Skip to content
Agentmart
Submit a tool

Hetzner DNS

Manage DNS zones and records (zonefiles, RRSets, TTL, protection) via the Hetzner Cloud API

Connector by ni-c · GitHub account verified by the MCP Registry

IndexedMITLocal (stdio)
Write a review

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/ni-c-hetzner-dns-mcp

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Manage DNS zones and records (zonefiles, RRSets, TTL, protection) via the Hetzner Cloud API

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools
7 read · 6 write · 9 delete
Secrets
1 (API keys, tokens or passwords)
Install scripts
Not scanned yet
Runs as
Node.js package

Tools by what they do 22

Read from the source code; the running server may list different tools.

Read 7 · Look things up without changing anything.

  • export_zonefile
  • get_rrset
  • get_zone
  • get_zone_action
  • list_rrsets
  • list_zone_actions
  • list_zones

Write 6 · Create, change, send or run things.

  • add_records
  • change_rrset_protection
  • change_rrset_ttl
  • change_zone_ttl
  • create_rrset
  • create_zone

Delete 9 · Delete, drop, revoke or wipe things.

  • change_primary_nameservers
  • change_zone_protection
  • delete_rrset
  • delete_zone
  • import_zonefile
  • remove_records
  • set_records
  • update_rrset
  • update_zone

Secrets and settings it asks for

Secrets: values you paste in that let it act as you.

  • HETZNER_API_TOKEN

Other settings (environment variables or headers).

  • HETZNER_ALLOW_TOOLS
  • HETZNER_API_BASE_URL
  • HETZNER_DENY_TOOLS
  • HETZNER_READ_ONLY

Tools (22)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • add_recordsAdd records to an RRSet

    Add records to an RRSet. Existing records are kept. Creates the RRSet if it does not exist yet — so denying create_rrset does not remove the ability to create one.

  • change_primary_nameserversChange primary nameserverscan change or delete data

    Replace the primary nameservers of a secondary zone (the servers Hetzner transfers the zone from). The ENTIRE zone content will be taken from the new primaries on the next transfer. Only applicable to zones in secondary mode. The first call returns a short-lived confirmation token bound to exactly this nameserver list.

  • change_rrset_protectionChange RRSet protection

    Enable or disable the change protection of an RRSet. Enabling is immediate; DISABLING removes the last safeguard against delete_rrset and set_records and therefore needs a confirm_token.

  • change_rrset_ttlChange RRSet TTL

    Change the Time To Live (TTL) of an RRSet. Pass null to fall back to the zone's default TTL.

  • change_zone_protectionChange zone protection

    Enable or disable the delete protection of a DNS zone. Enabling is immediate; DISABLING removes the last safeguard against delete_zone and therefore needs a confirm_token, exactly like a deletion.

  • change_zone_ttlChange zone default TTL

    Change the default Time To Live (TTL) of a DNS zone. Applies to RRSets without an explicit TTL.

  • create_rrsetCreate RRSet

    Create a new RRSet (DNS record set) in a zone, e.g. an A record for "www". Fails if an RRSet with the same name and type already exists — use set_records or add_records in that case.

  • create_zoneCreate DNS zone

    Create a new DNS zone. Use mode "primary" for zones managed at Hetzner, or "secondary" with primary_nameservers to transfer the zone from external primaries. A primary zone can optionally be initialized from a zone file. Creating a zone with primary_nameservers or a zonefile asks a person first — those two carry the whole content of the zone, exactly like change_primary_nameservers and import_zonefile do.

  • delete_rrsetDelete RRSetcan change or delete data

    Permanently delete an RRSet (DNS record set) with all its records. This is irreversible. The first call returns a short-lived confirmation token; ask the user, then call again with confirm_token.

  • delete_zoneDelete DNS zonecan change or delete data

    Permanently delete a DNS zone including all its records. This is irreversible. The first call returns a short-lived confirmation token; ask the user, then call again with confirm_token.

  • export_zonefileExport zone fileread-only

    Export the full contents of a DNS zone as a zone file (BIND format).

  • get_rrsetGet RRSetread-only

    Get a single RRSet (DNS record set) of a zone by name and type.

  • get_zoneGet DNS zoneread-only

    Get the full details of a single DNS zone.

  • get_zone_actionGet zone actionread-only

    Get a single zone action by ID to check its status and result.

  • import_zonefileImport zone filecan change or delete data

    Import a zone file (BIND format) into an existing primary zone. This REPLACES the current records of the zone. The first call returns a short-lived confirmation token bound to exactly this zone file; ask the user, then call again with confirm_token. Consider export_zonefile first as a backup.

Show 7 more tools
  • list_rrsetsList RRSetsread-only

    List the RRSets (DNS record sets) of a zone, including their records, TTLs and protection status.

  • list_zone_actionsList zone actionsread-only

    List actions (asynchronous operations like zone file imports) of all zones, or of a single zone if one is given.

  • list_zonesList DNS zonesread-only

    List the DNS zones of the Hetzner Cloud project, including status, mode, default TTL, assigned nameservers and record counts.

  • remove_recordsRemove records from an RRSetcan change or delete data

    Remove specific records (matched by value) from an RRSet. Removing the last record deletes the RRSet — so denying delete_rrset does not remove the ability to delete one. The first call returns a short-lived confirmation token bound to exactly this record list.

  • set_recordsSet records of an RRSetcan change or delete data

    Replace ALL records of an RRSet with the given records. Existing records not listed are removed. Use add_records to append instead. The first call returns a short-lived confirmation token bound to exactly this record list.

  • update_rrsetUpdate RRSet labelscan change or delete data

    Update the labels of an RRSet. The given set replaces all existing labels. (Records and TTL are changed via set_records/add_records/remove_records and change_rrset_ttl.)

  • update_zoneUpdate DNS zone labelscan change or delete data

    Update the labels of a DNS zone. The given set replaces all existing labels. (Other zone properties are changed via the dedicated change_zone_* tools.)

Signals

Stars
0
Forks
0
Open issues
0
Last commit
Oct 21, 2026 (9 days ago)
Last release
Sep 7, 2026 (1 month ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name
io.github.ni-c/hetzner-dns-mcp
Version
0.6.0
Auth
API key
Packages
npm hetzner-dns-mcpoci ghcr.io/ni-c/hetzner-dns-mcp:0.6.0
License
MIT
Repository
github.com/ni-c/hetzner-dns-mcp
Website
hetzner-dns-mcp.ni-c.de
First seen
Oct 24, 2026
Last checked
Oct 24, 2026
Source
Official MCP Registrygithub-graphql

More from ni-c

Cite this page

Hetzner DNS MCP server. Agent Mart. https://agentmart.dev/connectors/ni-c-hetzner-dns-mcp (last updated 2026-10-24)