# BookMyHost API keys and MCP for AI assistants

Source: https://bookmyhost.com/guides/developer-api-keys-and-mcp-bookmyhost (updated 2026-10-18)

BookMyHost has two MCP servers. A public, read-only one that anyone can query for plans, prices, offers and guides, and an account one that uses your API key to manage your own servers.

## The public MCP server: no key needed

The public server answers questions about the catalogue. It needs no account and no key, it is read-only and it carries no personal data. Its address is https://bookmyhost.com/mcp/public and its server card is at https://bookmyhost.com/.well-known/mcp.json.

Tools: get_plans, get_rate_card, get_active_promos, quote_server, get_support_info, search_guides and get_guide. Prices come from the same catalogue as the pricing page, so an agent quotes the current figures.


## Create an API key

An API key lets a script or an AI agent act on your account. Create one in the panel.

1. **Open Developer, then API keys** Choose Developer from the left menu, then API keys, then New key.
2. **Name it and choose access** Give the key a name such as Claude or CI deploy. Choose Read only or Full access, and optionally an expiry in days.
3. **Restrict it to IP addresses** Optionally list the addresses or CIDR ranges allowed to use the key. A key limited to IP addresses is safer if it leaks.
4. **Copy the key** The key is shown once and never again. Copy it into your password manager straight away. You can revoke a key at any time from the same page.

## Connect Claude or another agent to your account

Open Developer, then AI agents (MCP) in the panel. It shows the account endpoint and a ready-to-copy configuration for Claude. Paste your key into the configuration and the agent can list and manage your servers within the limits of that key.

The same page has a check box: paste a key and it lists exactly which tools that key would offer. A read-only key sees only read tools.


## What an agent can and cannot do

Agents cannot top up your wallet, pay invoices or change plans. They cannot create or read API keys, read a generated root password, or reach any other account.

Terminating a server or deleting a cluster, bucket or model key is available only on a key with full access, an IP restriction and destructive operations switched on, and only from an allowed address.


## FAQ

- **Is the BookMyHost MCP server public?** There are two. The catalogue server at https://bookmyhost.com/mcp/public is public, read-only and needs no key. The account server needs an API key from your panel.
- **Can an AI agent top up or pay from my wallet?** No. Top-ups and invoice payments are not offered to agents, and keys cannot read or create other keys.
- **What should I do if a key leaks?** Open Developer, then API keys, and choose Revoke next to it. Restricting keys to IP addresses and setting an expiry limits the damage in advance.