Hey everyone,
I wanted to share something I’ve been working on that I think will be useful for the community.
The Problem
I built Cyberzard to help with security triage and server operations through an AI-assisted CLI. It works great for incident response and scanning, but I needed a way to give AI assistants deeper access to CyberPanel’s management functions - things like creating websites, managing databases, configuring email, and handling backups - all through natural conversation.
The Solution: CyberPanel MCP Server
Important Notice
The API Keys plugin is unofficial and new.
While security measures are in place (SHA-256 hashed key storage, one-time key display, admin-only access), the plugin has not yet been extensively tested in production environments.Use at your own risk, especially on production servers. It is strongly recommended to:
- Test on a staging server first
- Keep full backups before installation
- Monitor server logs closely after installation
I’m actively working on improving security and stability, and feedback or issue reports are very welcome.
I created an MCP (Model Context Protocol) server that exposes 200+ CyberPanel functions to AI assistants like Claude, GitHub Copilot, and Cursor. Think of it as a bridge between your AI assistant and your CyberPanel installation.
Instead of clicking through the UI or remembering API endpoints, you can just ask:
- “Create a new website for mydomain.com with PHP 8.2”
- “Set up an email account for [email protected]”
- “Show me all databases and their sizes”
- “Issue an SSL certificate for my staging site”
What’s Included
Tool Coverage:
- Website & child domain management
- MySQL databases and users
- Email accounts and forwarding
- DNS records
- SSL certificates (Let’s Encrypt)
- FTP accounts
- Cloud backups (S3, DigitalOcean Spaces, MINIO)
- WordPress management (plugins, themes, staging)
- PHP configuration
- Firewall rules
- Docker containers
- Server monitoring
API Keys Plugin:
Since CyberPanel’s CloudAPI wasn’t designed for external API access, I also built a plugin that adds proper API key authentication. It integrates directly into CyberPanel under Security > API Keys and provides:
- SHA-256 hashed key storage
- Enable/disable keys without deletion
- One-click install buttons for VS Code, Cursor, and Claude
- Auto-recovery option that survives CyberPanel upgrades
Coming Soon: Cyberzard Integration
I’m planning to integrate this MCP server into Cyberzard’s code agent. This will let Cyberzard handle both security operations (scanning, triage, remediation) and server management (site setup, email config, backups) through a single interface - with the same safety-first approach and human approval gates.
Getting Started
- Install the API Keys plugin:
curl -sL https://raw.githubusercontent.com/elwizard33/cyberpanel-mcp/main/install-plugin.sh | sudo bash
-
Generate an API key in CyberPanel > Security > API Keys
-
Click the one-click install button for your IDE, or configure manually
The repo has detailed setup instructions for VS Code, Cursor, and Claude Desktop.
Links
- MCP Server: GitHub - elwizard33/cyberpanel-mcp: MCP server for cyberpanel - Give your AI access to all cyberpanel functions to easily manage your servers.
- Cyberzard: GitHub - elwizard33/Cyberzard: Cyberzard accelerates incident triage by combining deterministic scanners (processes, files, cron, users, SSH keys) with an optional constrained ReAct agent that can summarize and advise without arbitrary shell access.
- npm package: https://www.npmjs.com/package/cyberpanel-mcp
Issues, PRs, and feedback welcome.