helipod-mcp 0.5.9 → 0.5.11

package/README.md

@@ -2,7 +2,7 @@
 
 Use [Helipod](https://helipod.io) from AI coding tools: deploy apps and databases, run VPS servers, buy domains and edit DNS, and send email, by asking in plain language.
 
-- **MCP server** (`helipod-mcp`): 229 tools over the Container, Database, VPS, Domain, Email, Account and AI APIs. Works in Claude Code, Codex, Cursor, VS Code, Windsurf, Claude Desktop and any MCP client.
+- **MCP server** (`helipod-mcp`): 238 tools over the Container, Database, VPS, Domain, Email, Account and AI APIs. Works in Claude Code, Codex, Cursor, VS Code, Windsurf, Claude Desktop and any MCP client.
 - **Skills** (`skills/`): step-by-step playbooks so the agent deploys, prices and confirms the way Helipod expects (price first, confirm before deleting, read build logs on failure).
 
 Step-by-step guides for each tool (Claude Code, Codex, Cursor, VS Code, Gemini CLI, opencode, Windsurf, Claude Desktop, Cline and others): **https://docs.helipod.io/docs/helipod/ai-agents**
@@ -193,10 +193,10 @@ Pick your agents when asked (or pass `-a codex cursor gemini-cli opencode -y`).
 |---|---|
 | Containers | projects and environments (create, rename, delete), shared project variables, services (create from image, Git or Dockerfile, rename), deploy, deployments and build logs, restart, variables, domains and their ports, scale, volumes (with resize), function code, secret files, logs, metrics, templates, multi-service stacks |
 | Databases | managed Postgres: create, connection string, branches per environment, compute settings, plan upgrades, usage, live stats, credit balance, tables, read-only queries, SQL classification and confirmed writes |
-| VPS | plans, create, rename, power, reinstall, password, login details, terminate, renew, upgrade options and upgrade, auto-renew, metrics, firewall, port forwarding, SSH keys and SSH on/off, snapshots, backups |
+| VPS | plans, create, rename, power, reinstall, password, login details, terminate, renew, upgrade options and upgrade (create, renew and upgrade each with a dry run), auto-renew, metrics, firewall, port forwarding, SSH keys and SSH on/off, snapshots, backups |
 | Domains | search, prices, owner details, register, transfer, renew (each with a dry run), DNS records, nameservers, child nameservers, WHOIS privacy |
 | Email | status, plan (buy, renew, change, inbox add-ons, with dry runs), send, sent log, sending domains, templates, contacts, segments, topics, broadcasts, suppressions, webhooks, inbox |
-| Account | wallet and transactions, invoices, monthly statements, notifications, project activity, support tickets |
+| Account | wallet and transactions, deposits (top-up payment links), invoices, monthly statements, notifications, project activity, support tickets |
 | AI | models and prices, balance, usage, metrics, AI keys (list, revoke), top-up and auto top-up |
 | Other | `helipod_api_get` to read any other documented endpoint (read only) |
 

package/dist/http.js

@@ -36281,6 +36281,10 @@ var period = exports_external.enum(["monthly", "3month", "6month", "yearly"]);
 var pointId = exports_external.string().describe("Restore point id (from list_vps_restore_points)");
 var backupPath = exports_external.string().max(1024).describe("Absolute path inside the backup, e.g. /etc/nginx or /var/www/index.html");
 var migrationId = exports_external.string().describe("Migration id (from list_vps_migrations)");
+var dryRun2 = exports_external.boolean().optional().describe("true = return the price (IDR) and the wallet balance after it; nothing is charged or changed");
+var idempotencyKey = exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real call. Generated when omitted; pass the same value when retrying so it is never charged twice");
+var DRY = "dryRun=true returns the price and walletBalanceAfter without charging or changing anything.";
+var dryQuery = (d) => ({ dryRun: d ? "true" : undefined });
 var vpsTools = [
   defineTool({
     name: "list_vps_plans",
@@ -36310,7 +36314,7 @@ var vpsTools = [
     name: "create_vps",
     title: "Create VPS",
     kind: "write",
-    description: "Order a server. COSTS MONEY right away (the whole billing period is charged from the wallet; refunded if provisioning fails). Show the plan price from list_vps_plans and get the user's explicit OK first. Provisioning takes a few minutes: poll get_vps.",
+    description: `Order a server. COSTS MONEY right away (the whole billing period is charged from the wallet; refunded if provisioning fails). Call with dryRun=true first, show the price and the wallet after it, and get the user's explicit OK. ${DRY} autoRenew=false creates it with auto-renew off (renew it with renew_vps). Provisioning takes a few minutes: poll get_vps.`,
     input: {
       projectId: exports_external.string().uuid(),
       planId: exports_external.string(),
@@ -36318,9 +36322,12 @@ var vpsTools = [
       osType: exports_external.string().describe("From the plan's osTemplates, e.g. ubuntu"),
       osVersion: exports_external.string().describe("e.g. 24.04"),
       rootPassword: password,
-      billingPeriod: period.optional().describe("Default monthly")
+      billingPeriod: period.optional().describe("Default monthly"),
+      autoRenew: exports_external.boolean().optional().describe("false = no automatic renewal from the wallet (default true)"),
+      dryRun: dryRun2,
+      idempotencyKey
     },
-    run: (a, api2) => api2.api("POST", "/vps", { body: a })
+    run: ({ dryRun: dryRun3, idempotencyKey: idempotencyKey2, ...body }, api2) => api2.api("POST", "/vps", { body, query: dryQuery(dryRun3), idempotencyKey: purchaseKey(dryRun3, idempotencyKey2) })
   }),
   defineTool({
     name: "vps_power",
@@ -36374,17 +36381,17 @@ var vpsTools = [
     name: "renew_vps",
     title: "Renew VPS",
     kind: "write",
-    description: "Extend a server's paid period. COSTS MONEY: show the price from get_vps_renewal_options and get the user's OK.",
-    input: { vpsId, billingPeriod: period },
-    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/renew`, { body: { billingPeriod: a.billingPeriod } })
+    description: `Extend a server's paid period. COSTS MONEY: call with dryRun=true first, show the price and the wallet after it, and get the user's OK. ${DRY}`,
+    input: { vpsId, billingPeriod: period, dryRun: dryRun2, idempotencyKey },
+    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/renew`, { body: { billingPeriod: a.billingPeriod }, query: dryQuery(a.dryRun), idempotencyKey: purchaseKey(a.dryRun, a.idempotencyKey) })
   }),
   defineTool({
     name: "upgrade_vps",
     title: "Upgrade VPS plan",
     kind: "write",
-    description: "Move a server to a larger plan in the same family and region. COSTS MONEY (the difference for the days left) and restarts the server. planId must be one listed by get_vps_upgrade_options, which also gives the price in IDR; the server restarts during the upgrade. Servers with providerCode 2 only.",
-    input: { vpsId, planId: exports_external.string() },
-    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/upgrade`, { body: { planId: a.planId } })
+    description: `Move a server to a larger plan in the same family and region. COSTS MONEY (the difference for the days left) and restarts the server. planId must be one listed by get_vps_upgrade_options. Call with dryRun=true first and get the user's OK. ${DRY} Servers with providerCode 2 only.`,
+    input: { vpsId, planId: exports_external.string(), dryRun: dryRun2, idempotencyKey },
+    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/upgrade`, { body: { planId: a.planId }, query: dryQuery(a.dryRun), idempotencyKey: purchaseKey(a.dryRun, a.idempotencyKey) })
   }),
   defineTool({
     name: "get_vps_upgrade_options",
@@ -36411,11 +36418,20 @@ var vpsTools = [
     input: { vpsId, range: exports_external.enum(["1h", "6h", "24h", "7d", "30d"]).optional() },
     run: (a, api2) => api2.api("GET", `/vps/${a.vpsId}/metrics`, { query: { range: a.range } })
   }),
+  defineTool({
+    name: "set_vps_auto_renew",
+    title: "Set VPS auto-renew",
+    kind: "write",
+    idempotent: true,
+    description: "Turn auto-renew on or off (sets the value, safe to repeat). With it off, the server is only renewed by renew_vps and expires otherwise.",
+    input: { vpsId, autoRenew: exports_external.boolean() },
+    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/auto-renew`, { body: { autoRenew: a.autoRenew } })
+  }),
   defineTool({
     name: "toggle_vps_auto_renew",
     title: "Toggle VPS auto-renew",
     kind: "write",
-    description: "Flip auto-renew on or off; the response gives the new value.",
+    description: "Flip auto-renew to the other value; the response gives the new one. Prefer set_vps_auto_renew to reach a given state.",
     input: { vpsId },
     run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/auto-renew-toggle`)
   }),
@@ -36744,8 +36760,8 @@ var vpsTools = [
 // src/tools/domains.ts
 var domainId = exports_external.number().int().positive().describe("Domain id (number, from list_my_domains)");
 var hostId = exports_external.number().int().positive().describe("Child nameserver id (from list_child_nameservers)");
-var dryRun2 = exports_external.boolean().optional().describe("true = return the exact price (IDR, VAT included) and the wallet balance after it; nothing is charged or registered");
-var DRY = "dryRun=true returns the price and walletBalanceAfter without charging or changing anything.";
+var dryRun3 = exports_external.boolean().optional().describe("true = return the exact price (IDR, VAT included) and the wallet balance after it; nothing is charged or registered");
+var DRY2 = "dryRun=true returns the price and walletBalanceAfter without charging or changing anything.";
 var record3 = exports_external.object({
   name: exports_external.string().describe('"@" for the domain itself, or the part before the domain, e.g. "www" or "_dmarc.mail". A full name like "www.example.com" is accepted and stored as "www"'),
   type: exports_external.enum(["A", "AAAA", "MX", "MXE", "CNAME", "SPF", "TXT"]),
@@ -36821,12 +36837,12 @@ var domainTools = [
     name: "register_domain",
     title: "Register domain",
     kind: "write",
-    description: `Register a domain for 1 year. COSTS MONEY from the wallet. Check search_domain, and that the owner details are complete (check_registrant / update_registrant). ${DRY} The dry run includes WHOIS privacy when whoisProtection is true.`,
+    description: `Register a domain for 1 year. COSTS MONEY from the wallet. Check search_domain, and that the owner details are complete (check_registrant / update_registrant). ${DRY2} The dry run includes WHOIS privacy when whoisProtection is true.`,
     input: {
       name: exports_external.string().describe("Full domain, e.g. tokosaya.id"),
       nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(),
       whoisProtection: exports_external.boolean().optional(),
-      dryRun: dryRun2
+      dryRun: dryRun3
     },
     run: (a, api2) => api2.api("POST", "/domains/register", { body: { name: a.name, period: 1, nameservers: a.nameservers, whoisProtection: a.whoisProtection }, query: { dryRun: a.dryRun ? "true" : undefined } })
   }),
@@ -36834,16 +36850,16 @@ var domainTools = [
     name: "transfer_domain",
     title: "Transfer domain in",
     kind: "write",
-    description: `Transfer a domain from another registrar (adds 1 year). COSTS MONEY from the wallet. Needs the domain's auth code. ${DRY}`,
-    input: { name: exports_external.string(), authCode: exports_external.string(), nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(), dryRun: dryRun2 },
+    description: `Transfer a domain from another registrar (adds 1 year). COSTS MONEY from the wallet. Needs the domain's auth code. ${DRY2}`,
+    input: { name: exports_external.string(), authCode: exports_external.string(), nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(), dryRun: dryRun3 },
     run: (a, api2) => api2.api("POST", "/domains/transfer", { body: { name: a.name, authCode: a.authCode, period: 1, nameservers: a.nameservers }, query: { dryRun: a.dryRun ? "true" : undefined } })
   }),
   defineTool({
     name: "renew_domain",
     title: "Renew domain",
     kind: "write",
-    description: `Renew a domain for 1 year (plus WHOIS privacy when it is on). COSTS MONEY from the wallet. ${DRY}`,
-    input: { domainId, dryRun: dryRun2 },
+    description: `Renew a domain for 1 year (plus WHOIS privacy when it is on). COSTS MONEY from the wallet. ${DRY2}`,
+    input: { domainId, dryRun: dryRun3 },
     run: (a, api2) => api2.api("POST", `/domains/${a.domainId}/renew`, { body: { period: 1 }, query: { dryRun: a.dryRun ? "true" : undefined } })
   }),
   defineTool({
@@ -37006,7 +37022,7 @@ var message = exports_external.object({
   variables: exports_external.record(exports_external.string(), exports_external.string()).optional(),
   idempotencyKey: exports_external.string().max(128).optional()
 });
-var dryRun3 = exports_external.boolean().optional().describe("true = return the price (IDR) and the wallet balance after it; nothing is charged or changed");
+var dryRun4 = exports_external.boolean().optional().describe("true = return the price (IDR) and the wallet balance after it; nothing is charged or changed");
 var idem2 = exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real purchase. Generated when omitted; pass the same value when retrying so it is never charged twice");
 var MONEY = "COSTS MONEY from the wallet. dryRun=true returns the charge (IDR) and walletBalanceAfter without charging or changing anything.";
 var planCode = exports_external.string().min(1).max(50).describe("Plan code from list_email_plans");
@@ -37042,7 +37058,7 @@ var emailTools = [
     title: "Buy email plan",
     kind: "write",
     description: `Start an email plan for the project (a free plan activates without charge). Works for a project with no email yet: the real call also sets email up (result.setup). ${MONEY} The dry run's mode says purchase, activate_free or already_active.`,
-    input: { projectId, planCode, months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional().describe("Billing cycle, default 1"), dryRun: dryRun3, idempotencyKey: idem2 },
+    input: { projectId, planCode, months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional().describe("Billing cycle, default 1"), dryRun: dryRun4, idempotencyKey: idem2 },
     run: (a, api2) => api2.email("POST", "/plan", {
       project: a.projectId,
       body: { planCode: a.planCode, months: a.months },
@@ -37055,7 +37071,7 @@ var emailTools = [
     title: "Renew email plan",
     kind: "write",
     description: `Renew the project's ended or expiring email plan (409 PLAN_ACTIVE while one is still running and cannot be extended). Repeats the last plan and cycle unless planCode / months are given. ${MONEY}`,
-    input: { projectId, planCode: planCode.optional(), months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional(), dryRun: dryRun3, idempotencyKey: idem2 },
+    input: { projectId, planCode: planCode.optional(), months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional(), dryRun: dryRun4, idempotencyKey: idem2 },
     run: (a, api2) => api2.email("POST", "/plan/renew", {
       project: a.projectId,
       body: { planCode: a.planCode, months: a.months },
@@ -37068,7 +37084,7 @@ var emailTools = [
     title: "Change email plan",
     kind: "write",
     description: `Move the active email plan to another plan. An upgrade applies now and charges the prorated difference to the same end date; a downgrade is scheduled for the next cycle (no refund). ${MONEY}`,
-    input: { projectId, planCode, dryRun: dryRun3, idempotencyKey: idem2 },
+    input: { projectId, planCode, dryRun: dryRun4, idempotencyKey: idem2 },
     run: (a, api2) => api2.email("POST", "/plan/change", {
       project: a.projectId,
       body: { planCode: a.planCode },
@@ -37085,7 +37101,7 @@ var emailTools = [
       projectId,
       extraMailboxes: exports_external.number().int().min(0).max(50).describe("Total extra mailboxes wanted (0-50)"),
       extraStorageGb: exports_external.number().int().min(0).max(1000).describe("Total extra inbox storage in GB (0-1000)"),
-      dryRun: dryRun3,
+      dryRun: dryRun4,
       idempotencyKey: idem2
     },
     run: (a, api2) => api2.email("POST", "/plan/addons", {
@@ -37655,7 +37671,7 @@ var emailTools = [
 // src/tools/databases.ts
 var databaseId = exports_external.string().uuid().describe("Database id (from list_databases)");
 var environmentId = exports_external.string().uuid().describe("Environment id (from list_projects). Omit for the primary (production) branch.");
-var dryRun4 = exports_external.boolean().optional().describe("true = only check and show the result or price; nothing changes");
+var dryRun5 = exports_external.boolean().optional().describe("true = only check and show the result or price; nothing changes");
 var databaseTools = [
   defineTool({
     name: "list_database_plans",
@@ -37749,7 +37765,7 @@ var databaseTools = [
       minCu: exports_external.number().min(0.25).max(10).optional(),
       maxCu: exports_external.number().min(0.25).max(10).optional(),
       suspendTimeoutSeconds: exports_external.number().int().min(0).max(604800).optional().describe("0 = never suspend, or 60-604800"),
-      dryRun: dryRun4
+      dryRun: dryRun5
     },
     run: (a, api2) => api2.api("PATCH", `/databases/${a.databaseId}/settings`, {
       body: { minCu: a.minCu, maxCu: a.maxCu, suspendTimeoutSeconds: a.suspendTimeoutSeconds },
@@ -37761,7 +37777,7 @@ var databaseTools = [
     title: "Upgrade database plan / top up",
     kind: "write",
     description: "Buy a paid plan or top up credits. COSTS MONEY from the wallet: call with dryRun first, show price and wallet balance after, and get the user's explicit OK.",
-    input: { databaseId, plan: exports_external.string().describe("Plan code (e.g. STARTER) or id from list_database_plans"), dryRun: dryRun4, idempotencyKey: exports_external.string().max(128).optional() },
+    input: { databaseId, plan: exports_external.string().describe("Plan code (e.g. STARTER) or id from list_database_plans"), dryRun: dryRun5, idempotencyKey: exports_external.string().max(128).optional() },
     run: (a, api2) => api2.api("POST", `/databases/${a.databaseId}/upgrade`, { body: { plan: a.plan }, query: { dryRun: a.dryRun ? "true" : undefined }, idempotencyKey: a.idempotencyKey })
   }),
   defineTool({
@@ -37887,6 +37903,38 @@ var accountTools = [
     input: { limit: limit2, offset },
     run: (a, api2) => api2.api("GET", "/account/wallet/transactions", { query: { limit: a.limit, offset: a.offset } })
   }),
+  defineTool({
+    name: "create_deposit",
+    title: "Create deposit (top-up)",
+    kind: "write",
+    description: `Create a wallet top-up of amount IDR (whole number, 10000-50000000) and its payment link. Nothing is charged: give the user paymentUrl to pay (QRIS or bank virtual account, listed in paymentMethods; the link lasts 3 hours); never try to pay it yourself. Limits: one unpaid deposit at a time (409 DEPOSIT_PENDING: details.deposit is the unpaid one, send its paymentUrl instead), 10 minutes between deposits (429 DEPOSIT_COOLDOWN, details.nextAllowedAt), 10 a day (429 DEPOSIT_DAILY_LIMIT). dryRun=true creates nothing and says whether it would be accepted now. Then follow it with get_deposit. ${ACCOUNT_KEY}`,
+    input: {
+      amount: exports_external.number().int().min(1e4).max(50000000).describe("IDR, whole number"),
+      dryRun: exports_external.boolean().optional().describe("true = only check (methods, whether it would be accepted now); nothing is created"),
+      idempotencyKey: exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key. Generated when omitted; pass the same value when retrying so only one deposit is created")
+    },
+    run: (a, api2) => api2.api("POST", "/account/deposits", {
+      body: { amount: a.amount },
+      query: { dryRun: a.dryRun ? "true" : undefined },
+      idempotencyKey: purchaseKey(a.dryRun, a.idempotencyKey)
+    })
+  }),
+  defineTool({
+    name: "get_deposit",
+    title: "Get deposit",
+    kind: "read",
+    description: `One deposit: status pending (paymentUrl to pay), paid (paidAt; the wallet was credited) or expired (not paid in time). ${ACCOUNT_KEY}`,
+    input: { depositId: uid2("Deposit") },
+    run: (a, api2) => api2.api("GET", `/account/deposits/${a.depositId}`)
+  }),
+  defineTool({
+    name: "list_deposits",
+    title: "List deposits",
+    kind: "read",
+    description: `Deposits (wallet top-ups), newest first, with status and amount. ${ACCOUNT_KEY}`,
+    input: { limit: limit2, offset },
+    run: (a, api2) => api2.api("GET", "/account/deposits", { query: { limit: a.limit, offset: a.offset } })
+  }),
   defineTool({
     name: "list_invoices",
     title: "List invoices",
@@ -38019,7 +38067,7 @@ var accountTools = [
 var projectId2 = exports_external.string().uuid().optional().describe("Limit to one project (a project key is always limited to its own)");
 var keyId = exports_external.string().uuid().optional().describe("Limit to one AI key (id from list_ai_keys)");
 var model = exports_external.string().max(100).optional().describe("Limit to one model id");
-var dryRun5 = exports_external.boolean().optional().describe("true = only check and show the result; nothing is charged or changed");
+var dryRun6 = exports_external.boolean().optional().describe("true = only check and show the result; nothing is charged or changed");
 var ACCOUNT_KEY2 = "Needs a whole-account key (a key limited to one project gets 403 ACCOUNT_KEY_REQUIRED).";
 var imageProject = exports_external.string().uuid().optional().describe("Project the images belong to (required with a whole-account key; a project key uses its own)");
 var INLINE_MAX_BYTES = 1500000;
@@ -38104,7 +38152,7 @@ var aiTools = [
       n: exports_external.number().int().min(1).max(10).optional().describe("Images in this request (up to the model's maxN; default 1)"),
       images: exports_external.array(exports_external.string().url().startsWith("https://")).max(10).optional().describe("Reference images as https:// links (only models with refImages > 0)"),
       projectId: imageProject,
-      dryRun: dryRun5,
+      dryRun: dryRun6,
       wait: exports_external.number().int().min(0).max(55).optional().describe("Seconds to wait for the result (default 50; 0 = return the id at once)"),
       idempotencyKey: exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real request. Generated when omitted; pass the same value when retrying so it is never charged twice")
     },
@@ -38154,7 +38202,7 @@ var aiTools = [
     input: {
       packId: exports_external.string().min(1).max(64).optional(),
       amount: exports_external.number().min(1).max(1e9).optional().describe("IDR"),
-      dryRun: dryRun5,
+      dryRun: dryRun6,
       idempotencyKey: exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real top-up. Generated when omitted; pass the same value when retrying so it is never charged twice")
     },
     run: (a, api2) => {
@@ -38177,7 +38225,7 @@ var aiTools = [
       enabled: exports_external.boolean(),
       threshold: exports_external.number().min(1).optional().describe("Top up when the AI balance is below this (IDR)"),
       amount: exports_external.number().min(1).optional().describe("How much to top up each time (IDR)"),
-      dryRun: dryRun5
+      dryRun: dryRun6
     },
     run: (a, api2) => api2.api("PUT", "/ai/auto-topup", {
       body: { enabled: a.enabled, threshold: a.threshold, amount: a.amount },
@@ -38213,7 +38261,7 @@ var generalTools = [
 ];
 
 // src/server.ts
-var VERSION = "0.5.9";
+var VERSION = "0.5.11";
 var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed Postgres databases, VPS, domains, email and an AI gateway, billed from a prepaid wallet in Rupiah.
 - Start with list_projects to find projects and environment ids. Account tools (get_wallet, invoices, statements, notifications, get_project_activity, support tickets) cover the account; AI tools (list_ai_models, get_ai_overview, get_ai_usage, AI keys, top-ups, generate_ai_image) cover the AI gateway.
 - Anything that costs money (create/deploy/scale services, resize volumes, upgrade a database plan, create/renew/upgrade VPS, VPS backups, register/renew/transfer domains, email plans and inbox add-ons, AI top-ups and auto top-up, generating images): call it with dryRun=true first (or the price lookup when it has no dry run), tell the user the cost in IDR and the wallet balance after, and wait for an explicit yes before the real call. Never treat silence or an earlier general OK as a yes.

package/dist/index.js

@@ -35426,6 +35426,10 @@ var period = exports_external.enum(["monthly", "3month", "6month", "yearly"]);
 var pointId = exports_external.string().describe("Restore point id (from list_vps_restore_points)");
 var backupPath = exports_external.string().max(1024).describe("Absolute path inside the backup, e.g. /etc/nginx or /var/www/index.html");
 var migrationId = exports_external.string().describe("Migration id (from list_vps_migrations)");
+var dryRun2 = exports_external.boolean().optional().describe("true = return the price (IDR) and the wallet balance after it; nothing is charged or changed");
+var idempotencyKey = exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real call. Generated when omitted; pass the same value when retrying so it is never charged twice");
+var DRY = "dryRun=true returns the price and walletBalanceAfter without charging or changing anything.";
+var dryQuery = (d) => ({ dryRun: d ? "true" : undefined });
 var vpsTools = [
   defineTool({
     name: "list_vps_plans",
@@ -35455,7 +35459,7 @@ var vpsTools = [
     name: "create_vps",
     title: "Create VPS",
     kind: "write",
-    description: "Order a server. COSTS MONEY right away (the whole billing period is charged from the wallet; refunded if provisioning fails). Show the plan price from list_vps_plans and get the user's explicit OK first. Provisioning takes a few minutes: poll get_vps.",
+    description: `Order a server. COSTS MONEY right away (the whole billing period is charged from the wallet; refunded if provisioning fails). Call with dryRun=true first, show the price and the wallet after it, and get the user's explicit OK. ${DRY} autoRenew=false creates it with auto-renew off (renew it with renew_vps). Provisioning takes a few minutes: poll get_vps.`,
     input: {
       projectId: exports_external.string().uuid(),
       planId: exports_external.string(),
@@ -35463,9 +35467,12 @@ var vpsTools = [
       osType: exports_external.string().describe("From the plan's osTemplates, e.g. ubuntu"),
       osVersion: exports_external.string().describe("e.g. 24.04"),
       rootPassword: password,
-      billingPeriod: period.optional().describe("Default monthly")
+      billingPeriod: period.optional().describe("Default monthly"),
+      autoRenew: exports_external.boolean().optional().describe("false = no automatic renewal from the wallet (default true)"),
+      dryRun: dryRun2,
+      idempotencyKey
     },
-    run: (a, api2) => api2.api("POST", "/vps", { body: a })
+    run: ({ dryRun: dryRun3, idempotencyKey: idempotencyKey2, ...body }, api2) => api2.api("POST", "/vps", { body, query: dryQuery(dryRun3), idempotencyKey: purchaseKey(dryRun3, idempotencyKey2) })
   }),
   defineTool({
     name: "vps_power",
@@ -35519,17 +35526,17 @@ var vpsTools = [
     name: "renew_vps",
     title: "Renew VPS",
     kind: "write",
-    description: "Extend a server's paid period. COSTS MONEY: show the price from get_vps_renewal_options and get the user's OK.",
-    input: { vpsId, billingPeriod: period },
-    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/renew`, { body: { billingPeriod: a.billingPeriod } })
+    description: `Extend a server's paid period. COSTS MONEY: call with dryRun=true first, show the price and the wallet after it, and get the user's OK. ${DRY}`,
+    input: { vpsId, billingPeriod: period, dryRun: dryRun2, idempotencyKey },
+    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/renew`, { body: { billingPeriod: a.billingPeriod }, query: dryQuery(a.dryRun), idempotencyKey: purchaseKey(a.dryRun, a.idempotencyKey) })
   }),
   defineTool({
     name: "upgrade_vps",
     title: "Upgrade VPS plan",
     kind: "write",
-    description: "Move a server to a larger plan in the same family and region. COSTS MONEY (the difference for the days left) and restarts the server. planId must be one listed by get_vps_upgrade_options, which also gives the price in IDR; the server restarts during the upgrade. Servers with providerCode 2 only.",
-    input: { vpsId, planId: exports_external.string() },
-    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/upgrade`, { body: { planId: a.planId } })
+    description: `Move a server to a larger plan in the same family and region. COSTS MONEY (the difference for the days left) and restarts the server. planId must be one listed by get_vps_upgrade_options. Call with dryRun=true first and get the user's OK. ${DRY} Servers with providerCode 2 only.`,
+    input: { vpsId, planId: exports_external.string(), dryRun: dryRun2, idempotencyKey },
+    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/upgrade`, { body: { planId: a.planId }, query: dryQuery(a.dryRun), idempotencyKey: purchaseKey(a.dryRun, a.idempotencyKey) })
   }),
   defineTool({
     name: "get_vps_upgrade_options",
@@ -35556,11 +35563,20 @@ var vpsTools = [
     input: { vpsId, range: exports_external.enum(["1h", "6h", "24h", "7d", "30d"]).optional() },
     run: (a, api2) => api2.api("GET", `/vps/${a.vpsId}/metrics`, { query: { range: a.range } })
   }),
+  defineTool({
+    name: "set_vps_auto_renew",
+    title: "Set VPS auto-renew",
+    kind: "write",
+    idempotent: true,
+    description: "Turn auto-renew on or off (sets the value, safe to repeat). With it off, the server is only renewed by renew_vps and expires otherwise.",
+    input: { vpsId, autoRenew: exports_external.boolean() },
+    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/auto-renew`, { body: { autoRenew: a.autoRenew } })
+  }),
   defineTool({
     name: "toggle_vps_auto_renew",
     title: "Toggle VPS auto-renew",
     kind: "write",
-    description: "Flip auto-renew on or off; the response gives the new value.",
+    description: "Flip auto-renew to the other value; the response gives the new one. Prefer set_vps_auto_renew to reach a given state.",
     input: { vpsId },
     run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/auto-renew-toggle`)
   }),
@@ -35889,8 +35905,8 @@ var vpsTools = [
 // src/tools/domains.ts
 var domainId = exports_external.number().int().positive().describe("Domain id (number, from list_my_domains)");
 var hostId = exports_external.number().int().positive().describe("Child nameserver id (from list_child_nameservers)");
-var dryRun2 = exports_external.boolean().optional().describe("true = return the exact price (IDR, VAT included) and the wallet balance after it; nothing is charged or registered");
-var DRY = "dryRun=true returns the price and walletBalanceAfter without charging or changing anything.";
+var dryRun3 = exports_external.boolean().optional().describe("true = return the exact price (IDR, VAT included) and the wallet balance after it; nothing is charged or registered");
+var DRY2 = "dryRun=true returns the price and walletBalanceAfter without charging or changing anything.";
 var record3 = exports_external.object({
   name: exports_external.string().describe('"@" for the domain itself, or the part before the domain, e.g. "www" or "_dmarc.mail". A full name like "www.example.com" is accepted and stored as "www"'),
   type: exports_external.enum(["A", "AAAA", "MX", "MXE", "CNAME", "SPF", "TXT"]),
@@ -35966,12 +35982,12 @@ var domainTools = [
     name: "register_domain",
     title: "Register domain",
     kind: "write",
-    description: `Register a domain for 1 year. COSTS MONEY from the wallet. Check search_domain, and that the owner details are complete (check_registrant / update_registrant). ${DRY} The dry run includes WHOIS privacy when whoisProtection is true.`,
+    description: `Register a domain for 1 year. COSTS MONEY from the wallet. Check search_domain, and that the owner details are complete (check_registrant / update_registrant). ${DRY2} The dry run includes WHOIS privacy when whoisProtection is true.`,
     input: {
       name: exports_external.string().describe("Full domain, e.g. tokosaya.id"),
       nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(),
       whoisProtection: exports_external.boolean().optional(),
-      dryRun: dryRun2
+      dryRun: dryRun3
     },
     run: (a, api2) => api2.api("POST", "/domains/register", { body: { name: a.name, period: 1, nameservers: a.nameservers, whoisProtection: a.whoisProtection }, query: { dryRun: a.dryRun ? "true" : undefined } })
   }),
@@ -35979,16 +35995,16 @@ var domainTools = [
     name: "transfer_domain",
     title: "Transfer domain in",
     kind: "write",
-    description: `Transfer a domain from another registrar (adds 1 year). COSTS MONEY from the wallet. Needs the domain's auth code. ${DRY}`,
-    input: { name: exports_external.string(), authCode: exports_external.string(), nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(), dryRun: dryRun2 },
+    description: `Transfer a domain from another registrar (adds 1 year). COSTS MONEY from the wallet. Needs the domain's auth code. ${DRY2}`,
+    input: { name: exports_external.string(), authCode: exports_external.string(), nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(), dryRun: dryRun3 },
     run: (a, api2) => api2.api("POST", "/domains/transfer", { body: { name: a.name, authCode: a.authCode, period: 1, nameservers: a.nameservers }, query: { dryRun: a.dryRun ? "true" : undefined } })
   }),
   defineTool({
     name: "renew_domain",
     title: "Renew domain",
     kind: "write",
-    description: `Renew a domain for 1 year (plus WHOIS privacy when it is on). COSTS MONEY from the wallet. ${DRY}`,
-    input: { domainId, dryRun: dryRun2 },
+    description: `Renew a domain for 1 year (plus WHOIS privacy when it is on). COSTS MONEY from the wallet. ${DRY2}`,
+    input: { domainId, dryRun: dryRun3 },
     run: (a, api2) => api2.api("POST", `/domains/${a.domainId}/renew`, { body: { period: 1 }, query: { dryRun: a.dryRun ? "true" : undefined } })
   }),
   defineTool({
@@ -36151,7 +36167,7 @@ var message = exports_external.object({
   variables: exports_external.record(exports_external.string(), exports_external.string()).optional(),
   idempotencyKey: exports_external.string().max(128).optional()
 });
-var dryRun3 = exports_external.boolean().optional().describe("true = return the price (IDR) and the wallet balance after it; nothing is charged or changed");
+var dryRun4 = exports_external.boolean().optional().describe("true = return the price (IDR) and the wallet balance after it; nothing is charged or changed");
 var idem2 = exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real purchase. Generated when omitted; pass the same value when retrying so it is never charged twice");
 var MONEY = "COSTS MONEY from the wallet. dryRun=true returns the charge (IDR) and walletBalanceAfter without charging or changing anything.";
 var planCode = exports_external.string().min(1).max(50).describe("Plan code from list_email_plans");
@@ -36187,7 +36203,7 @@ var emailTools = [
     title: "Buy email plan",
     kind: "write",
     description: `Start an email plan for the project (a free plan activates without charge). Works for a project with no email yet: the real call also sets email up (result.setup). ${MONEY} The dry run's mode says purchase, activate_free or already_active.`,
-    input: { projectId, planCode, months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional().describe("Billing cycle, default 1"), dryRun: dryRun3, idempotencyKey: idem2 },
+    input: { projectId, planCode, months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional().describe("Billing cycle, default 1"), dryRun: dryRun4, idempotencyKey: idem2 },
     run: (a, api2) => api2.email("POST", "/plan", {
       project: a.projectId,
       body: { planCode: a.planCode, months: a.months },
@@ -36200,7 +36216,7 @@ var emailTools = [
     title: "Renew email plan",
     kind: "write",
     description: `Renew the project's ended or expiring email plan (409 PLAN_ACTIVE while one is still running and cannot be extended). Repeats the last plan and cycle unless planCode / months are given. ${MONEY}`,
-    input: { projectId, planCode: planCode.optional(), months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional(), dryRun: dryRun3, idempotencyKey: idem2 },
+    input: { projectId, planCode: planCode.optional(), months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional(), dryRun: dryRun4, idempotencyKey: idem2 },
     run: (a, api2) => api2.email("POST", "/plan/renew", {
       project: a.projectId,
       body: { planCode: a.planCode, months: a.months },
@@ -36213,7 +36229,7 @@ var emailTools = [
     title: "Change email plan",
     kind: "write",
     description: `Move the active email plan to another plan. An upgrade applies now and charges the prorated difference to the same end date; a downgrade is scheduled for the next cycle (no refund). ${MONEY}`,
-    input: { projectId, planCode, dryRun: dryRun3, idempotencyKey: idem2 },
+    input: { projectId, planCode, dryRun: dryRun4, idempotencyKey: idem2 },
     run: (a, api2) => api2.email("POST", "/plan/change", {
       project: a.projectId,
       body: { planCode: a.planCode },
@@ -36230,7 +36246,7 @@ var emailTools = [
       projectId,
       extraMailboxes: exports_external.number().int().min(0).max(50).describe("Total extra mailboxes wanted (0-50)"),
       extraStorageGb: exports_external.number().int().min(0).max(1000).describe("Total extra inbox storage in GB (0-1000)"),
-      dryRun: dryRun3,
+      dryRun: dryRun4,
       idempotencyKey: idem2
     },
     run: (a, api2) => api2.email("POST", "/plan/addons", {
@@ -36800,7 +36816,7 @@ var emailTools = [
 // src/tools/databases.ts
 var databaseId = exports_external.string().uuid().describe("Database id (from list_databases)");
 var environmentId = exports_external.string().uuid().describe("Environment id (from list_projects). Omit for the primary (production) branch.");
-var dryRun4 = exports_external.boolean().optional().describe("true = only check and show the result or price; nothing changes");
+var dryRun5 = exports_external.boolean().optional().describe("true = only check and show the result or price; nothing changes");
 var databaseTools = [
   defineTool({
     name: "list_database_plans",
@@ -36894,7 +36910,7 @@ var databaseTools = [
       minCu: exports_external.number().min(0.25).max(10).optional(),
       maxCu: exports_external.number().min(0.25).max(10).optional(),
       suspendTimeoutSeconds: exports_external.number().int().min(0).max(604800).optional().describe("0 = never suspend, or 60-604800"),
-      dryRun: dryRun4
+      dryRun: dryRun5
     },
     run: (a, api2) => api2.api("PATCH", `/databases/${a.databaseId}/settings`, {
       body: { minCu: a.minCu, maxCu: a.maxCu, suspendTimeoutSeconds: a.suspendTimeoutSeconds },
@@ -36906,7 +36922,7 @@ var databaseTools = [
     title: "Upgrade database plan / top up",
     kind: "write",
     description: "Buy a paid plan or top up credits. COSTS MONEY from the wallet: call with dryRun first, show price and wallet balance after, and get the user's explicit OK.",
-    input: { databaseId, plan: exports_external.string().describe("Plan code (e.g. STARTER) or id from list_database_plans"), dryRun: dryRun4, idempotencyKey: exports_external.string().max(128).optional() },
+    input: { databaseId, plan: exports_external.string().describe("Plan code (e.g. STARTER) or id from list_database_plans"), dryRun: dryRun5, idempotencyKey: exports_external.string().max(128).optional() },
     run: (a, api2) => api2.api("POST", `/databases/${a.databaseId}/upgrade`, { body: { plan: a.plan }, query: { dryRun: a.dryRun ? "true" : undefined }, idempotencyKey: a.idempotencyKey })
   }),
   defineTool({
@@ -37032,6 +37048,38 @@ var accountTools = [
     input: { limit: limit2, offset },
     run: (a, api2) => api2.api("GET", "/account/wallet/transactions", { query: { limit: a.limit, offset: a.offset } })
   }),
+  defineTool({
+    name: "create_deposit",
+    title: "Create deposit (top-up)",
+    kind: "write",
+    description: `Create a wallet top-up of amount IDR (whole number, 10000-50000000) and its payment link. Nothing is charged: give the user paymentUrl to pay (QRIS or bank virtual account, listed in paymentMethods; the link lasts 3 hours); never try to pay it yourself. Limits: one unpaid deposit at a time (409 DEPOSIT_PENDING: details.deposit is the unpaid one, send its paymentUrl instead), 10 minutes between deposits (429 DEPOSIT_COOLDOWN, details.nextAllowedAt), 10 a day (429 DEPOSIT_DAILY_LIMIT). dryRun=true creates nothing and says whether it would be accepted now. Then follow it with get_deposit. ${ACCOUNT_KEY}`,
+    input: {
+      amount: exports_external.number().int().min(1e4).max(50000000).describe("IDR, whole number"),
+      dryRun: exports_external.boolean().optional().describe("true = only check (methods, whether it would be accepted now); nothing is created"),
+      idempotencyKey: exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key. Generated when omitted; pass the same value when retrying so only one deposit is created")
+    },
+    run: (a, api2) => api2.api("POST", "/account/deposits", {
+      body: { amount: a.amount },
+      query: { dryRun: a.dryRun ? "true" : undefined },
+      idempotencyKey: purchaseKey(a.dryRun, a.idempotencyKey)
+    })
+  }),
+  defineTool({
+    name: "get_deposit",
+    title: "Get deposit",
+    kind: "read",
+    description: `One deposit: status pending (paymentUrl to pay), paid (paidAt; the wallet was credited) or expired (not paid in time). ${ACCOUNT_KEY}`,
+    input: { depositId: uid2("Deposit") },
+    run: (a, api2) => api2.api("GET", `/account/deposits/${a.depositId}`)
+  }),
+  defineTool({
+    name: "list_deposits",
+    title: "List deposits",
+    kind: "read",
+    description: `Deposits (wallet top-ups), newest first, with status and amount. ${ACCOUNT_KEY}`,
+    input: { limit: limit2, offset },
+    run: (a, api2) => api2.api("GET", "/account/deposits", { query: { limit: a.limit, offset: a.offset } })
+  }),
   defineTool({
     name: "list_invoices",
     title: "List invoices",
@@ -37164,7 +37212,7 @@ var accountTools = [
 var projectId2 = exports_external.string().uuid().optional().describe("Limit to one project (a project key is always limited to its own)");
 var keyId = exports_external.string().uuid().optional().describe("Limit to one AI key (id from list_ai_keys)");
 var model = exports_external.string().max(100).optional().describe("Limit to one model id");
-var dryRun5 = exports_external.boolean().optional().describe("true = only check and show the result; nothing is charged or changed");
+var dryRun6 = exports_external.boolean().optional().describe("true = only check and show the result; nothing is charged or changed");
 var ACCOUNT_KEY2 = "Needs a whole-account key (a key limited to one project gets 403 ACCOUNT_KEY_REQUIRED).";
 var imageProject = exports_external.string().uuid().optional().describe("Project the images belong to (required with a whole-account key; a project key uses its own)");
 var INLINE_MAX_BYTES = 1500000;
@@ -37249,7 +37297,7 @@ var aiTools = [
       n: exports_external.number().int().min(1).max(10).optional().describe("Images in this request (up to the model's maxN; default 1)"),
       images: exports_external.array(exports_external.string().url().startsWith("https://")).max(10).optional().describe("Reference images as https:// links (only models with refImages > 0)"),
       projectId: imageProject,
-      dryRun: dryRun5,
+      dryRun: dryRun6,
       wait: exports_external.number().int().min(0).max(55).optional().describe("Seconds to wait for the result (default 50; 0 = return the id at once)"),
       idempotencyKey: exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real request. Generated when omitted; pass the same value when retrying so it is never charged twice")
     },
@@ -37299,7 +37347,7 @@ var aiTools = [
     input: {
       packId: exports_external.string().min(1).max(64).optional(),
       amount: exports_external.number().min(1).max(1e9).optional().describe("IDR"),
-      dryRun: dryRun5,
+      dryRun: dryRun6,
       idempotencyKey: exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real top-up. Generated when omitted; pass the same value when retrying so it is never charged twice")
     },
     run: (a, api2) => {
@@ -37322,7 +37370,7 @@ var aiTools = [
       enabled: exports_external.boolean(),
       threshold: exports_external.number().min(1).optional().describe("Top up when the AI balance is below this (IDR)"),
       amount: exports_external.number().min(1).optional().describe("How much to top up each time (IDR)"),
-      dryRun: dryRun5
+      dryRun: dryRun6
     },
     run: (a, api2) => api2.api("PUT", "/ai/auto-topup", {
       body: { enabled: a.enabled, threshold: a.threshold, amount: a.amount },
@@ -37358,7 +37406,7 @@ var generalTools = [
 ];
 
 // src/server.ts
-var VERSION = "0.5.9";
+var VERSION = "0.5.11";
 var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed Postgres databases, VPS, domains, email and an AI gateway, billed from a prepaid wallet in Rupiah.
 - Start with list_projects to find projects and environment ids. Account tools (get_wallet, invoices, statements, notifications, get_project_activity, support tickets) cover the account; AI tools (list_ai_models, get_ai_overview, get_ai_usage, AI keys, top-ups, generate_ai_image) cover the AI gateway.
 - Anything that costs money (create/deploy/scale services, resize volumes, upgrade a database plan, create/renew/upgrade VPS, VPS backups, register/renew/transfer domains, email plans and inbox add-ons, AI top-ups and auto top-up, generating images): call it with dryRun=true first (or the price lookup when it has no dry run), tell the user the cost in IDR and the wallet balance after, and wait for an explicit yes before the real call. Never treat silence or an earlier general OK as a yes.

package/dist/stdio.js

@@ -35533,6 +35533,10 @@ var period = exports_external.enum(["monthly", "3month", "6month", "yearly"]);
 var pointId = exports_external.string().describe("Restore point id (from list_vps_restore_points)");
 var backupPath = exports_external.string().max(1024).describe("Absolute path inside the backup, e.g. /etc/nginx or /var/www/index.html");
 var migrationId = exports_external.string().describe("Migration id (from list_vps_migrations)");
+var dryRun2 = exports_external.boolean().optional().describe("true = return the price (IDR) and the wallet balance after it; nothing is charged or changed");
+var idempotencyKey = exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real call. Generated when omitted; pass the same value when retrying so it is never charged twice");
+var DRY = "dryRun=true returns the price and walletBalanceAfter without charging or changing anything.";
+var dryQuery = (d) => ({ dryRun: d ? "true" : undefined });
 var vpsTools = [
   defineTool({
     name: "list_vps_plans",
@@ -35562,7 +35566,7 @@ var vpsTools = [
     name: "create_vps",
     title: "Create VPS",
     kind: "write",
-    description: "Order a server. COSTS MONEY right away (the whole billing period is charged from the wallet; refunded if provisioning fails). Show the plan price from list_vps_plans and get the user's explicit OK first. Provisioning takes a few minutes: poll get_vps.",
+    description: `Order a server. COSTS MONEY right away (the whole billing period is charged from the wallet; refunded if provisioning fails). Call with dryRun=true first, show the price and the wallet after it, and get the user's explicit OK. ${DRY} autoRenew=false creates it with auto-renew off (renew it with renew_vps). Provisioning takes a few minutes: poll get_vps.`,
     input: {
       projectId: exports_external.string().uuid(),
       planId: exports_external.string(),
@@ -35570,9 +35574,12 @@ var vpsTools = [
       osType: exports_external.string().describe("From the plan's osTemplates, e.g. ubuntu"),
       osVersion: exports_external.string().describe("e.g. 24.04"),
       rootPassword: password,
-      billingPeriod: period.optional().describe("Default monthly")
+      billingPeriod: period.optional().describe("Default monthly"),
+      autoRenew: exports_external.boolean().optional().describe("false = no automatic renewal from the wallet (default true)"),
+      dryRun: dryRun2,
+      idempotencyKey
     },
-    run: (a, api2) => api2.api("POST", "/vps", { body: a })
+    run: ({ dryRun: dryRun3, idempotencyKey: idempotencyKey2, ...body }, api2) => api2.api("POST", "/vps", { body, query: dryQuery(dryRun3), idempotencyKey: purchaseKey(dryRun3, idempotencyKey2) })
   }),
   defineTool({
     name: "vps_power",
@@ -35626,17 +35633,17 @@ var vpsTools = [
     name: "renew_vps",
     title: "Renew VPS",
     kind: "write",
-    description: "Extend a server's paid period. COSTS MONEY: show the price from get_vps_renewal_options and get the user's OK.",
-    input: { vpsId, billingPeriod: period },
-    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/renew`, { body: { billingPeriod: a.billingPeriod } })
+    description: `Extend a server's paid period. COSTS MONEY: call with dryRun=true first, show the price and the wallet after it, and get the user's OK. ${DRY}`,
+    input: { vpsId, billingPeriod: period, dryRun: dryRun2, idempotencyKey },
+    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/renew`, { body: { billingPeriod: a.billingPeriod }, query: dryQuery(a.dryRun), idempotencyKey: purchaseKey(a.dryRun, a.idempotencyKey) })
   }),
   defineTool({
     name: "upgrade_vps",
     title: "Upgrade VPS plan",
     kind: "write",
-    description: "Move a server to a larger plan in the same family and region. COSTS MONEY (the difference for the days left) and restarts the server. planId must be one listed by get_vps_upgrade_options, which also gives the price in IDR; the server restarts during the upgrade. Servers with providerCode 2 only.",
-    input: { vpsId, planId: exports_external.string() },
-    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/upgrade`, { body: { planId: a.planId } })
+    description: `Move a server to a larger plan in the same family and region. COSTS MONEY (the difference for the days left) and restarts the server. planId must be one listed by get_vps_upgrade_options. Call with dryRun=true first and get the user's OK. ${DRY} Servers with providerCode 2 only.`,
+    input: { vpsId, planId: exports_external.string(), dryRun: dryRun2, idempotencyKey },
+    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/upgrade`, { body: { planId: a.planId }, query: dryQuery(a.dryRun), idempotencyKey: purchaseKey(a.dryRun, a.idempotencyKey) })
   }),
   defineTool({
     name: "get_vps_upgrade_options",
@@ -35663,11 +35670,20 @@ var vpsTools = [
     input: { vpsId, range: exports_external.enum(["1h", "6h", "24h", "7d", "30d"]).optional() },
     run: (a, api2) => api2.api("GET", `/vps/${a.vpsId}/metrics`, { query: { range: a.range } })
   }),
+  defineTool({
+    name: "set_vps_auto_renew",
+    title: "Set VPS auto-renew",
+    kind: "write",
+    idempotent: true,
+    description: "Turn auto-renew on or off (sets the value, safe to repeat). With it off, the server is only renewed by renew_vps and expires otherwise.",
+    input: { vpsId, autoRenew: exports_external.boolean() },
+    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/auto-renew`, { body: { autoRenew: a.autoRenew } })
+  }),
   defineTool({
     name: "toggle_vps_auto_renew",
     title: "Toggle VPS auto-renew",
     kind: "write",
-    description: "Flip auto-renew on or off; the response gives the new value.",
+    description: "Flip auto-renew to the other value; the response gives the new one. Prefer set_vps_auto_renew to reach a given state.",
     input: { vpsId },
     run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/auto-renew-toggle`)
   }),
@@ -35996,8 +36012,8 @@ var vpsTools = [
 // src/tools/domains.ts
 var domainId = exports_external.number().int().positive().describe("Domain id (number, from list_my_domains)");
 var hostId = exports_external.number().int().positive().describe("Child nameserver id (from list_child_nameservers)");
-var dryRun2 = exports_external.boolean().optional().describe("true = return the exact price (IDR, VAT included) and the wallet balance after it; nothing is charged or registered");
-var DRY = "dryRun=true returns the price and walletBalanceAfter without charging or changing anything.";
+var dryRun3 = exports_external.boolean().optional().describe("true = return the exact price (IDR, VAT included) and the wallet balance after it; nothing is charged or registered");
+var DRY2 = "dryRun=true returns the price and walletBalanceAfter without charging or changing anything.";
 var record3 = exports_external.object({
   name: exports_external.string().describe('"@" for the domain itself, or the part before the domain, e.g. "www" or "_dmarc.mail". A full name like "www.example.com" is accepted and stored as "www"'),
   type: exports_external.enum(["A", "AAAA", "MX", "MXE", "CNAME", "SPF", "TXT"]),
@@ -36073,12 +36089,12 @@ var domainTools = [
     name: "register_domain",
     title: "Register domain",
     kind: "write",
-    description: `Register a domain for 1 year. COSTS MONEY from the wallet. Check search_domain, and that the owner details are complete (check_registrant / update_registrant). ${DRY} The dry run includes WHOIS privacy when whoisProtection is true.`,
+    description: `Register a domain for 1 year. COSTS MONEY from the wallet. Check search_domain, and that the owner details are complete (check_registrant / update_registrant). ${DRY2} The dry run includes WHOIS privacy when whoisProtection is true.`,
     input: {
       name: exports_external.string().describe("Full domain, e.g. tokosaya.id"),
       nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(),
       whoisProtection: exports_external.boolean().optional(),
-      dryRun: dryRun2
+      dryRun: dryRun3
     },
     run: (a, api2) => api2.api("POST", "/domains/register", { body: { name: a.name, period: 1, nameservers: a.nameservers, whoisProtection: a.whoisProtection }, query: { dryRun: a.dryRun ? "true" : undefined } })
   }),
@@ -36086,16 +36102,16 @@ var domainTools = [
     name: "transfer_domain",
     title: "Transfer domain in",
     kind: "write",
-    description: `Transfer a domain from another registrar (adds 1 year). COSTS MONEY from the wallet. Needs the domain's auth code. ${DRY}`,
-    input: { name: exports_external.string(), authCode: exports_external.string(), nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(), dryRun: dryRun2 },
+    description: `Transfer a domain from another registrar (adds 1 year). COSTS MONEY from the wallet. Needs the domain's auth code. ${DRY2}`,
+    input: { name: exports_external.string(), authCode: exports_external.string(), nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(), dryRun: dryRun3 },
     run: (a, api2) => api2.api("POST", "/domains/transfer", { body: { name: a.name, authCode: a.authCode, period: 1, nameservers: a.nameservers }, query: { dryRun: a.dryRun ? "true" : undefined } })
   }),
   defineTool({
     name: "renew_domain",
     title: "Renew domain",
     kind: "write",
-    description: `Renew a domain for 1 year (plus WHOIS privacy when it is on). COSTS MONEY from the wallet. ${DRY}`,
-    input: { domainId, dryRun: dryRun2 },
+    description: `Renew a domain for 1 year (plus WHOIS privacy when it is on). COSTS MONEY from the wallet. ${DRY2}`,
+    input: { domainId, dryRun: dryRun3 },
     run: (a, api2) => api2.api("POST", `/domains/${a.domainId}/renew`, { body: { period: 1 }, query: { dryRun: a.dryRun ? "true" : undefined } })
   }),
   defineTool({
@@ -36258,7 +36274,7 @@ var message = exports_external.object({
   variables: exports_external.record(exports_external.string(), exports_external.string()).optional(),
   idempotencyKey: exports_external.string().max(128).optional()
 });
-var dryRun3 = exports_external.boolean().optional().describe("true = return the price (IDR) and the wallet balance after it; nothing is charged or changed");
+var dryRun4 = exports_external.boolean().optional().describe("true = return the price (IDR) and the wallet balance after it; nothing is charged or changed");
 var idem2 = exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real purchase. Generated when omitted; pass the same value when retrying so it is never charged twice");
 var MONEY = "COSTS MONEY from the wallet. dryRun=true returns the charge (IDR) and walletBalanceAfter without charging or changing anything.";
 var planCode = exports_external.string().min(1).max(50).describe("Plan code from list_email_plans");
@@ -36294,7 +36310,7 @@ var emailTools = [
     title: "Buy email plan",
     kind: "write",
     description: `Start an email plan for the project (a free plan activates without charge). Works for a project with no email yet: the real call also sets email up (result.setup). ${MONEY} The dry run's mode says purchase, activate_free or already_active.`,
-    input: { projectId, planCode, months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional().describe("Billing cycle, default 1"), dryRun: dryRun3, idempotencyKey: idem2 },
+    input: { projectId, planCode, months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional().describe("Billing cycle, default 1"), dryRun: dryRun4, idempotencyKey: idem2 },
     run: (a, api2) => api2.email("POST", "/plan", {
       project: a.projectId,
       body: { planCode: a.planCode, months: a.months },
@@ -36307,7 +36323,7 @@ var emailTools = [
     title: "Renew email plan",
     kind: "write",
     description: `Renew the project's ended or expiring email plan (409 PLAN_ACTIVE while one is still running and cannot be extended). Repeats the last plan and cycle unless planCode / months are given. ${MONEY}`,
-    input: { projectId, planCode: planCode.optional(), months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional(), dryRun: dryRun3, idempotencyKey: idem2 },
+    input: { projectId, planCode: planCode.optional(), months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional(), dryRun: dryRun4, idempotencyKey: idem2 },
     run: (a, api2) => api2.email("POST", "/plan/renew", {
       project: a.projectId,
       body: { planCode: a.planCode, months: a.months },
@@ -36320,7 +36336,7 @@ var emailTools = [
     title: "Change email plan",
     kind: "write",
     description: `Move the active email plan to another plan. An upgrade applies now and charges the prorated difference to the same end date; a downgrade is scheduled for the next cycle (no refund). ${MONEY}`,
-    input: { projectId, planCode, dryRun: dryRun3, idempotencyKey: idem2 },
+    input: { projectId, planCode, dryRun: dryRun4, idempotencyKey: idem2 },
     run: (a, api2) => api2.email("POST", "/plan/change", {
       project: a.projectId,
       body: { planCode: a.planCode },
@@ -36337,7 +36353,7 @@ var emailTools = [
       projectId,
       extraMailboxes: exports_external.number().int().min(0).max(50).describe("Total extra mailboxes wanted (0-50)"),
       extraStorageGb: exports_external.number().int().min(0).max(1000).describe("Total extra inbox storage in GB (0-1000)"),
-      dryRun: dryRun3,
+      dryRun: dryRun4,
       idempotencyKey: idem2
     },
     run: (a, api2) => api2.email("POST", "/plan/addons", {
@@ -36907,7 +36923,7 @@ var emailTools = [
 // src/tools/databases.ts
 var databaseId = exports_external.string().uuid().describe("Database id (from list_databases)");
 var environmentId = exports_external.string().uuid().describe("Environment id (from list_projects). Omit for the primary (production) branch.");
-var dryRun4 = exports_external.boolean().optional().describe("true = only check and show the result or price; nothing changes");
+var dryRun5 = exports_external.boolean().optional().describe("true = only check and show the result or price; nothing changes");
 var databaseTools = [
   defineTool({
     name: "list_database_plans",
@@ -37001,7 +37017,7 @@ var databaseTools = [
       minCu: exports_external.number().min(0.25).max(10).optional(),
       maxCu: exports_external.number().min(0.25).max(10).optional(),
       suspendTimeoutSeconds: exports_external.number().int().min(0).max(604800).optional().describe("0 = never suspend, or 60-604800"),
-      dryRun: dryRun4
+      dryRun: dryRun5
     },
     run: (a, api2) => api2.api("PATCH", `/databases/${a.databaseId}/settings`, {
       body: { minCu: a.minCu, maxCu: a.maxCu, suspendTimeoutSeconds: a.suspendTimeoutSeconds },
@@ -37013,7 +37029,7 @@ var databaseTools = [
     title: "Upgrade database plan / top up",
     kind: "write",
     description: "Buy a paid plan or top up credits. COSTS MONEY from the wallet: call with dryRun first, show price and wallet balance after, and get the user's explicit OK.",
-    input: { databaseId, plan: exports_external.string().describe("Plan code (e.g. STARTER) or id from list_database_plans"), dryRun: dryRun4, idempotencyKey: exports_external.string().max(128).optional() },
+    input: { databaseId, plan: exports_external.string().describe("Plan code (e.g. STARTER) or id from list_database_plans"), dryRun: dryRun5, idempotencyKey: exports_external.string().max(128).optional() },
     run: (a, api2) => api2.api("POST", `/databases/${a.databaseId}/upgrade`, { body: { plan: a.plan }, query: { dryRun: a.dryRun ? "true" : undefined }, idempotencyKey: a.idempotencyKey })
   }),
   defineTool({
@@ -37139,6 +37155,38 @@ var accountTools = [
     input: { limit: limit2, offset },
     run: (a, api2) => api2.api("GET", "/account/wallet/transactions", { query: { limit: a.limit, offset: a.offset } })
   }),
+  defineTool({
+    name: "create_deposit",
+    title: "Create deposit (top-up)",
+    kind: "write",
+    description: `Create a wallet top-up of amount IDR (whole number, 10000-50000000) and its payment link. Nothing is charged: give the user paymentUrl to pay (QRIS or bank virtual account, listed in paymentMethods; the link lasts 3 hours); never try to pay it yourself. Limits: one unpaid deposit at a time (409 DEPOSIT_PENDING: details.deposit is the unpaid one, send its paymentUrl instead), 10 minutes between deposits (429 DEPOSIT_COOLDOWN, details.nextAllowedAt), 10 a day (429 DEPOSIT_DAILY_LIMIT). dryRun=true creates nothing and says whether it would be accepted now. Then follow it with get_deposit. ${ACCOUNT_KEY}`,
+    input: {
+      amount: exports_external.number().int().min(1e4).max(50000000).describe("IDR, whole number"),
+      dryRun: exports_external.boolean().optional().describe("true = only check (methods, whether it would be accepted now); nothing is created"),
+      idempotencyKey: exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key. Generated when omitted; pass the same value when retrying so only one deposit is created")
+    },
+    run: (a, api2) => api2.api("POST", "/account/deposits", {
+      body: { amount: a.amount },
+      query: { dryRun: a.dryRun ? "true" : undefined },
+      idempotencyKey: purchaseKey(a.dryRun, a.idempotencyKey)
+    })
+  }),
+  defineTool({
+    name: "get_deposit",
+    title: "Get deposit",
+    kind: "read",
+    description: `One deposit: status pending (paymentUrl to pay), paid (paidAt; the wallet was credited) or expired (not paid in time). ${ACCOUNT_KEY}`,
+    input: { depositId: uid2("Deposit") },
+    run: (a, api2) => api2.api("GET", `/account/deposits/${a.depositId}`)
+  }),
+  defineTool({
+    name: "list_deposits",
+    title: "List deposits",
+    kind: "read",
+    description: `Deposits (wallet top-ups), newest first, with status and amount. ${ACCOUNT_KEY}`,
+    input: { limit: limit2, offset },
+    run: (a, api2) => api2.api("GET", "/account/deposits", { query: { limit: a.limit, offset: a.offset } })
+  }),
   defineTool({
     name: "list_invoices",
     title: "List invoices",
@@ -37271,7 +37319,7 @@ var accountTools = [
 var projectId2 = exports_external.string().uuid().optional().describe("Limit to one project (a project key is always limited to its own)");
 var keyId = exports_external.string().uuid().optional().describe("Limit to one AI key (id from list_ai_keys)");
 var model = exports_external.string().max(100).optional().describe("Limit to one model id");
-var dryRun5 = exports_external.boolean().optional().describe("true = only check and show the result; nothing is charged or changed");
+var dryRun6 = exports_external.boolean().optional().describe("true = only check and show the result; nothing is charged or changed");
 var ACCOUNT_KEY2 = "Needs a whole-account key (a key limited to one project gets 403 ACCOUNT_KEY_REQUIRED).";
 var imageProject = exports_external.string().uuid().optional().describe("Project the images belong to (required with a whole-account key; a project key uses its own)");
 var INLINE_MAX_BYTES = 1500000;
@@ -37356,7 +37404,7 @@ var aiTools = [
       n: exports_external.number().int().min(1).max(10).optional().describe("Images in this request (up to the model's maxN; default 1)"),
       images: exports_external.array(exports_external.string().url().startsWith("https://")).max(10).optional().describe("Reference images as https:// links (only models with refImages > 0)"),
       projectId: imageProject,
-      dryRun: dryRun5,
+      dryRun: dryRun6,
       wait: exports_external.number().int().min(0).max(55).optional().describe("Seconds to wait for the result (default 50; 0 = return the id at once)"),
       idempotencyKey: exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real request. Generated when omitted; pass the same value when retrying so it is never charged twice")
     },
@@ -37406,7 +37454,7 @@ var aiTools = [
     input: {
       packId: exports_external.string().min(1).max(64).optional(),
       amount: exports_external.number().min(1).max(1e9).optional().describe("IDR"),
-      dryRun: dryRun5,
+      dryRun: dryRun6,
       idempotencyKey: exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real top-up. Generated when omitted; pass the same value when retrying so it is never charged twice")
     },
     run: (a, api2) => {
@@ -37429,7 +37477,7 @@ var aiTools = [
       enabled: exports_external.boolean(),
       threshold: exports_external.number().min(1).optional().describe("Top up when the AI balance is below this (IDR)"),
       amount: exports_external.number().min(1).optional().describe("How much to top up each time (IDR)"),
-      dryRun: dryRun5
+      dryRun: dryRun6
     },
     run: (a, api2) => api2.api("PUT", "/ai/auto-topup", {
       body: { enabled: a.enabled, threshold: a.threshold, amount: a.amount },
@@ -37465,7 +37513,7 @@ var generalTools = [
 ];
 
 // src/server.ts
-var VERSION = "0.5.9";
+var VERSION = "0.5.11";
 var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed Postgres databases, VPS, domains, email and an AI gateway, billed from a prepaid wallet in Rupiah.
 - Start with list_projects to find projects and environment ids. Account tools (get_wallet, invoices, statements, notifications, get_project_activity, support tickets) cover the account; AI tools (list_ai_models, get_ai_overview, get_ai_usage, AI keys, top-ups, generate_ai_image) cover the AI gateway.
 - Anything that costs money (create/deploy/scale services, resize volumes, upgrade a database plan, create/renew/upgrade VPS, VPS backups, register/renew/transfer domains, email plans and inbox add-ons, AI top-ups and auto top-up, generating images): call it with dryRun=true first (or the price lookup when it has no dry run), tell the user the cost in IDR and the wallet balance after, and wait for an explicit yes before the real call. Never treat silence or an earlier general OK as a yes.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "helipod-mcp",
   "mcpName": "io.helipod/helipod",
-  "version": "0.5.9",
+  "version": "0.5.11",
   "description": "MCP server for Helipod: containers, databases, VPS, domains and email from Claude Code, Codex, Cursor and other AI tools.",
   "type": "module",
   "bin": {

package/skills/helipod/SKILL.md

@@ -5,7 +5,7 @@ description: Use when the user mentions Helipod (helipod.io) or wants to work wi
 
 # Helipod
 
-Helipod is a cloud platform in Indonesia: containers (deploy apps from Git, images or Dockerfiles), managed Postgres databases, VPS, domain registration and DNS, email sending, and an AI gateway. Everything is billed from a prepaid wallet in Rupiah (IDR).
+Helipod is a cloud platform in Indonesia: containers (deploy apps from Git, images or Dockerfiles), managed Postgres databases, VPS, domain registration and DNS, email sending, and an AI gateway. Everything is billed from a prepaid wallet in Rupiah (IDR). When the wallet is too low, `create_deposit` makes a top-up payment link: give the user its `paymentUrl` to pay (QRIS or bank virtual account) and check it with `get_deposit`; never pay it yourself.
 
 ## Access
 
@@ -19,7 +19,7 @@ Helipod is a cloud platform in Indonesia: containers (deploy apps from Git, imag
 
 ## Rules (always)
 
-1. **Money**: before anything that costs money (create/deploy/scale a service, create/renew/upgrade a VPS, register/renew/transfer a domain, deploy a template), get the price first (`dryRun: true` on container calls, `list_vps_plans` / `get_vps_renewal_options`, `domain_prices`), tell the user the amount in IDR, and wait for a clear yes.
+1. **Money**: before anything that costs money (create/deploy/scale a service, create/renew/upgrade a VPS, register/renew/transfer a domain, deploy a template), get the price first (`dryRun: true` on container, VPS and domain calls; `domain_prices` and `list_vps_plans` to compare), tell the user the amount in IDR, and wait for a clear yes.
 2. **Destructive**: before deleting a service/volume, terminating/reinstalling a VPS, rolling back a snapshot or replacing DNS records, say exactly what will be lost and wait for a clear yes.
 3. **Background work**: deploys and VPS actions are asynchronous. Poll (`get_deployment`, `get_vps`) every few seconds until they settle; on a failed deploy read `get_deployment_logs` and explain the cause.
 4. **Secrets**: never print passwords, API keys or secret variable values unless the user asks. Store app secrets as secret variables, never in code.

package/skills/helipod-vps/SKILL.md

@@ -11,9 +11,9 @@ Follow the `helipod` skill rules. A VPS is prepaid per period: creating one char
 
 1. `list_vps_plans` → present 2 or 3 fitting plans with CPU, RAM, disk and `effectiveMonthly` (IDR). Note `osTemplates`.
 2. `list_projects` → the project it belongs to (required).
-3. Confirm with the user: plan, OS, billing period (`monthly`, `3month`, `6month`, `yearly`) and the total price.
+3. `create_vps` with `dryRun: true` → the exact `price` and `walletBalanceAfter` (nothing is charged). Confirm with the user: plan, OS, billing period (`monthly`, `3month`, `6month`, `yearly`) and that price. Pass `autoRenew: false` if they want to renew by hand.
 4. Generate a strong password (12 to 30 chars, upper, lower, digit, one of `!@#$%^*`) unless the user gives one; do not print it back unless asked.
-5. `create_vps` → poll `get_vps` every 10 s until `running` (a few minutes) or `error` (`lastJobError` says why; a failed create is refunded).
+5. `create_vps` again without `dryRun`, with an `idempotencyKey` (reuse it if you retry) → poll `get_vps` every 10 s until `running` (a few minutes) or `error` (`lastJobError` says why; a failed create is refunded).
 6. Login: `get_vps_credentials` (Linux: `ssh root@<ip>`; Windows: RDP as Administrator, port 3389).
 
 ## Manage
@@ -22,7 +22,7 @@ Follow the `helipod` skill rules. A VPS is prepaid per period: creating one char
 - Firewall: `list_firewall_rules`, `add_firewall_rules` (e.g. `{ "Protocol": "TCP", "Port": "443", "CidrBlock": "0.0.0.0/0", "Action": "ACCEPT" }`), `remove_firewall_rules` by id. Never remove the SSH rule (port 22) without asking.
 - Snapshots: `create_snapshot` before risky changes; `apply_snapshot` rolls the disk back (data after it is lost: confirm).
 - Reinstall: `reinstall_vps` wipes the disk: confirm explicitly.
-- Billing: `get_vps_renewal_options` → `renew_vps`; `upgrade_vps` to a larger plan (charges the difference, restarts); `toggle_vps_auto_renew`.
+- Billing: `renew_vps` / `upgrade_vps` with `dryRun: true` first (price and wallet after), wait for the user's yes, then the real call with an `idempotencyKey`. `get_vps_renewal_options` lists every period; `upgrade_vps` charges the difference and restarts. Auto-renew: `set_vps_auto_renew` (on or off; `toggle_vps_auto_renew` flips it).
 - Terminate: `terminate_vps` is permanent, no refund: confirm explicitly.
 
 ## Migrate a server to Helipod (free)