# Show what runs on a website

> The software found on a website (WordPress, Joomla, Nextcloud ...), its version and updates.

- Effect: Read - Changes nothing.
- Idempotent: yes
- Stability: beta
- MCP tool: `manitu_webhosting_web_vhost_application_get` on https://mcp.manitu.de/mcp
- REST: `POST https://api.manitu.de/v1/webhosting/web/vhost/application/get`
- Needs: `service_webhosting`
- Page: /reference/webhosting/web/vhost/application/get/

## MCP tool

`manitu_webhosting_web_vhost_application_get`

### Description for the model

Returns what runs on a website (vHost) of a web hosting package of the manitu customer account this connection works in, by site_id and fqdn from manitu_webhosting_web_vhost_list, as manitu last found it by looking at the start page: the software (wordpress, joomla, nextcloud, typo3 ...), its version, the newest version and whether manitu offers to carry out the update for a price (by_manitu, then manitu_webhosting_web_vhost_application_update). application null means none recognised - not that none runs there. scanned_at says how fresh it is; manitu_webhosting_web_vhost_application_scan looks again. Only for a website that shows a folder (conflict not_a_website_with_folder).

### Arguments

- `site_id` (integer | string, required) - The site_id from manitu_webhosting_list - never guess one. (pattern `"^[1-9][0-9]*$"`; minimum `1`)
- `fqdn` (string, required) - The website from manitu_webhosting_web_vhost_list (type website, showing a folder). Never guess one. (minLength `3`; maxLength `253`)

### Example

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "manitu_webhosting_web_vhost_application_get",
    "arguments": {
      "site_id": 12345,
      "fqdn": "example.com"
    }
  }
}
```

## REST

`POST https://api.manitu.de/v1/webhosting/web/vhost/application/get`

### Authentication

One of `X-API-Key`, `Authorization: Bearer …` - never more than one in a request.

### Request body

JSON; unknown fields are refused.

- `site_id` (integer | string, required) - The site_id from manitu_webhosting_list - never guess one. (pattern `"^[1-9][0-9]*$"`; minimum `1`)
- `fqdn` (string, required) - The website from manitu_webhosting_web_vhost_list (type website, showing a folder). Never guess one. (minLength `3`; maxLength `253`)

### Response

In `data`; the rest of the body as on every call.

- `fqdn` (string, required) - The website.
- `scanned_at` (string | null, required) - When manitu last looked at its start page; null: never yet. (format `date-time`)
- `application` (object | null, required) - The software found on the start page; null: none recognised (which does not mean none runs there) or not looked at yet.
  - `application.type` (string, required) - The software, by manitu's name for it - wordpress, joomla, nextcloud, typo3 ... (the same names as manitu_webhosting_web_application_catalog_list).
  - `application.title` (string | null, required) - Its name for people, e.g. WordPress.
  - `application.version` (string | null, required) - The version found, null if it could not be read.
  - `application.is_installed` (boolean | null, required) - false: its setup has not been finished (the start page is the setup page); null: not known.
  - `application.is_under_construction` (boolean, required) - The start page says it is under construction or in maintenance (recognised for WordPress).
  - `application.update` (object, required)
    - `application.update.latest_version` (string | null, required) - The newest version manitu knows of.
    - `application.update.is_available` (boolean, required) - A newer version than the one found exists - the customer updates it in the software itself, or (by_manitu) has manitu do it.
    - `application.update.by_manitu` (object | null, required) - manitu offers to carry out the update (Nextcloud) - with manitu_webhosting_web_vhost_application_update. null: not on offer.
      - `application.update.by_manitu.price_cent` (integer, required) - What the update by manitu costs, in euro cent, as the customer panel states it - charged only when the update succeeded.

### Statuses

- `200` Success.
- `400` The request does not match the declared input schema.
- `401` No credential was presented, or it was not recognised.
- `403` The credential is not permitted to use this operation.
- `500` The server failed. Nothing about the request was wrong. Whether a change took effect is not known - check before trying it again.
- `503` The channel this operation forwards through is unavailable.

### Example

```sh
curl -X POST 'https://api.manitu.de/v1/webhosting/web/vhost/application/get' \
  -H 'X-API-Key: $API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{"site_id":12345,"fqdn":"example.com"}'
```

## Example result

```json
{
  "fqdn": "example.com",
  "scanned_at": "2026-10-23T12:00:00+02:00",
  "application": {
    "type": "string",
    "title": "string",
    "version": "string",
    "is_installed": true,
    "is_under_construction": true,
    "update": {
      "latest_version": "string",
      "is_available": true,
      "by_manitu": {
        "price_cent": 1190
      }
    }
  }
}
```