Call any Hetzner Cloud (api.hetzner.cloud) endpoint directly. Use a relative path like /servers. Reads are free. Writes obey the read-only and cost guards. If an endpoint you need is missing or misbehaving, use the contribute_or_report tool to open a prefilled issue or pull request.

Call any Hetzner Storage Box (api.hetzner.com) endpoint directly. Use a relative path like /servers. Reads are free. Writes obey the read-only and cost guards. If an endpoint you need is missing or misbehaving, use the contribute_or_report tool to open a prefilled issue or pull request.

Call any Hetzner Robot dedicated servers (robot-ws.your-server.de) endpoint directly. Use a relative path like /servers. Reads are free. Writes obey the read-only and cost guards. If an endpoint you need is missing or misbehaving, use the contribute_or_report tool to open a prefilled issue or pull request.

List cloud servers. Read only.

List SSH keys. Read only.

List private networks. Read only.

List firewalls. Read only.

List volumes. Read only.

List load balancers. Read only.

List floating IPs. Read only.

List primary IPs. Read only.

List placement groups. Read only.

List certificates. Read only.

List images. Read only.

List ISOs. Read only.

List DNS zones, part of the Cloud API. Read only.

List server types and specs. Read only.

List load balancer types. Read only.

List locations. Read only.

List everything attached to a private network. Pass the network id. Read only.

Get full pricing for the account currency. Read only.

List storage boxes. Read only.

List storage box types. Read only.

List dedicated servers. Read only.

List single IPs. Read only.

List subnets. Read only.

List vSwitches. Read only.

List failover IPs. Read only.

List Robot SSH keys. Read only.

List reverse DNS entries. Read only.

Create a Hetzner Cloud server. This is billed. It requires confirm true and shows the live hourly and monthly price first. Optionally attach SSH keys, a private network, firewalls, cloud-init user_data, and labels.

Delete a Hetzner Cloud server. Deleting is free and stops billing, but it destroys the server, so it requires confirm true. Auto-created primary IPs are released by Hetzner shortly after.

Create a Hetzner Cloud volume. Billed. Requires confirm true. Attach to a server or place in a location.

Delete a volume. Free but destructive, requires confirm true.

Attach a volume to a server.

Detach a volume from its server. Requires confirm true, because a running workload may lose its disk.

Create a private network. Free.

Delete a private network. Free but destructive, requires confirm true.

Create a firewall with rules. Free.

Delete a firewall. Free but destructive, requires confirm true.

Create a load balancer. Billed. Requires confirm true.

Delete a load balancer. Free but destructive, requires confirm true.

Create a floating IP. Billed. Requires confirm true.

Delete a floating IP. Free but destructive, requires confirm true. Note. an assigned IP must be unassigned first.

Assign a floating IP to a server.

Unassign a floating IP from its server. Requires confirm true, because traffic to that address stops.

Create a primary IP. Billed. Requires confirm true. Assign to a server, or create standalone with a location.

Delete a primary IP. Free but destructive, requires confirm true. An assigned IP must be unassigned first.

Assign a primary IP to a server. The server must be off.

Unassign a primary IP from its server. The server must be off. Requires confirm true, because the address stops reaching the server.

Add an SSH public key. Free.

Delete an SSH key. Free but destructive, requires confirm true.

Create a placement group. Free.

Delete a placement group. Free but destructive, requires confirm true.

When a Hetzner capability is missing or misbehaving, this returns a prefilled GitHub issue link and the steps to open a pull request. Every gap can become a contribution.

Read-only. Maps every configured Hetzner project and account with estimated monthly cost per project and resource, top cost drivers, and idle resources still billed. Starts a local map at http://127.0.0.1:43390 and returns its URL. Pass target to map one workspace or project. Other tools use the default token only.

Read-only. Audits every configured Hetzner project for security, cost, reliability and hygiene issues. Returns a score, counts and the top findings. Pass finding=N for one finding's full fix steps, or full=true for the whole report.

Read-only, free. Lists which server types can be ordered right now and where, recommended first then cheapest, with the monthly price, whether Hetzner recommends it, and retirement dates. Use it before creating a server to avoid resource_unavailable errors and to pick a fallback location.

Read-only. Estimated spend per month and project from running resources, checked against invoices added on the map's Spend tab.