Get the profile of the hosting account this MCP server is authenticated as.

List all apps on this hosting account.

Get one app's details by id.

Browse the account's directory tree (used to pick a location for a new app, or to sanity-check where a git clone landed).

Register an app whose files were already uploaded to app_dir.

Create an app by cloning a git repo. Either set provider+repo_full_name (clone via a connected git account, see ecp_git_* tools) or repo_url (+ optional repo_username/repo_password for a private repo). Note: the clone runs in the background - this tool returns once the clone STARTS, not once it finishes. For a large repo, check ecp_apps_directory_tree afterward before assuming the files are all there.

Delete an app: stops its supervisor process (if any) and removes its files. Irreversible.

Point an app at a domain: creates the nginx server block and updates the app's domain record.

Point a static-site app at a domain: creates the nginx static block and updates the app's domain record.

Run one step of an app's deploy lifecycle. action='start'|'stop'|'restart'|'remove' manage the app's supervisor process and return a real result. action='install'|'build' run a command in the background via app_root_directory (install_command/build_command) but this tool CANNOT show you their output - check ecp_apps_tail_logs or the app's own state afterward. action='configure' pins an asdf runtime version (stack_version) for the app and also returns no output.

Tail an app's supervisor-managed process log (only meaningful after a 'start' deploy step).

Clear an app's supervisor-managed process log.

Save a named custom command for an app (does not run it - see the blocked command-execution phase in the plan for why 'run' isn't exposed yet).

List every domain (primary + additional) on this account.

List additional (addon) domains only, excluding the primary domain.

Add an additional (addon) domain to this account.

Add a subdomain of a domain this account already owns.

Delete a domain from this account. Cannot delete the primary domain. Irreversible.

Redirect a domain to another URL (e.g. www -> apex).

Remove a domain's redirect.

List DNS records for a domain's zone.

Add a DNS record to a domain's zone.

Delete a DNS record from a domain's zone. record must match the existing record (name/type/content) closely enough for the DNS provider to identify it.

List all port mappings on this account.

List port mappings for one domain.

Update a port mapping and its nginx config. Can affect site routing.

List domains that have an nginx config on this container.

Read the raw nginx config for a domain.

Overwrite the raw nginx config for a domain. Malformed content can break the site - verify the config is valid before writing.

List files/folders in a directory.

Get the directory tree including files (for browsing/editing, unlike ecp_apps_directory_tree which is folders only).

Check whether a directory exists.

Read a text file's content.

Overwrite a text file's content (creates it if it doesn't exist). Can break a running app if it's a config/env/source file - review the current content first.

Create a new empty file.

Create a new folder.

Rename a file or folder within a directory.

Copy one file/folder to a destination.

Copy multiple files/folders to a destination.

Move one file/folder to a destination.

Move multiple files/folders to a destination.

chmod a file (e.g. new_permission: '644').

Compress one or more files/folders into an archive.

Extract an archive into a destination directory.

Delete a single file or folder. Irreversible.

Delete multiple files/folders. Irreversible.

Check whether Postgres/MSSQL/Mongo are enabled/configured/reachable for this account (MySQL is always available - it's EHM's own DB engine, not an optional one).

Get the static host/port connection info for each database engine, for apps running in this account's own container.

Create a MySQL database. db_name gets the account's own prefix applied automatically.

Delete a MySQL database. Irreversible.

List this account's MySQL databases.

Get size (in bytes) of each MySQL database.

Get size of each table in a MySQL database.

List a table's columns (metadata only, no row data).

Delete all rows from a table. Irreversible.

Drop (delete) a table entirely. Irreversible.

Browse rows in a table. Connects as the given MySQL user (db_username/password), which must be a user this account owns.

Insert a row into a table.

Update a row in a table, identified by primary_key.

Delete a row from a table, identified by primary_key. Irreversible.

Export a MySQL database as a .sql dump (returned as text - large databases will produce a large result, consider ecp_mysql_backup_to_storage_bd instead for anything beyond a quick look).

Import a .sql dump into an existing MySQL database, overwriting its content. Irreversible - pass the full SQL as text.

Back up a MySQL database to the account's storage.bd tenant.

Restore a MySQL database from a storage.bd snapshot, overwriting its current content. Irreversible.

List additional MySQL users on this account (beyond the account's own default user).

Create an additional MySQL user. db_username gets the account's own prefix applied automatically.

Delete an additional MySQL user. Irreversible.

Reassign a database to be owned by a different MySQL user (both must already belong to this account).

List a MySQL user's privileges on a database.

Grant privileges (e.g. ['SELECT','INSERT']) to a MySQL user on a database. Security-sensitive - review carefully before confirming.

Revoke privileges from a MySQL user on a database.

Create a MongoDB database. db_name gets the account's own prefix applied automatically. db_username must already exist (see ecp_mongo_create_user).

Delete a MongoDB database. Irreversible.

List this account's MongoDB databases.

Get size of each MongoDB database.

List collections in a database (metadata only, no document data).

Create a collection in a database.

Drop (delete) a collection entirely. Irreversible.

Browse documents in a collection. Connects as the given db_username/password, which must be a user this account owns.

Insert a document into a collection.

Update a document, identified by id.

Delete a document, identified by id. Irreversible.

Back up a MongoDB database to the account's storage.bd tenant.

Restore a MongoDB database from a storage.bd snapshot, overwriting its current content. Irreversible.

List additional MongoDB users on this account.

Create a MongoDB user. db_username gets the account's own prefix applied automatically. Grants readWrite on this account's default database - MongoDB here has no read-only role option, unlike MySQL/Postgres's granular privilege grants.

Delete a MongoDB user. Irreversible.

Change a MongoDB user's password.

Grant a MongoDB user readWrite access to a database (both must already belong to this account). MongoDB only supports whole-database readWrite here - no read-only or per-collection grants like MySQL/Postgres. Security-sensitive - review carefully before confirming.

Create a MSSQL database. db_name gets the account's own prefix applied automatically. Creates the login together with the database.

Delete a MSSQL database. Irreversible.

List this account's MSSQL databases.

Get size of each MSSQL database.

Get size of each table in a MSSQL database.

List a table's columns (metadata only, no row data).

Delete all rows from a table. Irreversible.

Drop (delete) a table entirely. Irreversible.

Browse rows in a table. Connects as the given db_username/password, which must be a user this account owns.

Insert a row into a table.

Update a row in a table, identified by primary_key.

Delete a row from a table, identified by primary_key. Irreversible.

Back up a MSSQL database to the account's storage.bd tenant.

Restore a MSSQL database from a storage.bd snapshot, overwriting its current content. Irreversible.

List additional MSSQL users on this account.

Create an additional MSSQL user. db_username gets the account's own prefix applied automatically.

Delete a MSSQL user. Irreversible.

Change a database's owning user (both must already belong to this account).

List a MSSQL user's privileges on a database. Note: MSSQL's privilege model here is coarser than MySQL/Postgres - only these 5 DML permissions, applied schema-wide (SCHEMA::dbo), not per-table.

Grant privileges to a user on a database. Note: MSSQL's privilege model here is coarser than MySQL/Postgres - only these 5 DML permissions, applied schema-wide (SCHEMA::dbo), not per-table. Security-sensitive - review carefully before confirming.

Revoke privileges from a user on a database. Note: MSSQL's privilege model here is coarser than MySQL/Postgres - only these 5 DML permissions, applied schema-wide (SCHEMA::dbo), not per-table.

Create a Postgres database. db_name gets the account's own prefix applied automatically. db_username must already exist (see ecp_postgres_create_database_user).

Delete a Postgres database. Irreversible.

List this account's Postgres databases.

Get size of each Postgres database.

Get size of each table in a Postgres database.

List a table's columns (metadata only, no row data).

Delete all rows from a table. Irreversible.

Drop (delete) a table entirely. Irreversible.

Browse rows in a table. Connects as the given db_username/password, which must be a user this account owns.

Insert a row into a table.

Update a row in a table, identified by primary_key.

Delete a row from a table, identified by primary_key. Irreversible.

Back up a Postgres database to the account's storage.bd tenant.

Restore a Postgres database from a storage.bd snapshot, overwriting its current content. Irreversible.

List additional Postgres users on this account.

Create an additional Postgres user. db_username gets the account's own prefix applied automatically.

Delete a Postgres user. Irreversible.

Change a database's owning user (both must already belong to this account).

List a Postgres user's privileges on a database. Applied per-table (all tables in the public schema) plus default privileges for future tables.

Grant privileges to a user on a database. Applied per-table (all tables in the public schema) plus default privileges for future tables. Security-sensitive - review carefully before confirming.

Revoke privileges from a user on a database. Applied per-table (all tables in the public schema) plus default privileges for future tables.

Export a Postgres database as a .sql dump (returned as text - large databases will produce a large result, consider ecp_postgres_backup_to_storage_bd instead for anything beyond a quick look).

Import a .sql dump into an existing Postgres database, overwriting its content. Irreversible - pass the full SQL as text.

List PHP versions installed on this account's container.

List installed PHP extensions for a version.

Get php.ini values for a PHP version.

Overwrite php.ini for a PHP version. Can break every app using that version if malformed.

Install a PHP version (apt-get, takes time). This tool cannot show install output - check ecp_php_installed_versions afterward to confirm it succeeded.

Uninstall a PHP version. Breaks any app still configured to use it. This tool cannot show uninstall output - check ecp_php_installed_versions afterward.

List certificates available for a domain (pass certificate_name: 'lets_encrypt' or 'self_signed').

Issue a new Let's Encrypt certificate for a domain (does not apply it to nginx - see ecp_ssl_update_lets_encrypt or ecp_ssl_apply_certificate).

Issue and apply a Let's Encrypt certificate to a domain's nginx config. Can break HTTPS for that domain if it fails partway.

Generate a new self-signed certificate for a domain (does not apply it to nginx).

Generate and apply a self-signed certificate to a domain's nginx config. Can break HTTPS for that domain if it fails partway.

Apply an already-generated certificate to a domain's nginx config, without regenerating it. Can break HTTPS for that domain if misapplied.

Get disk, container-temp-file, and database usage/quota for this account.

Check whether an ECP/system update is available.

Update account/hosting settings (hosting_environment, hosting_version) or ECP password. Requires the account's own current password. Account-wide impact - review carefully.

Get this account's ECP config key/values.

Update ECP config key/values for this account.

List all supervised processes on this account.

Get status/info for one supervised process.

Register a new supervised (auto-restarting) process.

Remove a supervised process. Irreversible (config is deleted, not just stopped).

Start a supervised process.

Stop a supervised process.

Restart a supervised process.

List this account's scheduled cron jobs.

Schedule a cron job. cron_expression is a standard 5-field schedule (e.g. '0 3 * * *'). The command runs unattended, repeatedly, as this account's own system user - review carefully before confirming.

Remove a scheduled cron job. Must match an existing entry's cron_expression and command exactly (see ecp_crontab_list).

List all asdf plugins available to install (e.g. nodejs, python, ruby).

List asdf plugins currently installed on this account's container.

List all available versions for a plugin (e.g. nodejs).

List installed versions for a plugin.

Install a plugin version (takes time). This tool cannot show install output - check ecp_asdf_list_installed_versions afterward to confirm it succeeded.

Uninstall a plugin version. Breaks anything still configured to use it. This tool cannot show output - check ecp_asdf_list_installed_versions afterward.

Set the global default version for a plugin.

List available one-click app blueprints (fetched from the public EH blueprints catalog).

Get a blueprint's definition, including the install commands it expects to run (for you to review/run yourself - see note on why this MCP server doesn't run them automatically).

Scaffold a WordPress app: creates the app directory, nginx server block, and patches wp-config.php for HTTPS. Does NOT install WordPress itself - see ecp_oneclick_get_blueprint and run its install commands yourself afterward.

Create a MySQL user + database in one step, for use during a one-click app install. If user creation fails (e.g. already exists), database creation is still attempted - check ecp_mysql_list_db_users/ecp_mysql_list_databases afterward if unsure.

List git providers (GitHub/GitLab/Bitbucket) enabled for this install.

Get the OAuth authorize URL to connect a git provider. Open it in a browser to complete the connection - this tool can't complete OAuth itself.

List this account's connected git accounts.

Disconnect a connected git provider.

Browse repos available via a connected git provider (for picking one to deploy from).

Get an app's git deploy-webhook config and status.

Create a deploy webhook for an app: runs commands automatically whenever a matching push arrives. Review each command carefully before confirming.

Update an app's deploy-webhook branch filter and/or commands. Review each command carefully before confirming.

Delete an app's deploy webhook. Irreversible.

Rotate an app's deploy-webhook secret (invalidates the old one).

Get what webhook features the app's git provider supports.

List an app's webhook delivery history (for debugging why a push didn't deploy).

Get this account's resource/quota status (e.g. disk or CPU pressure, suspension warnings).

Dismiss a resource-status warning banner.

List this account's notifications.

Mark one notification read.

Mark all notifications read.

Delete one notification. Irreversible.

Delete all notifications. Irreversible.

Get this account's storage.bd backup config (client_id only - the secret is never returned).

Set this account's storage.bd backup credentials (client_id as '.', client_secret).

Check whether a storage.bd backup/restore job is currently running for this account.

List local restic snapshots of this account's host paths (separate from storage.bd's own backups).