mittwald

Name: mittwald MCP Server
Availability: InStock
Author: mittwald

HIPAA CompliantSOC2 ReadyISO 27001 Ready

Developer Tools116 tools

Manage mittwald managed hosting from your AI assistant: projects, apps, containers, databases, DNS, mail, cronjobs and backups. 116 tools, OAuth 2.1 with PKCE or an API token.

Verified connector

Listed by Anthropic as a partner connector in its Connectors Directory.

Connection checked by Agentman on 8 September 2026.

Anthropic states this reflects the level of review a connector received, not a security audit.

Connect mittwald via MCP

https://mcp.mittwald.de/mcp

Works in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.

Use in Agentman

Connect mittwald once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.

Open in Agentman Studio

mittwald Tools & Capabilities (116)

mittwald_app_copy

mittwald_app_get

mittwald_app_list

mittwald_app_list_upgrade_candidates

mittwald_app_ssh

mittwald_app_uninstall

mittwald_app_update

mittwald_app_upgrade

mittwald_app_versions

mittwald_backup_create

mittwald_backup_delete

mittwald_backup_download

mittwald_backup_get

mittwald_backup_list

mittwald_backup_schedule_create

mittwald_backup_schedule_delete

mittwald_backup_schedule_list

mittwald_backup_schedule_update

mittwald_certificate_list

mittwald_certificate_request

mittwald_container_delete

mittwald_container_list

mittwald_container_logs

mittwald_container_restart

mittwald_container_start

mittwald_container_stop

mittwald_cronjob_create

mittwald_cronjob_delete

mittwald_cronjob_execute

mittwald_cronjob_execution_abort

mittwald_cronjob_execution_get

mittwald_cronjob_execution_list

mittwald_cronjob_get

mittwald_cronjob_list

mittwald_cronjob_update

mittwald_database_mysql_create

mittwald_database_mysql_delete

mittwald_database_mysql_dump

mittwald_database_mysql_get

mittwald_database_mysql_import

mittwald_database_mysql_list

mittwald_database_mysql_phpmyadmin

mittwald_database_mysql_port_forward

mittwald_database_mysql_user_create

mittwald_database_mysql_user_delete

mittwald_database_mysql_user_get

mittwald_database_mysql_user_list

mittwald_database_mysql_user_update

mittwald_database_mysql_versions

mittwald_database_redis_create

mittwald_database_redis_get

mittwald_database_redis_list

mittwald_database_redis_versions

mittwald_domain_dnszone_get

mittwald_domain_dnszone_list

mittwald_domain_dnszone_update

mittwald_domain_get

mittwald_domain_list

mittwald_domain_virtualhost_create

mittwald_domain_virtualhost_delete

mittwald_domain_virtualhost_get

mittwald_domain_virtualhost_list

mittwald_mail_address_create

mittwald_mail_address_delete

mittwald_mail_address_get

mittwald_mail_address_list

mittwald_mail_address_update

mittwald_mail_deliverybox_create

mittwald_mail_deliverybox_delete

mittwald_mail_deliverybox_get

mittwald_mail_deliverybox_list

mittwald_mail_deliverybox_update

mittwald_org_get

mittwald_org_invite

mittwald_org_invite_list

mittwald_org_invite_revoke

mittwald_org_list

mittwald_org_membership_list

mittwald_org_membership_revoke

mittwald_project_create

mittwald_project_delete

mittwald_project_get

mittwald_project_invite_get

mittwald_project_invite_list

mittwald_project_list

mittwald_project_membership_get

mittwald_project_membership_list

mittwald_project_ssh

mittwald_project_update

mittwald_registry_create

mittwald_registry_delete

mittwald_registry_list

mittwald_registry_update

mittwald_server_get

mittwald_server_list

mittwald_ssh_user_create

mittwald_ssh_user_delete

mittwald_ssh_user_list

mittwald_ssh_user_update

mittwald_stack_delete

mittwald_stack_deploy

mittwald_stack_list

mittwald_stack_ps

mittwald_user_api_token_create

mittwald_user_api_token_get

mittwald_user_api_token_list

mittwald_user_api_token_revoke

mittwald_user_get

mittwald_user_session_get

mittwald_user_session_list

mittwald_user_ssh_key_create

mittwald_user_ssh_key_delete

mittwald_user_ssh_key_get

mittwald_user_ssh_key_list

mittwald_volume_create

mittwald_volume_list

Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.

Limits

The tool list is directory-sourced, not handshake-verified. The endpoint requires authentication, so we have no per-tool descriptions, no parameter schemas and no readOnlyHint annotations. Read, write and delete labels on this page are derived from mittwald's naming convention and its documentation, not from the server's own annotations.
No read-only endpoint exists. The only safety separation is the OAuth scope set you approve at the consent screen. Probed 2026-09-08.
The API is rate-limited and the limits are not published as numbers. mittwald's OpenAPI specification states usage is rate-limited to prevent abuse and directs callers to the X-Ratelimit-* headers on each response for their own current figures. The REST API's own RateLimitError response schema — an API error shape, not an MCP tool — appears on 432 of its 515 paths. mittwald publishes no fixed quota (https://api.mittwald.de/v2/openapi.json, fetched 2026-09-08).
The connector will not move your data for you. SSH, database dumps and backup downloads are handed back as a command or URL rather than executed, per mittwald's own description. Useful as a safety property, but it means the agent cannot complete those tasks end to end.
You only reach what your own account owns. Every tool acts against your mittwald projects, servers and organisations. This is not a way to inspect someone else's hosting.
OAuth needs a browser. mittwald says the OAuth path is unsuitable for headless servers and directs those users to API tokens, which do not auto-refresh.
Rate-limit headers are not exposed on the MCP endpoint's unauthenticated response. Our anonymous probe returned a 401 with an OAuth challenge and no x-ratelimit-* headers, so we cannot state the connector's own throttle from observation.
Documentation is English on the pages we read. mittwald's developer portal offers a German locale, and its privacy policy is German-only. The MCP documentation subtree we cited served English.
This connector manages production infrastructure. mittwald's own instruction is to approve destructive or cost-impacting changes explicitly and not to run the agent unattended.

Frequently asked questions

No plan gate is documented for the connector itself. mittwald's Claude Code guide lists only three prerequisites: a mittwald account to authenticate with, a web browser for the OAuth login, and Claude Code installed. What you can actually reach is bounded by the mittwald resources your account already owns, because every tool acts on your own projects and servers.

Both, and OAuth 2.1 with PKCE is the recommended path. mittwald's connection guide presents OAuth as the default for interactive use and an mStudio API token sent as a bearer header as the alternative for CI/CD, headless servers and scripts. The vendor warns that API tokens do not auto-refresh and must be rotated manually.

About one hour. mittwald's connection guide states that OAuth access tokens expire after roughly an hour and that most clients refresh them automatically using the refresh token. API tokens behave differently: mittwald says they stay valid until you revoke them, which is why the vendor flags manual rotation as the trade-off for headless use.

No. mittwald's documentation states your password is entered only at mittwald's own OAuth server in your browser, and the client receives a temporary access token instead. The vendor adds that a compromised token has limited impact because it is short-lived, scoped to the permissions you approved, and revocable from mStudio.

Yes. Eighteen of the 116 tool names are delete or revoke operations, including mittwald_app_uninstall, mittwald_backup_delete, mittwald_container_delete and mittwald_project_delete. mittwald's own guidance says destructive or cost-impacting changes should be approved explicitly, and that the agent should be treated as an operator rather than an unattended process.

No. mittwald states the connector never opens shells, tunnels or file transfers itself, and that SSH access comes back as a command for you to run locally. The mittwald REST API publishes no SSH session endpoint at all, only SSH user management, which is consistent with the tool returning connection details rather than a session.

The refresh token flow is failing. mittwald's re-auth guide lists repeated browser logins and invalid_token errors as symptoms of expired or revoked tokens. Its recovery order is to confirm the server configuration in your client, run an explicit re-login, retry a read-only call first, then resume the interrupted workflow from the step that failed.

Start with the four read scopes mittwald recommends: user:read, customer:read, project:read and app:read. The vendor advises requesting the smallest set that fits your task. Those same four are the default scopes the server publishes in its own OAuth descriptor, out of 46 scopes it supports in total across apps, backups, databases, domains, mail and more.