helipod-mcp 0.5.13 → 0.5.16

package/README.md

@@ -2,8 +2,8 @@
 
 Use [Helipod](https://helipod.io) from AI coding tools: deploy apps and databases, run VPS servers, buy domains and edit DNS, and send email, by asking in plain language.
 
-- **MCP server** (`helipod-mcp`): 238 tools over the Container, Database, VPS, Domain, Email, Account and AI APIs. Works in Claude Code, Codex, Cursor, VS Code, Windsurf, Claude Desktop and any MCP client.
-- **Skills** (`skills/`): step-by-step playbooks so the agent deploys, prices and confirms the way Helipod expects (price first, confirm before deleting, read build logs on failure).
+- **MCP server** (`helipod-mcp`): 263 tools over the Container, Database, VPS, Domain, Email, Account and AI APIs. Works in Claude Code, Codex, Cursor, VS Code, Windsurf, Claude Desktop and any MCP client.
+- **Skills** (`skills/`): step-by-step playbooks so the agent deploys, prices and confirms the way Helipod expects (price first, confirm before deleting, read build logs on failure): containers, VPS and apps on a VPS, databases, domains, email, the AI gateway, end-to-end launches (app + database + domain + email) and reselling.
 
 Step-by-step guides for each tool (Claude Code, Codex, Cursor, VS Code, Gemini CLI, opencode, Windsurf, Claude Desktop, Cline and others): **https://docs.helipod.io/docs/helipod/ai-agents**
 

package/dist/http.js

@@ -35623,6 +35623,14 @@ class HelipodClient {
     const headers = !this.cfg.emailApiKey && opts.project ? { "x-helipod-project": opts.project } : undefined;
     return this.request(this.emailApiUrl, key, method, path, { ...opts, headers });
   }
+  emailWithAccountKey(method, path, opts = {}) {
+    const key = this.cfg.apiKey;
+    if (!key) {
+      throw new HelipodError(401, "NO_API_KEY", "Managing email keys needs HELIPOD_API_KEY (a Helipod API key with the Email API enabled); an email key cannot do it.");
+    }
+    const headers = opts.project ? { "x-helipod-project": opts.project } : undefined;
+    return this.request(this.emailApiUrl, key, method, path, { ...opts, headers });
+  }
   async image(link, maxBytes) {
     let url2;
     try {
@@ -35753,7 +35761,7 @@ var containerTools = [
     kind: "read",
     description: "Projects this API key can reach, each with its environments (production, staging, ...). Start here to find an environmentId.",
     input: {},
-    run: (_a3, api2) => api2.api("GET", `${C}/projects`)
+    run: (_a3, api2) => api2.api("GET", `/projects`)
   }),
   defineTool({
     name: "get_project",
@@ -35761,7 +35769,7 @@ var containerTools = [
     kind: "read",
     description: "One project with its environments (ids and names). Use it to find an environmentId when you already know the project.",
     input: { projectId: id("Project") },
-    run: (a, api2) => api2.api("GET", `${C}/projects/${a.projectId}`)
+    run: (a, api2) => api2.api("GET", `/projects/${a.projectId}`)
   }),
   defineTool({
     name: "create_project",
@@ -35769,7 +35777,7 @@ var containerTools = [
     kind: "write",
     description: "Create a project (free) with its default production environment. Needs a whole-account key (a key limited to one project gets 403). Pass an idempotencyKey when retrying.",
     input: { name: exports_external.string().min(3).max(100), description: exports_external.string().max(500).optional(), idempotencyKey: idem },
-    run: (a, api2) => api2.api("POST", `${C}/projects`, { body: { name: a.name, description: a.description }, idempotencyKey: a.idempotencyKey })
+    run: (a, api2) => api2.api("POST", `/projects`, { body: { name: a.name, description: a.description }, idempotencyKey: a.idempotencyKey })
   }),
   defineTool({
     name: "update_project",
@@ -35778,7 +35786,7 @@ var containerTools = [
     idempotent: true,
     description: "Change a project's name and/or description.",
     input: { projectId: id("Project"), name: exports_external.string().min(3).max(100).optional(), description: exports_external.string().max(500).optional() },
-    run: (a, api2) => api2.api("PATCH", `${C}/projects/${a.projectId}`, { body: { name: a.name, description: a.description } })
+    run: (a, api2) => api2.api("PATCH", `/projects/${a.projectId}`, { body: { name: a.name, description: a.description } })
   }),
   defineTool({
     name: "delete_project",
@@ -35786,7 +35794,7 @@ var containerTools = [
     kind: "destructive",
     description: "Delete an EMPTY project and its environments and shared variables. Irreversible. Refused (409 PROJECT_NOT_EMPTY) while it still has services, databases, VPS or other resources: those must be deleted first. Needs a whole-account key. Only after the user confirms; confirm must be the project's exact name.",
     input: { projectId: id("Project"), confirm: exports_external.string().max(255).describe("The project name, exactly") },
-    run: (a, api2) => api2.api("DELETE", `${C}/projects/${a.projectId}`, { body: { confirm: a.confirm } })
+    run: (a, api2) => api2.api("DELETE", `/projects/${a.projectId}`, { body: { confirm: a.confirm } })
   }),
   defineTool({
     name: "create_environment",
@@ -35794,7 +35802,7 @@ var containerTools = [
     kind: "write",
     description: "Add an environment (e.g. staging) to a project. Free; services in it are billed as usual once deployed.",
     input: { projectId: id("Project"), name: exports_external.string().regex(/^[A-Za-z0-9][A-Za-z0-9 _.-]{0,49}$/).describe("1-50 characters: letters, digits, space _ . -") },
-    run: (a, api2) => api2.api("POST", `${C}/projects/${a.projectId}/environments`, { body: { name: a.name } })
+    run: (a, api2) => api2.api("POST", `/projects/${a.projectId}/environments`, { body: { name: a.name } })
   }),
   defineTool({
     name: "rename_environment",
@@ -35803,7 +35811,7 @@ var containerTools = [
     idempotent: true,
     description: "Rename an environment (names are unique within the project).",
     input: { environmentId: id("Environment"), name: exports_external.string().regex(/^[A-Za-z0-9][A-Za-z0-9 _.-]{0,49}$/) },
-    run: (a, api2) => api2.api("PATCH", `${C}/environments/${a.environmentId}`, { body: { name: a.name } })
+    run: (a, api2) => api2.api("PATCH", `/environments/${a.environmentId}`, { body: { name: a.name } })
   }),
   defineTool({
     name: "delete_environment",
@@ -35811,7 +35819,7 @@ var containerTools = [
     kind: "destructive",
     description: "Delete an EMPTY environment (409 ENVIRONMENT_NOT_EMPTY while it has services: delete them first). Irreversible. Only after the user confirms; confirm must be the environment's exact name.",
     input: { environmentId: id("Environment"), confirm: exports_external.string().max(255).describe("The environment name, exactly") },
-    run: (a, api2) => api2.api("DELETE", `${C}/environments/${a.environmentId}`, { body: { confirm: a.confirm } })
+    run: (a, api2) => api2.api("DELETE", `/environments/${a.environmentId}`, { body: { confirm: a.confirm } })
   }),
   defineTool({
     name: "list_project_variables",
@@ -36786,6 +36794,19 @@ var record3 = exports_external.object({
   content: exports_external.string().describe('TXT without surrounding quotes (they are added by the DNS server); MX as "10 mail.example.com"'),
   ttl: exports_external.number().int().optional()
 });
+var owner = exports_external.object({
+  name: exports_external.string().min(3).max(255),
+  email: exports_external.string().max(255).optional().describe("Gets the registry's verification email; defaults to the account email"),
+  organization: exports_external.string().max(255).optional(),
+  phone: exports_external.string().min(9).max(20).describe("e.g. +6281234567890"),
+  addressLine1: exports_external.string().min(3).max(500),
+  addressLine2: exports_external.string().max(500).optional(),
+  city: exports_external.string().min(3).max(100),
+  state: exports_external.string().min(1).max(100),
+  countryCode: exports_external.string().regex(/^[A-Za-z]{2}$/).describe("ISO 3166-1 alpha-2, e.g. ID"),
+  postalCode: exports_external.string().min(1).max(20),
+  fax: exports_external.string().max(50).optional()
+});
 var domainTools = [
   defineTool({
     name: "search_domain",
@@ -36865,19 +36886,7 @@ var domainTools = [
       name: exports_external.string().describe("Full domain, e.g. tokosaya.id"),
       nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(),
       whoisProtection: exports_external.boolean().optional(),
-      registrant: exports_external.object({
-        name: exports_external.string().min(3).max(255),
-        email: exports_external.string().max(255).optional().describe("Gets the registry's verification email; defaults to the account email"),
-        organization: exports_external.string().max(255).optional(),
-        phone: exports_external.string().min(9).max(20).describe("e.g. +6281234567890"),
-        addressLine1: exports_external.string().min(3).max(500),
-        addressLine2: exports_external.string().max(500).optional(),
-        city: exports_external.string().min(3).max(100),
-        state: exports_external.string().min(1).max(100),
-        countryCode: exports_external.string().regex(/^[A-Za-z]{2}$/).describe("ISO 3166-1 alpha-2, e.g. ID"),
-        postalCode: exports_external.string().min(1).max(20),
-        fax: exports_external.string().max(50).optional()
-      }).optional().describe("Owner of THIS domain instead of the account's owner details (e.g. a reseller's customer). .id domains only: others answer 400 REGISTRANT_NOT_SUPPORTED. Use only details the user gave."),
+      registrant: owner.optional().describe("Owner of THIS domain instead of the account's owner details (e.g. a reseller's customer). .id domains only: others answer 400 REGISTRANT_NOT_SUPPORTED. Use only details the user gave."),
       dryRun: dryRun3
     },
     run: (a, api2) => api2.api("POST", "/domains/register", { body: { name: a.name, period: 1, nameservers: a.nameservers, whoisProtection: a.whoisProtection, registrant: a.registrant }, query: { dryRun: a.dryRun ? "true" : undefined } })
@@ -36886,9 +36895,23 @@ var domainTools = [
     name: "transfer_domain",
     title: "Transfer domain in",
     kind: "write",
-    description: `Transfer a domain from another registrar (adds 1 year). COSTS MONEY from the wallet. Needs the domain's auth code. ${DRY2}`,
-    input: { name: exports_external.string(), authCode: exports_external.string(), nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(), dryRun: dryRun3 },
-    run: (a, api2) => api2.api("POST", "/domains/transfer", { body: { name: a.name, authCode: a.authCode, period: 1, nameservers: a.nameservers }, query: { dryRun: a.dryRun ? "true" : undefined } })
+    description: `Transfer a domain from another registrar (adds 1 year). COSTS MONEY from the wallet. Needs the domain's auth code. ${DRY2} With registrant (.id only) the domain gets that owner when the transfer completes (ownerPending until then); without it, the account's owner details.`,
+    input: {
+      name: exports_external.string(),
+      authCode: exports_external.string(),
+      nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(),
+      registrant: owner.optional().describe("Owner of THIS domain once the transfer completes (e.g. a reseller's customer). .id domains only: others answer 400 REGISTRANT_NOT_SUPPORTED. Use only details the user gave."),
+      dryRun: dryRun3
+    },
+    run: (a, api2) => api2.api("POST", "/domains/transfer", { body: { name: a.name, authCode: a.authCode, period: 1, nameservers: a.nameservers, registrant: a.registrant }, query: { dryRun: a.dryRun ? "true" : undefined } })
+  }),
+  defineTool({
+    name: "set_domain_owner",
+    title: "Set domain owner",
+    kind: "write",
+    description: "Set a new owner (registrant) for one .id domain of the account, e.g. a reseller's customer or a domain transferred earlier. Free. An active domain gets it now (ownerPending false); a transfer in progress gets it when it completes, and a change the registry does not take yet is retried automatically (ownerPending true, HTTP 202). Other domains keep their other contacts. Use only details the user gave.",
+    input: { domainId, owner },
+    run: (a, api2) => api2.api("PATCH", `/domains/${a.domainId}/registrant`, { body: a.owner })
   }),
   defineTool({
     name: "renew_domain",
@@ -37167,6 +37190,24 @@ var emailTools = [
       idempotencyKey: purchaseKey(a.dryRun, a.idempotencyKey)
     })
   }),
+  defineTool({
+    name: "set_email_auto_renew",
+    title: "Set email auto-renew",
+    kind: "write",
+    idempotent: true,
+    description: "Turn the active email plan's auto-renew on or off (sets the value, safe to repeat). On: the plan renews from the wallet deposit when it ends; off: it ends at its expiry date. get_email_plan and email_status show it as autoRenew. A free plan renews at Rp 0.",
+    input: { projectId, autoRenew: exports_external.boolean() },
+    run: (a, api2) => api2.email("POST", "/plan/auto-renew", { project: a.projectId, body: { enabled: a.autoRenew } })
+  }),
+  defineTool({
+    name: "set_email_payg",
+    title: "Set email pay-as-you-go",
+    kind: "write",
+    idempotent: true,
+    description: "Turn pay-as-you-go on or off for the active paid email plan (sets the value, safe to repeat; off by default). Off: once the monthly quota is used, sends stop with 402 PAYG_DISABLED and nothing is charged. On: sends continue past the quota and blocks of 100 emails are bought from the wallet deposit at the plan's per-email price (unused ones refunded if the plan is not renewed). email_status shows it as paygEnabled. No effect on the free plan.",
+    input: { projectId, paygEnabled: exports_external.boolean() },
+    run: (a, api2) => api2.email("POST", "/plan/payg", { project: a.projectId, body: { enabled: a.paygEnabled } })
+  }),
   defineTool({
     name: "send_email",
     title: "Send email",
@@ -37240,6 +37281,30 @@ var emailTools = [
     input: { projectId, domainId: exports_external.string() },
     run: (a, api2) => api2.email("POST", `/domains/${a.domainId}/verify`, { project: a.projectId })
   }),
+  defineTool({
+    name: "list_email_keys",
+    title: "List email keys",
+    kind: "read",
+    description: "Email API keys of a project (name, prefix, last used, expiry; never the key itself). Needs a Helipod API key with the Email API: an email key or a sign-in token answers 403 KEY_NOT_ALLOWED.",
+    input: { projectId },
+    run: (a, api2) => api2.emailWithAccountKey("GET", "/keys", { project: a.projectId })
+  }),
+  defineTool({
+    name: "create_email_key",
+    title: "Create email key",
+    kind: "write",
+    description: "Make an email API key for a project, e.g. one per customer of a reseller. The key works on the Email API and as the SMTP password (smtp.helipod.io, username apikey) for that project only, and cannot make keys itself. The full key is in the answer ONCE: give it to the user to store; it cannot be shown again. Needs a Helipod API key with the Email API (an email key or a sign-in token answers 403 KEY_NOT_ALLOWED). Per project: 5 active keys on Free/Starter, 10 on Pro, 50 on Business.",
+    input: { projectId, name: exports_external.string().min(1).max(100).describe("To tell keys apart, e.g. the customer's name"), expiresInDays: exports_external.number().int().min(1).max(3650).optional() },
+    run: (a, api2) => api2.emailWithAccountKey("POST", "/keys", { project: a.projectId, body: { name: a.name, expiresInDays: a.expiresInDays } })
+  }),
+  defineTool({
+    name: "revoke_email_key",
+    title: "Revoke email key",
+    kind: "destructive",
+    description: "Revoke an email API key of the project: it stops working at once, also for open SMTP sessions. Apps using it can no longer send. Needs a Helipod API key with the Email API.",
+    input: { projectId, keyId: uid("Email key") },
+    run: (a, api2) => api2.emailWithAccountKey("DELETE", `/keys/${a.keyId}`, { project: a.projectId })
+  }),
   defineTool({
     name: "list_email_templates",
     title: "List email templates",
@@ -38493,7 +38558,7 @@ var generalTools = [
 ];
 
 // src/server.ts
-var VERSION = "0.5.13";
+var VERSION = "0.5.16";
 var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed Postgres databases, VPS, domains, email and an AI gateway, billed from a prepaid wallet in Rupiah.
 - Start with list_projects to find projects and environment ids. Account tools (get_wallet, invoices, statements, notifications, get_project_activity, support tickets) cover the account; AI tools (list_ai_models, get_ai_overview, get_ai_usage, AI keys, top-ups, generate_ai_image) cover the AI gateway.
 - Anything that costs money (create/deploy/scale services, resize volumes, upgrade a database plan, create/renew/upgrade VPS, VPS backups, register/renew/transfer domains, email plans and inbox add-ons, AI top-ups and auto top-up, generating images): call it with dryRun=true first (or the price lookup when it has no dry run), tell the user the cost in IDR and the wallet balance after, and wait for an explicit yes before the real call. Never treat silence or an earlier general OK as a yes.
@@ -38502,6 +38567,8 @@ var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed
 - Deploying an app, step by step: list_projects (pick the project and its production environmentId) -> get_bundle (is it covered?) -> if it needs Postgres: create_database, then get_database_connection and store DATABASE_URL with set_variables (secrets) after the service exists, or pass it in create_service variables -> create_service with dryRun=true (repo or image, port, variables) -> tell the user the cost (included in the bundle, or walletDailyCost per day) and wait for their OK -> create_service for real -> poll get_deployment until it settles, read get_deployment_logs if it failed -> give the user the *.helipod.app URL from get_service. Ask the user for secrets (API keys) only when the app needs them; never invent values.
 - Destructive tools (delete, terminate, reinstall, rollback, restore a backup or an import, copy a backup onto another VPS, replace DNS, revoke a key, remove an SSH key or port forward, send a broadcast, execute_database_sql): confirm with the user and name what will be lost. Before execute_database_sql, run classify_database_sql.
 - Email: when a project has no email yet (email_status shows activated false) or its plan ended, start it with buy_email_plan (dryRun first; the FREE plan costs nothing, still confirm). That also sets email up for the project; then add and verify a sending domain.
+- Email keys: create_email_key gives an app or a customer its own key (also its SMTP password: smtp.helipod.io, username apikey); the full key is shown once, so hand it over and never print it again. Domain on Helipod: add_domain_email_records puts the sending domain's DNS records in place in one call.
+- Domains for someone else (resellers): register_domain and transfer_domain take registrant (.id only; a transfer gets the owner when it completes), set_domain_owner changes it later. Use only details the user gave.
 - Before replacing all DNS records (set_dns_records), read list_dns_records and keep every record the user still needs. Before sending or scheduling a broadcast, tell the user how many contacts it reaches. Before deleting or replacing code, files or variables, read the current value. After renaming a service, fix the variable references listed in warnings.
 - Databases: get_database_connection returns a password; put it in a secret variable (DATABASE_URL) instead of code or chat.
 - Migrate (free): create_vps_import returns a one-time command for the USER to run as root on their old server (never run it yourself); before the first restore_vps_import, show fetchedIp and ask the user to confirm it is their server.

package/dist/index.js

@@ -34768,6 +34768,14 @@ class HelipodClient {
     const headers = !this.cfg.emailApiKey && opts.project ? { "x-helipod-project": opts.project } : undefined;
     return this.request(this.emailApiUrl, key, method, path, { ...opts, headers });
   }
+  emailWithAccountKey(method, path, opts = {}) {
+    const key = this.cfg.apiKey;
+    if (!key) {
+      throw new HelipodError(401, "NO_API_KEY", "Managing email keys needs HELIPOD_API_KEY (a Helipod API key with the Email API enabled); an email key cannot do it.");
+    }
+    const headers = opts.project ? { "x-helipod-project": opts.project } : undefined;
+    return this.request(this.emailApiUrl, key, method, path, { ...opts, headers });
+  }
   async image(link, maxBytes) {
     let url2;
     try {
@@ -34898,7 +34906,7 @@ var containerTools = [
     kind: "read",
     description: "Projects this API key can reach, each with its environments (production, staging, ...). Start here to find an environmentId.",
     input: {},
-    run: (_a3, api2) => api2.api("GET", `${C}/projects`)
+    run: (_a3, api2) => api2.api("GET", `/projects`)
   }),
   defineTool({
     name: "get_project",
@@ -34906,7 +34914,7 @@ var containerTools = [
     kind: "read",
     description: "One project with its environments (ids and names). Use it to find an environmentId when you already know the project.",
     input: { projectId: id("Project") },
-    run: (a, api2) => api2.api("GET", `${C}/projects/${a.projectId}`)
+    run: (a, api2) => api2.api("GET", `/projects/${a.projectId}`)
   }),
   defineTool({
     name: "create_project",
@@ -34914,7 +34922,7 @@ var containerTools = [
     kind: "write",
     description: "Create a project (free) with its default production environment. Needs a whole-account key (a key limited to one project gets 403). Pass an idempotencyKey when retrying.",
     input: { name: exports_external.string().min(3).max(100), description: exports_external.string().max(500).optional(), idempotencyKey: idem },
-    run: (a, api2) => api2.api("POST", `${C}/projects`, { body: { name: a.name, description: a.description }, idempotencyKey: a.idempotencyKey })
+    run: (a, api2) => api2.api("POST", `/projects`, { body: { name: a.name, description: a.description }, idempotencyKey: a.idempotencyKey })
   }),
   defineTool({
     name: "update_project",
@@ -34923,7 +34931,7 @@ var containerTools = [
     idempotent: true,
     description: "Change a project's name and/or description.",
     input: { projectId: id("Project"), name: exports_external.string().min(3).max(100).optional(), description: exports_external.string().max(500).optional() },
-    run: (a, api2) => api2.api("PATCH", `${C}/projects/${a.projectId}`, { body: { name: a.name, description: a.description } })
+    run: (a, api2) => api2.api("PATCH", `/projects/${a.projectId}`, { body: { name: a.name, description: a.description } })
   }),
   defineTool({
     name: "delete_project",
@@ -34931,7 +34939,7 @@ var containerTools = [
     kind: "destructive",
     description: "Delete an EMPTY project and its environments and shared variables. Irreversible. Refused (409 PROJECT_NOT_EMPTY) while it still has services, databases, VPS or other resources: those must be deleted first. Needs a whole-account key. Only after the user confirms; confirm must be the project's exact name.",
     input: { projectId: id("Project"), confirm: exports_external.string().max(255).describe("The project name, exactly") },
-    run: (a, api2) => api2.api("DELETE", `${C}/projects/${a.projectId}`, { body: { confirm: a.confirm } })
+    run: (a, api2) => api2.api("DELETE", `/projects/${a.projectId}`, { body: { confirm: a.confirm } })
   }),
   defineTool({
     name: "create_environment",
@@ -34939,7 +34947,7 @@ var containerTools = [
     kind: "write",
     description: "Add an environment (e.g. staging) to a project. Free; services in it are billed as usual once deployed.",
     input: { projectId: id("Project"), name: exports_external.string().regex(/^[A-Za-z0-9][A-Za-z0-9 _.-]{0,49}$/).describe("1-50 characters: letters, digits, space _ . -") },
-    run: (a, api2) => api2.api("POST", `${C}/projects/${a.projectId}/environments`, { body: { name: a.name } })
+    run: (a, api2) => api2.api("POST", `/projects/${a.projectId}/environments`, { body: { name: a.name } })
   }),
   defineTool({
     name: "rename_environment",
@@ -34948,7 +34956,7 @@ var containerTools = [
     idempotent: true,
     description: "Rename an environment (names are unique within the project).",
     input: { environmentId: id("Environment"), name: exports_external.string().regex(/^[A-Za-z0-9][A-Za-z0-9 _.-]{0,49}$/) },
-    run: (a, api2) => api2.api("PATCH", `${C}/environments/${a.environmentId}`, { body: { name: a.name } })
+    run: (a, api2) => api2.api("PATCH", `/environments/${a.environmentId}`, { body: { name: a.name } })
   }),
   defineTool({
     name: "delete_environment",
@@ -34956,7 +34964,7 @@ var containerTools = [
     kind: "destructive",
     description: "Delete an EMPTY environment (409 ENVIRONMENT_NOT_EMPTY while it has services: delete them first). Irreversible. Only after the user confirms; confirm must be the environment's exact name.",
     input: { environmentId: id("Environment"), confirm: exports_external.string().max(255).describe("The environment name, exactly") },
-    run: (a, api2) => api2.api("DELETE", `${C}/environments/${a.environmentId}`, { body: { confirm: a.confirm } })
+    run: (a, api2) => api2.api("DELETE", `/environments/${a.environmentId}`, { body: { confirm: a.confirm } })
   }),
   defineTool({
     name: "list_project_variables",
@@ -35931,6 +35939,19 @@ var record3 = exports_external.object({
   content: exports_external.string().describe('TXT without surrounding quotes (they are added by the DNS server); MX as "10 mail.example.com"'),
   ttl: exports_external.number().int().optional()
 });
+var owner = exports_external.object({
+  name: exports_external.string().min(3).max(255),
+  email: exports_external.string().max(255).optional().describe("Gets the registry's verification email; defaults to the account email"),
+  organization: exports_external.string().max(255).optional(),
+  phone: exports_external.string().min(9).max(20).describe("e.g. +6281234567890"),
+  addressLine1: exports_external.string().min(3).max(500),
+  addressLine2: exports_external.string().max(500).optional(),
+  city: exports_external.string().min(3).max(100),
+  state: exports_external.string().min(1).max(100),
+  countryCode: exports_external.string().regex(/^[A-Za-z]{2}$/).describe("ISO 3166-1 alpha-2, e.g. ID"),
+  postalCode: exports_external.string().min(1).max(20),
+  fax: exports_external.string().max(50).optional()
+});
 var domainTools = [
   defineTool({
     name: "search_domain",
@@ -36010,19 +36031,7 @@ var domainTools = [
       name: exports_external.string().describe("Full domain, e.g. tokosaya.id"),
       nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(),
       whoisProtection: exports_external.boolean().optional(),
-      registrant: exports_external.object({
-        name: exports_external.string().min(3).max(255),
-        email: exports_external.string().max(255).optional().describe("Gets the registry's verification email; defaults to the account email"),
-        organization: exports_external.string().max(255).optional(),
-        phone: exports_external.string().min(9).max(20).describe("e.g. +6281234567890"),
-        addressLine1: exports_external.string().min(3).max(500),
-        addressLine2: exports_external.string().max(500).optional(),
-        city: exports_external.string().min(3).max(100),
-        state: exports_external.string().min(1).max(100),
-        countryCode: exports_external.string().regex(/^[A-Za-z]{2}$/).describe("ISO 3166-1 alpha-2, e.g. ID"),
-        postalCode: exports_external.string().min(1).max(20),
-        fax: exports_external.string().max(50).optional()
-      }).optional().describe("Owner of THIS domain instead of the account's owner details (e.g. a reseller's customer). .id domains only: others answer 400 REGISTRANT_NOT_SUPPORTED. Use only details the user gave."),
+      registrant: owner.optional().describe("Owner of THIS domain instead of the account's owner details (e.g. a reseller's customer). .id domains only: others answer 400 REGISTRANT_NOT_SUPPORTED. Use only details the user gave."),
       dryRun: dryRun3
     },
     run: (a, api2) => api2.api("POST", "/domains/register", { body: { name: a.name, period: 1, nameservers: a.nameservers, whoisProtection: a.whoisProtection, registrant: a.registrant }, query: { dryRun: a.dryRun ? "true" : undefined } })
@@ -36031,9 +36040,23 @@ var domainTools = [
     name: "transfer_domain",
     title: "Transfer domain in",
     kind: "write",
-    description: `Transfer a domain from another registrar (adds 1 year). COSTS MONEY from the wallet. Needs the domain's auth code. ${DRY2}`,
-    input: { name: exports_external.string(), authCode: exports_external.string(), nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(), dryRun: dryRun3 },
-    run: (a, api2) => api2.api("POST", "/domains/transfer", { body: { name: a.name, authCode: a.authCode, period: 1, nameservers: a.nameservers }, query: { dryRun: a.dryRun ? "true" : undefined } })
+    description: `Transfer a domain from another registrar (adds 1 year). COSTS MONEY from the wallet. Needs the domain's auth code. ${DRY2} With registrant (.id only) the domain gets that owner when the transfer completes (ownerPending until then); without it, the account's owner details.`,
+    input: {
+      name: exports_external.string(),
+      authCode: exports_external.string(),
+      nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(),
+      registrant: owner.optional().describe("Owner of THIS domain once the transfer completes (e.g. a reseller's customer). .id domains only: others answer 400 REGISTRANT_NOT_SUPPORTED. Use only details the user gave."),
+      dryRun: dryRun3
+    },
+    run: (a, api2) => api2.api("POST", "/domains/transfer", { body: { name: a.name, authCode: a.authCode, period: 1, nameservers: a.nameservers, registrant: a.registrant }, query: { dryRun: a.dryRun ? "true" : undefined } })
+  }),
+  defineTool({
+    name: "set_domain_owner",
+    title: "Set domain owner",
+    kind: "write",
+    description: "Set a new owner (registrant) for one .id domain of the account, e.g. a reseller's customer or a domain transferred earlier. Free. An active domain gets it now (ownerPending false); a transfer in progress gets it when it completes, and a change the registry does not take yet is retried automatically (ownerPending true, HTTP 202). Other domains keep their other contacts. Use only details the user gave.",
+    input: { domainId, owner },
+    run: (a, api2) => api2.api("PATCH", `/domains/${a.domainId}/registrant`, { body: a.owner })
   }),
   defineTool({
     name: "renew_domain",
@@ -36312,6 +36335,24 @@ var emailTools = [
       idempotencyKey: purchaseKey(a.dryRun, a.idempotencyKey)
     })
   }),
+  defineTool({
+    name: "set_email_auto_renew",
+    title: "Set email auto-renew",
+    kind: "write",
+    idempotent: true,
+    description: "Turn the active email plan's auto-renew on or off (sets the value, safe to repeat). On: the plan renews from the wallet deposit when it ends; off: it ends at its expiry date. get_email_plan and email_status show it as autoRenew. A free plan renews at Rp 0.",
+    input: { projectId, autoRenew: exports_external.boolean() },
+    run: (a, api2) => api2.email("POST", "/plan/auto-renew", { project: a.projectId, body: { enabled: a.autoRenew } })
+  }),
+  defineTool({
+    name: "set_email_payg",
+    title: "Set email pay-as-you-go",
+    kind: "write",
+    idempotent: true,
+    description: "Turn pay-as-you-go on or off for the active paid email plan (sets the value, safe to repeat; off by default). Off: once the monthly quota is used, sends stop with 402 PAYG_DISABLED and nothing is charged. On: sends continue past the quota and blocks of 100 emails are bought from the wallet deposit at the plan's per-email price (unused ones refunded if the plan is not renewed). email_status shows it as paygEnabled. No effect on the free plan.",
+    input: { projectId, paygEnabled: exports_external.boolean() },
+    run: (a, api2) => api2.email("POST", "/plan/payg", { project: a.projectId, body: { enabled: a.paygEnabled } })
+  }),
   defineTool({
     name: "send_email",
     title: "Send email",
@@ -36385,6 +36426,30 @@ var emailTools = [
     input: { projectId, domainId: exports_external.string() },
     run: (a, api2) => api2.email("POST", `/domains/${a.domainId}/verify`, { project: a.projectId })
   }),
+  defineTool({
+    name: "list_email_keys",
+    title: "List email keys",
+    kind: "read",
+    description: "Email API keys of a project (name, prefix, last used, expiry; never the key itself). Needs a Helipod API key with the Email API: an email key or a sign-in token answers 403 KEY_NOT_ALLOWED.",
+    input: { projectId },
+    run: (a, api2) => api2.emailWithAccountKey("GET", "/keys", { project: a.projectId })
+  }),
+  defineTool({
+    name: "create_email_key",
+    title: "Create email key",
+    kind: "write",
+    description: "Make an email API key for a project, e.g. one per customer of a reseller. The key works on the Email API and as the SMTP password (smtp.helipod.io, username apikey) for that project only, and cannot make keys itself. The full key is in the answer ONCE: give it to the user to store; it cannot be shown again. Needs a Helipod API key with the Email API (an email key or a sign-in token answers 403 KEY_NOT_ALLOWED). Per project: 5 active keys on Free/Starter, 10 on Pro, 50 on Business.",
+    input: { projectId, name: exports_external.string().min(1).max(100).describe("To tell keys apart, e.g. the customer's name"), expiresInDays: exports_external.number().int().min(1).max(3650).optional() },
+    run: (a, api2) => api2.emailWithAccountKey("POST", "/keys", { project: a.projectId, body: { name: a.name, expiresInDays: a.expiresInDays } })
+  }),
+  defineTool({
+    name: "revoke_email_key",
+    title: "Revoke email key",
+    kind: "destructive",
+    description: "Revoke an email API key of the project: it stops working at once, also for open SMTP sessions. Apps using it can no longer send. Needs a Helipod API key with the Email API.",
+    input: { projectId, keyId: uid("Email key") },
+    run: (a, api2) => api2.emailWithAccountKey("DELETE", `/keys/${a.keyId}`, { project: a.projectId })
+  }),
   defineTool({
     name: "list_email_templates",
     title: "List email templates",
@@ -37638,7 +37703,7 @@ var generalTools = [
 ];
 
 // src/server.ts
-var VERSION = "0.5.13";
+var VERSION = "0.5.16";
 var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed Postgres databases, VPS, domains, email and an AI gateway, billed from a prepaid wallet in Rupiah.
 - Start with list_projects to find projects and environment ids. Account tools (get_wallet, invoices, statements, notifications, get_project_activity, support tickets) cover the account; AI tools (list_ai_models, get_ai_overview, get_ai_usage, AI keys, top-ups, generate_ai_image) cover the AI gateway.
 - Anything that costs money (create/deploy/scale services, resize volumes, upgrade a database plan, create/renew/upgrade VPS, VPS backups, register/renew/transfer domains, email plans and inbox add-ons, AI top-ups and auto top-up, generating images): call it with dryRun=true first (or the price lookup when it has no dry run), tell the user the cost in IDR and the wallet balance after, and wait for an explicit yes before the real call. Never treat silence or an earlier general OK as a yes.
@@ -37647,6 +37712,8 @@ var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed
 - Deploying an app, step by step: list_projects (pick the project and its production environmentId) -> get_bundle (is it covered?) -> if it needs Postgres: create_database, then get_database_connection and store DATABASE_URL with set_variables (secrets) after the service exists, or pass it in create_service variables -> create_service with dryRun=true (repo or image, port, variables) -> tell the user the cost (included in the bundle, or walletDailyCost per day) and wait for their OK -> create_service for real -> poll get_deployment until it settles, read get_deployment_logs if it failed -> give the user the *.helipod.app URL from get_service. Ask the user for secrets (API keys) only when the app needs them; never invent values.
 - Destructive tools (delete, terminate, reinstall, rollback, restore a backup or an import, copy a backup onto another VPS, replace DNS, revoke a key, remove an SSH key or port forward, send a broadcast, execute_database_sql): confirm with the user and name what will be lost. Before execute_database_sql, run classify_database_sql.
 - Email: when a project has no email yet (email_status shows activated false) or its plan ended, start it with buy_email_plan (dryRun first; the FREE plan costs nothing, still confirm). That also sets email up for the project; then add and verify a sending domain.
+- Email keys: create_email_key gives an app or a customer its own key (also its SMTP password: smtp.helipod.io, username apikey); the full key is shown once, so hand it over and never print it again. Domain on Helipod: add_domain_email_records puts the sending domain's DNS records in place in one call.
+- Domains for someone else (resellers): register_domain and transfer_domain take registrant (.id only; a transfer gets the owner when it completes), set_domain_owner changes it later. Use only details the user gave.
 - Before replacing all DNS records (set_dns_records), read list_dns_records and keep every record the user still needs. Before sending or scheduling a broadcast, tell the user how many contacts it reaches. Before deleting or replacing code, files or variables, read the current value. After renaming a service, fix the variable references listed in warnings.
 - Databases: get_database_connection returns a password; put it in a secret variable (DATABASE_URL) instead of code or chat.
 - Migrate (free): create_vps_import returns a one-time command for the USER to run as root on their old server (never run it yourself); before the first restore_vps_import, show fetchedIp and ask the user to confirm it is their server.

package/dist/stdio.js

@@ -34875,6 +34875,14 @@ class HelipodClient {
     const headers = !this.cfg.emailApiKey && opts.project ? { "x-helipod-project": opts.project } : undefined;
     return this.request(this.emailApiUrl, key, method, path, { ...opts, headers });
   }
+  emailWithAccountKey(method, path, opts = {}) {
+    const key = this.cfg.apiKey;
+    if (!key) {
+      throw new HelipodError(401, "NO_API_KEY", "Managing email keys needs HELIPOD_API_KEY (a Helipod API key with the Email API enabled); an email key cannot do it.");
+    }
+    const headers = opts.project ? { "x-helipod-project": opts.project } : undefined;
+    return this.request(this.emailApiUrl, key, method, path, { ...opts, headers });
+  }
   async image(link, maxBytes) {
     let url2;
     try {
@@ -35005,7 +35013,7 @@ var containerTools = [
     kind: "read",
     description: "Projects this API key can reach, each with its environments (production, staging, ...). Start here to find an environmentId.",
     input: {},
-    run: (_a3, api2) => api2.api("GET", `${C}/projects`)
+    run: (_a3, api2) => api2.api("GET", `/projects`)
   }),
   defineTool({
     name: "get_project",
@@ -35013,7 +35021,7 @@ var containerTools = [
     kind: "read",
     description: "One project with its environments (ids and names). Use it to find an environmentId when you already know the project.",
     input: { projectId: id("Project") },
-    run: (a, api2) => api2.api("GET", `${C}/projects/${a.projectId}`)
+    run: (a, api2) => api2.api("GET", `/projects/${a.projectId}`)
   }),
   defineTool({
     name: "create_project",
@@ -35021,7 +35029,7 @@ var containerTools = [
     kind: "write",
     description: "Create a project (free) with its default production environment. Needs a whole-account key (a key limited to one project gets 403). Pass an idempotencyKey when retrying.",
     input: { name: exports_external.string().min(3).max(100), description: exports_external.string().max(500).optional(), idempotencyKey: idem },
-    run: (a, api2) => api2.api("POST", `${C}/projects`, { body: { name: a.name, description: a.description }, idempotencyKey: a.idempotencyKey })
+    run: (a, api2) => api2.api("POST", `/projects`, { body: { name: a.name, description: a.description }, idempotencyKey: a.idempotencyKey })
   }),
   defineTool({
     name: "update_project",
@@ -35030,7 +35038,7 @@ var containerTools = [
     idempotent: true,
     description: "Change a project's name and/or description.",
     input: { projectId: id("Project"), name: exports_external.string().min(3).max(100).optional(), description: exports_external.string().max(500).optional() },
-    run: (a, api2) => api2.api("PATCH", `${C}/projects/${a.projectId}`, { body: { name: a.name, description: a.description } })
+    run: (a, api2) => api2.api("PATCH", `/projects/${a.projectId}`, { body: { name: a.name, description: a.description } })
   }),
   defineTool({
     name: "delete_project",
@@ -35038,7 +35046,7 @@ var containerTools = [
     kind: "destructive",
     description: "Delete an EMPTY project and its environments and shared variables. Irreversible. Refused (409 PROJECT_NOT_EMPTY) while it still has services, databases, VPS or other resources: those must be deleted first. Needs a whole-account key. Only after the user confirms; confirm must be the project's exact name.",
     input: { projectId: id("Project"), confirm: exports_external.string().max(255).describe("The project name, exactly") },
-    run: (a, api2) => api2.api("DELETE", `${C}/projects/${a.projectId}`, { body: { confirm: a.confirm } })
+    run: (a, api2) => api2.api("DELETE", `/projects/${a.projectId}`, { body: { confirm: a.confirm } })
   }),
   defineTool({
     name: "create_environment",
@@ -35046,7 +35054,7 @@ var containerTools = [
     kind: "write",
     description: "Add an environment (e.g. staging) to a project. Free; services in it are billed as usual once deployed.",
     input: { projectId: id("Project"), name: exports_external.string().regex(/^[A-Za-z0-9][A-Za-z0-9 _.-]{0,49}$/).describe("1-50 characters: letters, digits, space _ . -") },
-    run: (a, api2) => api2.api("POST", `${C}/projects/${a.projectId}/environments`, { body: { name: a.name } })
+    run: (a, api2) => api2.api("POST", `/projects/${a.projectId}/environments`, { body: { name: a.name } })
   }),
   defineTool({
     name: "rename_environment",
@@ -35055,7 +35063,7 @@ var containerTools = [
     idempotent: true,
     description: "Rename an environment (names are unique within the project).",
     input: { environmentId: id("Environment"), name: exports_external.string().regex(/^[A-Za-z0-9][A-Za-z0-9 _.-]{0,49}$/) },
-    run: (a, api2) => api2.api("PATCH", `${C}/environments/${a.environmentId}`, { body: { name: a.name } })
+    run: (a, api2) => api2.api("PATCH", `/environments/${a.environmentId}`, { body: { name: a.name } })
   }),
   defineTool({
     name: "delete_environment",
@@ -35063,7 +35071,7 @@ var containerTools = [
     kind: "destructive",
     description: "Delete an EMPTY environment (409 ENVIRONMENT_NOT_EMPTY while it has services: delete them first). Irreversible. Only after the user confirms; confirm must be the environment's exact name.",
     input: { environmentId: id("Environment"), confirm: exports_external.string().max(255).describe("The environment name, exactly") },
-    run: (a, api2) => api2.api("DELETE", `${C}/environments/${a.environmentId}`, { body: { confirm: a.confirm } })
+    run: (a, api2) => api2.api("DELETE", `/environments/${a.environmentId}`, { body: { confirm: a.confirm } })
   }),
   defineTool({
     name: "list_project_variables",
@@ -36038,6 +36046,19 @@ var record3 = exports_external.object({
   content: exports_external.string().describe('TXT without surrounding quotes (they are added by the DNS server); MX as "10 mail.example.com"'),
   ttl: exports_external.number().int().optional()
 });
+var owner = exports_external.object({
+  name: exports_external.string().min(3).max(255),
+  email: exports_external.string().max(255).optional().describe("Gets the registry's verification email; defaults to the account email"),
+  organization: exports_external.string().max(255).optional(),
+  phone: exports_external.string().min(9).max(20).describe("e.g. +6281234567890"),
+  addressLine1: exports_external.string().min(3).max(500),
+  addressLine2: exports_external.string().max(500).optional(),
+  city: exports_external.string().min(3).max(100),
+  state: exports_external.string().min(1).max(100),
+  countryCode: exports_external.string().regex(/^[A-Za-z]{2}$/).describe("ISO 3166-1 alpha-2, e.g. ID"),
+  postalCode: exports_external.string().min(1).max(20),
+  fax: exports_external.string().max(50).optional()
+});
 var domainTools = [
   defineTool({
     name: "search_domain",
@@ -36117,19 +36138,7 @@ var domainTools = [
       name: exports_external.string().describe("Full domain, e.g. tokosaya.id"),
       nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(),
       whoisProtection: exports_external.boolean().optional(),
-      registrant: exports_external.object({
-        name: exports_external.string().min(3).max(255),
-        email: exports_external.string().max(255).optional().describe("Gets the registry's verification email; defaults to the account email"),
-        organization: exports_external.string().max(255).optional(),
-        phone: exports_external.string().min(9).max(20).describe("e.g. +6281234567890"),
-        addressLine1: exports_external.string().min(3).max(500),
-        addressLine2: exports_external.string().max(500).optional(),
-        city: exports_external.string().min(3).max(100),
-        state: exports_external.string().min(1).max(100),
-        countryCode: exports_external.string().regex(/^[A-Za-z]{2}$/).describe("ISO 3166-1 alpha-2, e.g. ID"),
-        postalCode: exports_external.string().min(1).max(20),
-        fax: exports_external.string().max(50).optional()
-      }).optional().describe("Owner of THIS domain instead of the account's owner details (e.g. a reseller's customer). .id domains only: others answer 400 REGISTRANT_NOT_SUPPORTED. Use only details the user gave."),
+      registrant: owner.optional().describe("Owner of THIS domain instead of the account's owner details (e.g. a reseller's customer). .id domains only: others answer 400 REGISTRANT_NOT_SUPPORTED. Use only details the user gave."),
       dryRun: dryRun3
     },
     run: (a, api2) => api2.api("POST", "/domains/register", { body: { name: a.name, period: 1, nameservers: a.nameservers, whoisProtection: a.whoisProtection, registrant: a.registrant }, query: { dryRun: a.dryRun ? "true" : undefined } })
@@ -36138,9 +36147,23 @@ var domainTools = [
     name: "transfer_domain",
     title: "Transfer domain in",
     kind: "write",
-    description: `Transfer a domain from another registrar (adds 1 year). COSTS MONEY from the wallet. Needs the domain's auth code. ${DRY2}`,
-    input: { name: exports_external.string(), authCode: exports_external.string(), nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(), dryRun: dryRun3 },
-    run: (a, api2) => api2.api("POST", "/domains/transfer", { body: { name: a.name, authCode: a.authCode, period: 1, nameservers: a.nameservers }, query: { dryRun: a.dryRun ? "true" : undefined } })
+    description: `Transfer a domain from another registrar (adds 1 year). COSTS MONEY from the wallet. Needs the domain's auth code. ${DRY2} With registrant (.id only) the domain gets that owner when the transfer completes (ownerPending until then); without it, the account's owner details.`,
+    input: {
+      name: exports_external.string(),
+      authCode: exports_external.string(),
+      nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(),
+      registrant: owner.optional().describe("Owner of THIS domain once the transfer completes (e.g. a reseller's customer). .id domains only: others answer 400 REGISTRANT_NOT_SUPPORTED. Use only details the user gave."),
+      dryRun: dryRun3
+    },
+    run: (a, api2) => api2.api("POST", "/domains/transfer", { body: { name: a.name, authCode: a.authCode, period: 1, nameservers: a.nameservers, registrant: a.registrant }, query: { dryRun: a.dryRun ? "true" : undefined } })
+  }),
+  defineTool({
+    name: "set_domain_owner",
+    title: "Set domain owner",
+    kind: "write",
+    description: "Set a new owner (registrant) for one .id domain of the account, e.g. a reseller's customer or a domain transferred earlier. Free. An active domain gets it now (ownerPending false); a transfer in progress gets it when it completes, and a change the registry does not take yet is retried automatically (ownerPending true, HTTP 202). Other domains keep their other contacts. Use only details the user gave.",
+    input: { domainId, owner },
+    run: (a, api2) => api2.api("PATCH", `/domains/${a.domainId}/registrant`, { body: a.owner })
   }),
   defineTool({
     name: "renew_domain",
@@ -36419,6 +36442,24 @@ var emailTools = [
       idempotencyKey: purchaseKey(a.dryRun, a.idempotencyKey)
     })
   }),
+  defineTool({
+    name: "set_email_auto_renew",
+    title: "Set email auto-renew",
+    kind: "write",
+    idempotent: true,
+    description: "Turn the active email plan's auto-renew on or off (sets the value, safe to repeat). On: the plan renews from the wallet deposit when it ends; off: it ends at its expiry date. get_email_plan and email_status show it as autoRenew. A free plan renews at Rp 0.",
+    input: { projectId, autoRenew: exports_external.boolean() },
+    run: (a, api2) => api2.email("POST", "/plan/auto-renew", { project: a.projectId, body: { enabled: a.autoRenew } })
+  }),
+  defineTool({
+    name: "set_email_payg",
+    title: "Set email pay-as-you-go",
+    kind: "write",
+    idempotent: true,
+    description: "Turn pay-as-you-go on or off for the active paid email plan (sets the value, safe to repeat; off by default). Off: once the monthly quota is used, sends stop with 402 PAYG_DISABLED and nothing is charged. On: sends continue past the quota and blocks of 100 emails are bought from the wallet deposit at the plan's per-email price (unused ones refunded if the plan is not renewed). email_status shows it as paygEnabled. No effect on the free plan.",
+    input: { projectId, paygEnabled: exports_external.boolean() },
+    run: (a, api2) => api2.email("POST", "/plan/payg", { project: a.projectId, body: { enabled: a.paygEnabled } })
+  }),
   defineTool({
     name: "send_email",
     title: "Send email",
@@ -36492,6 +36533,30 @@ var emailTools = [
     input: { projectId, domainId: exports_external.string() },
     run: (a, api2) => api2.email("POST", `/domains/${a.domainId}/verify`, { project: a.projectId })
   }),
+  defineTool({
+    name: "list_email_keys",
+    title: "List email keys",
+    kind: "read",
+    description: "Email API keys of a project (name, prefix, last used, expiry; never the key itself). Needs a Helipod API key with the Email API: an email key or a sign-in token answers 403 KEY_NOT_ALLOWED.",
+    input: { projectId },
+    run: (a, api2) => api2.emailWithAccountKey("GET", "/keys", { project: a.projectId })
+  }),
+  defineTool({
+    name: "create_email_key",
+    title: "Create email key",
+    kind: "write",
+    description: "Make an email API key for a project, e.g. one per customer of a reseller. The key works on the Email API and as the SMTP password (smtp.helipod.io, username apikey) for that project only, and cannot make keys itself. The full key is in the answer ONCE: give it to the user to store; it cannot be shown again. Needs a Helipod API key with the Email API (an email key or a sign-in token answers 403 KEY_NOT_ALLOWED). Per project: 5 active keys on Free/Starter, 10 on Pro, 50 on Business.",
+    input: { projectId, name: exports_external.string().min(1).max(100).describe("To tell keys apart, e.g. the customer's name"), expiresInDays: exports_external.number().int().min(1).max(3650).optional() },
+    run: (a, api2) => api2.emailWithAccountKey("POST", "/keys", { project: a.projectId, body: { name: a.name, expiresInDays: a.expiresInDays } })
+  }),
+  defineTool({
+    name: "revoke_email_key",
+    title: "Revoke email key",
+    kind: "destructive",
+    description: "Revoke an email API key of the project: it stops working at once, also for open SMTP sessions. Apps using it can no longer send. Needs a Helipod API key with the Email API.",
+    input: { projectId, keyId: uid("Email key") },
+    run: (a, api2) => api2.emailWithAccountKey("DELETE", `/keys/${a.keyId}`, { project: a.projectId })
+  }),
   defineTool({
     name: "list_email_templates",
     title: "List email templates",
@@ -37745,7 +37810,7 @@ var generalTools = [
 ];
 
 // src/server.ts
-var VERSION = "0.5.13";
+var VERSION = "0.5.16";
 var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed Postgres databases, VPS, domains, email and an AI gateway, billed from a prepaid wallet in Rupiah.
 - Start with list_projects to find projects and environment ids. Account tools (get_wallet, invoices, statements, notifications, get_project_activity, support tickets) cover the account; AI tools (list_ai_models, get_ai_overview, get_ai_usage, AI keys, top-ups, generate_ai_image) cover the AI gateway.
 - Anything that costs money (create/deploy/scale services, resize volumes, upgrade a database plan, create/renew/upgrade VPS, VPS backups, register/renew/transfer domains, email plans and inbox add-ons, AI top-ups and auto top-up, generating images): call it with dryRun=true first (or the price lookup when it has no dry run), tell the user the cost in IDR and the wallet balance after, and wait for an explicit yes before the real call. Never treat silence or an earlier general OK as a yes.
@@ -37754,6 +37819,8 @@ var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed
 - Deploying an app, step by step: list_projects (pick the project and its production environmentId) -> get_bundle (is it covered?) -> if it needs Postgres: create_database, then get_database_connection and store DATABASE_URL with set_variables (secrets) after the service exists, or pass it in create_service variables -> create_service with dryRun=true (repo or image, port, variables) -> tell the user the cost (included in the bundle, or walletDailyCost per day) and wait for their OK -> create_service for real -> poll get_deployment until it settles, read get_deployment_logs if it failed -> give the user the *.helipod.app URL from get_service. Ask the user for secrets (API keys) only when the app needs them; never invent values.
 - Destructive tools (delete, terminate, reinstall, rollback, restore a backup or an import, copy a backup onto another VPS, replace DNS, revoke a key, remove an SSH key or port forward, send a broadcast, execute_database_sql): confirm with the user and name what will be lost. Before execute_database_sql, run classify_database_sql.
 - Email: when a project has no email yet (email_status shows activated false) or its plan ended, start it with buy_email_plan (dryRun first; the FREE plan costs nothing, still confirm). That also sets email up for the project; then add and verify a sending domain.
+- Email keys: create_email_key gives an app or a customer its own key (also its SMTP password: smtp.helipod.io, username apikey); the full key is shown once, so hand it over and never print it again. Domain on Helipod: add_domain_email_records puts the sending domain's DNS records in place in one call.
+- Domains for someone else (resellers): register_domain and transfer_domain take registrant (.id only; a transfer gets the owner when it completes), set_domain_owner changes it later. Use only details the user gave.
 - Before replacing all DNS records (set_dns_records), read list_dns_records and keep every record the user still needs. Before sending or scheduling a broadcast, tell the user how many contacts it reaches. Before deleting or replacing code, files or variables, read the current value. After renaming a service, fix the variable references listed in warnings.
 - Databases: get_database_connection returns a password; put it in a secret variable (DATABASE_URL) instead of code or chat.
 - Migrate (free): create_vps_import returns a one-time command for the USER to run as root on their old server (never run it yourself); before the first restore_vps_import, show fetchedIp and ask the user to confirm it is their server.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "helipod-mcp",
   "mcpName": "io.helipod/helipod",
-  "version": "0.5.13",
+  "version": "0.5.16",
   "description": "MCP server for Helipod: containers, databases, VPS, domains and email from Claude Code, Codex, Cursor and other AI tools.",
   "type": "module",
   "bin": {

package/skills/helipod/SKILL.md

@@ -11,7 +11,7 @@ Helipod is a cloud platform in Indonesia: containers (deploy apps from Git, imag
 
 - **MCP tools** (preferred): if tools like `list_projects`, `create_service`, `list_vps_plans` are available, use them.
 - **Without MCP**: call the HTTP API with `Authorization: Bearer $HELIPOD_API_KEY`.
-  - Container, Database, VPS, Domain APIs: `https://api.helipod.io/api` (`/containers/...`, `/databases/...`, `/vps/...`, `/domains/...`)
+  - Projects, Container, Database, VPS, Domain APIs: `https://api.helipod.io/api` (`/projects` works with a key of any product; `/containers/...`, `/databases/...`, `/vps/...`, `/domains/...`)
   - Email API: `https://mail.helipod.io/api/email` with `$HELIPOD_API_KEY` when the key has the Email API enabled (a whole-account key adds `X-Helipod-Project: <projectId>`), or a separate email key `$HELIPOD_EMAIL_API_KEY`
   - AI gateway: `https://ai.helipod.io/v1` with a `hel_ai_...` key (OpenAI and Anthropic compatible)
 - Keys are created in the dashboard: Project → Settings → API keys. A key is limited to the products and project chosen there; `403 SCOPE_NOT_ALLOWED` means the key lacks that product, `404` on an id means it is outside the key's reach.
@@ -29,11 +29,14 @@ Helipod is a cloud platform in Indonesia: containers (deploy apps from Git, imag
 
 | Task | Skill |
 |---|---|
-| Deploy an app, env vars, domains, scaling, logs | `helipod-deploy` |
+| Deploy an app on containers, env vars, domains, scaling, logs | `helipod-deploy` |
+| Run an app on a VPS (WordPress, n8n, panels, your own) | `helipod-vps-deploy` |
+| Go live end to end: app + database + domain + email, or WordPress + domain + mail | `helipod-launch` |
+| Sell Helipod to your own customers (project, email key, domain owner per customer) | `helipod-reseller` |
 | Managed Postgres: create, connect, branches, SQL, plans | `helipod-databases` |
-| Servers with root access | `helipod-vps` |
+| Servers with root access: order, power, firewall, snapshots, migrate | `helipod-vps` |
 | Buy a domain, DNS, point a domain at an app | `helipod-domains` |
-| Send email from an app | `helipod-email` |
+| Send or receive email, email keys and SMTP | `helipod-email` |
 | Use AI models in an app through Helipod | `helipod-ai-gateway` |
 
 Docs: https://docs.helipod.io

package/skills/helipod-deploy/SKILL.md

@@ -23,7 +23,7 @@ Follow the `helipod` skill rules (price first, confirm destructive actions, neve
 | Needs Postgres | The managed database: `create_database` (FREE plan, nothing to pay), then `get_database_connection` → `DATABASE_URL` as a secret variable. Not a Postgres container |
 | A known app or other database (MySQL, Redis, WordPress, n8n, ...) | `list_templates` → `deploy_template` (`dryRun: true` first) |
 
-Private Git repos are connected in the dashboard (GitHub/GitLab integration), not through the API.
+Private Git repos: `get_git_connections` shows whether GitHub / GitLab is connected, `list_git_repos` lists what it can reach; pass a repo `url` to `create_service` (such services redeploy on every push). Not connected yet: the call answers 409 with `details.connectUrl`; give the user that link to connect in their browser, then retry. Never try to connect it yourself.
 
 Before deploying a repo, check it quickly: the port the app listens on (prefer `process.env.PORT`), the start command, a health endpoint. For Next.js Helipack adds `output: "standalone"` itself. To override detection, add `helipack.json` at the app root:
 
@@ -55,6 +55,10 @@ Before deploying a repo, check it quickly: the port the app listens on (prefer `
 - Custom domain: `add_service_domain` with `kind: "custom"`, then tell the user the DNS record from the response (`CNAME` to `cname.helipod.app`, or the `A` record for a root domain). If the domain is on Helipod, the `helipod-domains` skill can create the record.
 - Persistent files: `add_volume` (mount path), then redeploy. Without a volume, files are lost on every deploy.
 
+## Domain and email for the app
+
+A custom domain and working email together: `helipod-launch` (recipe A) has the whole sequence, including one-call DNS when the domain is on Helipod.
+
 ## Several services at once
 
 `create_stack` takes a template spec (services with `source`, `variables`, `networking`, `volumes`, `dependsOn`) and deploys them in dependency order. Always `dryRun: true` first. Spec reference: https://docs.helipod.io/docs/container-api/templates-and-stacks

package/skills/helipod-domains/SKILL.md

@@ -15,7 +15,7 @@ Follow the `helipod` skill rules. Domains belong to the account: the key must be
 4. Tell the user the total and get a clear yes, then `register_domain` (1 year; `whoisProtection: true` if they want privacy).
 5. Premium names are not sold online (`PREMIUM_NOT_SUPPORTED`).
 
-Transfer in: `transfer_domain` with the auth code from the old registrar (1 year added, priced like a transfer). Renew: `renew_domain`, or let it renew itself: `set_domain_auto_renew` (on = renewed from the wallet before expiry; off = it expires unless renewed by hand). WHOIS privacy later: `enable_whois_privacy` with `dryRun: true` first.
+Transfer in: `transfer_domain` with the auth code from the old registrar (1 year added, priced like a transfer). For a .id domain owned by someone else, pass `registrant`: it becomes the owner when the transfer completes (`ownerPending` until then; without it, the account's owner details). Change the owner of a .id domain already on the account: `set_domain_owner` (free). Renew: `renew_domain`, or let it renew itself: `set_domain_auto_renew` (on = renewed from the wallet before expiry; off = it expires unless renewed by hand). WHOIS privacy later: `enable_whois_privacy` with `dryRun: true` first.
 
 ## DNS
 

package/skills/helipod-email/SKILL.md

@@ -9,10 +9,16 @@ Uses the Helipod API key `HELIPOD_API_KEY` with **Email API** enabled (Settings
 
 ## Set up
 
-1. `email_status`: the project needs an email plan (the Free plan is fine for testing).
-2. `add_email_domain` with the domain to send from (often a subdomain like `mail.example.com`), then give the user the DNS records from the response exactly as listed (copy them verbatim). If the domain is on Helipod, use the `helipod-domains` skill to add them.
+1. `email_status`: the project needs an email plan (the Free plan is fine for testing). A paid plan renews from the wallet when it ends; `set_email_auto_renew` turns that on or off. Over the monthly quota, sends stop (`402 PAYG_DISABLED`) unless pay-as-you-go is on (`set_email_payg`, off by default; it buys blocks of 100 emails from the wallet).
+2. `add_email_domain` with the domain to send from (often a subdomain like `mail.example.com`). Domain on Helipod: `list_domain_email_records` then `add_domain_email_records` puts every record in place in one call. Elsewhere: give the user the DNS records from the response exactly as listed (copy them verbatim).
 3. `verify_email_domain` until it is verified.
 
+## Email keys and SMTP
+
+- An app or a customer gets its own key: `create_email_key` (name it after the app or customer). The full key is in the answer once; store it as a secret. It works for that project only, and cannot make keys.
+- `list_email_keys`, `revoke_email_key` (stops it at once, also open SMTP sessions). Managing keys needs the Helipod API key (`HELIPOD_API_KEY`); an email key or an AI-tool sign-in answers `403 KEY_NOT_ALLOWED`.
+- SMTP for apps that only speak SMTP (WordPress, Laravel, PHPMailer): host `smtp.helipod.io`, port 587 (STARTTLS) or 465 (SSL), username `apikey`, password = an email key (not the Helipod API key). From = an address on a verified domain.
+
 ## Send from code
 
 Never put the key in client-side code. Store it as a secret (on Helipod: `set_variables` with `secrets`).

package/skills/helipod-launch/SKILL.md

@@ -0,0 +1,32 @@
+---
+name: helipod-launch
+description: Launch a complete setup on Helipod in one go - an app with its Postgres database, its own domain with HTTPS and email that works (sending domain, SMTP), or a WordPress / n8n site on a VPS with a domain and mail. Use when the user wants to go live end to end ("deploy my app with a database and my domain", "set up WordPress with email") rather than one product.
+---
+
+# Launch end to end on Helipod
+
+Follow the `helipod` skill rules. Ask for everything that costs money up front (domain, VPS, paid plans), price each with a dry run, and get one clear yes for the total before buying. Prefer free parts: the FREE database and email plans, a `*.helipod.app` URL until the domain is ready.
+
+## Recipe A: web app + database + domain + email (containers)
+
+1. `list_projects` → the project and its production `environmentId` (`create_project` for a new one).
+2. Database: `create_database` (FREE plan). After the service exists, `get_database_connection` → `set_variables` with `DATABASE_URL` in `secrets`.
+3. App: follow `helipod-deploy` (dry run, create, poll `get_deployment`, logs on failure). Expose the app's port so it gets a `*.helipod.app` URL.
+4. Domain: `search_domain` → `domain_prices` / `register_domain` with `dryRun: true` → yes → register. Then `add_service_domain` with `kind: "custom"` and create the DNS record it returns with `update_dns_record` (the domain is on Helipod, so it is one call). `verify_service_domain` until HTTPS is active.
+5. Email: `buy_email_plan` (FREE, `dryRun` first) → `add_email_domain` with a subdomain such as `mail.example.com` → `add_domain_email_records` puts every DNS record in place in one call (domain on Helipod) → `verify_email_domain`. The app sends with `HELIPOD_API_KEY` (Email API enabled) or an email key from `create_email_key` stored as a secret.
+6. Check: open the URL, send one test email with `send_email`, read `list_emails` for delivery.
+
+## Recipe B: WordPress (or n8n) on a VPS + domain + email
+
+1. Follow `helipod-vps-deploy` with the `wordpress-…` (or `n8n-…`) image.
+2. Domain: register or use one on Helipod, `update_dns_record` `A` → the server IP; HTTPS as in `helipod-vps-deploy`.
+3. Email: Recipe A step 5, then `create_email_key` and put it in the site's SMTP settings (WP Mail SMTP: host `smtp.helipod.io`, port 587, username `apikey`, password = the key, from = an address on the verified domain).
+
+## Recipe C: a domain the user already has elsewhere
+
+- Keep it there: give the user the exact records to add (the CNAME / A from `add_service_domain`, the email records from `add_email_domain`), then `verify_service_domain` / `verify_email_domain`.
+- Move it to Helipod: `transfer_domain` with the auth code (`dryRun` first). It stays `pending_transfer` for a few days; DNS keeps working at the old provider meanwhile.
+
+## Hand over
+
+Tell the user, in one short list: the URL(s), where the database lives, the sending domain and the key name (never the key), what is billed and when (VPS period, domain renewal date, bundle or `walletDailyCost`), and that `auto-renew` is on for the domain and the VPS (or how to turn it off).

package/skills/helipod-reseller/SKILL.md

@@ -0,0 +1,36 @@
+---
+name: helipod-reseller
+description: Resell Helipod under your own brand (white label) - one project per customer, email keys and SMTP passwords per customer, domains registered or transferred in the customer's name, VPS and services billed to your wallet. Use when the user sells hosting, domains or email to their own customers through the Helipod API or MCP.
+---
+
+# Reselling Helipod
+
+Follow the `helipod` skill rules. The reseller's wallet pays for everything; set your own prices to customers outside Helipod. Use a whole-account Helipod API key with the products you resell (Email API, Domain API, VPS API, Container API, Database API). Projects need no product: any key can list them, a whole-account key creates them.
+
+## Onboard a customer
+
+1. `create_project` (name = the customer, `idempotencyKey` = your customer id) → keep the `projectId` with the customer in your own system.
+2. Everything for that customer goes in that project: services, a database, a VPS, email. Pass `projectId` to the email tools (a whole-account key needs it).
+
+## Email per customer
+
+1. `buy_email_plan` for the customer's project (FREE first, `dryRun`), `add_email_domain` with the customer's domain, the DNS records (`add_domain_email_records` when the domain is on Helipod, else give them to the customer), `verify_email_domain`.
+2. `create_email_key` with the customer's name → the key is shown ONCE: hand it to the customer (or store it encrypted on your side). It works for that project only, on the Email API and as the SMTP password (`smtp.helipod.io`, port 587 STARTTLS or 465, username `apikey`). It cannot make other keys.
+3. `list_email_keys`, `revoke_email_key` when a customer leaves or a key leaks. Allowance per project: 5 keys (Free/Starter), 10 (Pro), 50 (Business).
+4. Managing keys needs the Helipod API key itself: an email key or an AI-tool sign-in answers `403 KEY_NOT_ALLOWED`.
+
+## Domains in the customer's name
+
+- New domain: `register_domain` with `registrant` = the customer's details (only details the customer gave you). `.id` family only (`.id`, `.my.id`, `.web.id`, `.biz.id`, `.ai.id`); other extensions use the reseller account's owner details (`400 REGISTRANT_NOT_SUPPORTED` if you send one).
+- Transfer in: `transfer_domain` with the auth code and `registrant`: the owner is set when the transfer completes (`ownerPending: true` until then; it is checked again automatically).
+- A domain already on the account: `set_domain_owner`. Free.
+- Renewal is charged to your wallet: `set_domain_auto_renew` per domain to match what the customer paid for. The same for each customer project's email plan: `set_email_auto_renew` (off when the customer stops paying; `get_email_plan` / `email_status` show `autoRenew`), and `set_vps_auto_renew` per server. Sends over an email plan's quota are charged only with `set_email_payg` on (off by default): leave it off unless the customer pays for overage.
+
+## Servers and apps per customer
+
+- VPS: `helipod-vps-deploy` inside the customer's project. Containers: `helipod-deploy` in the project's environment.
+- Watch money: `get_wallet` before buying, `list_wallet_transactions` / `get_statement` to bill your customers; top up with `create_deposit` (give the payment link to the account owner, never pay it yourself).
+
+## Offboard
+
+Revoke the customer's email keys, then delete or hand over in this order: services and VPS (confirm, data is lost), database, email plan, domains (transfer out at the registry), and finally `delete_project` (only empty projects; `confirm` = its exact name).

package/skills/helipod-vps-deploy/SKILL.md

@@ -0,0 +1,39 @@
+---
+name: helipod-vps-deploy
+description: Run an application on a Helipod VPS - pick a ready app image (WordPress, n8n, EasyPanel, aaPanel, Dify, ...) or a plain OS, open the right ports, add an SSH key, point a domain at it and serve HTTPS. Use when the user wants their app on a server with root access instead of containers, or asks to host WordPress / n8n / a panel on a VPS.
+---
+
+# Deploy on a Helipod VPS
+
+Follow the `helipod` skill rules (price first, confirm destructive actions, never print passwords). Containers are usually simpler and cheaper for one web app (`helipod-deploy`); choose a VPS when the user needs root, a panel, long-running software they manage themselves, or asks for it.
+
+## 1. Pick the server
+
+1. `list_vps_plans` → plans and their `osTemplates`. App plans list ready images: `wordpress-…`, `woocommerce-…`, `n8n-…`, `easypanel-…`, `aapanel-…`, `1panel-…`, `dify-…`, `lamp-…`, `cloudreve-…`, `srs-…`, AI agents (`openclaw-…`, `opencode-…`, `hermes-…`). An app image is ready to use; a plain OS (`ubuntu-24.04`, `debian-…`) is for the user's own setup.
+2. Match the app's minimum RAM (WordPress 1 GB, n8n and Dify 2 GB, DeepSeek 4 GB): an image the plan cannot run is not listed.
+3. `list_projects` → the project. `create_vps` with `dryRun: true` → tell the user the price and the wallet after it, and wait for a yes.
+4. `create_vps` for real with an `idempotencyKey` and a strong generated password (do not print it back unless asked). Poll `get_vps` every 10 s until `running`.
+
+## 2. Reach it
+
+- SSH key instead of the password: ask for the user's PUBLIC key (`~/.ssh/id_ed25519.pub`), `add_vps_ssh_key`. Never ask for or accept a private key.
+- `get_vps` → `providerCode` and `access`:
+  - `providerCode` 2 or 3 (own public IP): ports are opened with `list_firewall_rules` / `add_firewall_rules`. App images open their own ports at create; check before adding.
+  - `providerCode` 1 (shared address): the server is reached through port forwards. `list_vps_ports` shows the allowed `portRange`; `add_vps_port` with `protocol: "tcp"` for a raw port, or `protocol: "https"` (port 443) with a `domain` and the app's `internalPort` to route a domain to the app (point the domain's DNS at the server's IP first).
+- Login details: `get_vps_credentials` (Linux `ssh root@<host> -p <port>`; Windows RDP).
+
+## 3. Domain and HTTPS
+
+1. A domain on Helipod: `list_my_domains` → `update_dns_record` with an `A` record (`@` and/or `www`) to the server's IP. Elsewhere: tell the user the exact `A` record to add at their DNS provider.
+2. App images with a panel (EasyPanel, aaPanel, 1Panel) issue certificates from the panel once DNS points at the server. On a plain OS, suggest Caddy (automatic HTTPS): `apt install caddy`, then a Caddyfile `example.com { reverse_proxy localhost:3000 }`.
+3. Shared-address servers (`providerCode` 1): `add_vps_port` with `protocol: "https"`, the `domain` and the app's `internalPort` serves HTTPS for it.
+
+## 4. First login of an app image
+
+The dashboard's VPS page has an **Application** tab with the app's URL, the ports it needs and how to get its admin login; send the user there. Typical first steps: WordPress and n8n open on `http://<ip>` (n8n on port 5678) and ask to create the admin user; EasyPanel opens on port 3000 and asks to create the admin user; aaPanel and 1Panel print their login with a command shown in that tab.
+
+## 5. Keep it safe
+
+- `create_snapshot` before risky changes; `run_vps_backup` / `activate_vps_backup` (paid, price first) for daily backups.
+- Never remove the SSH rule (port 22) or the user's only SSH key without asking.
+- Email from the app: SMTP with an email key (`helipod-email`), not a mail server on the VPS.