@orbitpanel/mcp-server

AI-powered hosting management for Claude Code, Cursor, Windsurf, and any MCP-compatible client.

Manage WordPress, PrestaShop, and cPanel sites directly from your AI assistant.

Quick Start

1. Get your MCP token

Go to OrbitPanel → your site → MCP Tokens → Create Token.

2. Configure your AI client

Claude Code (~/.claude/settings.json):

{
  "mcpServers": {
    "my-site": {
      "command": "npx",
      "args": ["-y", "@orbitpanel/mcp-server"],
      "env": {
        "MCP_TOKEN": "orbit_mcp_your_token_here"
      }
    }
  }
}

Cursor (.cursor/mcp.json):

{
  "mcpServers": {
    "my-site": {
      "command": "npx",
      "args": ["-y", "@orbitpanel/mcp-server"],
      "env": {
        "MCP_TOKEN": "orbit_mcp_your_token_here"
      }
    }
  }
}

3. Start using it

Ask your AI assistant:

• "Show me the site info"
• "List all plugins"
• "Check the security status"
• "Run a performance audit"
• "Get the error logs"

Features

• 100+ tools across WordPress, PrestaShop, and cPanel
• Secure — token-scoped per site, HMAC-SHA256 authentication
• Audited — every tool call is logged with correlation IDs
• Rate-limited — per-site sliding window prevents abuse
• Zero config — just a token, no server setup needed

Available Tools

WordPress (66+ tools)

• Site management (info, sync, updates)
• Plugin/theme management (install, activate, delete)
• User management (list, create, roles)
• Security scanning and hardening
• Backup creation and restore
• WP-CLI console access
• Performance analysis (Core Web Vitals, Lighthouse)
• Multisite network management
• Agent deployment and monitoring

PrestaShop (40+ tools)

• Shop info and diagnostics
• Module management
• Product catalog audit
• Order management
• SEO configuration
• Cache management
• Security configuration

cPanel (20+ tools)

• Account management
• Database operations
• Email configuration
• File management
• SSL certificates

Environment Variables

| Variable | Required | Default | Description | |----------|----------|---------|-------------| | MCP_TOKEN | Yes | — | OrbitPanel MCP token | | ORBIT_API_URL | No | https://api.orbit.principi.it | Backend API URL |

Multi-site Setup

Add multiple sites with different tokens:

{
  "mcpServers": {
    "site-production": {
      "command": "npx",
      "args": ["-y", "@orbitpanel/mcp-server"],
      "env": { "MCP_TOKEN": "orbit_mcp_prod_token" }
    },
    "site-staging": {
      "command": "npx",
      "args": ["-y", "@orbitpanel/mcp-server"],
      "env": { "MCP_TOKEN": "orbit_mcp_staging_token" }
    }
  }
}

How it Works

Your AI Client (Claude Code, Cursor, etc.)
       |
       |  stdio (MCP protocol)
       v
[@orbitpanel/mcp-server]  <-- this package (thin bridge)
       |
       |  HTTPS + Bearer token
       v
[OrbitPanel Backend API]
       |
   Site management engine
   (WordPress, PrestaShop, cPanel)

The package is a thin stdio bridge (~200 lines). All business logic, authentication, rate limiting, and audit logging runs on the OrbitPanel backend.

Security

• Tokens are scoped to a single site
• Optional tool whitelisting per token
• All calls audited with correlation IDs
• Rate limiting prevents abuse
• Kill switch to block write operations
• HMAC-SHA256 token validation

License

MIT