hostinger-api-mcp 3.20.0 → 3.20.3

package/CHANGELOG.md

@@ -4,6 +4,31 @@ Generated at release time from the diff between the previous and current
 build. Tool changes are listed individually; everything else is summarised
 by area.
 
+## v3.20.3 — 2026-10-28
+
+### Operations
+
+- Changed the input schema of `hosting_deploy`
+- Changed the input schema of `hosting_deploy-wordpress-plugin`
+- Changed the input schema of `hosting_deploy-wordpress-theme`
+
+### Also in this release
+
+- Request handling and authentication: `src/core/runtime.js`, `src/core/runtime.ts`
+- Build and packaging: `types.d.ts`
+
+## v3.20.2 — 2026-10-28
+
+### Also in this release
+
+- OAuth sign-in flow: `src/core/oauth.js`, `src/core/oauth.ts`
+
+## v3.20.1 — 2026-10-28
+
+### Also in this release
+
+- Request handling and authentication: `src/core/runtime.js`, `src/core/runtime.ts`
+
 ## v3.20.0 — 2026-10-28
 
 ### Operations

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "hostinger-api-mcp",
-  "version": "3.20.0",
+  "version": "3.20.3",
   "description": "Hostinger API — manage domains, DNS, hosting, VPS, billing and more from Gemini CLI.",
   "mcpServers": {
     "hostinger": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hostinger-api-mcp",
-  "version": "3.20.0",
+  "version": "3.20.3",
   "mcpName": "io.github.hostinger/hostinger-api-mcp",
   "description": "MCP server for Hostinger API",
   "repository": {

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/hostinger/api-mcp-server",
     "source": "github"
   },
-  "version": "3.20.0",
+  "version": "3.20.3",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@hostinger/mcp",
-      "version": "3.20.0",
+      "version": "3.20.3",
       "transport": {
         "type": "stdio"
       },

package/src/core/oauth.js

@@ -2,7 +2,7 @@ import { createHash, randomBytes } from "crypto";
 import { createServer } from "http";
 import { readFile, writeFile, mkdir } from "fs/promises";
 import { existsSync, readFileSync } from "fs";
-import { exec } from "child_process";
+import { execFile } from "child_process";
 import { fileURLToPath } from "url";
 import path from "path";
 import os from "os";
@@ -55,13 +55,41 @@ export function getEnvToken() {
   );
 }
 
+/**
+ * The issuer must be a bare origin: https, or http only on loopback. It ends up
+ * in token requests and in the browser launch, so a path, query or userinfo is
+ * refused instead of carried along.
+ */
+function parseIssuer(raw) {
+  let u;
+  try {
+    u = new URL(raw);
+  } catch {
+    throw new Error(`Invalid OAUTH_ISSUER: ${raw}`);
+  }
+  const loopback = ["localhost", "127.0.0.1", "[::1]"].includes(u.hostname);
+  const schemeOk =
+    u.protocol === "https:" || (u.protocol === "http:" && loopback);
+  if (
+    !schemeOk ||
+    u.username ||
+    u.password ||
+    u.pathname !== "/" ||
+    u.search ||
+    u.hash
+  ) {
+    throw new Error(
+      `Invalid OAUTH_ISSUER: ${raw} (expected an https origin such as ${DEFAULT_ISSUER})`,
+    );
+  }
+  return u.origin;
+}
+
 export class OAuthProvider {
   constructor(issuerBaseUrl) {
-    this.issuer = (
-      issuerBaseUrl ||
-      process.env["OAUTH_ISSUER"] ||
-      DEFAULT_ISSUER
-    ).replace(/\/$/, "");
+    this.issuer = parseIssuer(
+      issuerBaseUrl || process.env["OAUTH_ISSUER"] || DEFAULT_ISSUER,
+    );
     this._loginInProgress = null;
   }
 
@@ -387,15 +415,14 @@ export class OAuthProvider {
     process.stderr.write(
       "[OAuth] If the browser does not open, copy the URL above into one manually.\n\n",
     );
-    let cmd;
-    if (process.platform === "darwin") {
-      cmd = `open "${url}"`;
-    } else if (process.platform === "win32") {
-      cmd = `start "" "${url}"`;
-    } else {
-      cmd = `xdg-open "${url}"`;
-    }
-    exec(cmd, (err) => {
+    // No shell: the URL is a single argv entry, never parsed by sh or cmd.
+    const [cmd, args] =
+      process.platform === "darwin"
+        ? ["open", [url]]
+        : process.platform === "win32"
+          ? ["rundll32", ["url.dll,FileProtocolHandler", url]]
+          : ["xdg-open", [url]];
+    execFile(cmd, args, (err) => {
       if (err) {
         process.stderr.write(
           `[OAuth] Could not auto-launch browser: ${err.message}\n`,

package/src/core/oauth.ts

@@ -2,7 +2,7 @@ import { createHash, randomBytes } from 'crypto';
 import { createServer, Server } from 'http';
 import { readFile, writeFile, mkdir } from 'fs/promises';
 import { existsSync, readFileSync } from 'fs';
-import { exec } from 'child_process';
+import { execFile } from 'child_process';
 import { fileURLToPath } from 'url';
 import path from 'path';
 import os from 'os';
@@ -68,12 +68,32 @@ export function getEnvToken(): string | undefined {
     || process.env['APITOKEN'];
 }
 
+/**
+ * The issuer must be a bare origin: https, or http only on loopback. It ends up
+ * in token requests and in the browser launch, so a path, query or userinfo is
+ * refused instead of carried along.
+ */
+function parseIssuer(raw: string): string {
+  let u: URL;
+  try {
+    u = new URL(raw);
+  } catch {
+    throw new Error(`Invalid OAUTH_ISSUER: ${raw}`);
+  }
+  const loopback = ['localhost', '127.0.0.1', '[::1]'].includes(u.hostname);
+  const schemeOk = u.protocol === 'https:' || (u.protocol === 'http:' && loopback);
+  if (!schemeOk || u.username || u.password || u.pathname !== '/' || u.search || u.hash) {
+    throw new Error(`Invalid OAUTH_ISSUER: ${raw} (expected an https origin such as ${DEFAULT_ISSUER})`);
+  }
+  return u.origin;
+}
+
 export class OAuthProvider {
   private readonly issuer: string;
   private _loginInProgress: Promise<string> | null = null;
 
   constructor(issuerBaseUrl?: string) {
-    this.issuer = (issuerBaseUrl || process.env['OAUTH_ISSUER'] || DEFAULT_ISSUER).replace(/\/$/, '');
+    this.issuer = parseIssuer(issuerBaseUrl || process.env['OAUTH_ISSUER'] || DEFAULT_ISSUER);
   }
 
   async getAccessToken(): Promise<string> {
@@ -357,15 +377,13 @@ export class OAuthProvider {
   private _openBrowser(url: string): void {
     process.stderr.write(`\n[OAuth] Opening browser for sign-in:\n  ${url}\n`);
     process.stderr.write('[OAuth] If the browser does not open, copy the URL above into one manually.\n\n');
-    let cmd: string;
-    if (process.platform === 'darwin') {
-      cmd = `open "${url}"`;
-    } else if (process.platform === 'win32') {
-      cmd = `start "" "${url}"`;
-    } else {
-      cmd = `xdg-open "${url}"`;
-    }
-    exec(cmd, (err) => {
+    // No shell: the URL is a single argv entry, never parsed by sh or cmd.
+    const [cmd, args]: [string, string[]] = process.platform === 'darwin'
+      ? ['open', [url]]
+      : process.platform === 'win32'
+        ? ['rundll32', ['url.dll,FileProtocolHandler', url]]
+        : ['xdg-open', [url]];
+    execFile(cmd, args, (err) => {
       if (err) {
         process.stderr.write(`[OAuth] Could not auto-launch browser: ${err.message}\n`);
       }

package/src/core/runtime.js

@@ -66,7 +66,7 @@ const GetSkillRequestSchema = z.object({
 
 /**
  * MCP Server for Hostinger API
- * Generated from OpenAPI spec version 2.5.0
+ * Generated from OpenAPI spec version 2.5.1
  */
 class MCPServer {
   constructor({ name, version, tools, instructions, skills = [] }) {
@@ -348,6 +348,93 @@ class MCPServer {
     }
   }
 
+  // Directories that hold credentials, the server's own token store (hostinger-mcp) among them.
+  credentialDirectories = ['.ssh', '.aws', '.gnupg', '.config', '.kube', '.docker', '.azure', 'hostinger-mcp'];
+
+  // System directories. /var as a whole stays deployable: sites live in /var/www, and macOS keeps its temp dir there.
+  systemDirectories = ['/etc', '/root', '/usr', '/bin', '/sbin', '/boot', '/proc', '/sys', '/dev', '/var/lib', '/var/log', '/var/db', '/var/root', '/private/etc', '/private/var/lib', '/private/var/log', '/private/var/db', '/private/var/root', '/System', '/Library'];
+
+  // A deploy publishes what it reads, and the path comes from the model, so prompt-injected arguments could
+  // publish any readable file. Refused, before anything is read or sent: the home directory and every directory
+  // above it (they contain the credentials), other users' home directories, system directories, a path in a
+  // credential directory, and a secret file. Symlinks are resolved first.
+  // os is imported by deploy.template: the JS generator dedupes import blocks by their whole text, and this block
+  // must stay identical to agency-hosting/shared's, or tus and fs are imported twice.
+  assertDeployablePath(localPath) {
+    let real;
+    try {
+      real = fs.realpathSync(localPath);
+    } catch (error) {
+      throw new Error('Path not found: ' + localPath);
+    }
+    let home = os.homedir();
+    try {
+      home = fs.realpathSync(home);
+    } catch (error) {
+      // a missing home directory has nothing in it to protect
+    }
+    const inside = (dir, file) => {
+      const relative = path.relative(dir, file);
+      return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative));
+    };
+    // A home in the filesystem root (HOME=/ in a container run as a user without a passwd entry) exempts nothing.
+    const inHome = path.dirname(home) !== home && inside(home, real);
+    // The directory that holds the home directories (/Users, /home); not when home sits in the root (/root).
+    const homes = path.dirname(home);
+    const otherHome = !inHome && path.dirname(homes) !== homes && inside(homes, real);
+    const inSystem = !inHome && this.systemDirectories.some((dir) => inside(dir, real));
+    const inCredentials = real.split(path.sep).some((segment) => this.credentialDirectories.includes(segment.toLowerCase()));
+    if (inside(real, home) || otherHome || inSystem || inCredentials || (fs.statSync(real).isFile() && this.isSecretFile(path.basename(real)))) {
+      throw new Error('Refusing to deploy ' + localPath + ': it is, or contains, a home, system or credentials location. Pass the project directory or archive.');
+    }
+  }
+
+  // Env files (examples such as .env.example are kept), credentials and private keys: a deploy would serve them
+  // publicly. Matches the CLI's isSecretFile, plus .npmrc and the Hostinger credential files.
+  isSecretFile(name) {
+    if (['.env', '.envrc', '.netrc', '.git-credentials', '.pgpass', '.npmrc', '.hostinger.yaml', 'credentials.json'].includes(name)) {
+      return true;
+    }
+    if (['id_rsa', 'id_dsa', 'id_ecdsa', 'id_ed25519'].some((key) => name.startsWith(key))) {
+      return true;
+    }
+    if (name.endsWith('.pem') || name.endsWith('.key')) {
+      return true;
+    }
+    return name.startsWith('.env.') && !['.env.example', '.env.sample', '.env.template', '.env.dist'].includes(name);
+  }
+
+  // The files to ship, as sorted forward-slash paths relative to dir, and the secret files left out.
+  // node_modules, .git and OS junk are skipped; symlinks are not followed. .gitignore is not read:
+  // keep build output out of the directory.
+  // exclude is a file that is uploaded on its own (the database dump) and must not also travel inside
+  // the archive, where extracting it would leave a second, downloadable copy.
+  listDeployFiles(dir, exclude) {
+    const files = [];
+    const skipped = [];
+    const walk = (relativeDir) => {
+      for (const entry of fs.readdirSync(path.join(dir, relativeDir), { withFileTypes: true })) {
+        if (entry.isSymbolicLink()) {
+          continue;
+        }
+        const relativePath = relativeDir ? relativeDir + '/' + entry.name : entry.name;
+        if (entry.isDirectory()) {
+          if (entry.name !== 'node_modules' && entry.name !== '.git') {
+            walk(relativePath);
+          }
+        } else if (entry.isFile() && entry.name !== '.DS_Store' && path.resolve(dir, relativePath) !== exclude) {
+          if (this.isSecretFile(entry.name)) {
+            skipped.push(relativePath);
+          } else {
+            files.push(relativePath);
+          }
+        }
+      }
+    };
+    walk('');
+    return { files: files.sort(), skipped: skipped.sort() };
+  }
+
   async resolveUsername(domain) {
     const baseUrl = this.baseUrl.endsWith("/") ? this.baseUrl : `${this.baseUrl}/`;
     const url = new URL(`api/hosting/v1/websites?domain=${encodeURIComponent(domain)}`, baseUrl).toString();
@@ -680,43 +767,6 @@ class MCPServer {
     return slug;
   }
 
-  // .env and .env.* hold secrets, and one in a document root can be fetched over HTTP; the platform
-  // takes variables from its own settings, so they are never packed. Examples are kept.
-  hosting_deploy_isEnvFile(name) {
-    return name === '.env' || (name.startsWith('.env.') && !['.env.example', '.env.sample', '.env.template', '.env.dist'].includes(name));
-  }
-
-  // The files to ship, as sorted forward-slash paths relative to dir, and the .env files left out.
-  // node_modules, .git and OS junk are skipped; symlinks are not followed. .gitignore is not read:
-  // keep build output out of the directory.
-  // exclude is a file that is uploaded on its own (the database dump) and must not also travel inside
-  // the archive, where extracting it would leave a second, downloadable copy.
-  hosting_deploy_listFiles(dir, exclude) {
-    const files = [];
-    const skipped = [];
-    const walk = (relativeDir) => {
-      for (const entry of fs.readdirSync(path.join(dir, relativeDir), { withFileTypes: true })) {
-        if (entry.isSymbolicLink()) {
-          continue;
-        }
-        const relativePath = relativeDir ? relativeDir + '/' + entry.name : entry.name;
-        if (entry.isDirectory()) {
-          if (entry.name !== 'node_modules' && entry.name !== '.git') {
-            walk(relativePath);
-          }
-        } else if (entry.isFile() && entry.name !== '.DS_Store' && path.resolve(dir, relativePath) !== exclude) {
-          if (this.hosting_deploy_isEnvFile(entry.name)) {
-            skipped.push(relativePath);
-          } else {
-            files.push(relativePath);
-          }
-        }
-      }
-    };
-    walk('');
-    return { files: files.sort(), skipped: skipped.sort() };
-  }
-
   // Adds what was left out to a result, so it is never silent.
   hosting_deploy_withSkipped(result, skipped) {
     if (skipped.length === 0) {
@@ -725,7 +775,7 @@ class MCPServer {
     return {
       ...result,
       skippedFiles: skipped,
-      skippedNote: 'These .env files were not uploaded. Set their values with hosting_nodejs_replace-environment-variables.',
+      skippedNote: 'These files hold secrets (env files, keys, credentials) and were not uploaded. Set environment values with hosting_nodejs_replace-environment-variables.',
     };
   }
 
@@ -926,7 +976,7 @@ class MCPServer {
       return { archivePath: resolved, skipped: [] };
     }
 
-    const { files, skipped } = this.hosting_deploy_listFiles(resolved, exclude);
+    const { files, skipped } = this.listDeployFiles(resolved, exclude);
     if (files.length === 0) {
       throw new Error('No files to deploy in ' + resolved);
     }
@@ -977,7 +1027,7 @@ class MCPServer {
     const isPlugin = type === 'wordpress-plugin';
     const directory = path.resolve(params.path);
     const slug = params.slug !== undefined ? params.slug : this.hosting_deploy_slug(directory);
-    const { files, skipped } = this.hosting_deploy_listFiles(directory);
+    const { files, skipped } = this.listDeployFiles(directory);
     if (files.length === 0) {
       throw new Error('No files found in directory: ' + directory);
     }
@@ -1236,6 +1286,10 @@ class MCPServer {
 
     if (git === undefined) {
       // Local checks first, so a bad path fails before any request is made.
+      this.assertDeployablePath(params.path);
+      if (params.databaseDump !== undefined) {
+        this.assertDeployablePath(params.databaseDump);
+      }
       const type = this.hosting_deploy_resolveType(params);
       const website = await this.findWebsite(domain);
       return this.hosting_deploy_fromPath(website.username, website.domain, type, params);
@@ -1512,6 +1566,7 @@ class MCPServer {
   }
 
   hosting_importWordpressWebsite_validateArchiveFile(archivePath) {
+    this.assertDeployablePath(archivePath);
     if (!fs.existsSync(archivePath)) {
       throw new Error(`Archive file not found: ${archivePath}`);
     }
@@ -1527,6 +1582,7 @@ class MCPServer {
   }
 
   hosting_importWordpressWebsite_validateDatabaseFile(databaseDump) {
+    this.assertDeployablePath(databaseDump);
     if (!fs.existsSync(databaseDump)) {
       throw new Error(`Database dump file not found: ${databaseDump}`);
     }
@@ -1782,6 +1838,7 @@ class MCPServer {
   }
 
   hosting_deployWordpressPlugin_validatePluginDirectory(pluginPath) {
+    this.assertDeployablePath(pluginPath);
     if (!fs.existsSync(pluginPath)) {
       throw new Error(`Plugin directory not found: ${pluginPath}`);
     }
@@ -1792,32 +1849,6 @@ class MCPServer {
     }
   }
 
-  hosting_deployWordpressPlugin_scanDirectory(dirPath, basePath = dirPath) {
-    const files = [];
-    
-    const scanDir = (currentPath) => {
-      const items = fs.readdirSync(currentPath);
-      
-      for (const item of items) {
-        const itemPath = path.join(currentPath, item);
-        const stats = fs.statSync(itemPath);
-        
-        if (stats.isDirectory()) {
-          scanDir(itemPath);
-        } else if (stats.isFile()) {
-          const relativePath = path.relative(basePath, itemPath);
-          files.push({
-            absolutePath: itemPath,
-            relativePath: relativePath
-          });
-        }
-      }
-    };
-    
-    scanDir(dirPath);
-    return files;
-  }
-
   async hosting_deployWordpressPlugin_deployPlugin(username, domain, slug, pluginPath) {
     const baseUrl = this.baseUrl.endsWith("/") ? this.baseUrl : `${this.baseUrl}/`;
     const url = new URL(`api/hosting/v1/accounts/${username}/websites/${domain}/wordpress/plugins/deploy`, baseUrl).toString();
@@ -1882,7 +1913,8 @@ class MCPServer {
     const uploadDirName = `${slug}-${randomSuffix}`;
 
     this.log('info', `Scanning plugin directory: ${pluginPath}`);
-    const pluginFiles = this.hosting_deployWordpressPlugin_scanDirectory(pluginPath);
+    const { files, skipped } = this.listDeployFiles(pluginPath);
+    const pluginFiles = files.map((relativePath) => ({ absolutePath: path.join(pluginPath, relativePath), relativePath }));
 
     if (pluginFiles.length === 0) {
       throw new Error(`No files found in plugin directory: ${pluginPath}`);
@@ -1970,6 +2002,7 @@ class MCPServer {
             failed: failureCount
           },
           results,
+          ...(skipped.length > 0 ? { skippedFiles: skipped } : {}),
           deploymentError: errorMessage
         };
       }
@@ -1983,6 +2016,7 @@ class MCPServer {
         failed: failureCount
       },
       results,
+      ...(skipped.length > 0 ? { skippedFiles: skipped } : {}),
       uploadDirName
     };
   }
@@ -2013,6 +2047,7 @@ class MCPServer {
   }
 
   hosting_deployWordpressTheme_validateThemeDirectory(themePath) {
+    this.assertDeployablePath(themePath);
     if (!fs.existsSync(themePath)) {
       throw new Error(`Theme directory not found: ${themePath}`);
     }
@@ -2023,32 +2058,6 @@ class MCPServer {
     }
   }
 
-  hosting_deployWordpressTheme_scanDirectory(dirPath, basePath = dirPath) {
-    const files = [];
-    
-    const scanDir = (currentPath) => {
-      const items = fs.readdirSync(currentPath);
-      
-      for (const item of items) {
-        const itemPath = path.join(currentPath, item);
-        const stats = fs.statSync(itemPath);
-        
-        if (stats.isDirectory()) {
-          scanDir(itemPath);
-        } else if (stats.isFile()) {
-          const relativePath = path.relative(basePath, itemPath);
-          files.push({
-            absolutePath: itemPath,
-            relativePath: relativePath
-          });
-        }
-      }
-    };
-    
-    scanDir(dirPath);
-    return files;
-  }
-
   async hosting_deployWordpressTheme_deployTheme(username, domain, slug, themePath, activate = false) {
     const baseUrl = this.baseUrl.endsWith("/") ? this.baseUrl : `${this.baseUrl}/`;
     const url = new URL(`api/hosting/v1/accounts/${username}/websites/${domain}/wordpress/themes/deploy`, baseUrl).toString();
@@ -2114,7 +2123,8 @@ class MCPServer {
     const uploadDirName = `${slug}-${randomSuffix}`;
 
     this.log('info', `Scanning theme directory: ${themePath}`);
-    const themeFiles = this.hosting_deployWordpressTheme_scanDirectory(themePath);
+    const { files, skipped } = this.listDeployFiles(themePath);
+    const themeFiles = files.map((relativePath) => ({ absolutePath: path.join(themePath, relativePath), relativePath }));
 
     if (themeFiles.length === 0) {
       throw new Error(`No files found in theme directory: ${themePath}`);
@@ -2202,6 +2212,7 @@ class MCPServer {
             failed: failureCount
           },
           results,
+          ...(skipped.length > 0 ? { skippedFiles: skipped } : {}),
           deploymentError: errorMessage
         };
       }
@@ -2215,6 +2226,7 @@ class MCPServer {
         failed: failureCount
       },
       results,
+      ...(skipped.length > 0 ? { skippedFiles: skipped } : {}),
       uploadDirName,
       activated: activate
     };
@@ -2268,6 +2280,7 @@ class MCPServer {
   }
 
   hosting_deployJsApplication_validateArchiveFile(archivePath) {
+    this.assertDeployablePath(archivePath);
     if (!fs.existsSync(archivePath)) {
       throw new Error(`Archive file not found: ${archivePath}`);
     }
@@ -2563,6 +2576,7 @@ class MCPServer {
   }
 
   hosting_deployStaticWebsite_validateArchiveFile(archivePath) {
+    this.assertDeployablePath(archivePath);
     if (!fs.existsSync(archivePath)) {
       throw new Error(`Archive file not found: ${archivePath}`);
     }
@@ -3014,6 +3028,7 @@ class MCPServer {
   }
 
   agencyHosting_validateArchiveFile(archivePath) {
+    this.assertDeployablePath(archivePath);
     if (!fs.existsSync(archivePath)) {
       throw new Error(`Archive file not found: ${archivePath}`);
     }
@@ -3022,6 +3037,12 @@ class MCPServer {
     if (!archiveStats.isFile()) {
       throw new Error(`Archive path is not a file: ${archivePath}`);
     }
+
+    // Only an archive is uploaded (and, with removeArchive, deleted afterwards), never any other file.
+    const name = path.basename(archivePath).toLowerCase();
+    if (!['.zip', '.tar', '.tar.gz', '.tgz', '.7z', '.gz', '.gzip'].some((extension) => name.endsWith(extension))) {
+      throw new Error('Invalid archive format. Supported formats: zip, tar, tar.gz, tgz, 7z, gz, gzip');
+    }
   }
 
   agencyHosting_removeArchive(archivePath, removeArchive) {