What an agent can read without a key
BookMyHost runs a public, read-only MCP server at `https://bookmyhost.com/mcp/public`, with its server card at `https://bookmyhost.com/.well-known/mcp.json`. It needs no account and no key and carries no personal data. Its tools are get_plans, get_rate_card, get_active_promos, quote_server, get_support_info, search_guides and get_guide, and the prices come from the same catalogue as the pricing page, so an agent quotes current figures rather than numbers it remembers.
Agents that prefer plain HTTP can read the public catalogue as JSON at `https://my.bookmyhost.com/api/v1/public/catalog`, and ask `https://my.bookmyhost.com/api/v1/public/quote` for the price of a custom vCPU, RAM and disk size. Prices come back in INR for India, before 18% GST, and in USD for customers outside India.
What you do once, by hand
- Create the account
Sign up and verify your phone and email.
- Complete eKYC
Verify once with Aadhaar/DigiLocker or an ID document before the first deployment, as CERT-In requires.
- Fund the wallet
Top up by UPI, card or net banking. Agents cannot top up a wallet or pay an invoice, so the amount you add is the most the account can spend.
- Create an API key
In the panel open Developer, then API keys. Choose Read only or Full access, an optional expiry, and optionally the IP addresses allowed to use it. The key is shown once.
- Connect the agent
Developer, then AI agents (MCP) shows the account endpoint `https://my.bookmyhost.com/mcp` and a ready configuration for Claude. Paste the key and the agent works within that key's limits.
What the agent can do with your key
- List your servers and read their state, usage and billing: the MCP tools billing_ledger, billing_usage, billing_payments and invoice_pdf return the wallet ledger, usage per server, payments and invoice PDFs.
- Quote and request a resize of a server or a Kubernetes cluster on a key with write access, with an idempotency key so a retried call never resizes twice.
- Stay inside the wallet: an upgrade never spends more than the wallet holds; if it is short, the change waits for your top-up and can be cancelled until then.
- Delete nothing by accident: terminating a server or deleting a cluster, bucket or model key needs a full-access key with an IP restriction and destructive operations switched on, called from an allowed address.
What an agent cannot do
- Top up the wallet or pay invoices.
- Create or read API keys, so it cannot give itself more access.
- Read a generated root password.
- Reach any account other than the one the key belongs to.
Billing an agent can reason about
Hourly servers are billed per started hour with a minimum of 1 hour: the hourly rate is the monthly list price divided by 730, so an agent that starts a test server and deletes it later pays only for the hours it ran. A server is live under a minute after it is ordered. Monthly and longer terms take the term discounts, and every invoice is a GST tax invoice.