List all servers in the project, with optional filtering by name, label, or status.

Get details of a specific server by ID.

Create a new server with the specified type, image, and configuration options.

Update a server's name or labels.

Permanently delete a server. This destroys the server and all associated data.

Start a stopped server by powering it on.

Force power off a server immediately. This is like pulling the power cord.

Send an ACPI reboot signal to the server for a soft reboot.

Perform a hard reset on the server, equivalent to pressing the reset button.

Send an ACPI shutdown signal for a graceful OS shutdown.

Rebuild a server from an image, wiping all data on the server.

Change the server type. The server will be stopped and migrated if needed.

Enable rescue mode on a server. The server must be rebooted to enter rescue mode.

Disable rescue mode on a server. The next reboot will boot normally.

Retrieve time series metrics (CPU, disk, network) for a server over a time range.

List all actions for a specific server, such as power changes and rebuilds.

Enable or disable delete and rebuild protection on a server to guard against accidental destruction.

Request a noVNC WebSocket URL and credentials to access the server console. The URL is valid for a limited time.

Enable automatic daily backups for a server. Backups increase the server price by 20 percent. The backup window is chosen automatically.

Disable automatic backups for a server and remove all existing backup snapshots.

Replace the alias IPs that a server has on a private network. The list overrides any existing alias IPs for that network.

Change the reverse DNS entry for one of a server's public IPv4 or IPv6 addresses. Set dns_ptr to null to reset to the default.

Attach a server to a private network, optionally assigning a specific IP, alias IPs, or IP range.

Detach a server from a private network, removing its private connectivity on that network.

Add a server to a placement group. The server must be powered off before it can be added.

Remove a server from its placement group.

Reset the root password of a server. The server is rebooted and a new root password is returned in the result.

Deprecated by Hetzner; /datacenters is removed after 2026-10-01 (HTTP 410). Use hetzner_list_server_types (locations[].available/recommended) and hetzner_list_locations instead.

Deprecated by Hetzner; /datacenters is removed after 2026-10-01 (HTTP 410). Use hetzner_list_server_types (locations[].available/recommended) and hetzner_list_locations instead.

List all available Hetzner Cloud locations (regions).

Get details of a specific location by ID.

List all available server types with their specs and pricing.

Get details of a specific server type, including specs and pricing.

Get current prices for all Hetzner Cloud resources (servers, volumes, traffic, floating IPs, load balancers, and more).

List all networks in the project, with optional filtering by name or labels.

Get details of a specific network by its ID.

Create a new network with the specified IP range, and optionally subnets and routes.

Update properties of a network such as name, labels, or vSwitch route exposure.

Delete a network. All subnets and routes within it will also be deleted.

Add a subnet to an existing network.

Remove a subnet from an existing network by its IP range.

Add a route to an existing network.

Remove a route from an existing network.

Expand the IP range of an existing network. The new CIDR range must contain the current range; shrinking is not supported.

Enable or disable delete protection on a network to guard against accidental destruction.

List all actions performed on a specific network, such as subnet and route changes.

List all firewalls in the project, with optional filtering by name or labels.

Get details of a specific firewall by its ID.

Create a new firewall with optional rules and resource assignments.

Update a firewall name or labels.

Delete a firewall. It must be removed from all resources first.

Replace all rules of a firewall with a new set of rules.

Apply a firewall to one or more servers or label selectors.

Remove a firewall from one or more servers or label selectors.

List all actions performed on a specific firewall, such as rule and resource attachment changes.

List all load balancers in the project, with optional filtering by name or labels.

Get details of a specific load balancer by its ID.

Create a new load balancer with the specified type, location, and optional targets and services.

Update a load balancer name or labels.

Permanently delete a load balancer.

Add a target (server, label selector, or IP) to a load balancer.

Remove a target from a load balancer.

Add a service (port listener with forwarding rules) to a load balancer.

Update an existing service on a load balancer.

Remove a service from a load balancer by its listen port.

Change the balancing algorithm of a load balancer.

Change the type (plan) of a load balancer.

Attach a load balancer to a network.

Detach a load balancer from a network.

Get metrics for a load balancer over a specified time range.

List all available load balancer types with pricing and limits.

Enable or disable delete protection on a load balancer to guard against accidental destruction.

List all actions performed on a specific load balancer, such as service changes and target attachments.

Enable the public network interface of a load balancer so it can be reached over public IPs.

Disable the public network interface of a load balancer, removing its public connectivity.

Change the reverse DNS entry for one of a load balancer's public IP addresses. Set dns_ptr to null to reset to the default.

List all SSL/TLS certificates in the project, with optional filtering.

Get details of a specific certificate by its ID.

Create an uploaded certificate (provide PEM data) or a managed certificate (provide domain names).

Update a certificate name or labels.

Delete a certificate. It must not be in use by any load balancer.

Retry issuance or renewal of a managed certificate that has failed.

List all actions performed on a specific certificate, such as issuance and renewal retries.

List all floating IPs in the project, with optional filtering by name or label.

Get details of a specific floating IP by ID.

Create a new floating IP. Either home_location or server must be provided.

Update a floating IP's name, description, or labels.

Delete a floating IP permanently. Since 2026-05-01 the floating IP must be unassigned first; otherwise the API returns the must_be_unassigned error code.

Assign a floating IP to a server in the same location.

Unassign a floating IP from the server it is currently assigned to.

Change the reverse DNS entry for a floating IP. Set dns_ptr to null to reset.

Enable or disable delete protection on a floating IP to guard against accidental destruction.

List all actions performed on a specific floating IP, such as assign, unassign, and rDNS changes.

List all primary IPs in the project, with optional filtering by name, label, or IP address.

Get details of a specific primary IP by ID.

Create a new primary IP with the specified type, optional location, and optional assignee type.

Update a primary IP's name, auto_delete setting, or labels.

Delete a primary IP permanently. Since 2026-05-01 the primary IP must be unassigned first; otherwise the API returns the must_be_unassigned error code.

Assign a primary IP to a server.

Unassign a primary IP from the server it is currently assigned to.

Change the reverse DNS entry for a primary IP. Set dns_ptr to null to reset.

Enable or disable delete protection on a primary IP to guard against accidental destruction.

List all actions performed on a specific primary IP, such as assign, unassign, and rDNS changes.

List all volumes in the project, with optional filtering by name, label, or status.

Get details of a specific volume by ID.

Create a new volume. Either location or server must be provided to determine placement.

Update a volume's name or labels.

Delete a volume permanently. The volume must be detached from any server.

Attach a volume to a server. The server and volume must be in the same location.

Detach a volume from the server it is attached to.

Increase the size of a volume. Volumes can only be made larger, not smaller.

Enable or disable delete protection on a volume to guard against accidental destruction.

List all actions performed on a specific volume, such as attach, detach, and resize operations.

List all available images, including system, snapshot, and backup images.

Get details of a specific image by ID.

Update an image's description, type, or labels.

Permanently delete a snapshot or backup image.

Create a snapshot image from an existing server.

Enable or disable delete protection on a snapshot or backup image to guard against accidental destruction.

List all actions performed on a specific image, such as snapshot creation and protection changes.

List all Storage Boxes in the project, with optional filtering by name or labels.

Create a new Storage Box in the given location and type. Billing applies for the provisioned resource.

Get details of a specific Storage Box by ID.

Update the name and/or labels of a Storage Box.

Delete a Storage Box and all of its data permanently. The Storage Box must not be delete-protected.

List the folders inside a Storage Box, optionally under a given path.

List all actions performed on a specific Storage Box, such as type changes and password resets.

Enable or disable delete protection on a Storage Box to guard against accidental destruction.

Change the type (capacity tier) of a Storage Box. The new type must have at least the current usage capacity.

Reset the password of a Storage Box main account to the supplied value.

Update which access protocols (SSH, Samba, WebDAV, ZFS, external reachability) are enabled on a Storage Box.

Roll a Storage Box back to a snapshot. This overwrites current data with the snapshot contents.

Enable or update the automatic snapshot plan for a Storage Box (schedule and retention).

Disable the automatic snapshot plan for a Storage Box. Existing snapshots are kept.

List all available Storage Box types with their capacity, limits, and pricing.

Get details of a specific Storage Box type by ID, including capacity and pricing.

List the snapshots of a Storage Box, with optional filtering by name, labels, or automatic-vs-manual.

Create a manual snapshot of a Storage Box, optionally with a description and labels.

Get details of a specific Storage Box snapshot by ID.

Update the description and/or labels of a Storage Box snapshot.

Delete a Storage Box snapshot permanently.

List the subaccounts of a Storage Box, with optional filtering by name, username, or labels.

Create a subaccount on a Storage Box, scoped to a home directory with its own password and access settings.

Get details of a specific Storage Box subaccount by ID.

Update the name, description, and/or labels of a Storage Box subaccount.

Delete a Storage Box subaccount permanently. Its home directory contents are not removed.

Change the home directory a Storage Box subaccount is scoped to.

Reset the password of a Storage Box subaccount to the supplied value.

Update the access settings (read-only, SSH, Samba, WebDAV, external reachability) of a Storage Box subaccount.

List all SSH keys in the project, with optional filtering by name, label, or fingerprint.

Get details of a specific SSH key by ID.

Add a new SSH public key to the project for use when creating servers.

Update an SSH key's name or labels.

Delete an SSH key from the project permanently.

List all available ISO images for mounting on servers.

Get details of a specific ISO image by ID.

Attach an ISO image to a server. The server must be rebooted to boot from the ISO.

Detach an ISO image from a server. The server must be rebooted for the change to take effect.

List all placement groups in the project.

Get details of a specific placement group by ID.

Create a new placement group to control server distribution across hosts.

Update a placement group's name or labels.

Delete a placement group. All servers must be removed from it first.

List all DNS zones in the project, with optional filtering by name, mode (primary/secondary), or labels.

Get details of a specific DNS zone by its numeric ID or zone name (e.g. "example.com").

Create a new DNS zone in primary or secondary mode. Optionally provide TTL, primary nameservers (for secondary), initial RRSets, or a zonefile.

Update a DNS zone's labels. Other zone properties are managed via dedicated change_* action tools.

Delete a DNS zone and all of its RRSets permanently. The zone must not be delete-protected.

Export the current contents of a DNS zone as an RFC 1035 zonefile string.

Replace the contents of a DNS zone with the given RFC 1035 zonefile. This overwrites all existing RRSets.

Enable or disable delete protection on a DNS zone to guard against accidental destruction.

Change the default TTL applied to records in a DNS zone that do not have an explicit TTL.

Replace the list of primary nameservers used by a secondary DNS zone for AXFR/IXFR transfers.

List all actions performed on a specific DNS zone, such as imports, TTL changes, and protection toggles.

List all RRSets in a DNS zone, with optional filtering by name, type, or labels.

Get a specific RRSet by zone, name, and record type.

Create a new RRSet (record set) inside a DNS zone.

Update an RRSet's labels. Records and TTL are managed via dedicated action tools.

Delete an RRSet from a DNS zone permanently. The RRSet must not be change-protected.

Enable or disable change protection on an RRSet to guard against accidental modification or deletion.

Change the TTL of an RRSet. Pass ttl=null to fall back to the zone default TTL.

Replace the full list of records in an RRSet. Existing records not in the payload are removed.

Add new records to an existing RRSet without removing existing ones. Optionally update the RRSet TTL.

Update the comment on existing records in an RRSet (matched by value). The comment field is always sent — use an empty string to clear.

Remove specific records from an RRSet (matched by value) without deleting the RRSet itself.