cPanel Hosting MCP server

The hosting account underneath the site: backups, DNS, SSL and cron.

Connect cPanel Hosting All connectors

Tools: 7
Read-only: 6
Write: 1; Off by default
Destructive: 1; Flagged distinctly

What it does

cPanel Hosting through an assistant

Works on any cPanel host, and works standalone -- a cPanel account need not have WordPress anywhere near it. An assistant can report on disk and account limits, tell you when the last real backup was taken, read DNS records and check certificate expiry. WordPress connections can link to one for read-only database access, provisioned as a MySQL user with SELECT and nothing else.

Account information: disk, bandwidth, package and limits
Backup inventory -- when the last real backup was actually taken
DNS records for the domains on the account
SSL certificate status and expiry
System cron jobs and their schedules
Trigger a full account backup (opt-in)

Ask your assistant

What people actually ask

Real questions, answered from live cPanel Hosting data.

“When was the last full backup of this hosting account taken?”

cpanel_list_backupscpanel_account_info

“Is the SSL certificate on this domain close to expiring?”

cpanel_ssl_status

“What cron jobs are running on this account, and how often?”

cpanel_list_cron_jobs

Tool catalogue

7 cPanel Hosting tools

Grouped by what they touch. Every tool is individually toggleable — you expose only what you want.

All tools

7 tools6 read-only · 1 write

Showing 7 of 7 tools

cpanel_account_info
Read-only
Disk usage and quota, bandwidth, and the limits the host has set on this cPanel account (databases, email accounts, subdomains, inodes). This is the account-level view a site-level tool cannot see: a site can be perfectly healthy while the account hosting it is at its disk or inode cap, which produces failures that look like application bugs. Always account-wide, even on a scoped connection. Read-only.
cpanel_create_backup
Write
Destructive
Asks cPanel to create a full account backup into the account's home directory. A REAL backup, unlike a ServeMCP checkpoint. REFUSED on a scoped connection: a full backup archives every site on the account, so running it from a connection labelled for one client would do something much larger than that connection claims to cover. It also consumes disk roughly equal to the account's own size, which on a near-full account causes its own failures — check cpanel_account_info first. The backup runs asynchronously; this returns once cPanel accepts the request, not once it exists.
cpanel_dns_records
Read-only
Lists the DNS zone records cPanel manages for a domain: A, CNAME, MX, TXT and the rest. Useful for confirming where a domain points and for checking SPF and DKIM when email is not delivering. Read-only. Note this shows the zone as cPanel holds it, which is NOT authoritative if the domain's nameservers point elsewhere, such as at Cloudflare — in that case the live answers come from there and this zone is ignored entirely.
cpanel_list_backups
Read-only
Lists the backups cPanel holds for the hosting account, with dates and types. This is the real backup story: unlike a ServeMCP checkpoint, which is scoped, short-lived and dies with the server, these are the account's own restore points. Check here before any risky change. Always account-wide. Read-only.
cpanel_list_cron_jobs
Read-only
Lists the real system cron jobs on the hosting account, which is different from WordPress's own WP-Cron. This is how you confirm whether a site with DISABLE_WP_CRON set actually has a system cron calling wp-cron.php — that combination with no system cron means scheduled work never runs at all, silently. On a scoped connection the list is filtered to jobs mentioning the scope path. Read-only.
cpanel_list_databases
Read-only
Lists the MySQL databases on the hosting account with their sizes, and the users granted access to each. Useful for confirming which database a site actually uses and for spotting abandoned databases still consuming the account's quota. On a scoped connection the list is filtered to databases whose name mentions the scope, which is a convenience rather than a restriction — the token can still see every database on the account. Read-only.
cpanel_ssl_status
Read-only
Lists the SSL certificates cPanel has installed, with their domains, issuer and expiry. An expiring or mismatched certificate breaks a site for every visitor at once, with no warning from the application itself. On a scoped connection the list is filtered to the scope domain. Read-only.

Every tool name and description, machine-readable: /llms-full.txt

Access & safety

You decide what it can touch

The same model applies to every connector, and it defaults closed.

Your own credential

You supply your own cPanel Hosting key, scoped however you like on their side. It is encrypted with AES-256-GCM and never returned by any API response or tool call.

Writes off by default

A new connection switches on a read-oriented default set only. Every write tool must be enabled deliberately before any client can call it.

Roles enforced server-side

READ, WRITE and ADMIN gate tool invocation on the server, not just in the UI. A READ member's token is refused any write tool.

Setup

Connect cPanel Hosting in minutes

No infrastructure to run. Copy one URL and one token into your client.

1Create a free workspace and connect cPanel Hosting.
2Choose which tools to expose — writes stay off until you enable them.
3Copy your MCP endpoint URL and bearer token.
4Paste them into Claude, Cursor, or any MCP client.

claude_desktop_config.json

{
  "mcpServers": {
    "serve-mcp": {
      "url": "https://servemcp.com/api/mcp/your-workspace",
      "transport": "http",
      "headers": {
        "Authorization": "Bearer smcp_..."
      }
    }
  }
}