npm package: @orbitpanel/mcp-server
Description: OrbitPanel MCP Server — AI-powered hosting management via Claude Code, Cursor, and other MCP clients
Author: PrincipiADV
Latest version: 1.0.0

# @orbitpanel/mcp-server

AI-powered hosting management for **Claude Code**, **Cursor**, **Windsurf**, and any MCP-compatible client.

Manage WordPress, PrestaShop, and cPanel sites directly from your AI assistant.

## Quick Start

### 1. Get your MCP token

Go to **OrbitPanel** → your site → **MCP Tokens** → **Create Token**.

### 2. Configure your AI client

**Claude Code** (`~/.claude/settings.json`):

```json
{
  "mcpServers": {
    "my-site": {
      "command": "npx",
      "args": ["-y", "@orbitpanel/mcp-server"],
      "env": {
        "MCP_TOKEN": "orbit_mcp_your_token_here"
      }
    }
  }
}
```

**Cursor** (`.cursor/mcp.json`):

```json
{
  "mcpServers": {
    "my-site": {
      "command": "npx",
      "args": ["-y", "@orbitpanel/mcp-server"],
      "env": {
        "MCP_TOKEN": "orbit_mcp_your_token_here"
      }
    }
  }
}
```

### 3. Start using it

Ask your AI assistant:

- "Show me the site info"
- "List all plugins"
- "Check the security status"
- "Run a performance audit"
- "Get the error logs"

## Features

- **100+ tools** across WordPress, PrestaShop, and cPanel
- **Secure** — token-scoped per site, HMAC-SHA256 authentication
- **Audited** — every tool call is logged with correlation IDs
- **Rate-limited** — per-site sliding window prevents abuse
- **Zero config** — just a token, no server setup needed

## Available Tools

### WordPress (66+ tools)
- Site management (info, sync, updates)
- Plugin/theme management (install, activate, delete)
- User management (list, create, roles)
- Security scanning and hardening
- Backup creation and restore
- WP-CLI console access
- Performance analysis (Core Web Vitals, Lighthouse)
- Multisite network management
- Agent deployment and monitoring

### PrestaShop (40+ tools)
- Shop info and diagnostics
- Module management
- Product catalog audit
- Order management
- SEO configuration
- Cache management
- Security configuration

### cPanel (20+ tools)
- Account management
- Database operations
- Email configuration
- File management
- SSL certificates

## Environment Variables

| Variable | Required | Default | Description |
|----------|----------|---------|-------------|
| `MCP_TOKEN` | Yes | — | OrbitPanel MCP token |
| `ORBIT_API_URL` | No | `https://api.orbit.principi.it` | Backend API URL |

## Multi-site Setup

Add multiple sites with different tokens:

```json
{
  "mcpServers": {
    "site-production": {
      "command": "npx",
      "args": ["-y", "@orbitpanel/mcp-server"],
      "env": { "MCP_TOKEN": "orbit_mcp_prod_token" }
    },
    "site-staging": {
      "command": "npx",
      "args": ["-y", "@orbitpanel/mcp-server"],
      "env": { "MCP_TOKEN": "orbit_mcp_staging_token" }
    }
  }
}
```

## How it Works

```
Your AI Client (Claude Code, Cursor, etc.)
       |
       |  stdio (MCP protocol)
       v
[@orbitpanel/mcp-server]  <-- this package (thin bridge)
       |
       |  HTTPS + Bearer token
       v
[OrbitPanel Backend API]
       |
   Site management engine
   (WordPress, PrestaShop, cPanel)
```

The package is a **thin stdio bridge** (~200 lines). All business logic, authentication, rate limiting, and audit logging runs on the OrbitPanel backend.

## Security

- Tokens are scoped to a single site
- Optional tool whitelisting per token
- All calls audited with correlation IDs
- Rate limiting prevents abuse
- Kill switch to block write operations
- HMAC-SHA256 token validation

## License

MIT