Easypanel MCP Server

What helbertparanhos/easypanel-mcp-server MCP server does

The helbertparanhos/easypanel-mcp-server MCP server connects MCP-compatible clients to an Easypanel instance. It maps Easypanel operations to 57 typed tools grouped across 15 areas, covering common administration tasks such as deploying from GitHub, changing environment variables, viewing service logs, managing domains and databases, handling volumes and ports, adjusting resource limits, and monitoring the server.

The server also includes an easypanel_raw tool for operations that do not have a dedicated wrapper. Responses include a context banner so the client can identify the panel being accessed.

How it works

The helbertparanhos/easypanel-mcp-server MCP server communicates with Easypanel using an API token. On its first request, it can probe the panel and cache the detected API generation. It supports the tRPC API used by panels up to version 2.30, the RPC layer used by versions 2.31 through 2.32, and the public API introduced in version 2.33 and later.

The API generation can be selected automatically or forced with EASYPANEL_API_FLAVOR. Valid values are trpc, rpc, and public; legacy and modern are also documented as aliases. A read-only mode blocks writes at the source, including writes attempted through easypanel_raw. Destructive actions additionally require the explicit confirmation value CONFIRMO.

Setup and configuration

Install Node.js 18 or newer and make sure the Easypanel instance is reachable. Generate an API token in Easypanel under Settings, API, and Generate Token. The documented no-install configuration runs the package with npx:

{
  "mcpServers": {
    "easypanel-mcp": {
      "command": "npx",
      "args": ["-y", "easypanel-mcp-server"],
      "env": {
        "EASYPANEL_URL": "https://panel.example.com",
        "EASYPANEL_TOKEN": "your-api-token"
      }
    }
  }
}

EASYPANEL_URL should not include a trailing slash. Set MCP_ACCESS_MODE to readonly when the client should inspect a production panel without changing it. Set EASYPANEL_RAW_DISABLED=1 to remove the raw API tool, which is recommended when untrusted content may reach the MCP client. Leave EASYPANEL_API_FLAVOR unset unless automatic detection should be overridden.

Tools and capabilities

The documented tool coverage includes:

• Deployments and services, including GitHub-based deployment workflows.
• Environment variable updates that preserve variables not being changed.
• Runtime logs through the service logs WebSocket endpoint.
• Container command execution with a destructive-command confirmation gate.
• Domains, databases, connection-string inspection, volumes, ports, and resource limits.
• Docker maintenance, live Docker events, and server monitoring.
• User listing with apiToken and twoFactorSecret values removed from responses.

Limitations and notes

The helbertparanhos/easypanel-mcp-server MCP server requires an accessible Easypanel installation, a valid API token, and Node.js 18 or newer. Its version compatibility depends on the panel's API generation; the current v3 line is documented for all three generations, while the legacy v1.3 line is intended only for Easypanel versions up to 2.30.x.

The raw tool provides broader coverage but may expose sensitive data in read responses, so disabling it can reduce prompt-injection risk. Easypanel 2.33 also provides its own MCP endpoint; this project is a separate client that adds features such as read-only enforcement, confirmation gates, runtime logs, and container execution.