hostinger-api-mcp 1.57.2 → 1.57.4

package/CHANGELOG.md

@@ -4,6 +4,36 @@ Generated at release time from the diff between the previous and current
 build. Tool changes are listed individually; everything else is summarised
 by area.
 
+## v1.57.4 — 2026-09-09
+
+### Tools
+
+- Changed the description and input schema of `ecommerce_uploadAndAttachAProductImageV1`
+
+### Also in this release
+
+- Documentation: `README.md`
+- Request handling and authentication: `src/core/runtime.js`, `src/core/runtime.ts`
+- Build and packaging: `types.d.ts`
+
+## v1.57.3 — 2026-09-09
+
+### Tools
+
+- Added `horizons_cloneWebsiteV1` — Clone website
+- Added `horizons_getWebsiteListV1` — Get website list
+- Added `horizons_editWebsiteV1` — Edit website
+- Added `horizons_publishWebsiteV1` — Publish website
+- Changed the description of `horizons_createWebsiteV1`
+- Changed the description of `horizons_getWebsiteV1`
+
+### Also in this release
+
+- Documentation: `README.md`
+- Dependencies: `package-lock.json`
+- Request handling and authentication: `src/core/runtime.js`, `src/core/runtime.ts`
+- Build and packaging: `types.d.ts`
+
 ## v1.57.2 — 2026-09-07
 
 ### Also in this release

package/README.md

@@ -69,13 +69,13 @@ pnpm update -g @hostinger/mcp
 
 This package installs the following MCP server commands:
 
-- `hostinger-api-mcp` — unified server with every tool (382 total)
+- `hostinger-api-mcp` — unified server with every tool (386 total)
 - `hostinger-agency-hosting-mcp` — 38 tools for agency-hosting
 - `hostinger-billing-mcp` — 9 tools for billing
 - `hostinger-dns-mcp` — 8 tools for dns
 - `hostinger-domains-mcp` — 40 tools for domains
 - `hostinger-ecommerce-mcp` — 29 tools for ecommerce
-- `hostinger-horizons-mcp` — 2 tools for horizons
+- `hostinger-horizons-mcp` — 6 tools for horizons
 - `hostinger-hosting-mcp` — 64 tools for hosting
 - `hostinger-mail-mcp` — 38 tools for mail
 - `hostinger-reach-mcp` — 52 tools for reach
@@ -1422,8 +1422,10 @@ Create a published physical product with a single variant priced in the store cu
 #### ecommerce_uploadAndAttachAProductImageV1
 
 Fetch a raster image (JPEG, PNG, GIF or WebP, max 15MB) from a URL and attach it to a product in a
-single call. The image is virus-scanned and validated by content, then stored on the CDN. Set
-is_thumbnail to make it the product's primary image.
+single call. Image downloads require HTTPS on port 443 without embedded credentials. At most one redirect
+is allowed, and its destination must meet the same requirements. Private or reserved network
+destinations, unsupported URLs and longer redirect chains are rejected. The image is virus-scanned
+and validated by content, then stored on the CDN. Set is_thumbnail to make it the product's primary image.
 
 - **Method**: `POST`
 - **Path**: `/api/ecommerce/v1/stores/{store_id}/products/{product_id}/images`
@@ -1528,6 +1530,31 @@ store currency. Returns the created variant.
 
 ### `hostinger-horizons-mcp`
 
+#### horizons_cloneWebsiteV1
+
+Clone a Hostinger Horizons website into a new website.\n
+Use this tool when the user wants a copy of an existing website, for example to try out
+changes without touching the original.\n
+This tool returns the ID and URL of the newly created copy.
+The original website is left untouched.\n
+To edit the copy, use the `Edit website` tool with the returned website ID, or the user can
+open the provided website URL in Hostinger Horizons interface.
+
+- **Method**: `POST`
+- **Path**: `/api/horizons/v1/websites/{websiteId}/clone`
+
+#### horizons_getWebsiteListV1
+
+List the Hostinger Horizons websites the user owns.\n
+Use this tool when the user asks which websites they have, or when you need a website ID
+before editing, publishing or cloning a website.\n
+Each website is returned with its ID, status, domain and the URL to open it
+in Hostinger Horizons interface.\n
+The complete list of websites is returned in a single response - it is not paginated.
+
+- **Method**: `GET`
+- **Path**: `/api/horizons/v1/websites`
+
 #### horizons_createWebsiteV1
 
 Create new Hostinger Horizons website from the given message.\n
@@ -1538,8 +1565,8 @@ The generation happens asynchronously.\n
 After invoking this tool, your chat reply must be EXACTLY 1 sentence summarizing
 that Hostinger Horizons is now creating their website and it will be ready in a few minutes
 and you should provide the website URL to the user immediately
-Do not write code.\n\nTo edit afterwards, users must go to Hostinger Horizons interface
-in the provided website URL.
+Do not write code.\n\nTo edit afterwards, use the `Edit website` tool with the returned
+website ID, or the user can go to Hostinger Horizons interface in the provided website URL.
 If the tool call fails with an error, you should provide a clear explanation of the error
 and do not generate code yourself in the chat.
 \n
@@ -1569,11 +1596,41 @@ MAPS:\n
 - **Method**: `POST`
 - **Path**: `/api/horizons/v1/websites`
 
+#### horizons_editWebsiteV1
+
+Edit an existing Hostinger Horizons website with a follow-up message.\n
+Use this tool when the user wants to change, extend or fix a website that already exists.\n
+This tool queues the requested changes and returns the website URL and ID.
+The changes are applied asynchronously.\n
+After invoking this tool, your chat reply must be EXACTLY 1 sentence summarizing
+that Hostinger Horizons is now applying the requested changes and they will be ready
+in a few minutes, and you should provide the website URL to the user immediately.
+Do not write code.\n
+If the tool call fails with an error, you should provide a clear explanation of the error
+and do not generate code yourself in the chat.
+
+- **Method**: `POST`
+- **Path**: `/api/horizons/v1/websites/{websiteId}/messages`
+
+#### horizons_publishWebsiteV1
+
+Publish a Hostinger Horizons website so its latest changes go live.\n
+Use this tool when the user asks to publish, deploy or make their website live.\n
+This tool starts the publish process and returns the URL the website will be live on.
+Publishing happens asynchronously and takes a few minutes.\n
+After invoking this tool, your chat reply must be EXACTLY 1 sentence summarizing
+that the website is being published and you should provide the published URL to the user immediately.
+
+- **Method**: `POST`
+- **Path**: `/api/horizons/v1/websites/{websiteId}/publish`
+
 #### horizons_getWebsiteV1
 
-Get a link for the user to edit their website in Hostinger Horizons interface.\n
-Use this tool when user wants to modify, edit or add new features to an existing website.\n
-Websites can only be edited in Hostinger Horizons interface in the provided website URL.
+Get the link for the user to open their website in Hostinger Horizons interface.\n
+Use this tool when the user wants the link to an existing website, or when you need its
+website URL before or after editing it.\n
+Websites can be edited with the `Edit website` tool, or by the user in Hostinger Horizons
+interface in the provided website URL.
 
 - **Method**: `GET`
 - **Path**: `/api/horizons/v1/websites/{websiteId}`

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "hostinger-api-mcp",
-  "version": "1.57.2",
+  "version": "1.57.4",
   "description": "Hostinger API — manage domains, DNS, hosting, VPS, billing and more from Gemini CLI.",
   "mcpServers": {
     "hostinger": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hostinger-api-mcp",
-  "version": "1.57.2",
+  "version": "1.57.4",
   "mcpName": "io.github.hostinger/hostinger-api-mcp",
   "description": "MCP server for Hostinger API",
   "repository": {

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/hostinger/api-mcp-server",
     "source": "github"
   },
-  "version": "1.57.2",
+  "version": "1.57.4",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@hostinger/mcp",
-      "version": "1.57.2",
+      "version": "1.57.4",
       "transport": {
         "type": "stdio"
       },

package/src/core/runtime.js

@@ -29,7 +29,7 @@ const SECURITY_SCHEMES = {
 
 /**
  * MCP Server for Hostinger API
- * Generated from OpenAPI spec version 1.49.2
+ * Generated from OpenAPI spec version 1.49.4
  */
 class MCPServer {
   constructor({ name, version, tools }) {

package/src/core/runtime.ts

@@ -52,7 +52,7 @@ const SECURITY_SCHEMES: Record<string, SecurityScheme> = {
 
 /**
  * MCP Server for Hostinger API
- * Generated from OpenAPI spec version 1.49.2
+ * Generated from OpenAPI spec version 1.49.4
  */
 class MCPServer {
   private readonly name: string;

package/src/core/tools/all.js

@@ -4727,7 +4727,7 @@ export default [
       "readOnlyHint": false,
       "destructiveHint": false
     },
-    "description": "Fetch a raster image (JPEG, PNG, GIF or WebP, max 15MB) from a URL and attach it to a product in a\nsingle call. The image is virus-scanned and validated by content, then stored on the CDN. Set\nis_thumbnail to make it the product's primary image.",
+    "description": "Fetch a raster image (JPEG, PNG, GIF or WebP, max 15MB) from a URL and attach it to a product in a\nsingle call. Image downloads require HTTPS on port 443 without embedded credentials. At most one redirect\nis allowed, and its destination must meet the same requirements. Private or reserved network\ndestinations, unsupported URLs and longer redirect chains are rejected. The image is virus-scanned\nand validated by content, then stored on the CDN. Set is_thumbnail to make it the product's primary image.",
     "method": "POST",
     "path": "/api/ecommerce/v1/stores/{store_id}/products/{product_id}/images",
     "inputSchema": {
@@ -4743,7 +4743,7 @@ export default [
         },
         "image_url": {
           "type": "string",
-          "description": "Publicly reachable URL of the raster image (JPEG, PNG, GIF or WebP), maximum 15MB. The image is\nfetched, virus-scanned and validated by content, then stored on the CDN. SVG is not accepted.\nProvide either this or object_name."
+          "description": "Publicly reachable URL of a raster image (JPEG, PNG, GIF or WebP), maximum 15MB. Fetching\nthe image requires HTTPS on port 443 without embedded credentials. At most one redirect\nis allowed; its destination must meet the same URL requirements. Private or reserved\nnetwork destinations, unsupported URLs and longer redirect chains are rejected. The image\nis fetched, virus-scanned and validated by content, then stored on the CDN. SVG is not\naccepted. Provide either this or object_name."
         },
         "object_name": {
           "type": "string",
@@ -5342,6 +5342,59 @@ export default [
     ],
     "group": "ecommerce"
   },
+  {
+    "name": "horizons_cloneWebsiteV1",
+    "title": "Clone website",
+    "annotations": {
+      "title": "Clone website",
+      "readOnlyHint": false,
+      "destructiveHint": false
+    },
+    "description": "Clone a Hostinger Horizons website into a new website.\\n\nUse this tool when the user wants a copy of an existing website, for example to try out\nchanges without touching the original.\\n\nThis tool returns the ID and URL of the newly created copy.\nThe original website is left untouched.\\n\nTo edit the copy, use the `Edit website` tool with the returned website ID, or the user can\nopen the provided website URL in Hostinger Horizons interface.",
+    "method": "POST",
+    "path": "/api/horizons/v1/websites/{websiteId}/clone",
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "websiteId": {
+          "type": "string",
+          "description": "The website ID"
+        }
+      },
+      "required": [
+        "websiteId"
+      ]
+    },
+    "security": [
+      {
+        "apiToken": []
+      }
+    ],
+    "group": "horizons"
+  },
+  {
+    "name": "horizons_getWebsiteListV1",
+    "title": "Get website list",
+    "annotations": {
+      "title": "Get website list",
+      "readOnlyHint": true,
+      "destructiveHint": false
+    },
+    "description": "List the Hostinger Horizons websites the user owns.\\n\nUse this tool when the user asks which websites they have, or when you need a website ID\nbefore editing, publishing or cloning a website.\\n\nEach website is returned with its ID, status, domain and the URL to open it\nin Hostinger Horizons interface.\\n\nThe complete list of websites is returned in a single response - it is not paginated.",
+    "method": "GET",
+    "path": "/api/horizons/v1/websites",
+    "inputSchema": {
+      "type": "object",
+      "properties": {},
+      "required": []
+    },
+    "security": [
+      {
+        "apiToken": []
+      }
+    ],
+    "group": "horizons"
+  },
   {
     "name": "horizons_createWebsiteV1",
     "title": "Create website",
@@ -5350,7 +5403,7 @@ export default [
       "readOnlyHint": false,
       "destructiveHint": false
     },
-    "description": "Create new Hostinger Horizons website from the given message.\\n\nUse this tool when user asks you to create a website, landing page, blog\nor any other type of application.\\n\nThis tool initiates the website creation process and returns a website URL and ID.\nThe generation happens asynchronously.\\n\nAfter invoking this tool, your chat reply must be EXACTLY 1 sentence summarizing\nthat Hostinger Horizons is now creating their website and it will be ready in a few minutes\nand you should provide the website URL to the user immediately\nDo not write code.\\n\\nTo edit afterwards, users must go to Hostinger Horizons interface\nin the provided website URL.\nIf the tool call fails with an error, you should provide a clear explanation of the error\nand do not generate code yourself in the chat.\n\\n\nTECHNOLOGY STACK CONSTRAINTS (STRICTLY ENFORCED):\\n\nThe environment is limited to the following technologies.\nYou MUST NOT use, suggest, or implement any technology outside this list:\\n\n\\n\n- Language: JavaScript ONLY.\n- Languages like TypeScript, Rust, Python, Java, PHP, etc., are STRICTLY PROHIBITED.\\n\n- Framework: React.\\n\n- Navigation: React Router.\\n\n- Styling: TailwindCSS.\\n\n- Components: shadcn/ui (built with @radix-ui primitives).\\n\n- Icons: Lucide React.\\n\n- Animations: Framer Motion.\\n\n\\n\nBACKEND & DATA STORAGE:\\n\n- Horizons integrated backend is the EXCLUSIVE solution for persistent data storage,\nauthentication, and database needs.\\n\n- Local databases (SQLite, MySQL, etc.) are STRICTLY PROHIBITED.\\n\n- Third-party services (Firebase, AWS Amplify) are allowed ONLY if explicitly requested by the user.\\n\n\\n\nMAPS:\\n\n- OpenStreetMap is the default provider.\\n\n- Alternative providers (Google Maps, Mapbox) are allowed ONLY if explicitly requested by the user.\\n",
+    "description": "Create new Hostinger Horizons website from the given message.\\n\nUse this tool when user asks you to create a website, landing page, blog\nor any other type of application.\\n\nThis tool initiates the website creation process and returns a website URL and ID.\nThe generation happens asynchronously.\\n\nAfter invoking this tool, your chat reply must be EXACTLY 1 sentence summarizing\nthat Hostinger Horizons is now creating their website and it will be ready in a few minutes\nand you should provide the website URL to the user immediately\nDo not write code.\\n\\nTo edit afterwards, use the `Edit website` tool with the returned\nwebsite ID, or the user can go to Hostinger Horizons interface in the provided website URL.\nIf the tool call fails with an error, you should provide a clear explanation of the error\nand do not generate code yourself in the chat.\n\\n\nTECHNOLOGY STACK CONSTRAINTS (STRICTLY ENFORCED):\\n\nThe environment is limited to the following technologies.\nYou MUST NOT use, suggest, or implement any technology outside this list:\\n\n\\n\n- Language: JavaScript ONLY.\n- Languages like TypeScript, Rust, Python, Java, PHP, etc., are STRICTLY PROHIBITED.\\n\n- Framework: React.\\n\n- Navigation: React Router.\\n\n- Styling: TailwindCSS.\\n\n- Components: shadcn/ui (built with @radix-ui primitives).\\n\n- Icons: Lucide React.\\n\n- Animations: Framer Motion.\\n\n\\n\nBACKEND & DATA STORAGE:\\n\n- Horizons integrated backend is the EXCLUSIVE solution for persistent data storage,\nauthentication, and database needs.\\n\n- Local databases (SQLite, MySQL, etc.) are STRICTLY PROHIBITED.\\n\n- Third-party services (Firebase, AWS Amplify) are allowed ONLY if explicitly requested by the user.\\n\n\\n\nMAPS:\\n\n- OpenStreetMap is the default provider.\\n\n- Alternative providers (Google Maps, Mapbox) are allowed ONLY if explicitly requested by the user.\\n",
     "method": "POST",
     "path": "/api/horizons/v1/websites",
     "inputSchema": {
@@ -5393,6 +5446,92 @@ export default [
     ],
     "group": "horizons"
   },
+  {
+    "name": "horizons_editWebsiteV1",
+    "title": "Edit website",
+    "annotations": {
+      "title": "Edit website",
+      "readOnlyHint": false,
+      "destructiveHint": false
+    },
+    "description": "Edit an existing Hostinger Horizons website with a follow-up message.\\n\nUse this tool when the user wants to change, extend or fix a website that already exists.\\n\nThis tool queues the requested changes and returns the website URL and ID.\nThe changes are applied asynchronously.\\n\nAfter invoking this tool, your chat reply must be EXACTLY 1 sentence summarizing\nthat Hostinger Horizons is now applying the requested changes and they will be ready\nin a few minutes, and you should provide the website URL to the user immediately.\nDo not write code.\\n\nIf the tool call fails with an error, you should provide a clear explanation of the error\nand do not generate code yourself in the chat.",
+    "method": "POST",
+    "path": "/api/horizons/v1/websites/{websiteId}/messages",
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "websiteId": {
+          "type": "string",
+          "description": "The website ID"
+        },
+        "message": {
+          "type": "array",
+          "description": "message parameter",
+          "items": {
+            "type": "object",
+            "description": "message parameter",
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "type parameter",
+                "enum": [
+                  "text"
+                ]
+              },
+              "text": {
+                "type": "string",
+                "description": "Detailed description of the changes to apply to the website.\nInclude which sections, features, content or design should change and how.\nThe specification should be detailed and comprehensive, covering all requested changes."
+              }
+            },
+            "required": [
+              "type",
+              "text"
+            ]
+          }
+        }
+      },
+      "required": [
+        "websiteId",
+        "message"
+      ]
+    },
+    "security": [
+      {
+        "apiToken": []
+      }
+    ],
+    "group": "horizons"
+  },
+  {
+    "name": "horizons_publishWebsiteV1",
+    "title": "Publish website",
+    "annotations": {
+      "title": "Publish website",
+      "readOnlyHint": false,
+      "destructiveHint": false
+    },
+    "description": "Publish a Hostinger Horizons website so its latest changes go live.\\n\nUse this tool when the user asks to publish, deploy or make their website live.\\n\nThis tool starts the publish process and returns the URL the website will be live on.\nPublishing happens asynchronously and takes a few minutes.\\n\nAfter invoking this tool, your chat reply must be EXACTLY 1 sentence summarizing\nthat the website is being published and you should provide the published URL to the user immediately.",
+    "method": "POST",
+    "path": "/api/horizons/v1/websites/{websiteId}/publish",
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "websiteId": {
+          "type": "string",
+          "description": "The website ID"
+        }
+      },
+      "required": [
+        "websiteId"
+      ]
+    },
+    "security": [
+      {
+        "apiToken": []
+      }
+    ],
+    "group": "horizons"
+  },
   {
     "name": "horizons_getWebsiteV1",
     "title": "Get website",
@@ -5401,7 +5540,7 @@ export default [
       "readOnlyHint": true,
       "destructiveHint": false
     },
-    "description": "Get a link for the user to edit their website in Hostinger Horizons interface.\\n\nUse this tool when user wants to modify, edit or add new features to an existing website.\\n\nWebsites can only be edited in Hostinger Horizons interface in the provided website URL.",
+    "description": "Get the link for the user to open their website in Hostinger Horizons interface.\\n\nUse this tool when the user wants the link to an existing website, or when you need its\nwebsite URL before or after editing it.\\n\nWebsites can be edited with the `Edit website` tool, or by the user in Hostinger Horizons\ninterface in the provided website URL.",
     "method": "GET",
     "path": "/api/horizons/v1/websites/{websiteId}",
     "inputSchema": {

package/src/core/tools/all.ts

@@ -4741,7 +4741,7 @@ const tools: OpenApiTool[] = [
       "readOnlyHint": false,
       "destructiveHint": false
     },
-    "description": "Fetch a raster image (JPEG, PNG, GIF or WebP, max 15MB) from a URL and attach it to a product in a\nsingle call. The image is virus-scanned and validated by content, then stored on the CDN. Set\nis_thumbnail to make it the product's primary image.",
+    "description": "Fetch a raster image (JPEG, PNG, GIF or WebP, max 15MB) from a URL and attach it to a product in a\nsingle call. Image downloads require HTTPS on port 443 without embedded credentials. At most one redirect\nis allowed, and its destination must meet the same requirements. Private or reserved network\ndestinations, unsupported URLs and longer redirect chains are rejected. The image is virus-scanned\nand validated by content, then stored on the CDN. Set is_thumbnail to make it the product's primary image.",
     "method": "POST",
     "path": "/api/ecommerce/v1/stores/{store_id}/products/{product_id}/images",
     "inputSchema": {
@@ -4757,7 +4757,7 @@ const tools: OpenApiTool[] = [
         },
         "image_url": {
           "type": "string",
-          "description": "Publicly reachable URL of the raster image (JPEG, PNG, GIF or WebP), maximum 15MB. The image is\nfetched, virus-scanned and validated by content, then stored on the CDN. SVG is not accepted.\nProvide either this or object_name."
+          "description": "Publicly reachable URL of a raster image (JPEG, PNG, GIF or WebP), maximum 15MB. Fetching\nthe image requires HTTPS on port 443 without embedded credentials. At most one redirect\nis allowed; its destination must meet the same URL requirements. Private or reserved\nnetwork destinations, unsupported URLs and longer redirect chains are rejected. The image\nis fetched, virus-scanned and validated by content, then stored on the CDN. SVG is not\naccepted. Provide either this or object_name."
         },
         "object_name": {
           "type": "string",
@@ -5356,6 +5356,59 @@ const tools: OpenApiTool[] = [
     ],
     "group": "ecommerce"
   },
+  {
+    "name": "horizons_cloneWebsiteV1",
+    "title": "Clone website",
+    "annotations": {
+      "title": "Clone website",
+      "readOnlyHint": false,
+      "destructiveHint": false
+    },
+    "description": "Clone a Hostinger Horizons website into a new website.\\n\nUse this tool when the user wants a copy of an existing website, for example to try out\nchanges without touching the original.\\n\nThis tool returns the ID and URL of the newly created copy.\nThe original website is left untouched.\\n\nTo edit the copy, use the `Edit website` tool with the returned website ID, or the user can\nopen the provided website URL in Hostinger Horizons interface.",
+    "method": "POST",
+    "path": "/api/horizons/v1/websites/{websiteId}/clone",
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "websiteId": {
+          "type": "string",
+          "description": "The website ID"
+        }
+      },
+      "required": [
+        "websiteId"
+      ]
+    },
+    "security": [
+      {
+        "apiToken": []
+      }
+    ],
+    "group": "horizons"
+  },
+  {
+    "name": "horizons_getWebsiteListV1",
+    "title": "Get website list",
+    "annotations": {
+      "title": "Get website list",
+      "readOnlyHint": true,
+      "destructiveHint": false
+    },
+    "description": "List the Hostinger Horizons websites the user owns.\\n\nUse this tool when the user asks which websites they have, or when you need a website ID\nbefore editing, publishing or cloning a website.\\n\nEach website is returned with its ID, status, domain and the URL to open it\nin Hostinger Horizons interface.\\n\nThe complete list of websites is returned in a single response - it is not paginated.",
+    "method": "GET",
+    "path": "/api/horizons/v1/websites",
+    "inputSchema": {
+      "type": "object",
+      "properties": {},
+      "required": []
+    },
+    "security": [
+      {
+        "apiToken": []
+      }
+    ],
+    "group": "horizons"
+  },
   {
     "name": "horizons_createWebsiteV1",
     "title": "Create website",
@@ -5364,7 +5417,7 @@ const tools: OpenApiTool[] = [
       "readOnlyHint": false,
       "destructiveHint": false
     },
-    "description": "Create new Hostinger Horizons website from the given message.\\n\nUse this tool when user asks you to create a website, landing page, blog\nor any other type of application.\\n\nThis tool initiates the website creation process and returns a website URL and ID.\nThe generation happens asynchronously.\\n\nAfter invoking this tool, your chat reply must be EXACTLY 1 sentence summarizing\nthat Hostinger Horizons is now creating their website and it will be ready in a few minutes\nand you should provide the website URL to the user immediately\nDo not write code.\\n\\nTo edit afterwards, users must go to Hostinger Horizons interface\nin the provided website URL.\nIf the tool call fails with an error, you should provide a clear explanation of the error\nand do not generate code yourself in the chat.\n\\n\nTECHNOLOGY STACK CONSTRAINTS (STRICTLY ENFORCED):\\n\nThe environment is limited to the following technologies.\nYou MUST NOT use, suggest, or implement any technology outside this list:\\n\n\\n\n- Language: JavaScript ONLY.\n- Languages like TypeScript, Rust, Python, Java, PHP, etc., are STRICTLY PROHIBITED.\\n\n- Framework: React.\\n\n- Navigation: React Router.\\n\n- Styling: TailwindCSS.\\n\n- Components: shadcn/ui (built with @radix-ui primitives).\\n\n- Icons: Lucide React.\\n\n- Animations: Framer Motion.\\n\n\\n\nBACKEND & DATA STORAGE:\\n\n- Horizons integrated backend is the EXCLUSIVE solution for persistent data storage,\nauthentication, and database needs.\\n\n- Local databases (SQLite, MySQL, etc.) are STRICTLY PROHIBITED.\\n\n- Third-party services (Firebase, AWS Amplify) are allowed ONLY if explicitly requested by the user.\\n\n\\n\nMAPS:\\n\n- OpenStreetMap is the default provider.\\n\n- Alternative providers (Google Maps, Mapbox) are allowed ONLY if explicitly requested by the user.\\n",
+    "description": "Create new Hostinger Horizons website from the given message.\\n\nUse this tool when user asks you to create a website, landing page, blog\nor any other type of application.\\n\nThis tool initiates the website creation process and returns a website URL and ID.\nThe generation happens asynchronously.\\n\nAfter invoking this tool, your chat reply must be EXACTLY 1 sentence summarizing\nthat Hostinger Horizons is now creating their website and it will be ready in a few minutes\nand you should provide the website URL to the user immediately\nDo not write code.\\n\\nTo edit afterwards, use the `Edit website` tool with the returned\nwebsite ID, or the user can go to Hostinger Horizons interface in the provided website URL.\nIf the tool call fails with an error, you should provide a clear explanation of the error\nand do not generate code yourself in the chat.\n\\n\nTECHNOLOGY STACK CONSTRAINTS (STRICTLY ENFORCED):\\n\nThe environment is limited to the following technologies.\nYou MUST NOT use, suggest, or implement any technology outside this list:\\n\n\\n\n- Language: JavaScript ONLY.\n- Languages like TypeScript, Rust, Python, Java, PHP, etc., are STRICTLY PROHIBITED.\\n\n- Framework: React.\\n\n- Navigation: React Router.\\n\n- Styling: TailwindCSS.\\n\n- Components: shadcn/ui (built with @radix-ui primitives).\\n\n- Icons: Lucide React.\\n\n- Animations: Framer Motion.\\n\n\\n\nBACKEND & DATA STORAGE:\\n\n- Horizons integrated backend is the EXCLUSIVE solution for persistent data storage,\nauthentication, and database needs.\\n\n- Local databases (SQLite, MySQL, etc.) are STRICTLY PROHIBITED.\\n\n- Third-party services (Firebase, AWS Amplify) are allowed ONLY if explicitly requested by the user.\\n\n\\n\nMAPS:\\n\n- OpenStreetMap is the default provider.\\n\n- Alternative providers (Google Maps, Mapbox) are allowed ONLY if explicitly requested by the user.\\n",
     "method": "POST",
     "path": "/api/horizons/v1/websites",
     "inputSchema": {
@@ -5407,6 +5460,92 @@ const tools: OpenApiTool[] = [
     ],
     "group": "horizons"
   },
+  {
+    "name": "horizons_editWebsiteV1",
+    "title": "Edit website",
+    "annotations": {
+      "title": "Edit website",
+      "readOnlyHint": false,
+      "destructiveHint": false
+    },
+    "description": "Edit an existing Hostinger Horizons website with a follow-up message.\\n\nUse this tool when the user wants to change, extend or fix a website that already exists.\\n\nThis tool queues the requested changes and returns the website URL and ID.\nThe changes are applied asynchronously.\\n\nAfter invoking this tool, your chat reply must be EXACTLY 1 sentence summarizing\nthat Hostinger Horizons is now applying the requested changes and they will be ready\nin a few minutes, and you should provide the website URL to the user immediately.\nDo not write code.\\n\nIf the tool call fails with an error, you should provide a clear explanation of the error\nand do not generate code yourself in the chat.",
+    "method": "POST",
+    "path": "/api/horizons/v1/websites/{websiteId}/messages",
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "websiteId": {
+          "type": "string",
+          "description": "The website ID"
+        },
+        "message": {
+          "type": "array",
+          "description": "message parameter",
+          "items": {
+            "type": "object",
+            "description": "message parameter",
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "type parameter",
+                "enum": [
+                  "text"
+                ]
+              },
+              "text": {
+                "type": "string",
+                "description": "Detailed description of the changes to apply to the website.\nInclude which sections, features, content or design should change and how.\nThe specification should be detailed and comprehensive, covering all requested changes."
+              }
+            },
+            "required": [
+              "type",
+              "text"
+            ]
+          }
+        }
+      },
+      "required": [
+        "websiteId",
+        "message"
+      ]
+    },
+    "security": [
+      {
+        "apiToken": []
+      }
+    ],
+    "group": "horizons"
+  },
+  {
+    "name": "horizons_publishWebsiteV1",
+    "title": "Publish website",
+    "annotations": {
+      "title": "Publish website",
+      "readOnlyHint": false,
+      "destructiveHint": false
+    },
+    "description": "Publish a Hostinger Horizons website so its latest changes go live.\\n\nUse this tool when the user asks to publish, deploy or make their website live.\\n\nThis tool starts the publish process and returns the URL the website will be live on.\nPublishing happens asynchronously and takes a few minutes.\\n\nAfter invoking this tool, your chat reply must be EXACTLY 1 sentence summarizing\nthat the website is being published and you should provide the published URL to the user immediately.",
+    "method": "POST",
+    "path": "/api/horizons/v1/websites/{websiteId}/publish",
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "websiteId": {
+          "type": "string",
+          "description": "The website ID"
+        }
+      },
+      "required": [
+        "websiteId"
+      ]
+    },
+    "security": [
+      {
+        "apiToken": []
+      }
+    ],
+    "group": "horizons"
+  },
   {
     "name": "horizons_getWebsiteV1",
     "title": "Get website",
@@ -5415,7 +5554,7 @@ const tools: OpenApiTool[] = [
       "readOnlyHint": true,
       "destructiveHint": false
     },
-    "description": "Get a link for the user to edit their website in Hostinger Horizons interface.\\n\nUse this tool when user wants to modify, edit or add new features to an existing website.\\n\nWebsites can only be edited in Hostinger Horizons interface in the provided website URL.",
+    "description": "Get the link for the user to open their website in Hostinger Horizons interface.\\n\nUse this tool when the user wants the link to an existing website, or when you need its\nwebsite URL before or after editing it.\\n\nWebsites can be edited with the `Edit website` tool, or by the user in Hostinger Horizons\ninterface in the provided website URL.",
     "method": "GET",
     "path": "/api/horizons/v1/websites/{websiteId}",
     "inputSchema": {

package/src/core/tools/ecommerce.js

@@ -808,7 +808,7 @@ export default [
       "readOnlyHint": false,
       "destructiveHint": false
     },
-    "description": "Fetch a raster image (JPEG, PNG, GIF or WebP, max 15MB) from a URL and attach it to a product in a\nsingle call. The image is virus-scanned and validated by content, then stored on the CDN. Set\nis_thumbnail to make it the product's primary image.",
+    "description": "Fetch a raster image (JPEG, PNG, GIF or WebP, max 15MB) from a URL and attach it to a product in a\nsingle call. Image downloads require HTTPS on port 443 without embedded credentials. At most one redirect\nis allowed, and its destination must meet the same requirements. Private or reserved network\ndestinations, unsupported URLs and longer redirect chains are rejected. The image is virus-scanned\nand validated by content, then stored on the CDN. Set is_thumbnail to make it the product's primary image.",
     "method": "POST",
     "path": "/api/ecommerce/v1/stores/{store_id}/products/{product_id}/images",
     "inputSchema": {
@@ -824,7 +824,7 @@ export default [
         },
         "image_url": {
           "type": "string",
-          "description": "Publicly reachable URL of the raster image (JPEG, PNG, GIF or WebP), maximum 15MB. The image is\nfetched, virus-scanned and validated by content, then stored on the CDN. SVG is not accepted.\nProvide either this or object_name."
+          "description": "Publicly reachable URL of a raster image (JPEG, PNG, GIF or WebP), maximum 15MB. Fetching\nthe image requires HTTPS on port 443 without embedded credentials. At most one redirect\nis allowed; its destination must meet the same URL requirements. Private or reserved\nnetwork destinations, unsupported URLs and longer redirect chains are rejected. The image\nis fetched, virus-scanned and validated by content, then stored on the CDN. SVG is not\naccepted. Provide either this or object_name."
         },
         "object_name": {
           "type": "string",

package/src/core/tools/ecommerce.ts

@@ -822,7 +822,7 @@ const tools: OpenApiTool[] = [
       "readOnlyHint": false,
       "destructiveHint": false
     },
-    "description": "Fetch a raster image (JPEG, PNG, GIF or WebP, max 15MB) from a URL and attach it to a product in a\nsingle call. The image is virus-scanned and validated by content, then stored on the CDN. Set\nis_thumbnail to make it the product's primary image.",
+    "description": "Fetch a raster image (JPEG, PNG, GIF or WebP, max 15MB) from a URL and attach it to a product in a\nsingle call. Image downloads require HTTPS on port 443 without embedded credentials. At most one redirect\nis allowed, and its destination must meet the same requirements. Private or reserved network\ndestinations, unsupported URLs and longer redirect chains are rejected. The image is virus-scanned\nand validated by content, then stored on the CDN. Set is_thumbnail to make it the product's primary image.",
     "method": "POST",
     "path": "/api/ecommerce/v1/stores/{store_id}/products/{product_id}/images",
     "inputSchema": {
@@ -838,7 +838,7 @@ const tools: OpenApiTool[] = [
         },
         "image_url": {
           "type": "string",
-          "description": "Publicly reachable URL of the raster image (JPEG, PNG, GIF or WebP), maximum 15MB. The image is\nfetched, virus-scanned and validated by content, then stored on the CDN. SVG is not accepted.\nProvide either this or object_name."
+          "description": "Publicly reachable URL of a raster image (JPEG, PNG, GIF or WebP), maximum 15MB. Fetching\nthe image requires HTTPS on port 443 without embedded credentials. At most one redirect\nis allowed; its destination must meet the same URL requirements. Private or reserved\nnetwork destinations, unsupported URLs and longer redirect chains are rejected. The image\nis fetched, virus-scanned and validated by content, then stored on the CDN. SVG is not\naccepted. Provide either this or object_name."
         },
         "object_name": {
           "type": "string",