Toggle delete protection for a Hetzner DNS zone. Enabling locks the zone against deletion immediately; disabling requires a confirmation token to remove the safeguard.
Permanently delete a DNS record set with all its records from a Hetzner DNS zone. Get a confirmation token on the first call, then submit it to complete the irreversible deletion.
Retrieve DNS record sets (RRSets) for a Hetzner zone, filtered by name, type, or label, to inspect records, TTLs, and protection status with pagination.
Lists DNS zones in your Hetzner project, showing status, mode, default TTL, nameservers, and record counts. Filter by name, mode, or label selector to locate and inspect zone configurations.
An MCP server for managing Hetzner DNS zones and RRSets via the Hetzner Cloud API. It enables listing, creating, updating, deleting, importing/exporting zone files, and managing protection and TTLs from MCP clients.
Enables Claude to operate a Hetzner estate end to end — Cloud servers, Cloudflare and Hetzner DNS, SSH hosts, and Coolify deployments, plus multi-step recipes — through 53 tools. Writes are dry-run until confirmed, protected servers refuse destructive calls, and every call is audited with secrets masked.
Create a DNS zone in Hetzner Cloud in primary or secondary mode, optionally seed records, then delegate your domain to the returned authoritative nameservers.
Run a fresh, full DNS and email-authentication report for a real domain, covering SPF, DKIM, DMARC, MX, DNS hardening, expiry, blacklists, and generated fix records.
Starts a free 48-hour watch on one DNS record, rechecking every 10 minutes and emailing when the change goes live or the expected value fails to appear.
Fetch current DNS records for a domain via Cloudflare DNS over HTTPS. Specify record types like A, MX, or TXT to get live resolution data for the domain.
Retrieve a custom domain's stored state and DNS setup instructions by its dom_ id or hostname. See status, mode, default flag, and next-step guidance without a live DNS check.