Skip to content

Connectors · Developer & infrastructure

Hetzner Cloud MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Hetzner Cloud and the rest of your systems. It gives your agent 190 Hetzner Cloud actions (83 reads, 85 writes and 22 that wait for a confirmation) and holds the Hetzner Cloud credential itself, so the agent never does. It paces Hetzner Cloud's limits and records every call.

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "hetzner_cloud.servers.list",  intent: "check which Hetzner Cloud account is connected"}# List Servers · read · 1 upstream call
  • 190actionsin one signed file
  • 83readlook, never change
  • 85writecreate and update
  • 22wait for a yesdestructive, confirmed first

Set up

Connect Hetzner Cloud in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect Hetzner Cloud.

    Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.

    • access_tokenHetzner Cloud API token
    account { op: "connections.requirements", service: "hetzner_cloud" }
    # free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "hetzner_cloud.servers.list" }# list servers · read · 1 upstream callcheck { action: "hetzner_cloud.servers.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Hetzner Cloud at a glance

Sign-in
Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide
access_token
Limits we pace to
3,600 calls an hour, per connection
API covered
Hetzner Cloud API v1 (OpenAPI 3.1.2, document version 1.0.0)api.hetzner.cloud
Built from
Hetzner Cloud's documentation, read 23 October 2026docs.hetzner.clouddocs.hetzner.cloud
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
81 of 83 reads, for up to 5 minutes; a write clears what it affects
Shared entities
2, so ask can line Hetzner Cloud up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Hetzner Cloud.

190 actions in 19 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 83readlook, never change
  • 85writecreate and update
  • 22destructivewait for a confirmation
  1. Servers

    33

    7 read · 22 write · 4 destructive

    List Servers · Get a Server · Create a Server · Update a Server

  2. Zones

    25

    9 read · 12 write · 4 destructive

    List Zones · List Actions for a Zone · List Actions · List RRSets

  3. Load balancers

    23

    7 read · 13 write · 3 destructive

    List Load Balancers · List Actions for a Load Balancer · List Actions · Get a Load Balancer

  4. Networks

    16

    7 read · 6 write · 3 destructive

    List Networks · Get a Network · Create a Network · Update a Network

  5. Floating ips

    13

    6 read · 6 write · 1 destructive

    List Floating IPs · List Actions for a Floating IP · List Actions · Get a Floating IP

  6. Primary ips

    13

    6 read · 6 write · 1 destructive

    List Primary IPs · List Actions for a Primary IP · List Actions · Get a Primary IP

  7. Volumes

    13

    6 read · 6 write · 1 destructive

    List Volumes · List Actions for a Volume · List Actions · Get a Volume

  8. Firewalls

    12

    6 read · 5 write · 1 destructive

    List Firewalls · List Actions for a Firewall · List Actions · Get a Firewall

11 more areas · 42 actions
  • Certificates 10
  • Images 9
  • Placement groups 5
  • SSH keys 5
  • Actions 2
  • Datacenters 2
  • Isos 2
  • Load balancer types 2
  • Locations 2
  • Server types 2
  • Pricing 1

Top actions

The Hetzner Cloud API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 20 of Hetzner Cloud's 20 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
hetzner_cloud.servers.listList ServersList Servers.readinfra.instance.list18 connectors
hetzner_cloud.networks.listList NetworksList Networks.readsecurity.network.list15 connectors
hetzner_cloud.servers.getGet a ServerGet a Server.readinfra.instance.get15 connectors
hetzner_cloud.servers.createCreate a ServerCreate a Server.writeinfra.instance.create10 connectors
hetzner_cloud.networks.getGet a NetworkGet a Network.readsecurity.network.get10 connectors
hetzner_cloud.servers.updateUpdate a ServerUpdate a Server.writeinfra.instance.update15 connectors
hetzner_cloud.server_types.listList Server TypesList Server Types.readinfra.instance_size.list6 connectors
hetzner_cloud.servers.deleteDelete a ServerDelete a Server.destructiveinfra.instance.delete13 connectors
hetzner_cloud.images.listList ImagesList Images.readinfra.instance_image.list4 connectors
hetzner_cloud.networks.createCreate a NetworkCreate a Network.writesecurity.network.create8 connectors
hetzner_cloud.images.getGet an ImageGet an Image.readinfra.instance_image.get4 connectors
hetzner_cloud.server_types.getGet a Server TypeGet a Server Type.readinfra.instance_size.get3 connectors

Try it

Prompts to paste into Claude.

Each one names the Hetzner Cloud actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    List Servers in Hetzner Cloud and tell me what stands out.

    callshetzner_cloud.servers.list

  2. Writewrite

    Create a Server in Hetzner Cloud. Show me exactly what you will send before you save it.

    callshetzner_cloud.servers.create

Governance for Hetzner Cloud

Destructive actions wait for a yes.

22 Hetzner Cloud actions are destructive. These are all of them:

  • Delete a Serverhetzner_cloud.servers.delete
  • Delete a Networkhetzner_cloud.networks.delete
  • Delete an Imagehetzner_cloud.images.delete
  • Delete a Zonehetzner_cloud.zones.delete
  • Delete a Volumehetzner_cloud.volumes.delete
  • Delete an SSH keyhetzner_cloud.ssh_keys.delete
  • Delete a Firewallhetzner_cloud.firewalls.delete
  • Delete a Primary IPhetzner_cloud.primary_ips.delete
  • Delete a Certificatehetzner_cloud.certificates.delete
  • Delete a Floating IPhetzner_cloud.floating_ips.delete
  • Delete a Load Balancerhetzner_cloud.load_balancers.delete
  • Delete a PlacementGrouphetzner_cloud.placement_groups.delete
  • Delete an RRSethetzner_cloud.zones_rrsets.delete
  • Rebuild a Server from an Imagehetzner_cloud.servers.rebuild
  • Delete a route from a Networkhetzner_cloud.networks.delete_route
  • Import a Zone filehetzner_cloud.zones.import_zonefile
  • Delete a subnet from a Networkhetzner_cloud.networks.delete_subnet
  • Disable Backups for a Serverhetzner_cloud.servers.disable_backup
  • Reset root Password of a Serverhetzner_cloud.servers.reset_password
  • Remove Targethetzner_cloud.load_balancers.remove_target
  • Delete Servicehetzner_cloud.load_balancers.delete_service
  • Remove Records from an RRSethetzner_cloud.zones_rrsets.remove_records

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

dohetzner_cloud.servers.deleteconfirm_policy: human

Delete a Server?

intent: the user asked me to delete a Server

run suspended · waiting for a named person · key hetzner-cloud-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "hetzner-cloud-agent",  allowed_actions: ["hetzner_cloud.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "hetzner_cloud.servers.delete", approver: "[email protected]" },    { match: "hetzner_cloud.networks.delete", approver: "[email protected]" },    { match: "hetzner_cloud.images.delete", approver: "[email protected]" }  ]}
Illustrative. Scoped to Hetzner Cloud only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Hetzner Cloud costs on actionlake.

Every Hetzner Cloud action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Hetzner Cloud refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 190 Hetzner Cloud actions
  • 190actions pageeach page of a long list is one call
  • 81reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Hetzner Cloud action.

190 actions by area: the id your agent calls, what it does, and its effect.

Servers33
  • hetzner_cloud.servers.add_to_placement_groupAdd a Server to a Placement Groupwrite
  • hetzner_cloud.servers.attach_isoAttach an ISO to a Serverwrite
  • hetzner_cloud.servers.attach_to_networkAttach a Server to a Networkwrite
  • hetzner_cloud.servers.change_alias_ipsChange alias IPs of a Networkwrite
  • hetzner_cloud.servers.change_dns_ptrChange reverse DNS entry for this Serverwrite
  • hetzner_cloud.servers.change_protectionChange Server Protectionwrite
  • hetzner_cloud.servers.change_typeChange the Type of a Serverwrite
  • hetzner_cloud.servers.createCreate a Serverwrite
  • hetzner_cloud.servers.create_imageCreate Image from a Serverwrite
  • hetzner_cloud.servers.deleteDelete a Serverdestructive
  • hetzner_cloud.servers.detach_from_networkDetach a Server from a Networkwrite
  • hetzner_cloud.servers.detach_isoDetach an ISO from a Serverwrite
  • hetzner_cloud.servers.disable_backupDisable Backups for a Serverdestructive
  • hetzner_cloud.servers.disable_rescueDisable Rescue Mode for a Serverwrite
  • hetzner_cloud.servers.enable_backupEnable and Configure Backups for a Serverwrite
  • hetzner_cloud.servers.enable_rescueEnable Rescue Mode for a Serverwrite
  • hetzner_cloud.servers.getGet a Serverread
  • hetzner_cloud.servers.get_actionGet an Action for a Serverread
  • hetzner_cloud.servers.get_metricsGet Metrics for a Serverread
  • hetzner_cloud.servers.listList Serversread
  • hetzner_cloud.servers.list_actionsList Actions for a Serverread
  • hetzner_cloud.servers.poweroffPower off a Serverwrite
  • hetzner_cloud.servers.poweronPower on a Serverwrite
  • hetzner_cloud.servers.rebootSoft-reboot a Serverwrite
  • hetzner_cloud.servers.rebuildRebuild a Server from an Imagedestructive
  • hetzner_cloud.servers.remove_from_placement_groupRemove from Placement Groupwrite
  • hetzner_cloud.servers.request_consoleRequest Console for a Serverwrite
  • hetzner_cloud.servers.resetReset a Serverwrite
  • hetzner_cloud.servers.reset_passwordReset root Password of a Serverdestructive
  • hetzner_cloud.servers.shutdownShutdown a Serverwrite
  • hetzner_cloud.servers.updateUpdate a Serverwrite
  • hetzner_cloud.servers_actions.getGet an Actionread
  • hetzner_cloud.servers_actions.listList Actionsread
Zones25
  • hetzner_cloud.zones.change_primary_nameserversChange a Zone's Primary Nameserverswrite
  • hetzner_cloud.zones.change_protectionChange a Zone's Protectionwrite
  • hetzner_cloud.zones.change_ttlChange a Zone's Default TTLwrite
  • hetzner_cloud.zones.createCreate a Zonewrite
  • hetzner_cloud.zones.deleteDelete a Zonedestructive
  • hetzner_cloud.zones.getGet a Zoneread
  • hetzner_cloud.zones.get_actionGet an Action for a Zoneread
  • hetzner_cloud.zones.get_zonefileExport a Zone fileread
  • hetzner_cloud.zones.import_zonefileImport a Zone filedestructive
  • hetzner_cloud.zones.listList Zonesread
  • hetzner_cloud.zones.list_actionsList Actions for a Zoneread
  • hetzner_cloud.zones.updateUpdate a Zonewrite
  • hetzner_cloud.zones_actions.getGet an Actionread
  • hetzner_cloud.zones_actions.listList Actionsread
  • hetzner_cloud.zones_rrsets.add_recordsAdd Records to an RRSetwrite
  • hetzner_cloud.zones_rrsets.change_protectionChange an RRSet's Protectionwrite
  • hetzner_cloud.zones_rrsets.change_ttlChange an RRSet's TTLwrite
  • hetzner_cloud.zones_rrsets.createCreate an RRSetwrite
  • hetzner_cloud.zones_rrsets.deleteDelete an RRSetdestructive
  • hetzner_cloud.zones_rrsets.getGet an RRSetread
  • hetzner_cloud.zones_rrsets.listList RRSetsread
  • hetzner_cloud.zones_rrsets.remove_recordsRemove Records from an RRSetdestructive
  • hetzner_cloud.zones_rrsets.set_recordsSet Records of an RRSetwrite
  • hetzner_cloud.zones_rrsets.updateUpdate an RRSetwrite
  • hetzner_cloud.zones_rrsets.update_recordsUpdate Records of an RRSetwrite
Load balancers23
  • hetzner_cloud.load_balancers.add_serviceAdd Servicewrite
  • hetzner_cloud.load_balancers.add_targetAdd Targetwrite
  • hetzner_cloud.load_balancers.attach_to_networkAttach a Load Balancer to a Networkwrite
  • hetzner_cloud.load_balancers.change_algorithmChange Algorithmwrite
  • hetzner_cloud.load_balancers.change_dns_ptrChange reverse DNS entry for this Load Balancerwrite
  • hetzner_cloud.load_balancers.change_protectionChange Load Balancer Protectionwrite
  • hetzner_cloud.load_balancers.change_typeChange the Type of a Load Balancerwrite
  • hetzner_cloud.load_balancers.createCreate a Load Balancerwrite
  • hetzner_cloud.load_balancers.deleteDelete a Load Balancerdestructive
  • hetzner_cloud.load_balancers.delete_serviceDelete Servicedestructive
  • hetzner_cloud.load_balancers.detach_from_networkDetach a Load Balancer from a Networkwrite
  • hetzner_cloud.load_balancers.disable_public_interfaceDisable the public interface of a Load Balancerwrite
  • hetzner_cloud.load_balancers.enable_public_interfaceEnable the public interface of a Load Balancerwrite
  • hetzner_cloud.load_balancers.getGet a Load Balancerread
  • hetzner_cloud.load_balancers.get_actionGet an Action for a Load Balancerread
  • hetzner_cloud.load_balancers.get_metricsGet Metrics for a LoadBalancerread
  • hetzner_cloud.load_balancers.listList Load Balancersread
  • hetzner_cloud.load_balancers.list_actionsList Actions for a Load Balancerread
  • hetzner_cloud.load_balancers.remove_targetRemove Targetdestructive
  • hetzner_cloud.load_balancers.updateUpdate a Load Balancerwrite
  • hetzner_cloud.load_balancers.update_serviceUpdate Servicewrite
  • hetzner_cloud.load_balancers_actions.getGet an Actionread
  • hetzner_cloud.load_balancers_actions.listList Actionsread
Networks16
  • hetzner_cloud.networks.add_routeAdd a route to a Networkwrite
  • hetzner_cloud.networks.add_subnetAdd a subnet to a Networkwrite
  • hetzner_cloud.networks.change_ip_rangeChange IP range of a Networkwrite
  • hetzner_cloud.networks.change_protectionChange Network Protectionwrite
  • hetzner_cloud.networks.createCreate a Networkwrite
  • hetzner_cloud.networks.deleteDelete a Networkdestructive
  • hetzner_cloud.networks.delete_routeDelete a route from a Networkdestructive
  • hetzner_cloud.networks.delete_subnetDelete a subnet from a Networkdestructive
  • hetzner_cloud.networks.getGet a Networkread
  • hetzner_cloud.networks.get_actionGet an Action for a Networkread
  • hetzner_cloud.networks.listList Networksread
  • hetzner_cloud.networks.list_actionsList Actions for a Networkread
  • hetzner_cloud.networks.list_membersList Members of a Networkread
  • hetzner_cloud.networks.updateUpdate a Networkwrite
  • hetzner_cloud.networks_actions.getGet an Actionread
  • hetzner_cloud.networks_actions.listList Actionsread
Floating ips13
  • hetzner_cloud.floating_ips.assignAssign a Floating IP to a Serverwrite
  • hetzner_cloud.floating_ips.change_dns_ptrChange reverse DNS records for a Floating IPwrite
  • hetzner_cloud.floating_ips.change_protectionChange Floating IP Protectionwrite
  • hetzner_cloud.floating_ips.createCreate a Floating IPwrite
  • hetzner_cloud.floating_ips.deleteDelete a Floating IPdestructive
  • hetzner_cloud.floating_ips.getGet a Floating IPread
  • hetzner_cloud.floating_ips.get_actionGet an Action for a Floating IPread
  • hetzner_cloud.floating_ips.listList Floating IPsread
  • hetzner_cloud.floating_ips.list_actionsList Actions for a Floating IPread
  • hetzner_cloud.floating_ips.unassignUnassign a Floating IPwrite
  • hetzner_cloud.floating_ips.updateUpdate a Floating IPwrite
  • hetzner_cloud.floating_ips_actions.getGet an Actionread
  • hetzner_cloud.floating_ips_actions.listList Actionsread
Primary ips13
  • hetzner_cloud.primary_ips.assignAssign a Primary IP to a resourcewrite
  • hetzner_cloud.primary_ips.change_dns_ptrChange reverse DNS records for a Primary IPwrite
  • hetzner_cloud.primary_ips.change_protectionChange Primary IP Protectionwrite
  • hetzner_cloud.primary_ips.createCreate a Primary IPwrite
  • hetzner_cloud.primary_ips.deleteDelete a Primary IPdestructive
  • hetzner_cloud.primary_ips.getGet a Primary IPread
  • hetzner_cloud.primary_ips.get_actionGet an Action for a Primary IPread
  • hetzner_cloud.primary_ips.listList Primary IPsread
  • hetzner_cloud.primary_ips.list_actionsList Actions for a Primary IPread
  • hetzner_cloud.primary_ips.unassignUnassign a Primary IP from a resourcewrite
  • hetzner_cloud.primary_ips.updateUpdate a Primary IPwrite
  • hetzner_cloud.primary_ips_actions.getGet an Actionread
  • hetzner_cloud.primary_ips_actions.listList Actionsread
Volumes13
  • hetzner_cloud.volumes.attachAttach Volume to a Serverwrite
  • hetzner_cloud.volumes.change_protectionChange Volume Protectionwrite
  • hetzner_cloud.volumes.createCreate a Volumewrite
  • hetzner_cloud.volumes.deleteDelete a Volumedestructive
  • hetzner_cloud.volumes.detachDetach Volumewrite
  • hetzner_cloud.volumes.getGet a Volumeread
  • hetzner_cloud.volumes.get_actionGet an Action for a Volumeread
  • hetzner_cloud.volumes.listList Volumesread
  • hetzner_cloud.volumes.list_actionsList Actions for a Volumeread
  • hetzner_cloud.volumes.resizeResize Volumewrite
  • hetzner_cloud.volumes.updateUpdate a Volumewrite
  • hetzner_cloud.volumes_actions.getGet an Actionread
  • hetzner_cloud.volumes_actions.listList Actionsread
Firewalls12
  • hetzner_cloud.firewalls.apply_to_resourcesApply to Resourceswrite
  • hetzner_cloud.firewalls.createCreate a Firewallwrite
  • hetzner_cloud.firewalls.deleteDelete a Firewalldestructive
  • hetzner_cloud.firewalls.getGet a Firewallread
  • hetzner_cloud.firewalls.get_actionGet an Action for a Firewallread
  • hetzner_cloud.firewalls.listList Firewallsread
  • hetzner_cloud.firewalls.list_actionsList Actions for a Firewallread
  • hetzner_cloud.firewalls.remove_from_resourcesRemove from Resourceswrite
  • hetzner_cloud.firewalls.set_rulesSet Ruleswrite
  • hetzner_cloud.firewalls.updateUpdate a Firewallwrite
  • hetzner_cloud.firewalls_actions.getGet an Actionread
  • hetzner_cloud.firewalls_actions.listList Actionsread
Certificates10
  • hetzner_cloud.certificates.createCreate a Certificatewrite
  • hetzner_cloud.certificates.deleteDelete a Certificatedestructive
  • hetzner_cloud.certificates.getGet a Certificateread
  • hetzner_cloud.certificates.get_actionGet an Action for a Certificateread
  • hetzner_cloud.certificates.listList Certificatesread
  • hetzner_cloud.certificates.list_actionsList Actions for a Certificateread
  • hetzner_cloud.certificates.retryRetry Issuance or Renewalwrite
  • hetzner_cloud.certificates.updateUpdate a Certificatewrite
  • hetzner_cloud.certificates_actions.getGet an Actionread
  • hetzner_cloud.certificates_actions.listList Actionsread
Images9
  • hetzner_cloud.images.change_protectionChange Image Protectionwrite
  • hetzner_cloud.images.deleteDelete an Imagedestructive
  • hetzner_cloud.images.getGet an Imageread
  • hetzner_cloud.images.get_actionGet an Action for an Imageread
  • hetzner_cloud.images.listList Imagesread
  • hetzner_cloud.images.list_actionsList Actions for an Imageread
  • hetzner_cloud.images.updateUpdate an Imagewrite
  • hetzner_cloud.images_actions.getGet an Actionread
  • hetzner_cloud.images_actions.listList Actionsread
Placement groups5
  • hetzner_cloud.placement_groups.createCreate a PlacementGroupwrite
  • hetzner_cloud.placement_groups.deleteDelete a PlacementGroupdestructive
  • hetzner_cloud.placement_groups.getGet a PlacementGroupread
  • hetzner_cloud.placement_groups.listList Placement Groupsread
  • hetzner_cloud.placement_groups.updateUpdate a PlacementGroupwrite
SSH keys5
  • hetzner_cloud.ssh_keys.createCreate an SSH keywrite
  • hetzner_cloud.ssh_keys.deleteDelete an SSH keydestructive
  • hetzner_cloud.ssh_keys.getGet an SSH keyread
  • hetzner_cloud.ssh_keys.listList SSH keysread
  • hetzner_cloud.ssh_keys.updateUpdate an SSH keywrite
Actions2
  • hetzner_cloud.actions.getGet an Actionread
  • hetzner_cloud.actions.listGet multiple Actionsread
Datacenters2
  • hetzner_cloud.datacenters.getGet a Data Centerread
  • hetzner_cloud.datacenters.listList Data Centersread
Isos2
  • hetzner_cloud.isos.getGet an ISOread
  • hetzner_cloud.isos.listList ISOsread
Load balancer types2
  • hetzner_cloud.load_balancer_types.getGet a Load Balancer Typeread
  • hetzner_cloud.load_balancer_types.listList Load Balancer Typesread
Locations2
  • hetzner_cloud.locations.getGet a Locationread
  • hetzner_cloud.locations.listList Locationsread
Server types2
  • hetzner_cloud.server_types.getGet a Server Typeread
  • hetzner_cloud.server_types.listList Server Typesread
Pricing1
  • hetzner_cloud.pricing.getGet all pricesread

Questions

The Hetzner Cloud MCP server, answered.

Is there a Hetzner Cloud MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 190 Hetzner Cloud actions across servers, zones, load balancers and networks, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Hetzner Cloud.

What do I need to connect Hetzner Cloud?

Hetzner Cloud API token. The free call account { op: "connections.requirements", service: "hetzner_cloud" } lists exactly what to paste.

Can an AI agent delete or change things in Hetzner Cloud?

Only if its key allows it, and only with an explicit confirmation. 22 Hetzner Cloud actions are destructive, including delete a Server, delete a Network and delete an Image. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Hetzner Cloud API limit?

actionlake paces every call to the limits in the Hetzner Cloud service file: 3,600 calls an hour per connection. Repeated reads are answered from cache (81 Hetzner Cloud actions can be), which never reaches Hetzner Cloud.

What does a Hetzner Cloud action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (190 Hetzner Cloud actions page). Cache hits, searches, dry runs and calls Hetzner Cloud refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Hetzner Cloud API does it cover?

The Hetzner Cloud API v1 (OpenAPI 3.1.2, document version 1.0.0) at api.hetzner.cloud. It is built from Hetzner Cloud's documentation as read on 23 October 2026. 190 actions in 19 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my Hetzner Cloud data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Hetzner Cloud credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent Hetzner Cloud today.

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.