.logLevel;
+}
+export function loadConfig(env = process.env) {
+    const token = env.HETZNER_API_TOKEN;
+    if (!token) {
+        throw new Error("HETZNER_API_TOKEN is required. Set it in .env or your environment.");
+    }
+    return {
+        token,
+        baseUrl: env.HETZNER_API_BASE ?? DEFAULTS.baseUrl,
+        confirmWrites: parseBool(env.HETZNER_CONFIRM_WRITES, DEFAULTS.confirmWrites),
+        logLevel: parseLogLevel(env.LOG_LEVEL),
+        httpTimeoutMs: parsePositiveInt(env.HTTP_TIMEOUT_MS, DEFAULTS.httpTimeoutMs),
+        actionPollTimeoutMs: parsePositiveInt(env.ACTION_POLL_TIMEOUT_MS, DEFAULTS.actionPollTimeoutMs),
+        actionPollIntervalMs: parsePositiveInt(env.ACTION_POLL_INTERVAL_MS, DEFAULTS.actionPollIntervalMs),
+        paginationMaxItems: parsePositiveInt(env.PAGINATION_MAX_ITEMS, DEFAULTS.paginationMaxItems),
+        paginationMaxPages: parsePositiveInt(env.PAGINATION_MAX_PAGES, DEFAULTS.paginationMaxPages),
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAC;AAgBvB,MAAM,QAAQ,GAAG;IACf,OAAO,EAAE,8BAA8B;IACvC,aAAa,EAAE,KAAK;IACpB,QAAQ,EAAE,MAAkB;IAC5B,aAAa,EAAE,MAAM;IACrB,mBAAmB,EAAE,MAAM;IAC3B,oBAAoB,EAAE,KAAK;IAC3B,kBAAkB,EAAE,GAAG;IACvB,kBAAkB,EAAE,EAAE;CACd,CAAC;AAEX,SAAS,SAAS,CAAC,KAAyB,EAAE,QAAiB;IAC7D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC3D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB,EAAE,QAAgB;IACnE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IACnD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB;IAC9C,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QACnF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,MAA8D,OAAO,CAAC,GAAG;IAEzE,MAAM,KAAK,GAAG,GAAG,CAAC,iBAAiB,CAAC;IACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,KAAK;QACL,OAAO,EAAE,GAAG,CAAC,gBAAgB,IAAI,QAAQ,CAAC,OAAO;QACjD,aAAa,EAAE,SAAS,CAAC,GAAG,CAAC,sBAAsB,EAAE,QAAQ,CAAC,aAAa,CAAC;QAC5E,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC;QACtC,aAAa,EAAE,gBAAgB,CAAC,GAAG,CAAC,eAAe,EAAE,QAAQ,CAAC,aAAa,CAAC;QAC5E,mBAAmB,EAAE,gBAAgB,CACnC,GAAG,CAAC,sBAAsB,EAC1B,QAAQ,CAAC,mBAAmB,CAC7B;QACD,oBAAoB,EAAE,gBAAgB,CACpC,GAAG,CAAC,uBAAuB,EAC3B,QAAQ,CAAC,oBAAoB,CAC9B;QACD,kBAAkB,EAAE,gBAAgB,CAClC,GAAG,CAAC,oBAAoB,EACxB,QAAQ,CAAC,kBAAkB,CAC5B;QACD,kBAAkB,EAAE,gBAAgB,CAClC,GAAG,CAAC,oBAAoB,EACxB,QAAQ,CAAC,kBAAkB,CAC5B;KACF,CAAC;AACJ,CAAC"}

package/dist/http/action-polling.js

@@ -0,0 +1,34 @@
+const defaultSleep = (ms) => new Promise((r) => setTimeout(r, ms));
+export async function pollAction(request, actionId, opts) {
+    const sleep = opts.sleep ?? defaultSleep;
+    const now = opts.now ?? Date.now;
+    const start = now();
+    let lastAction;
+    while (true) {
+        const res = await request("GET", `/actions/${actionId}`);
+        const action = res.body?.action;
+        if (action) {
+            lastAction = action;
+            if (action.status === "success" || action.status === "error") {
+                return { action, timedOut: false };
+            }
+        }
+        if (now() - start >= opts.timeoutMs) {
+            return {
+                action: lastAction ?? {
+                    id: actionId,
+                    command: "unknown",
+                    status: "running",
+                    progress: 0,
+                    started: "",
+                    finished: null,
+                    resources: [],
+                    error: null,
+                },
+                timedOut: true,
+            };
+        }
+        await sleep(opts.intervalMs);
+    }
+}
+//# sourceMappingURL=action-polling.js.map

package/dist/http/action-polling.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-polling.js","sourceRoot":"","sources":["../../src/http/action-polling.ts"],"names":[],"mappings":"AA+BA,MAAM,YAAY,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAEjF,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAkB,EAClB,QAAgB,EAChB,IAAiB;IAEjB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC;IACpB,IAAI,UAA8B,CAAC;IAEnC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,MAAM,OAAO,CAAqB,KAAK,EAAE,YAAY,QAAQ,EAAE,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC;QAChC,IAAI,MAAM,EAAE,CAAC;YACX,UAAU,GAAG,MAAM,CAAC;YACpB,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC7D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YACrC,CAAC;QACH,CAAC;QACD,IAAI,GAAG,EAAE,GAAG,KAAK,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACpC,OAAO;gBACL,MAAM,EAAE,UAAU,IAAK;oBACrB,EAAE,EAAE,QAAQ;oBACZ,OAAO,EAAE,SAAS;oBAClB,MAAM,EAAE,SAAS;oBACjB,QAAQ,EAAE,CAAC;oBACX,OAAO,EAAE,EAAE;oBACX,QAAQ,EAAE,IAAI;oBACd,SAAS,EAAE,EAAE;oBACb,KAAK,EAAE,IAAI;iBACM;gBACnB,QAAQ,EAAE,IAAI;aACf,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC"}

package/dist/http/client.js

@@ -0,0 +1,94 @@
+const DEFAULT_TIMEOUT_MS = 30_000;
+const DEFAULT_MAX_RETRIES = 3;
+const defaultSleep = (ms) => new Promise((r) => setTimeout(r, ms));
+export class HetznerHttpClient {
+    baseUrl;
+    token;
+    fetchImpl;
+    defaultTimeoutMs;
+    sleep;
+    defaultMaxRetries;
+    constructor(opts) {
+        this.baseUrl = opts.baseUrl.replace(/\/+$/, "");
+        this.token = opts.token;
+        this.fetchImpl = opts.fetch ?? globalThis.fetch.bind(globalThis);
+        this.defaultTimeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        this.sleep = opts.sleep ?? defaultSleep;
+        this.defaultMaxRetries = opts.maxRetries ?? DEFAULT_MAX_RETRIES;
+    }
+    async request(method, path, options = {}) {
+        const maxRetries = options.maxRetries ?? this.defaultMaxRetries;
+        let attempt = 0;
+        while (true) {
+            const res = await this.doFetch(method, path, options);
+            const retryDelayMs = this.computeRetryDelay(res.status, res.headers, attempt);
+            if (retryDelayMs === null || attempt >= maxRetries) {
+                return res;
+            }
+            await this.sleep(retryDelayMs);
+            attempt++;
+        }
+    }
+    async doFetch(method, path, options) {
+        const url = this.buildUrl(path, options.query);
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(new Error("request timeout")), options.timeoutMs ?? this.defaultTimeoutMs);
+        try {
+            const res = await this.fetchImpl(url, {
+                method,
+                headers: {
+                    authorization: `Bearer ${this.token}`,
+                    "content-type": "application/json",
+                    accept: "application/json",
+                },
+                body: options.body === undefined ? undefined : JSON.stringify(options.body),
+                signal: controller.signal,
+            });
+            const body = await this.parseBody(res);
+            return { status: res.status, headers: res.headers, body };
+        }
+        finally {
+            clearTimeout(timeout);
+        }
+    }
+    computeRetryDelay(status, headers, attempt) {
+        if (status === 429) {
+            const retryAfter = headers.get("retry-after");
+            const reset = headers.get("ratelimit-reset");
+            const retryAfterMs = retryAfter ? Number(retryAfter) * 1000 : 0;
+            const resetMs = reset
+                ? Math.max(0, Number(reset) * 1000 - Date.now())
+                : 0;
+            return Math.max(retryAfterMs, resetMs, 0);
+        }
+        if (status >= 500 && status < 600) {
+            return 1000 * 2 ** attempt;
+        }
+        return null;
+    }
+    buildUrl(path, query) {
+        const url = new URL(this.baseUrl + (path.startsWith("/") ? path : `/${path}`));
+        if (query) {
+            for (const [k, v] of Object.entries(query)) {
+                if (v === undefined || v === null)
+                    continue;
+                url.searchParams.set(k, String(v));
+            }
+        }
+        return url.toString();
+    }
+    async parseBody(res) {
+        if (res.status === 204)
+            return undefined;
+        const text = await res.text();
+        if (!text)
+            return undefined;
+        try {
+            return JSON.parse(text);
+        }
+        catch {
+            return text;
+        }
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/http/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/http/client.ts"],"names":[],"mappings":"AA0BA,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,MAAM,YAAY,GAAY,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAE5E,MAAM,OAAO,iBAAiB;IACX,OAAO,CAAS;IAChB,KAAK,CAAS;IACd,SAAS,CAA0B;IACnC,gBAAgB,CAAS;IACzB,KAAK,CAAU;IACf,iBAAiB,CAAS;IAE3C,YAAY,IAAmB;QAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjE,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;QAC7D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;QACxC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,OAAO,CACX,MAAkB,EAClB,IAAY,EACZ,UAA0B,EAAE;QAE5B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,iBAAiB,CAAC;QAChE,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YACzD,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9E,IAAI,YAAY,KAAK,IAAI,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;gBACnD,OAAO,GAAG,CAAC;YACb,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC/B,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAkB,EAClB,IAAY,EACZ,OAAuB;QAEvB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CACxB,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,EACpD,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,CAC3C,CAAC;QACF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;gBACpC,MAAM;gBACN,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;oBACrC,cAAc,EAAE,kBAAkB;oBAClC,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC3E,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAI,GAAG,CAAC,CAAC;YAC1C,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;QAC5D,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAEO,iBAAiB,CACvB,MAAc,EACd,OAAgB,EAChB,OAAe;QAEf,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YAC7C,MAAM,YAAY,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,KAAK;gBACnB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAChD,CAAC,CAAC,CAAC,CAAC;YACN,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;YAClC,OAAO,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC;QAC7B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,QAAQ,CAAC,IAAY,EAAE,KAA8B;QAC3D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/E,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;oBAAE,SAAS;gBAC5C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,SAAS,CAAI,GAAa;QACtC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAoB,CAAC;QAC9B,CAAC;IACH,CAAC;CACF"}

package/dist/http/errors.js

@@ -0,0 +1,36 @@
+function isErrorEnvelope(body) {
+    return (typeof body === "object" &&
+        body !== null &&
+        "error" in body &&
+        typeof body.error === "object" &&
+        body.error !== null &&
+        typeof body.error.code === "string" &&
+        typeof body.error.message === "string");
+}
+export class HetznerApiError extends Error {
+    status;
+    code;
+    details;
+    constructor(status, code, message, details) {
+        super(message);
+        this.name = "HetznerApiError";
+        this.status = status;
+        this.code = code;
+        this.details = details;
+    }
+    toString() {
+        return `HetznerApiError[${this.status} ${this.code}]: ${this.message}`;
+    }
+}
+export function mapErrorResponse(status, body) {
+    if (status >= 200 && status < 400)
+        return null;
+    if (isErrorEnvelope(body)) {
+        return new HetznerApiError(status, body.error.code, body.error.message, body.error.details);
+    }
+    const fallbackMessage = typeof body === "string" && body.length > 0
+        ? body
+        : `HTTP ${status}`;
+    return new HetznerApiError(status, "upstream_error", fallbackMessage);
+}
+//# sourceMappingURL=errors.js.map

package/dist/http/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/http/errors.ts"],"names":[],"mappings":"AAQA,SAAS,eAAe,CAAC,IAAa;IACpC,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,OAAO,IAAI,IAAI;QACf,OAAQ,IAA2B,CAAC,KAAK,KAAK,QAAQ;QACrD,IAAyD,CAAC,KAAK,KAAK,IAAI;QACzE,OAAQ,IAAqC,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;QACrE,OAAQ,IAAwC,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAC5E,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAC/B,MAAM,CAAS;IACf,IAAI,CAAS;IACb,OAAO,CAAU;IAE1B,YAAY,MAAc,EAAE,IAAY,EAAE,OAAe,EAAE,OAAiB;QAC1E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAEQ,QAAQ;QACf,OAAO,mBAAmB,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACzE,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAC9B,MAAc,EACd,IAAa;IAEb,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,eAAe,CACxB,MAAM,EACN,IAAI,CAAC,KAAK,CAAC,IAAI,EACf,IAAI,CAAC,KAAK,CAAC,OAAO,EAClB,IAAI,CAAC,KAAK,CAAC,OAAO,CACnB,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GACnB,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QACzC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAC;IACvB,OAAO,IAAI,eAAe,CAAC,MAAM,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAC;AACxE,CAAC"}

package/dist/http/pagination.js

@@ -0,0 +1,51 @@
+export async function fetchAllPages(request, method, path, query, opts) {
+    const explicitPage = typeof query.page === "number";
+    const items = [];
+    let page = explicitPage ? query.page : 1;
+    let pageCount = 0;
+    let truncated = false;
+    let lastPagination;
+    while (true) {
+        const res = await request(method, path, {
+            query: { ...query, page },
+        });
+        pageCount++;
+        const body = res.body ?? {};
+        const pageItems = body[opts.resourceKey] ?? [];
+        const pagination = body.meta?.pagination;
+        lastPagination = pagination ?? lastPagination;
+        for (const item of pageItems) {
+            if (items.length >= opts.maxItems) {
+                truncated = true;
+                break;
+            }
+            items.push(item);
+        }
+        if (truncated)
+            break;
+        // Caller asked for a specific page — return that page only, no forward-walk.
+        if (explicitPage)
+            break;
+        if (pageCount >= opts.maxPages) {
+            const hasMore = pagination?.next_page != null;
+            if (hasMore)
+                truncated = true;
+            break;
+        }
+        if (!pagination || pagination.next_page == null)
+            break;
+        page = pagination.next_page;
+    }
+    if (truncated && lastPagination) {
+        return {
+            items,
+            truncated,
+            pagination: {
+                next_page: lastPagination.next_page,
+                last_page: lastPagination.last_page,
+            },
+        };
+    }
+    return { items, truncated };
+}
+//# sourceMappingURL=pagination.js.map

package/dist/http/pagination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.js","sourceRoot":"","sources":["../../src/http/pagination.ts"],"names":[],"mappings":"AAiCA,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAkB,EAClB,MAAkB,EAClB,IAAY,EACZ,KAA8B,EAC9B,IAAqB;IAErB,MAAM,YAAY,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;IACpD,MAAM,KAAK,GAAQ,EAAE,CAAC;IACtB,IAAI,IAAI,GAAG,YAAY,CAAC,CAAC,CAAE,KAAK,CAAC,IAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,cAA0C,CAAC;IAE/C,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,MAAM,OAAO,CAAkB,MAAM,EAAE,IAAI,EAAE;YACvD,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE;SAC1B,CAAC,CAAC;QACH,SAAS,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAK,EAAsB,CAAC;QACjD,MAAM,SAAS,GAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAqB,IAAI,EAAE,CAAC;QACpE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;QACzC,cAAc,GAAG,UAAU,IAAI,cAAc,CAAC;QAE9C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClC,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM;YACR,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAED,IAAI,SAAS;YAAE,MAAM;QACrB,6EAA6E;QAC7E,IAAI,YAAY;YAAE,MAAM;QACxB,IAAI,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,UAAU,EAAE,SAAS,IAAI,IAAI,CAAC;YAC9C,IAAI,OAAO;gBAAE,SAAS,GAAG,IAAI,CAAC;YAC9B,MAAM;QACR,CAAC;QACD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,SAAS,IAAI,IAAI;YAAE,MAAM;QACvD,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC;IAC9B,CAAC;IAED,IAAI,SAAS,IAAI,cAAc,EAAE,CAAC;QAChC,OAAO;YACL,KAAK;YACL,SAAS;YACT,UAAU,EAAE;gBACV,SAAS,EAAE,cAAc,CAAC,SAAS;gBACnC,SAAS,EAAE,cAAc,CAAC,SAAS;aACpC;SACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC"}

package/dist/index.js

@@ -0,0 +1,80 @@
+#!/usr/bin/env node
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { loadConfig } from "./config.js";
+import { createLogger } from "./logger.js";
+import { HetznerHttpClient } from "./http/client.js";
+import { createMcpServer } from "./server.js";
+import { ToolRegistry } from "./tools/registry.js";
+import { makeServerListTool } from "./tools/wrappers/server_list.js";
+import { makeServerGetTool } from "./tools/wrappers/server_get.js";
+import { makeServerPowerTool } from "./tools/wrappers/server_power.js";
+import { makeServerRebuildTool } from "./tools/wrappers/server_rebuild.js";
+import { makeServerChangeTypeTool } from "./tools/wrappers/server_change_type.js";
+import { makeServerSnapshotTool } from "./tools/wrappers/server_snapshot.js";
+import { makeServerBackupTool } from "./tools/wrappers/server_backup.js";
+import { makeServerRescueTool } from "./tools/wrappers/server_rescue.js";
+import { makeServerMetricsTool } from "./tools/wrappers/server_metrics.js";
+import { makeApplyFirewallToServerTool } from "./tools/wrappers/apply_firewall_to_server.js";
+import { makeRawRequestTool } from "./tools/raw_request.js";
+import { makeWaitActionTool } from "./tools/wait_action.js";
+import { withConfirmGuard } from "./tools/confirm.js";
+import { OPERATIONS } from "./tools/generated/operations.js";
+import { buildGeneratedTools } from "./tools/generated/tools.js";
+async function main() {
+    const config = loadConfig();
+    const logger = createLogger(config.logLevel);
+    const client = new HetznerHttpClient({
+        baseUrl: config.baseUrl,
+        token: config.token,
+        timeoutMs: config.httpTimeoutMs,
+    });
+    const registry = new ToolRegistry();
+    const limits = {
+        maxItems: config.paginationMaxItems,
+        maxPages: config.paginationMaxPages,
+    };
+    function register(reg, tool) {
+        reg.register(withConfirmGuard(tool, config.confirmWrites));
+    }
+    register(registry, makeServerListTool(client, limits));
+    register(registry, makeServerGetTool(client));
+    const actionPoll = {
+        timeoutMs: config.actionPollTimeoutMs,
+        intervalMs: config.actionPollIntervalMs,
+    };
+    const actionDeps = { client, actionPoll };
+    register(registry, makeServerPowerTool(actionDeps));
+    register(registry, makeServerRebuildTool(actionDeps));
+    register(registry, makeServerChangeTypeTool(actionDeps));
+    register(registry, makeServerSnapshotTool(actionDeps));
+    register(registry, makeServerBackupTool(actionDeps));
+    register(registry, makeServerRescueTool(actionDeps));
+    register(registry, makeServerMetricsTool({ client }));
+    register(registry, makeApplyFirewallToServerTool({ client, actionPoll }));
+    for (const tool of buildGeneratedTools(client, OPERATIONS, {
+        maxItems: config.paginationMaxItems,
+        maxPages: config.paginationMaxPages,
+        actionPoll,
+    })) {
+        // Wrapper takes precedence on name collision (wrappers register first, generated tools have _raw suffix)
+        if (registry.getByName(tool.name))
+            continue;
+        register(registry, tool);
+    }
+    // raw_request handles confirm-mode itself (only for non-GET methods per spec §16).
+    // Bypass withConfirmGuard so GET passes through even when HETZNER_CONFIRM_WRITES=true.
+    registry.register(makeRawRequestTool({ client, confirmWrites: config.confirmWrites }));
+    register(registry, makeWaitActionTool({
+        client,
+        defaultPoll: actionPoll,
+    }));
+    const server = createMcpServer(registry, logger);
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    logger.info({ tools: registry.size() }, "hetzner-cloud-mcp ready");
+}
+main().catch((err) => {
+    process.stderr.write(`fatal: ${err instanceof Error ? err.message : err}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAGjE,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAE7C,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC;QACnC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS,EAAE,MAAM,CAAC,aAAa;KAChC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG;QACb,QAAQ,EAAE,MAAM,CAAC,kBAAkB;QACnC,QAAQ,EAAE,MAAM,CAAC,kBAAkB;KACpC,CAAC;IAEF,SAAS,QAAQ,CAAC,GAAiB,EAAE,IAAa;QAChD,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;IAE9C,MAAM,UAAU,GAAG;QACjB,SAAS,EAAE,MAAM,CAAC,mBAAmB;QACrC,UAAU,EAAE,MAAM,CAAC,oBAAoB;KACxC,CAAC;IACF,MAAM,UAAU,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAE1C,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC,UAAU,CAAC,CAAC,CAAC;IACtD,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC,UAAU,CAAC,CAAC,CAAC;IACzD,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC,UAAU,CAAC,CAAC,CAAC;IACvD,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC;IACrD,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC;IACrD,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACtD,QAAQ,CAAC,QAAQ,EAAE,6BAA6B,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAE1E,KAAK,MAAM,IAAI,IAAI,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE;QACzD,QAAQ,EAAE,MAAM,CAAC,kBAAkB;QACnC,QAAQ,EAAE,MAAM,CAAC,kBAAkB;QACnC,UAAU;KACX,CAAC,EAAE,CAAC;QACH,yGAAyG;QACzG,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC5C,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,mFAAmF;IACnF,uFAAuF;IACvF,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IACvF,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;QACpC,MAAM;QACN,WAAW,EAAE,UAAU;KACxB,CAAC,CAAC,CAAC;IAEJ,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,yBAAyB,CAAC,CAAC;AACrE,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/logger.js

@@ -0,0 +1,12 @@
+import pino from "pino";
+export function createLogger(level) {
+    const opts = {
+        level,
+        redact: {
+            paths: ["headers.authorization", "*.authorization", "*.HETZNER_API_TOKEN"],
+            remove: true,
+        },
+    };
+    return pino(opts, pino.destination(2));
+}
+//# sourceMappingURL=logger.js.map

package/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA,OAAO,IAAyC,MAAM,MAAM,CAAC;AAG7D,MAAM,UAAU,YAAY,CAAC,KAAe;IAC1C,MAAM,IAAI,GAAkB;QAC1B,KAAK;QACL,MAAM,EAAE;YACN,KAAK,EAAE,CAAC,uBAAuB,EAAE,iBAAiB,EAAE,qBAAqB,CAAC;YAC1E,MAAM,EAAE,IAAI;SACb;KACF,CAAC;IACF,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC"}

package/dist/server.js

@@ -0,0 +1,37 @@
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
+export function createMcpServer(registry, logger) {
+    const server = new Server({ name: "the-real-hetzner-mcp", version: "0.1.0" }, { capabilities: { tools: {} } });
+    server.setRequestHandler(ListToolsRequestSchema, async () => ({
+        tools: registry.getAll().map((t) => ({
+            name: t.name,
+            description: t.description,
+            inputSchema: t.inputSchema,
+            annotations: t.annotations,
+        })),
+    }));
+    server.setRequestHandler(CallToolRequestSchema, async (req) => {
+        const tool = registry.getByName(req.params.name);
+        if (!tool) {
+            throw new Error(`Unknown tool: ${req.params.name}`);
+        }
+        logger.debug({ tool: tool.name }, "tools/call");
+        try {
+            return await tool.handler(req.params.arguments ?? {});
+        }
+        catch (err) {
+            logger.warn({ tool: tool.name, err }, "tool handler failed");
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: err instanceof Error ? err.message : String(err),
+                    },
+                ],
+                isError: true,
+            };
+        }
+    });
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAI5C,MAAM,UAAU,eAAe,CAC7B,QAAsB,EACtB,MAAc;IAEd,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE,EAClD,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;IAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CAAC;KACJ,CAAC,CAAC,CAAC;IAEJ,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5D,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,qBAAqB,CAAC,CAAC;YAC7D,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACvD;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}