---
bezeichner: "io.github.ionos-cloud/ionoscloud-mcp"
art: "mcp_server"
slug: "io-github-ionos-cloud-ionoscloud-mcp"
paketkoordinate: "oci:ghcr.io/ionos-cloud/ionoscloud-mcp:1.1.1"
status: "aktiv"
homepage: "https://github.com/ionos-cloud/ionoscloud-mcp"
erhebungsstand: "2026-10-11T01:17:01.851Z"
namensraum: "io.github.ionos-cloud"
registerseite: "https://tracevero.com/mcp/io-github-ionos-cloud-ionoscloud-mcp"
abgerufen_am: "2026-10-11"
zugangsdaten_erforderlich: true
ausfuehrungsort: "lokal"
dateisystem_pfadargument: false
quelloffen_einsehbar: true
roh_beschreibung: "Inspect and manage IONOS CLOUD infrastructure via MCP. Writes are opt-in and off by default."
version: "1.1.1"
roh_umgebungsvariablen: "IONOS_TOKEN, IONOS_S3_ACCESS_KEY, IONOS_S3_SECRET_KEY, IONOS_MCP_LOAD_MODE, IONOS_MCP_TOOL_SCOPE"
roh_geheime_pflichtvariablen: "IONOS_TOKEN"
roh_transportarten: "stdio"
roh_pfadargumente: ""
roh_repository_url: "https://github.com/ionos-cloud/ionoscloud-mcp"
roh_paketquellen: "oci"
roh_geheime_pflichtkopfzeilen: ""
roh_pfad_umgebungsvariablen: ""
roh_remote_adressen: ""
roh_remote_hosts: ""
roh_statusmeldung: ""
roh_veroeffentlicht_am: "2026-09-17"
roh_aktualisiert_am: "2026-09-17"
roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json"
roh_bereitstellungsform: "paket"
roh_repository_quelle: "github"
roh_repository_unterordner: ""
roh_paketbezeichner: "ghcr.io/ionos-cloud/ionoscloud-mcp:1.1.1"
roh_paketversionen: ""
roh_laufzeithinweise: ""
roh_umgebungsformate: ""
roh_umgebungsbeschreibungen: "IONOS_MCP_LOAD_MODE=Tool registration strategy (the --load-mode flag overrides this). 'eager' (default): register all tools at startup. 'lazy': defer Compute and Object Storage behind 'ionos_load_compute_tools' / 'ionos_load_objectstorage_tools' sentinel tools (requires MCP client support for notifications/tools/list_changed). 'dynamic' (alias 'search'): expose only the ionos_search_tools / ionos_describe_tools / ionos_call_tool meta-tools and browse the full catalog through them — for clients with hard tool caps and no tool search of their own (Cursor, Windsurf). · IONOS_MCP_TOOL_SCOPE=Opt in to write operations. Unset (default) leaves the server read-only: only list_/get_/head_ tools are registered. 'write' additionally registers create_/update_ tools and the non-disruptive actions (start_, resume_, attach_, assign_); 'destructive' also registers delete_ and the disruptive actions (stop_, reboot_, suspend_, upgrade_, restore_, detach_, recreate_, import_) and implies 'write'. Comma-separated, case-insensitive, hierarchical; unrecognised values stay read-only. WARNING: enabling this lets an AI model provision, modify and delete billable resources in a live IONOS CLOUD account. Every create and delete requires a two-phase confirmation, but that cannot stop a client configured to approve tool calls automatically. Leave unset unless writes are needed. · IONOS_S3_ACCESS_KEY=S3 access key for IONOS Object Storage · IONOS_S3_SECRET_KEY=S3 secret key for IONOS Object Storage · IONOS_TOKEN=IONOS CLOUD API token (required for all products except Object Storage)"
roh_symbolformate: ""
roh_verbindungswege: "{\"packages\":[{\"registryType\":\"oci\",\"identifier\":\"ghcr.io/ionos-cloud/ionoscloud-mcp:1.1.1\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"IONOS_TOKEN\",\"description\":\"IONOS CLOUD API token (required for all products except Object Storage)\",\"required\":true,\"secret\":true},{\"name\":\"IONOS_S3_ACCESS_KEY\",\"description\":\"S3 access key for IONOS Object Storage\",\"required\":false,\"secret\":true},{\"name\":\"IONOS_S3_SECRET_KEY\",\"description\":\"S3 secret key for IONOS Object Storage\",\"required\":false,\"secret\":true},{\"name\":\"IONOS_MCP_LOAD_MODE\",\"description\":\"Tool registration strategy (the --load-mode flag overrides this). 'eager' (default): register all tools at startup. 'lazy': defer Compute and Object Storage behind 'ionos_load_compute_tools' / 'ionos_load_objectstorage_tools' sentinel tools (requires MCP client support for notifications/tools/list_changed). 'dynamic' (alias 'search'): expose only the ionos_search_tools / ionos_describe_tools / ionos_call_tool meta-tools and browse the full catalog through them — for clients with hard tool caps and no tool search of their own (Cursor, Windsurf).\",\"required\":false,\"secret\":false},{\"name\":\"IONOS_MCP_TOOL_SCOPE\",\"description\":\"Opt in to write operations. Unset (default) leaves the server read-only: only list_/get_/head_ tools are registered. 'write' additionally registers create_/update_ tools and the non-disruptive actions (start_, resume_, attach_, assign_); 'destructive' also registers delete_ and the disruptive actions (stop_, reboot_, suspend_, upgrade_, restore_, detach_, recreate_, import_) and implies 'write'. Comma-separated, case-insensitive, hierarchical; unrecognised values stay read-only. WARNING: enabling this lets an AI model provision, modify and delete billable resources in a live IONOS CLOUD account. Every create and delete requires a two-phase confirmation, but that cannot stop a client configured to approve tool calls automatically. Leave unset unless writes are needed.\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false}],\"remotes\":[]}"
---

# IONOS CLOUD MCP Server

## Measured values

| Property | Value | Source | Collected on | Level of trust | Raw declaration |
| --- | --- | --- | --- | --- | --- |
| Required secrets declared | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_geheime_pflichtvariablen: IONOS_TOKEN; roh_geheime_pflichtkopfzeilen: |
| Execution location | lokal | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_transportarten: stdio |
| Path argument present | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: |
| Repository URL listed | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_repository_url: https://github.com/ionos-cloud/ionoscloud-mcp |
| Description (raw) | Inspect and manage IONOS CLOUD infrastructure via MCP. Writes are opt-in and off by default. | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Declared version | 1.1.1 | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Environment variables (raw) | IONOS_TOKEN, IONOS_S3_ACCESS_KEY, IONOS_S3_SECRET_KEY, IONOS_MCP_LOAD_MODE, IONOS_MCP_TOOL_SCOPE | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Required secret variables (raw) | IONOS_TOKEN | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Transports (raw) | stdio | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Path arguments (raw) |  | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Repository (raw) | https://github.com/ionos-cloud/ionoscloud-mcp | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Package registries (raw) | oci | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Required secret headers (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Path environment variables (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote URLs (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote hosts (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Registry status message (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| First listed in the registry (raw) | 2026-09-17 | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Last changed in the registry (raw) | 2026-09-17 | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Delivery form (raw) | paket | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository platform (raw) | github | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository subfolder (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Package identifiers (raw) | ghcr.io/ionos-cloud/ionoscloud-mcp:1.1.1 | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Package versions (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Runtime hints (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Environment variable formats (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Environment variable descriptions (raw) | IONOS_MCP_LOAD_MODE=Tool registration strategy (the --load-mode flag overrides this). 'eager' (default): register all tools at startup. 'lazy': defer Compute and Object Storage behind 'ionos_load_compute_tools' / 'ionos_load_objectstorage_tools' sentinel tools (requires MCP client support for notifications/tools/list_changed). 'dynamic' (alias 'search'): expose only the ionos_search_tools / ionos_describe_tools / ionos_call_tool meta-tools and browse the full catalog through them — for clients with hard tool caps and no tool search of their own (Cursor, Windsurf). · IONOS_MCP_TOOL_SCOPE=Opt in to write operations. Unset (default) leaves the server read-only: only list_/get_/head_ tools are registered. 'write' additionally registers create_/update_ tools and the non-disruptive actions (start_, resume_, attach_, assign_); 'destructive' also registers delete_ and the disruptive actions (stop_, reboot_, suspend_, upgrade_, restore_, detach_, recreate_, import_) and implies 'write'. Comma-separated, case-insensitive, hierarchical; unrecognised values stay read-only. WARNING: enabling this lets an AI model provision, modify and delete billable resources in a live IONOS CLOUD account. Every create and delete requires a two-phase confirmation, but that cannot stop a client configured to approve tool calls automatically. Leave unset unless writes are needed. · IONOS_S3_ACCESS_KEY=S3 access key for IONOS Object Storage · IONOS_S3_SECRET_KEY=S3 secret key for IONOS Object Storage · IONOS_TOKEN=IONOS CLOUD API token (required for all products except Object Storage) | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Icon formats (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Connection paths (source structure) | {"packages":[{"registryType":"oci","identifier":"ghcr.io/ionos-cloud/ionoscloud-mcp:1.1.1","transport":"stdio","environment":[{"name":"IONOS_TOKEN","description":"IONOS CLOUD API token (required for all products except Object Storage)","required":true,"secret":true},{"name":"IONOS_S3_ACCESS_KEY","description":"S3 access key for IONOS Object Storage","required":false,"secret":true},{"name":"IONOS_S3_SECRET_KEY","description":"S3 secret key for IONOS Object Storage","required":false,"secret":true},{"name":"IONOS_MCP_LOAD_MODE","description":"Tool registration strategy (the --load-mode flag overrides this). 'eager' (default): register all tools at startup. 'lazy': defer Compute and Object Storage behind 'ionos_load_compute_tools' / 'ionos_load_objectstorage_tools' sentinel tools (requires MCP client support for notifications/tools/list_changed). 'dynamic' (alias 'search'): expose only the ionos_search_tools / ionos_describe_tools / ionos_call_tool meta-tools and browse the full catalog through them — for clients with hard tool caps and no tool search of their own (Cursor, Windsurf).","required":false,"secret":false},{"name":"IONOS_MCP_TOOL_SCOPE","description":"Opt in to write operations. Unset (default) leaves the server read-only: only list_/get_/head_ tools are registered. 'write' additionally registers create_/update_ tools and the non-disruptive actions (start_, resume_, attach_, assign_); 'destructive' also registers delete_ and the disruptive actions (stop_, reboot_, suspend_, upgrade_, restore_, detach_, recreate_, import_) and implies 'write'. Comma-separated, case-insensitive, hierarchical; unrecognised values stay read-only. WARNING: enabling this lets an AI model provision, modify and delete billable resources in a live IONOS CLOUD account. Every create and delete requires a two-phase confirmation, but that cannot stop a client configured to approve tool calls automatically. Leave unset unless writes are needed.","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |

## Links

- Namespace: [[namensraum/io-github-ionos-cloud|io.github.ionos-cloud]]

---

- Registry page: <https://tracevero.com/mcp/io-github-ionos-cloud-ionoscloud-mcp>
- Retrieved on: 2026-10-11
