What Is It?
IONOS CLOUD MCP Server is a local binary that implements the Model Context Protocol (MCP), connecting AI clients and autonomous agents to a customer's IONOS CLOUD account via natural-language prompts or programmatic agentic loops. It exposes 110 read-only tools across 6 IONOS CLOUD products and translates AI tool calls into direct HTTPS requests to the IONOS CLOUD API - no third-party service sits in the data path. The binary runs entirely on the user's workstation (macOS, Linux, or Windows) and communicates with the AI client over stdio using the MCP JSON-RPC protocol. Source code is publicly available under the Apache-2.0 license.
Quick Facts
| Aspect | Details |
|---|---|
| Type | Local open-source binary (Model Context Protocol server) |
| Protocol | Model Context Protocol (MCP) |
| Transport | stdio (JSON-RPC) |
| Deployment | Local binary / process on the user's own workstation |
| Total tools (eager mode) | 110 |
| Supported products | 6 |
| Access model | Read-only by design |
| Platforms | macOS (Apple Silicon), macOS (Intel), Linux (x86-64), Windows (x86-64) |
| Auth (required) | IONOS_TOKEN (IONOS CLOUD API token) |
| Auth (Object Storage) | IONOS_S3_ACCESS_KEY + IONOS_S3_SECRET_KEY (optional) |
| Default load mode | eager |
| Load mode env var | IONOS_MCP_LOAD_MODE |
| License | Apache-2.0 |
| Repository | https://github.com/ionos-cloud/ionoscloud-mcp |
| Internet required | Yes (outbound HTTPS to IONOS CLOUD API) |
| Pricing | No separate charge; the binary is free (Apache-2.0). Downstream IONOS CLOUD resource usage is billed under the wrapped products. |
| SLA | No separate SLA. The binary is a local tool; the wrapped IONOS CLOUD products carry their own SLAs. |
Tool Coverage by Product
| Product | Tools |
|---|---|
| Compute Engine | 50 |
| Object Storage | 23 |
| Certificate Manager | 6 |
| Cloud DNS | 14 |
| Billing | 15 |
| Activity Log | 2 |
| Total (eager) | 110 |
Selective Tool Loading Modes
| Mode | Tools registered at startup | Notes |
|---|---|---|
| eager (default) | 110 (all tools) | Full catalog available immediately; exceeds Windsurf's 100-tool cap |
| lazy | 39 (37 always-on + 2 loader sentinels) | Use on clients with a tool cap (e.g., Windsurf). Call ionos_load_compute_tools or ionos_load_objectstorage_tools sentinels to expand on demand |
Always-on tools in lazy mode (37): Cloud DNS, Billing, Certificate Manager, and
Activity Log tools, plus the two loader sentinels (ionos_load_compute_tools,
ionos_load_objectstorage_tools).
What You Can Do
Query Live Infrastructure via Natural Language
Ask an AI client questions such as "List all servers in my data center" or "Show certificates expiring in 60 days." The binary translates each tool call into an IONOS CLOUD API request and returns structured JSON for the model to reason over. All 110 tools are read-only, so agents can safely audit production environments without risk of accidental changes.
Build Agentic and CI/CD Workflows
Embed the MCP server in automated pipelines. The binary runs headlessly as a
subprocess from any MCP client SDK (Python, TypeScript, etc.), enabling build
scripts to fetch current resource state, generate configuration diffs, or produce
deployment manifests based on live data. Use IONOS_MCP_LOAD_MODE=lazy to keep the
tool surface minimal in unattended pipelines.
FinOps Billing Analysis (FOCUS v1.3)
Pull raw billing data through the Billing tools and load the FOCUS v1.3
(FinOps Open Cost and Usage Specification) column-mapping file via the MCP resource
URI ionos://billing/focus-v1.3. The assistant can transform the data into the exact
CSV or JSON format required by a FinOps platform in a single automated loop.
Combine Live Data with Documentation
Pair the infrastructure server with the companion Documentation MCP server
(no auth required, hosted at https://docs.ionos.com/cloud/~gitbook/mcp) to give
the AI simultaneous access to live resource data and the full IONOS CLOUD product
knowledge base. A single prompt can retrieve the recommended token scopes from the
docs and then immediately call live tools to validate the current setup.
Sovereign AI Workflows
Keep all API traffic inside IONOS CLOUD's EU infrastructure by pairing the local binary with IONOS CLOUD AI Model Hub. The binary calls only the IONOS CLOUD API over HTTPS (EU-resident endpoints). Pair it with an AI client that supports a custom OpenAI-compatible inference endpoint (such as Continue or OpenCode) and point inference at the AI Model Hub to ensure neither API calls nor model prompts leave EU jurisdiction.
Activity Log Access
Query recent account events via the Activity Log tools. The default window is 7 days
and the default event count per call is 25. Activity Log access requires the
ACCESS_ACTIVITY_LOG IAM privilege on the token.
Best For
| Scenario | Why It Fits |
|---|---|
| AI-assisted infrastructure audits | Read-only tools mean agents can safely inspect production resources without write risk |
| FinOps and cost reporting | Billing tools + FOCUS v1.3 mapping enable standards-compliant cost exports |
| Sovereign AI pipelines (GDPR, EU Cloud Act) | Local binary + AI Model Hub keeps both API calls and inference inside IONOS EU data centers |
| Developer tooling in IDEs | Works with Claude Code/Desktop, Cursor, VS Code, JetBrains, Zed, Continue, and more |
| Documentation-augmented troubleshooting | Combine with the docs MCP server to answer "what should I do" and "what is my current state" in one turn |
| CI/CD pipelines needing live cloud state | Headless subprocess mode with pre-approved tools; no manual interaction required |
Consider Alternatives If
| If You Need... | Consider | Why |
|---|---|---|
| Write operations (create, modify, delete resources) | IONOS CLOUD API / SDKs or DCD | MCP server is strictly read-only; the REST API and DCD support full CRUD |
| A graphical UI for ad-hoc resource management | DCD (Data Center Designer) or the IONOS CLOUD Console | MCP requires an AI client; the console provides visual resource management |
| Full EU data sovereignty for inference as well as API | IONOS CLOUD AI Model Hub + a client supporting custom endpoints | Default AI clients (Claude Desktop, Cursor, VS Code Copilot) send prompts to non-EU backends; the AI Model Hub keeps inference in German data centers |
| Documentation search without live account data | IONOS CLOUD Documentation MCP server | No auth required; provides search and retrieval of guides, how-tos, and reference pages only |
Key Considerations
Billing & Costs
- Main billing: No separate charge for the MCP server binary itself (Apache-2.0, free to use)
- Downstream costs: All IONOS CLOUD resource usage queried through the server is billed under the respective wrapped products (Compute Engine, Object Storage, etc.) per their standard rates
- Additional note: The binary does not appear in the IONOS CLOUD price list as a standalone line item. Verify with official documentation if this changes.
Limitations
- Read-only: All 110 tools are read-only. Write operations (create, update, delete) require the direct IONOS CLOUD API, SDKs, or the DCD console.
- Tool cap on some clients: The default eager mode registers 110 tools. Clients with a hard 100-tool limit (such as Windsurf) will reject startup; set
IONOS_MCP_LOAD_MODE=lazy(39 tools at startup) before use. - Lazy mode caveat: In lazy mode, an agent that has not called the appropriate loader sentinel will report "I don't have a tool to..." rather than an error. Explicitly prompt the assistant to load Compute or Object Storage tools before those operations are needed.
- Internet required: The binary must be able to reach the IONOS CLOUD API over outbound HTTPS. Air-gapped workstations are not supported.
- Activity Log privilege: Activity Log tools require the
ACCESS_ACTIVITY_LOGIAM privilege on the API token. Tokens without this privilege will fail those specific calls. - Inference sovereignty caveat: The MCP server itself keeps API traffic EU-resident, but prompts and tool outputs are forwarded by the AI client to its LLM backend. Clients such as Claude Desktop and Cursor send inference to non-EU providers by default. Use AI Model Hub + a client supporting custom endpoints for fully sovereign workflows.
- Rate limiting: The IONOS CLOUD API enforces rate limits. If the agent makes too many rapid tool calls, the API returns HTTP 429. The binary surfaces this error to the AI client.
- No SLA for the binary: As a local open-source tool the MCP server carries no availability SLA. The wrapped IONOS CLOUD products (Compute Engine, Object Storage, etc.) carry their own SLAs.
- Build from source requires Go 1.21+: Pre-built binaries are available on the GitHub releases page. Building from source requires Go 1.21 or later.
Management Options
- GitHub releases page (pre-built binaries for all platforms, SHA-256 verified)
- Build from source: Go 1.21+ (
go build) - AI client config file (JSON
mcpServersblock withcommandandenv) - Claude Code CLI:
claude mcp add ionoscloud /path/to/ionoscloud-mcp --env IONOS_TOKEN=... - Project-scoped
.mcp.jsonin a repo root for team-shared configuration