cPanel MCP Server

A comprehensive Model Context Protocol (MCP) server for managing cPanel hosting accounts through AI assistants. Connects directly to cPanel's UAPI and API2, enabling natural language management of web hosting — DNS, DNSSEC, email (with DKIM/SPF), databases, domains, SSL/AutoSSL, PHP, cron jobs, security (WAF, IP blocker, virus scanner, 2FA), Git deployment, Node.js/Python apps, and more.

Features

File Management

• List, create, read, edit, and delete files in your hosting account

Disk Usage

• Account quota info — check disk space consumption and limits

MySQL Database Management

• Full CRUD for databases, users, and privileges
• Server info — version and restriction details
• Privilege management — grant/revoke per database

PostgreSQL Database Management

• Full CRUD for databases, users, and privileges
• Grant/revoke access per database

Email Management

• Email accounts — create, delete, change password, set quotas, list with disk usage
• Forwarders — create, list, and delete email forwarding rules
• Autoresponders — create, list, and delete out-of-office / autoresponse messages
• Email routing — view mail domain configuration

Email Authentication (DKIM/SPF)

• DKIM — enable, disable, validate, and ensure keys exist for all domains
• SPF — validate and install/update SPF records
• PTR — validate reverse DNS records

Email Filters & Spam

• Email filters — list, delete, and trace/test filters
• SpamAssassin — enable/disable, configure spam box, get settings, clear spam
• Greylisting — enable/disable for all domains

DNS Management

• Get zone records for any domain (via API2 ZoneEdit)
• Add, edit, and delete DNS records (A, AAAA, CNAME, MX, TXT, SRV, CAA)

DNSSEC

• Enable/disable DNSSEC for domains
• DS records — fetch for registrar configuration
• DNSKEY export — export zone keys
• NSEC3 — enable/disable (prevents zone enumeration)

Domain Management

• List all domains — main, addon, subdomains, and parked
• Addon domains — create and delete
• Subdomains — create and delete with custom document roots
• Parked domains (aliases) — park and unpark
• Redirects — create and delete URL redirects (301/302)

Cron Job Management

• List, create, edit, and delete cron jobs (via API2)
• Notification email — get and set the cron notification address

PHP Management

• List installed PHP versions available on the server
• Get/set PHP version per domain
• PHP INI directives — read and modify (memory_limit, upload_max_filesize, etc.)

SSL/TLS Management

• List certificates and SSL status per domain
• Install and delete SSL certificates
• Generate CSR for certificate requests
• AutoSSL — check status and trigger renewal
• List private keys

Security

• IP Blocker — list, block, and unblock IP addresses/ranges
• SSH Keys — list, import, delete, authorize, and deauthorize keys
• Hotlink Protection — get status, enable with custom settings, disable
• Directory Privacy — list protected directories and add users

ModSecurity (WAF)

• Status — check if ModSecurity is installed, list domain status
• Enable/disable globally or per domain

Two-Factor Authentication

• Status — check if 2FA is configured
• Setup — generate secret/QR code, enable with verification
• Remove — disable 2FA

Virus Scanner (ClamAV) requires ClamAV plugin

• Scan — start virus scan on a directory
• Status — check scan progress
• Results — list infected files, quarantine/disinfect

Metrics & Logs

• Bandwidth usage statistics
• Resource usage — CPU, memory, I/O, entry processes
• Error logs — recent error entries
• Visitor stats — per-domain access statistics
• Account stats — summary of email accounts, databases, domains, disk, bandwidth

Backup Management

... View full README on GitHub