Description

Manage Hostinger account via API — VPS administration (start/stop/restart, snapshots, backups, firewall, Docker), DNS zone management, domain portfolio, website hosting, and billing. Use when asked to deploy, publish, manage servers, configure DNS, or control any Hostinger service.

README (SKILL.md)

Hostinger API Skill

Name: Hostinger
Author: rexlunae

Control Hostinger services programmatically: VPS instances, DNS records, domains, websites, hosting.

Authentication

API token required. Get one from: https://hpanel.hostinger.com/profile/api

Store in ~/.config/hostinger/token (just the token, no newline):

mkdir -p ~/.config/hostinger
echo -n "YOUR_API_TOKEN" > ~/.config/hostinger/token
chmod 600 ~/.config/hostinger/token

Quick Reference

VPS Operations

# List all VPS instances
python3 scripts/hostinger.py vps list

# Get VPS details
python3 scripts/hostinger.py vps get \x3Cvm_id>

# Start/stop/restart VPS
python3 scripts/hostinger.py vps start \x3Cvm_id>
python3 scripts/hostinger.py vps stop \x3Cvm_id>
python3 scripts/hostinger.py vps restart \x3Cvm_id>

# Create/restore snapshots
python3 scripts/hostinger.py vps snapshot-create \x3Cvm_id>
python3 scripts/hostinger.py vps snapshot-restore \x3Cvm_id>

# View backups
python3 scripts/hostinger.py vps backups \x3Cvm_id>

DNS Management

# Get DNS records for domain
python3 scripts/hostinger.py dns get \x3Cdomain>

# Update DNS records (JSON file with records array)
python3 scripts/hostinger.py dns update \x3Cdomain> \x3Crecords.json>

# Reset DNS to defaults
python3 scripts/hostinger.py dns reset \x3Cdomain>

# DNS snapshots
python3 scripts/hostinger.py dns snapshots \x3Cdomain>
python3 scripts/hostinger.py dns snapshot-restore \x3Cdomain> \x3Csnapshot_id>

Domain Portfolio

# List all domains
python3 scripts/hostinger.py domains list

# Get domain details
python3 scripts/hostinger.py domains get \x3Cdomain>

# Update nameservers
python3 scripts/hostinger.py domains nameservers \x3Cdomain> ns1.example.com ns2.example.com

# Check availability
python3 scripts/hostinger.py domains check example.com example.org

Hosting/Websites

# List websites
python3 scripts/hostinger.py hosting websites

# List datacenters
python3 scripts/hostinger.py hosting datacenters

Billing

# View subscriptions
python3 scripts/hostinger.py billing subscriptions

# View payment methods
python3 scripts/hostinger.py billing payment-methods

# View catalog
python3 scripts/hostinger.py billing catalog

DNS Record Format

When updating DNS records, provide a JSON file:

{
  "records": [
    {"type": "A", "name": "@", "value": "1.2.3.4", "ttl": 300},
    {"type": "A", "name": "www", "value": "1.2.3.4", "ttl": 300},
    {"type": "MX", "name": "@", "value": "mail.example.com", "priority": 10, "ttl": 300},
    {"type": "TXT", "name": "@", "value": "v=spf1 include:_spf.google.com ~all", "ttl": 300}
  ]
}

VPS Docker Management

For VPS with Docker OS templates:

# List Docker projects
python3 scripts/hostinger.py docker list \x3Cvm_id>

# Deploy from docker-compose.yml URL
python3 scripts/hostinger.py docker deploy \x3Cvm_id> \x3Cproject_name> --url \x3Ccompose_url>

# Or from local file
python3 scripts/hostinger.py docker deploy \x3Cvm_id> \x3Cproject_name> --file \x3Ccompose.yml>

# Start/stop/restart project
python3 scripts/hostinger.py docker start \x3Cvm_id> \x3Cproject_name>
python3 scripts/hostinger.py docker stop \x3Cvm_id> \x3Cproject_name>
python3 scripts/hostinger.py docker restart \x3Cvm_id> \x3Cproject_name>

# View logs
python3 scripts/hostinger.py docker logs \x3Cvm_id> \x3Cproject_name>

# Delete project
python3 scripts/hostinger.py docker down \x3Cvm_id> \x3Cproject_name>

VPS Firewall

# List firewalls
python3 scripts/hostinger.py firewall list

# Create firewall
python3 scripts/hostinger.py firewall create \x3Cname>

# Add rule
python3 scripts/hostinger.py firewall add-rule \x3Cfirewall_id> --protocol tcp --port 443 --source 0.0.0.0/0

# Activate on VM
python3 scripts/hostinger.py firewall activate \x3Cfirewall_id> \x3Cvm_id>

Direct API Access

For operations not covered by the script, use curl:

TOKEN=$(cat ~/.config/hostinger/token)
curl -H "Authorization: Bearer $TOKEN" \
     -H "Content-Type: application/json" \
     https://developers.hostinger.com/api/vps/v1/virtual-machines

API Documentation

Full API reference: https://developers.hostinger.com
OpenAPI spec: https://github.com/hostinger/api/blob/main/openapi.json
Python SDK: https://github.com/hostinger/api-python-sdk
CLI tool: https://github.com/hostinger/api-cli

Common Workflows

Deploy a Website

Get VPS ID: python3 scripts/hostinger.py vps list
Update DNS to point to VPS: python3 scripts/hostinger.py dns update domain.com records.json
SSH to VPS and deploy, OR use Docker: python3 scripts/hostinger.py docker deploy \x3Cvm_id> mysite --file docker-compose.yml

Secure a VPS

Create firewall: python3 scripts/hostinger.py firewall create "web-server"
Add rules for SSH, HTTP, HTTPS
Activate: python3 scripts/hostinger.py firewall activate \x3Cfw_id> \x3Cvm_id>

Backup Before Changes

Create snapshot: python3 scripts/hostinger.py vps snapshot-create \x3Cvm_id>
Make changes
If needed, restore: python3 scripts/hostinger.py vps snapshot-restore \x3Cvm_id>

Usage Guidance

This skill appears to do what it claims: it reads a Hostinger API token from ~/.config/hostinger/token and issues API calls to developers.hostinger.com to manage VPS, DNS, domains, hosting, and billing. Before installing/use: 1) Create a dedicated API token with the minimum scope needed (if Hostinger supports scoped tokens) and store it at ~/.config/hostinger/token with restrictive permissions (chmod 600). 2) Understand the token allows powerful actions (change root password, create/delete VMs, modify DNS, cancel subscriptions); treat it like a secret and revoke it if compromised. 3) Ensure the runtime environment has Python 3 and the 'requests' library installed. 4) If you need stricter auditing, review the full script for any modifications (the provided file only calls Hostinger endpoints). If you don't use Hostinger or don't want remote management enabled, do not provide the token.

Capability Analysis

Type: OpenClaw Skill Name: hostinger Version: 1.0.0 This skill is classified as suspicious due to the extensive and high-impact administrative capabilities it exposes, particularly the ability to deploy Docker projects from arbitrary URLs and manage SSH keys and root passwords on VPS instances. While these actions are legitimate for cloud management, they represent significant security risks if the AI agent were to be compromised or prompted maliciously. The `docker deploy --url` command in `scripts/hostinger.py` allows the Hostinger API to fetch and execute `docker-compose.yml` from any URL, which could lead to remote code execution on a VPS. The `SKILL.md` also explicitly details these powerful commands, increasing the attack surface for prompt injection against the agent.

Capability Assessment

✓ Purpose & Capability

Name/description, SKILL.md, reference doc, and the included Python CLI consistently implement Hostinger account management (VPS, DNS, domains, hosting, billing). The required capabilities (API token, HTTP calls) are proportionate to the stated purpose.

✓ Instruction Scope

Runtime instructions and the Python script only read the token file in ~/.config/hostinger/token, local JSON/compose files supplied by the user, and call Hostinger API endpoints. The SKILL.md does not instruct reading unrelated system files or exfiltrating data to non-Hostinger endpoints.

ℹ Install Mechanism

There is no install spec (instruction-only skill with an included script). The script depends on Python and the 'requests' library but the registry metadata does not list dependencies; this is benign but the user or integrator should ensure the environment has Python and requests installed before use.

ℹ Credentials

The skill requires a Hostinger API token (documented in SKILL.md) stored as a file under ~/.config/hostinger/token. The registry metadata lists no required env vars or credentials — which is consistent because the token is read from disk rather than environment variables. The token grants broad control (VPS, DNS, billing), so users should ensure the token has appropriate scope and protection.

✓ Persistence & Privilege

The skill does not request permanent/always-on inclusion and does not modify other skills or system-wide settings. It will run only when invoked and uses the user's Hostinger token file for API calls.

Version History

v1.0.0

Initial release: VPS, DNS, domains, hosting, billing management

Metadata

Slug hostinger

Version 1.0.0

License —

All-time Installs 1

Active Installs 1

Total Versions 1

Frequently Asked Questions

What is Hostinger?

Manage Hostinger account via API — VPS administration (start/stop/restart, snapshots, backups, firewall, Docker), DNS zone management, domain portfolio, website hosting, and billing. Use when asked to deploy, publish, manage servers, configure DNS, or control any Hostinger service. It is an AI Agent Skill for Claude Code / OpenClaw, with 1322 downloads so far.

How do I install Hostinger?

Run "/install hostinger" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Hostinger free?

Yes, Hostinger is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Hostinger support?

Hostinger is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Hostinger?

It is built and maintained by rexlunae (@rexlunae); the current version is v1.0.0.

More Skills

Hostinger