# Hostinger API

> Scoped index for the Hostinger REST APIs and MCP servers. Everything here operates on
> Hostinger-hosted resources — hosting accounts, websites, domains, DNS zones, VPS instances,
> WordPress installs, stores, mailboxes and billing — for the account the token belongs to.
> For the whole site, see [/llms.txt](https://www.hostinger.com/llms.txt).

## Start here

- [Hostinger API reference](https://developers.hostinger.com): Endpoint-by-endpoint reference for the public REST API.
- [OpenAPI description](https://developers.hostinger.com/openapi/openapi.json): Machine-readable `application/vnd.oai.openapi+json` description of every endpoint. Also mirrored at [/openapi.json](https://www.hostinger.com/openapi.json).
- [API catalog](https://www.hostinger.com/.well-known/api-catalog): RFC 9727 linkset enumerating every API with its description, docs and status endpoint.
- [AI capability catalog](https://www.hostinger.com/.well-known/ai-catalog.json): Per-capability entries (domains, DNS, hosting, VPS, WordPress, ecommerce, billing, Reach, Agentic Mail, AI Builder, agency hosting) with authentication details.

## Authentication

- Bearer tokens: send `Authorization: Bearer <token>`. Create the token in hPanel.
- OAuth 2.0: [/auth.md](https://www.hostinger.com/auth.md) documents the flow; the authorization server is `https://auth.hostinger.com`.
- Protected-resource metadata: [/.well-known/oauth-protected-resource](https://www.hostinger.com/.well-known/oauth-protected-resource) (RFC 9728) declares the resource, its authorization server and the `mcp:use` scope.

## MCP servers

- [MCP server card](https://www.hostinger.com/.well-known/mcp/server-card.json): Discovery document for the Hostinger MCP server.
- [hostinger/api-mcp-server](https://github.com/hostinger/api-mcp-server): Source for the `@hostinger/mcp` npm package (Node.js 20+), which exposes the REST API as MCP tools over stdio or Streamable HTTP. Run it with `npx @hostinger/mcp`.
- Scoped binaries keep the tool list small when only one area is needed: `hostinger-domains-mcp`, `hostinger-dns-mcp`, `hostinger-hosting-mcp`, `hostinger-vps-mcp`, `hostinger-wordpress-mcp`, `hostinger-ecommerce-mcp`, `hostinger-billing-mcp`, `hostinger-reach-mcp`, `hostinger-mail-mcp`, `hostinger-horizons-mcp`, `hostinger-agency-hosting-mcp`.
- MCP authentication: stdio supports interactive OAuth 2.0 PKCE sign-in, once per machine. Streamable HTTP requires a `HOSTINGER_API_TOKEN` and binds to localhost unless explicitly exposed.

## Other APIs

- [Agentic Mail API](https://api.mail.hostinger.com): Send, read and manage mailboxes, plus webhooks for inbound mail, so an agent can hold a real email identity. Separate OpenAPI description and bearer token.
- [Service status](https://statuspage.hostinger.com/api/v2/status.json): Current availability of Hostinger services as JSON.

## Calling conventions

- Pricing and plan data come from the Billing API (`list_catalog_items`), not from the Hosting or VPS APIs.
- Treat domain registration and VPS creation as purchases. Treat website deletion, store deletion, DNS record deletion and DNS zone resets as destructive. Get explicit user confirmation before calling them.
- These APIs only operate on Hostinger-hosted resources; they cannot manage servers, sites or domains hosted elsewhere.

## More

- [/developers/llms.txt](https://www.hostinger.com/developers/llms.txt): Wider developer-platform index, including deployment and agent skills.
- [/docs/llms.txt](https://www.hostinger.com/docs/llms.txt): Product documentation, tutorials and knowledge base.
- [/llms_full.txt](https://www.hostinger.com/llms_full.txt): Long-form export of the full site for agents that want everything in one fetch.