mittwald

Manage mittwald managed hosting: projects, apps, containers, databases, DNS, mail, cronjobs and backups.

Add to Agentman Studio

Opens Agent Studio, where connecting is one click. The connector URL below works in any MCP client.

Paste it into any MCP client. Setup docs

Resources

What the mittwald connector does

The mittwald MCP server connects mittwald managed hosting to Claude, ChatGPT and any MCP-compatible agent. It exposes 116 tools covering projects, apps, containers, databases, domains, DNS, mail, cronjobs and backups on the German hosting provider's platform. Sign-in is OAuth 2.1 with PKCE against your mittwald account, or an API token for headless use.

Verified connector

Listed by Anthropic as a partner connector in its Connectors Directory.

Connection checked by Agentman on .

Anthropic states this reflects the level of review a connector received, not a security audit.

mittwald tools (116)

  • mittwald_app_copy
  • mittwald_app_get
  • mittwald_app_list
  • mittwald_app_list_upgrade_candidates
  • mittwald_app_ssh
  • mittwald_app_uninstall
  • mittwald_app_update
  • mittwald_app_upgrade
  • mittwald_app_versions
  • mittwald_backup_create
  • mittwald_backup_delete
  • mittwald_backup_download
  • mittwald_backup_get
  • mittwald_backup_list
  • mittwald_backup_schedule_create
  • mittwald_backup_schedule_delete
  • mittwald_backup_schedule_list
  • mittwald_backup_schedule_update
  • mittwald_certificate_list
  • mittwald_certificate_request
  • mittwald_container_delete
  • mittwald_container_list
  • mittwald_container_logs
  • mittwald_container_restart
  • mittwald_container_start
  • mittwald_container_stop
  • mittwald_cronjob_create
  • mittwald_cronjob_delete
  • mittwald_cronjob_execute
  • mittwald_cronjob_execution_abort
  • mittwald_cronjob_execution_get
  • mittwald_cronjob_execution_list
  • mittwald_cronjob_get
  • mittwald_cronjob_list
  • mittwald_cronjob_update
  • mittwald_database_mysql_create
  • mittwald_database_mysql_delete
  • mittwald_database_mysql_dump
  • mittwald_database_mysql_get
  • mittwald_database_mysql_import
  • mittwald_database_mysql_list
  • mittwald_database_mysql_phpmyadmin
  • mittwald_database_mysql_port_forward
  • mittwald_database_mysql_user_create
  • mittwald_database_mysql_user_delete
  • mittwald_database_mysql_user_get
  • mittwald_database_mysql_user_list
  • mittwald_database_mysql_user_update
  • mittwald_database_mysql_versions
  • mittwald_database_redis_create
  • mittwald_database_redis_get
  • mittwald_database_redis_list
  • mittwald_database_redis_versions
  • mittwald_domain_dnszone_get
  • mittwald_domain_dnszone_list
  • mittwald_domain_dnszone_update
  • mittwald_domain_get
  • mittwald_domain_list
  • mittwald_domain_virtualhost_create
  • mittwald_domain_virtualhost_delete
  • mittwald_domain_virtualhost_get
  • mittwald_domain_virtualhost_list
  • mittwald_mail_address_create
  • mittwald_mail_address_delete
  • mittwald_mail_address_get
  • mittwald_mail_address_list
  • mittwald_mail_address_update
  • mittwald_mail_deliverybox_create
  • mittwald_mail_deliverybox_delete
  • mittwald_mail_deliverybox_get
  • mittwald_mail_deliverybox_list
  • mittwald_mail_deliverybox_update
  • mittwald_org_get
  • mittwald_org_invite
  • mittwald_org_invite_list
  • mittwald_org_invite_revoke
  • mittwald_org_list
  • mittwald_org_membership_list
  • mittwald_org_membership_revoke
  • mittwald_project_create
  • mittwald_project_delete
  • mittwald_project_get
  • mittwald_project_invite_get
  • mittwald_project_invite_list
  • mittwald_project_list
  • mittwald_project_membership_get
  • mittwald_project_membership_list
  • mittwald_project_ssh
  • mittwald_project_update
  • mittwald_registry_create
  • mittwald_registry_delete
  • mittwald_registry_list
  • mittwald_registry_update
  • mittwald_server_get
  • mittwald_server_list
  • mittwald_ssh_user_create
  • mittwald_ssh_user_delete
  • mittwald_ssh_user_list
  • mittwald_ssh_user_update
  • mittwald_stack_delete
  • mittwald_stack_deploy
  • mittwald_stack_list
  • mittwald_stack_ps
  • mittwald_user_api_token_create
  • mittwald_user_api_token_get
  • mittwald_user_api_token_list
  • mittwald_user_api_token_revoke
  • mittwald_user_get
  • mittwald_user_session_get
  • mittwald_user_session_list
  • mittwald_user_ssh_key_create
  • mittwald_user_ssh_key_delete
  • mittwald_user_ssh_key_get
  • mittwald_user_ssh_key_list
  • mittwald_volume_create
  • mittwald_volume_list

Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.

Limits

  • The tool list is directory-sourced, not handshake-verified. The endpoint requires authentication, so we have no per-tool descriptions, no parameter schemas and no readOnlyHint annotations. Read, write and delete labels on this page are derived from mittwald's naming convention and its documentation, not from the server's own annotations.
  • No read-only endpoint exists. The only safety separation is the OAuth scope set you approve at the consent screen. Probed 2026-09-08.
  • The API is rate-limited and the limits are not published as numbers. mittwald's OpenAPI specification states usage is rate-limited to prevent abuse and directs callers to the X-Ratelimit-* headers on each response for their own current figures. The REST API's own RateLimitError response schema — an API error shape, not an MCP tool — appears on 432 of its 515 paths. mittwald publishes no fixed quota (https://api.mittwald.de/v2/openapi.json, fetched 2026-09-08).
  • The connector will not move your data for you. SSH, database dumps and backup downloads are handed back as a command or URL rather than executed, per mittwald's own description. Useful as a safety property, but it means the agent cannot complete those tasks end to end.
  • You only reach what your own account owns. Every tool acts against your mittwald projects, servers and organisations. This is not a way to inspect someone else's hosting.
  • OAuth needs a browser. mittwald says the OAuth path is unsuitable for headless servers and directs those users to API tokens, which do not auto-refresh.
  • Rate-limit headers are not exposed on the MCP endpoint's unauthenticated response. Our anonymous probe returned a 401 with an OAuth challenge and no x-ratelimit-* headers, so we cannot state the connector's own throttle from observation.
  • Documentation is English on the pages we read. mittwald's developer portal offers a German locale, and its privacy policy is German-only. The MCP documentation subtree we cited served English.
  • This connector manages production infrastructure. mittwald's own instruction is to approve destructive or cost-impacting changes explicitly and not to run the agent unattended.

Frequently asked questions

Does the mittwald MCP server need a paid plan?

No plan gate is documented for the connector itself. mittwald's Claude Code guide lists only three prerequisites: a mittwald account to authenticate with, a web browser for the OAuth login, and Claude Code installed. What you can actually reach is bounded by the mittwald resources your account already owns, because every tool acts on your own projects and servers.

Is the mittwald MCP server OAuth or an API token?

Both, and OAuth 2.1 with PKCE is the recommended path. mittwald's connection guide presents OAuth as the default for interactive use and an mStudio API token sent as a bearer header as the alternative for CI/CD, headless servers and scripts. The vendor warns that API tokens do not auto-refresh and must be rotated manually.

How long does a mittwald MCP access token last?

About one hour. mittwald's connection guide states that OAuth access tokens expire after roughly an hour and that most clients refresh them automatically using the refresh token. API tokens behave differently: mittwald says they stay valid until you revoke them, which is why the vendor flags manual rotation as the trade-off for headless use.

Is my mittwald password shared with Claude?

No. mittwald's documentation states your password is entered only at mittwald's own OAuth server in your browser, and the client receives a temporary access token instead. The vendor adds that a compromised token has limited impact because it is short-lived, scoped to the permissions you approved, and revocable from mStudio.

Can the mittwald MCP server delete a live application or backup?

Yes. Eighteen of the 116 tool names are delete or revoke operations, including mittwald_app_uninstall, mittwald_backup_delete, mittwald_container_delete and mittwald_project_delete. mittwald's own guidance says destructive or cost-impacting changes should be approved explicitly, and that the agent should be treated as an operator rather than an unattended process.

Does mittwald_app_ssh open a shell on my server?

No. mittwald states the connector never opens shells, tunnels or file transfers itself, and that SSH access comes back as a command for you to run locally. The mittwald REST API publishes no SSH session endpoint at all, only SSH user management, which is consistent with the tool returning connection details rather than a session.

Why does my assistant keep asking me to log in to mittwald again?

The refresh token flow is failing. mittwald's re-auth guide lists repeated browser logins and invalid_token errors as symptoms of expired or revoked tokens. Its recovery order is to confirm the server configuration in your client, run an explicit re-login, retry a read-only call first, then resume the interrupted workflow from the step that failed.

What scopes should I request for mittwald MCP?

Start with the four read scopes mittwald recommends: user:read, customer:read, project:read and app:read. The vendor advises requesting the smallest set that fits your task. Those same four are the default scopes the server publishes in its own OAuth descriptor, out of 46 scopes it supports in total across apps, backups, databases, domains, mail and more.

Sources

More Developer Tools connectors

  • Base44

    Build and edit Base44 apps from an AI assistant, and query data your app's users submit.

  • CircleCI

    Diagnose failed builds, read job logs, inspect test results and rerun or roll back deployments from your AI assistant.

  • Claude Managed Agents

    Create, run, monitor and debug Anthropic's Claude Managed Agents from inside Claude itself.

Browse all MCP connectorsClaude and ChatGPT setup guideBrowse AI skills

Product names and logos belong to their owners. Agentman is not affiliated with a connector's maker unless the page says the connector is built and run by Agentman.

Use it in an agent

Put mittwald to work.

Connect mittwald once and your agents call these tools on their own: on a schedule, in a workflow, with nobody at the keyboard.

Open in Agentman Studio
Call (650) 285-1019Our AI receptionist answers.