For the complete documentation index, see llms.txt. This page is also available as Markdown.

Overview

The IONOS CLOUD MCP Server is a local binary that implements the Model Context Protocol (MCP). It connects your AI assistant or autonomous AI agent to your IONOS CLOUD account, letting you inspect your resources through natural language prompts or programmatic agentic loops. With write tools activated, it can also create, update, and delete them. For more information, see Write Operations.

How it works

The MCP server runs as a local process on your machine. Your AI client communicates with it over stdio using the MCP JSON-RPC protocol. The server translates your AI assistant's tool calls into IONOS CLOUD API requests and returns the results as structured text.

The server can also serve the MCP protocol over Streamable HTTP instead of stdio, so that one instance answers several clients over the network. For more information, see Transport.

IONOS CLOUD MCP Server Architecture: AI clients on your workstation connect via MCP Protocol over stdio to the MCP Server, which calls IONOS CLOUD APIs over HTTPS
IONOS CLOUD MCP Server Architecture

Data sovereignty

The MCP server runs entirely on your workstation and calls the IONOS CLOUD API directly over HTTPS. No third-party AI provider sits in the data path between the binary and IONOS CLOUD.

If you activate write tools, the same reasoning applies to the model's decisions, not only to what it reads: the model chooses which resources to create, change, or delete, and those choices are made by the AI client's backend. For more information, see Write Operations.

The AI client is separate. It sends your prompts and the JSON returned by MCP tools to its own model backend for inference. For Claude Desktop, Cursor, or VS Code (GitHub Copilot), the backend is operated by a US-headquartered vendor and may be subject to non-EU jurisdiction (for example, the US CLOUD Act) regardless of the inference region. Treat tool outputs (resource names, IDs, IP addresses, billing figures) as data that leaves the IONOS CLOUD perimeter once the AI assistant reads them.

If you need a path where neither the API calls nor the inference reach a non-EU provider, pair the MCP server with the IONOS CLOUD AI Model Hub, which serves open-weight LLMs from IONOS CLOUD German data centers. For more information, see Fully Sovereign AI Workflow.

Supported products

Product
Tools
What you can do

50 read, 69 write

List and inspect data centers, servers, volumes, NICs, LANs, load balancers, NAT gateways, security groups, IP blocks, and more. With write tools enabled, also create, update, and delete them, and control server power state

8 read, 8 write

List and inspect Kubernetes clusters, node pools, nodes, and available versions. With write tools enabled, also manage clusters and node pools: create, scale, upgrade, and delete

23

List buckets and objects, inspect bucket configuration (CORS, encryption, lifecycle, replication), and check access keys

14

List and inspect zones, records, reverse records, secondary zones, and DNSSEC keys

15

View invoices, usage, traffic, the product pricing catalog, and the FOCUS v1.3 mapping

6

List and inspect certificates, auto-certificates, and providers

2

Query the full audit trail: who did what, when, on which resource

Tool scopes

The server is read-only by default. Unless you opt in, all 100+ tools across 7 products exclusively perform inspection and query operations, and the server cannot create, update, or delete any IONOS CLOUD resources. This default lets you connect the MCP server to a production account and share project configurations with teammates without risking accidental modifications.

Write tools for Compute Engine and Managed Kubernetes are available, but they are opt-in. They register only when you set the IONOS_MCP_TOOL_SCOPE environment variable:

IONOS_MCP_TOOL_SCOPE

What the Server Can Do

Unset or read (default)

Inspect and query only

write

Also create and update resources, and perform non-disruptive actions such as starting a server

destructive

Also delete resources and perform disruptive actions such as stopping or rebooting a server

A tool that the active scope disallows is never registered, so it does not appear in the server's tool list and the AI client cannot call it. Every create, every delete, and every disruptive action requires a two-step confirmation. For more information, see Write Operations.

The server runs locally on your machine. It does not require a cloud-hosted component.

MCP resources

In addition to tools, the MCP specification defines resources: structured data that the server exposes for AI clients to read as context. The MCP server exposes one resource:

Resource URI
Content

ionos://billing/focus-v1.3

Full FOCUS v1.3 column mapping for all billing tools; use this to build standards-compliant cost pipelines. For more information, see FinOps and FOCUS Billing.

Ask your AI assistant to read a resource by name: "Read the resource ionos://billing/focus-v1.3."

IONOS CLOUD Documentation MCP

The IONOS CLOUD documentation site at docs.ionos.com exposes a built-in MCP server at:

This is a separate, complementary MCP server powered by GitBook that exposes documentation search and retrieval tools; your AI assistant can query guides, how-tos, reference pages, and release notes by topic. No authentication required. The two servers are independent: use either one alone or both together.

Configure both servers together to combine live infrastructure data with documentation knowledge:

Server
What it answers

ionoscloud-docs

"How does FOCUS billing work?" "What are the firewall rule limits?" "What changed in the June 2026 release?"

ionoscloud

"List my data centers" "What is my invoice total?" "Which certificates expire this month?"

Example: one prompt, two servers:

List my certificates that expire within 60 days. Then look up the IONOS CLOUD Certificate Manager documentation and tell me the recommended renewal process.

The AI assistant calls list_cert_certificates on the infrastructure server for live data, and searches the documentation server for the renewal guide, all in a single conversation.

For more information, see Composing Multiple MCP Servers.

Next steps

Last updated

Was this helpful?