SkillFoxx

Timeweb Cloud plugin with confirmation guards

timeweb-mcp

A Claude plugin for Timeweb Cloud: servers, domains, DNS and balance, with dangerous operations gated by explicit confirmation and name checks

  • 0 ★ on the repository
  • Last commit
  • MIT
Plugin

Broad access

Why this level

  • ssh_exec and service_control run arbitrary commands on a live server
  • create_server and delete_server change the Timeweb Cloud account's infrastructure and spending
All reasons and checks
Russian stack

k2spam/timeweb-mcpAuthor:Vladimir Khlebnikov

Install

In your terminal, with SkillFoxx CLI

npx skillfoxx add plugins/timeweb-mcp

Detects the agents on your machine, shows the access level and pins the version.

Other ways to install

Access and checks

How we review

Broad accessThe tool can change data, run commands or handle secrets.

  • ssh_exec and service_control run arbitrary commands on a live server
  • create_server and delete_server change the Timeweb Cloud account's infrastructure and spending

This is third-party code. Review the repository files before installing.

What it does

The plugin installs an MCP server and a timeweb-ops skill for managing Timeweb Cloud: account status and balance, server list and status, logs, presets and images, powering servers on and off, creating and deleting servers, domains and DNS records, plus SSH diagnostics, systemctl-based service control, and arbitrary commands. Dangerous operations are flagged in the README: some only run with a confirm: true parameter, and deleting a server additionally requires expected_name, which is checked against the server's real name and rejected on a mismatch. The API token is stored in a file with 600 permissions and is never passed through command arguments.

Who it is for. For Timeweb Cloud infrastructure owners who want to manage servers and DNS through an agent without fear of accidentally deleting the wrong server.

Good fit when

  • You need to manage Timeweb Cloud servers, domains and DNS from Claude with a single phrase
  • You need protection against accidentally deleting a server via an expected-name check
  • You need SSH access to a server with explicit confirmation before running commands

Not a fit when

  • You do not want to give the agent ssh_exec with arbitrary commands, even with confirmation
  • You need support for clouds other than Timeweb Cloud: the plugin is built only for it

Example request

Show my Timeweb Cloud balance and the status of all servers, without changing anything

Limitations

The project is not affiliated with Timeweb, as the README itself states. It has a single author and installs from git rather than being published in an official plugin marketplace. Full access via ssh_exec, even gated by confirmation, remains a powerful tool: the agent can run any command on the server if the user confirms the request without reading it carefully.

How to disable. Remove the plugin with /plugin uninstall timeweb-mcp@k2spam-tools in Claude Code.

FAQ

Can the agent delete the wrong server by mistake?

The delete_server tool requires an expected_name parameter checked against the server's real name, and rejects the deletion on a mismatch.

Do dangerous operations run without asking?

No, they are flagged and require an explicit confirm: true parameter, otherwise the agent is refused and must ask again.

How is the Timeweb Cloud plugin different from other MCP servers for Timeweb?

The plugin installs an MCP server and the timeweb-ops skill: account status and balance, server list and status, logs, presets and images, power on and off, create and delete. Risky operations need explicit confirmation and a server name check.

Can the agent delete the wrong server and do risky operations run without asking?

No, deletion and similar actions need explicit confirmation and a server name check, and the plugin does not run them without it. In Claude Code: /plugin marketplace add https://github.com/k2spam/timeweb-mcp. Risk is high, but the protection is built into the plugin.

Discussion

No questions or reviews yet.

All Timeweb Cloud tools

Official Timeweb Cloud skills

Timeweb Cloud Skills

Official

Timeweb Cloud's official plugin with ten skills and a hosted MCP server: servers, databases, Kubernetes, S3, domains and billing

PluginBroad access21
Official

Timeweb Cloud's official remote MCP: account servers, databases, Kubernetes, domains, mail, S3 and billing, with mandatory confirmation for changes

MCP serverBroad access26
Russian stack

An MCP server with full Timeweb Cloud API coverage: servers, databases, Kubernetes, S3, domains and DNS, SSH keys, floating IPs and billing

MCP serverBroad access
Russian stack

A broad Timeweb Cloud MCP server: 245 tools across servers, Kubernetes, databases, S3, domains, mail and billing

MCP serverBroad access
Russian stack

Lightweight MCP for domains and DNS records of classic Timeweb hosting, requires two-factor authentication disabled on the account

MCP serverBroad access

README in short

The Russian README explains MCP as a protocol that gives an agent hands for Timeweb Cloud infrastructure, lists tools by group (account, servers, domains and DNS, SSH) with icons for confirm-gated and dangerous operations, and describes the timeweb-ops skill with scenarios and a confirmation protocol. It separately details the safety measures: confirm: true, the expected_name check on server deletion, and storing the token in a 600-permission file.

README badge

Report a problem