easypanel-mcp-server

{ "mcpServers": { "easypanel-mcp": { "command": "npx", "args": ["-y", "easypanel-mcp-server"], "env": { "EASYPANEL_URL": "https://your-panel.example.com", "EASYPANEL_TOKEN": "your-api-token" } } } }

git clone https://github.com/helbertparanhos/easypanel-mcp-server cd easypanel-mcp-server npm install && npm run build

{ "mcpServers": { "easypanel-mcp": { "command": "node", "args": ["/ABSOLUTE/PATH/easypanel-mcp-server/dist/index.js"], "env": { "EASYPANEL_URL": "https://your-panel.example.com", "EASYPANEL_TOKEN": "your-api-token" } } } }

InCursor Settings → Tools & MCPs → Environment Variables, set:

- EASYPANEL_URL=https://your-panel.example.com
- EASYPANEL_TOKEN=your-api-token

Then your.cursor/mcp.jsonuses references that apply automatically to every project:

{ "mcpServers": { "easypanel-mcp": { "command": "npx", "args": ["-y", "easypanel-mcp-server"], "env": { "EASYPANEL_URL": "${EASYPANEL_URL}", "EASYPANEL_TOKEN": "${EASYPANEL_TOKEN}" } } } }

Place this in your project'sCLAUDE.mdso Claude knows which Easypanel project and service it should operate on by default:

## Easypanel Project: my-project | Service: my-api | Branch: main Repo: owner/repo`

"Deploy my app"— Claude lists projects, inspects the current service, triggersdeploy_service, then watcheslist_actionsuntil it completes.

"Why is my service down?"— Claude callsget_service_error,get_service_logsandget_build_logs, and canexec_in_containerto inspect files/env live.

"Add DATABASE_URL to staging"— Claude reads current env vars withget_env_vars, adds only the new key withset_env_var(never wipes others), and reminds you to redeploy.

"Give this service 512MB and half a core"— Claude callsset_service_resources(reads current limits and merges your change) and reminds you to restart.

"Persist /app/data and expose port 5432"— Claude callscreate_mount(named volume) andcreate_port, both applied on the next deploy.

"My disk is full"— Claude runsget_storage_stats, thencleanup_docker_imagesorprune_docker(with confirmation) to reclaim space.

"Show me the Traefik dashboard config"— for anything without a dedicated tool, Claude useseasypanel_rawto call the procedure directly.

⚠️ = requiresconfirm: "CONFIRMO". Forexec_in_container,create_mount,create_portandeasypanel_rawthe confirmation isconditional(only for destructive commands, sensitive host-path bind mounts, privileged ports< 1024, and writes respectively).

Full tool descriptions with parameters are inllms.txt. For the underlying API (all generations), seedocs/easypanel-api.md.

[Contexto ativo: projeto="my-project" | serviço="my-api"]

Destructive or production-impacting actions returnBLOQUEADOuntil they receiveconfirm: "CONFIRMO":

{ "status": "BLOQUEADO", "acao": "stop_service", "alvo": "serviço \"api\" (usuários perderão acesso)", "instrucao": "Para confirmar, passe o parâmetro: confirm: \"CONFIRMO\"", "aviso": "⚠️ Esta ação pode ser IRREVERSÍVEL. Confirme apenas se tiver certeza." }

This gates project/service deletion, stop/rename, env/domain removal, database destruction, the global server ops (prune_docker,restart_panel,reboot_server), and — conditionally — dangerous container commands, sensitive bind mounts, privileged ports and raw mutations.

SetMCP_ACCESS_MODE=readonlyto blockeverywrite at the source (client.mutate), covering both curated tools andeasypanel_raw. Reads remain available — perfect for a production panel you only want to inspect.

easypanel_rawvalidates the operation name (flat ornamespace.procedure, no path/query injection), requires theinputto be an object (≤ 50KB), and demandsCONFIRMOfor any mutation. SetEASYPANEL_RAW_DISABLED=1to turn it off entirely.

list_usersstripsapiToken,twoFactorSecretand password fields before returning — onlyid,email,admin,twoFactorEnabledandcreatedAtreach the model.

set_env_varanddelete_env_varread the current state, apply only the requested change, and write back. The Easypanel API replaces the entire env string on every update — without this protection it is easy to accidentally wipe all variables at once.