Hetzner

Enable or disable delete protection on a floating IP to guard against accidental destruction.

Change the reverse DNS entry for a floating IP. Set dns_ptr to null to reset.

Enable or disable delete protection on a snapshot or backup image to guard against accidental destruction.

Expand the IP range of an existing network. The new CIDR range must contain the current range; shrinking is not supported.

Change the balancing algorithm of a load balancer.

Change the reverse DNS entry for one of a load balancer's public IP addresses. Set dns_ptr to null to reset to the default.

Change the type (plan) of a load balancer.

Enable or disable delete protection on a load balancer to guard against accidental destruction.

Enable or disable delete protection on a network to guard against accidental destruction.

Enable or disable delete protection on a primary IP to guard against accidental destruction.

Change the reverse DNS entry for a primary IP. Set dns_ptr to null to reset.

Enable or disable delete and rebuild protection on a server to guard against accidental destruction.

Enable or disable delete protection on a Storage Box to guard against accidental destruction.

Change the home directory a Storage Box subaccount is scoped to.

Change the type (capacity tier) of a Storage Box. The new type must have at least the current usage capacity.

Enable or disable delete protection on a volume to guard against accidental destruction.

Replace the list of primary nameservers used by a secondary DNS zone for AXFR/IXFR transfers.

Enable or disable delete protection on a DNS zone to guard against accidental destruction.

Enable or disable change protection on an RRSet to guard against accidental modification or deletion.

Change the TTL of an RRSet. Pass ttl=null to fall back to the zone default TTL.

Change the default TTL applied to records in a DNS zone that do not have an explicit TTL.

Create an uploaded certificate (provide PEM data) or a managed certificate (provide domain names).

Create a new firewall with optional rules and resource assignments.

Create a new floating IP. Either home_location or server must be provided.

Create a snapshot image from an existing server.

Create a new load balancer with the specified type, location, and optional targets and services.

Create a new network with the specified IP range, and optionally subnets and routes.

Create a new placement group to control server distribution across hosts.

Create a new primary IP with the specified type, optional location, and optional assignee type.

Create a new server with the specified type, image, and configuration options.

Add a new SSH public key to the project for use when creating servers.

Create a new Storage Box in the given location and type. Billing applies for the provisioned resource.

Create a manual snapshot of a Storage Box, optionally with a description and labels.

Create a subaccount on a Storage Box, scoped to a home directory with its own password and access settings.

Create a new volume. Either location or server must be provided to determine placement.

Create a new DNS zone in primary or secondary mode. Optionally provide TTL, primary nameservers (for secondary), initial RRSets, or a zonefile.

Create a new RRSet (record set) inside a DNS zone.

Delete a certificate. It must not be in use by any load balancer.

Delete a firewall. It must be removed from all resources first.

Delete a floating IP permanently. Since 2026-05-01 the floating IP must be unassigned first; otherwise the API returns the must_be_unassigned error code.

Permanently delete a snapshot or backup image.

Remove a service from a load balancer by its listen port.

Permanently delete a load balancer.

Delete a network. All subnets and routes within it will also be deleted.

Delete a placement group. All servers must be removed from it first.

Delete a primary IP permanently. Since 2026-05-01 the primary IP must be unassigned first; otherwise the API returns the must_be_unassigned error code.

Remove a route from an existing network.

Permanently delete a server. This destroys the server and all associated data.

Delete an SSH key from the project permanently.

Delete a Storage Box and all of its data permanently. The Storage Box must not be delete-protected.

Delete a Storage Box snapshot permanently.

Delete a Storage Box subaccount permanently. Its home directory contents are not removed.

Remove a subnet from an existing network by its IP range.

Delete a volume permanently. The volume must be detached from any server.

Delete a DNS zone and all of its RRSets permanently. The zone must not be delete-protected.

Delete an RRSet from a DNS zone permanently. The RRSet must not be change-protected.

Detach an ISO image from a server. The server must be rebooted for the change to take effect.

Detach a load balancer from a network.

Detach a server from a private network, removing its private connectivity on that network.

Detach a volume from the server it is attached to.

Disable automatic backups for a server and remove all existing backup snapshots.

Disable the public network interface of a load balancer, removing its public connectivity.

Disable rescue mode on a server. The next reboot will boot normally.

Disable the automatic snapshot plan for a Storage Box. Existing snapshots are kept.

Enable automatic daily backups for a server. Backups increase the server price by 20 percent. The backup window is chosen automatically.

Enable the public network interface of a load balancer so it can be reached over public IPs.

Enable rescue mode on a server. The server must be rebooted to enter rescue mode.

Enable or update the automatic snapshot plan for a Storage Box (schedule and retention).

Export the current contents of a DNS zone as an RFC 1035 zonefile string.

Get details of a specific certificate by its ID.

Get details of a specific firewall by its ID.

Get details of a specific floating IP by ID.

Get details of a specific image by ID.

Get details of a specific ISO image by ID.

Get metrics for a load balancer over a specified time range.

Get details of a specific load balancer by its ID.

Get details of a specific location by ID.

Get details of a specific network by its ID.

Get details of a specific placement group by ID.

Get current Hetzner Cloud prices, optionally selecting one resource category or traffic prices. Currency and VAT rate are included with filtered results.

Get details of a specific primary IP by ID.

Get details of a specific server by ID.

Retrieve time series metrics (CPU, disk, network) for a server over a time range.

Get details of a specific server type, including specs and pricing.

Get details of a specific SSH key by ID.

Get details of a specific Storage Box by ID.

Get details of a specific Storage Box snapshot by ID.

Get details of a specific Storage Box subaccount by ID.

Get details of a specific Storage Box type by ID, including capacity and pricing.

Get details of a specific volume by ID.

Get details of a specific DNS zone by its numeric ID or zone name (e.g. "example.com").

Get a specific RRSet by zone, name, and record type.

Replace the contents of a DNS zone with the given RFC 1035 zonefile. This overwrites all existing RRSets.

List all actions performed on a specific certificate, such as issuance and renewal retries.

List all SSL/TLS certificates in the project, with optional filtering.

List all actions performed on a specific firewall, such as rule and resource attachment changes.

List all firewalls in the project, with optional filtering by name or labels.

List all actions performed on a specific floating IP, such as assign, unassign, and rDNS changes.

List all floating IPs in the project, with optional filtering by name or label.

List all actions performed on a specific image, such as snapshot creation and protection changes.

List all available images, including system, snapshot, and backup images.

List all available ISO images for mounting on servers.

List all available load balancer types with pricing and limits.

List all actions performed on a specific load balancer, such as service changes and target attachments.

List all load balancers in the project, with optional filtering by name or labels.

List all available Hetzner Cloud locations (regions).

List all actions performed on a specific network, such as subnet and route changes.

List resources attached to a network, with their subnet, IP addresses, and attachment status. Filter by resource type, subnet, or status.

List all networks in the project, with optional filtering by name or labels.

List all placement groups in the project.

List all actions performed on a specific primary IP, such as assign, unassign, and rDNS changes.

List all primary IPs in the project, with optional filtering by name, label, or IP address.

List all actions for a specific server, such as power changes and rebuilds.

List server types with specs, pricing, and per-location availability and recommendations.

List all servers in the project, with optional filtering by name, label, or status.

List all SSH keys in the project, with optional filtering by name, label, or fingerprint.

List all actions performed on a specific Storage Box, such as type changes and password resets.

List the folders inside a Storage Box, optionally under a given path.

List the snapshots of a Storage Box, with optional filtering by name, labels, or automatic-vs-manual.

List the subaccounts of a Storage Box, with optional filtering by name, username, or labels.

List all available Storage Box types with their capacity, limits, and pricing.

List all Storage Boxes in the project, with optional filtering by name or labels.

List all actions performed on a specific volume, such as attach, detach, and resize operations.

List all volumes in the project, with optional filtering by name, label, or status.

List all actions performed on a specific DNS zone, such as imports, TTL changes, and protection toggles.

List all RRSets in a DNS zone, with optional filtering by name, type, or labels.

List all DNS zones in the project, with optional filtering by name, mode (primary/secondary), or labels.

Force power off a server immediately. This is like pulling the power cord.

Start a stopped server by powering it on.

Send an ACPI reboot signal to the server for a soft reboot.

Rebuild a server from an image, wiping all data on the server.

Remove a firewall from one or more servers or label selectors.

Remove a target from a load balancer.

Remove a server from its placement group.

Remove specific records from an RRSet (matched by value) without deleting the RRSet itself.

Request a noVNC WebSocket URL and credentials to access the server console. The URL is valid for a limited time.

Perform a hard reset on the server, equivalent to pressing the reset button.

Reset the root password of a server. The server is rebooted and a new root password is returned in the result.

Reset the password of a Storage Box main account to the supplied value.

Reset the password of a Storage Box subaccount to the supplied value.

Change the server type. The server will be stopped and migrated if needed.

Increase the size of a volume. Volumes can only be made larger, not smaller.

Retry issuance or renewal of a managed certificate that has failed.

Roll a Storage Box back to a snapshot. This overwrites current data with the snapshot contents.

Replace all rules of a firewall with a new set of rules.

Replace the full list of records in an RRSet. Existing records not in the payload are removed.

Send an ACPI shutdown signal for a graceful OS shutdown.

Unassign a floating IP from the server it is currently assigned to.

Unassign a primary IP from the server it is currently assigned to.

Update a certificate name or labels.

Update a firewall name or labels.

Update a floating IP's name, description, or labels.

Update an image's description, type, or labels.

Update an existing service on a load balancer.

Update a load balancer name or labels.

Update properties of a network such as name, labels, or vSwitch route exposure.

Update a placement group's name or labels.

Update a primary IP's name, auto_delete setting, or labels.

Update a server's name or labels.

Update an SSH key's name or labels.

Update the name and/or labels of a Storage Box.

Update which access protocols (SSH, Samba, WebDAV, ZFS, external reachability) are enabled on a Storage Box.

Update the description and/or labels of a Storage Box snapshot.

Update the name, description, and/or labels of a Storage Box subaccount.

Update the access settings (read-only, SSH, Samba, WebDAV, external reachability) of a Storage Box subaccount.

Update a volume's name or labels.

Update a DNS zone's labels. Other zone properties are managed via dedicated change_* action tools.

Update an RRSet's labels. Records and TTL are managed via dedicated action tools.

Update the comment on existing records in an RRSet (matched by value). The comment field is always sent — use an empty string to clear.

Wait for a resource action to reach success or error and return its full details. The timeout includes API requests and rate-limit delays.