Look again at what runs on a website

manitu fetches the start page now and recognises the software on it.

WWriteIdempotentbetaNeeds service_webhosting

Tool

manitu_webhosting_web_vhost_application_scanon https://mcp.manitu.de/mcp

POST

/v1/webhosting/web/vhost/application/scanon https://api.manitu.de

Try it

Changes the account. Agents say what will happen and wait for an explicit yes before calling it.

Annotations as tools/list sends them

readOnlyHint falsedestructiveHint falseidempotentHint trueopenWorldHint false

Description for the model

Looks again at what runs on a website (vHost) of a web hosting package of the manitu customer account this connection works in, by site_id and fqdn from manitu_webhosting_web_vhost_list: manitu fetches its start page now and recognises the software and its version. Answers as manitu_webhosting_web_vhost_application_get. Changes nothing on the website - no need to ask. Refused with a conflict for a website that shows no folder (not_a_website_with_folder), one switched off (inactive), within minutes of the last look (checked_recently) or when the website does not answer (not_reachable).

Arguments

site_idinteger | stringrequired

The site_id from manitu_webhosting_list - never guess one.

pattern ^[1-9][0-9]*$min 1

fqdnstringrequired

The website from manitu_webhosting_web_vhost_list (type website, showing a folder). Never guess one.

min length 3max length 253

Result structuredContent, checked against the schema

fqdnstringrequired

The website.

scanned_atstring | nullrequired

When manitu last looked at its start page; null: never yet.

Format date-time

applicationobject | nullrequired

The software found on the start page; null: none recognised (which does not mean none runs there) or not looked at yet.

application.typestringrequired

The software, by manitu's name for it - wordpress, joomla, nextcloud, typo3 ... (the same names as manitu_webhosting_web_application_catalog_list).

application.titlestring | nullrequired

Its name for people, e.g. WordPress.

application.versionstring | nullrequired

The version found, null if it could not be read.

application.is_installedboolean | nullrequired

false: its setup has not been finished (the start page is the setup page); null: not known.

application.is_under_constructionbooleanrequired

The start page says it is under construction or in maintenance (recognised for WordPress).

application.updateobjectrequired

application.update.latest_versionstring | nullrequired

The newest version manitu knows of.

application.update.is_availablebooleanrequired

A newer version than the one found exists - the customer updates it in the software itself, or (by_manitu) has manitu do it.

application.update.by_manituobject | nullrequired

manitu offers to carry out the update (Nextcloud) - with manitu_webhosting_web_vhost_application_update. null: not on offer.

application.update.by_manitu.price_centintegerrequired

What the update by manitu costs, in euro cent, as the customer panel states it - charged only when the update succeeded.

Authentication

One of X-API-Key, Authorization: Bearer … - never more than one in a request. More

Request body JSON; unknown fields are refused

site_idinteger | stringrequired

The site_id from manitu_webhosting_list - never guess one.

pattern ^[1-9][0-9]*$min 1

fqdnstringrequired

The website from manitu_webhosting_web_vhost_list (type website, showing a folder). Never guess one.

min length 3max length 253

Response in `data`; the rest of the body as on every call

fqdnstringrequired

The website.

scanned_atstring | nullrequired

When manitu last looked at its start page; null: never yet.

Format date-time

applicationobject | nullrequired

The software found on the start page; null: none recognised (which does not mean none runs there) or not looked at yet.

application.typestringrequired

The software, by manitu's name for it - wordpress, joomla, nextcloud, typo3 ... (the same names as manitu_webhosting_web_application_catalog_list).

application.titlestring | nullrequired

Its name for people, e.g. WordPress.

application.versionstring | nullrequired

The version found, null if it could not be read.

application.is_installedboolean | nullrequired

false: its setup has not been finished (the start page is the setup page); null: not known.

application.is_under_constructionbooleanrequired

The start page says it is under construction or in maintenance (recognised for WordPress).

application.updateobjectrequired

application.update.latest_versionstring | nullrequired

The newest version manitu knows of.

application.update.is_availablebooleanrequired

A newer version than the one found exists - the customer updates it in the software itself, or (by_manitu) has manitu do it.

application.update.by_manituobject | nullrequired

manitu offers to carry out the update (Nextcloud) - with manitu_webhosting_web_vhost_application_update. null: not on offer.

application.update.by_manitu.price_centintegerrequired

What the update by manitu costs, in euro cent, as the customer panel states it - charged only when the update succeeded.

Statuses

200Success.400The request does not match the declared input schema.401No credential was presented, or it was not recognised.403The credential is not permitted to use this operation.500The server failed. Nothing about the request was wrong. Whether a change took effect is not known - check before trying it again.503The channel this operation forwards through is unavailable.

MCPtools/call

Request

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "manitu_webhosting_web_vhost_application_scan",
    "arguments": {
      "site_id": 12345,
      "fqdn": "example.com"
    }
  }
}

Result

{
  "structuredContent": {
    "fqdn": "example.com",
    "scanned_at": "2026-10-23T12:00:00+02:00",
    "application": {
      "type": "string",
      "title": "string",
      "version": "string",
      "is_installed": true,
      "is_under_construction": true,
      "update": {
        "latest_version": "string",
        "is_available": true,
        "by_manitu": {
          "price_cent": 1190
        }
      }
    }
  },
  "content": [
    {
      "type": "text",
      "text": "… the same answer as text …"
    }
  ],
  "isError": false
}

POST/v1/webhosting/web/vhost/application/scan

Request

curl -X POST 'https://api.manitu.de/v1/webhosting/web/vhost/application/scan' \
  -H 'X-API-Key: $API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "site_id": 12345,
    "fqdn": "example.com"
  }'

const response = await fetch('https://api.manitu.de/v1/webhosting/web/vhost/application/scan', {
  method: 'POST',
  headers: {
    'X-API-Key': process.env.API_KEY,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    "site_id": 12345,
    "fqdn": "example.com"
  }),
});
const answer = await response.json();

<?php

$curl = curl_init('https://api.manitu.de/v1/webhosting/web/vhost/application/scan');

curl_setopt_array($curl, [
    CURLOPT_CUSTOMREQUEST  => 'POST',
    CURLOPT_HTTPHEADER     => [
        'X-API-Key: ' . getenv('API_KEY'),
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS     => '{"site_id":12345,"fqdn":"example.com"}',
    CURLOPT_RETURNTRANSFER => true,
]);

$answer = json_decode(curl_exec($curl), true);

import os

import requests

response = requests.request(
    "POST",
    "https://api.manitu.de/v1/webhosting/web/vhost/application/scan",
    headers={"X-API-Key": os.environ["API_KEY"]},
    json={
        "site_id": 12345,
        "fqdn": "example.com",
    },
)
answer = response.json()

Response 200

{
  "status": {
    "type": "success",
    "code": 200
  },
  "meta": {},
  "data": {
    "fqdn": "example.com",
    "scanned_at": "2026-10-23T12:00:00+02:00",
    "application": {
      "type": "string",
      "title": "string",
      "version": "string",
      "is_installed": true,
      "is_under_construction": true,
      "update": {
        "latest_version": "string",
        "is_available": true,
        "by_manitu": {
          "price_cent": 1190
        }
      }
    }
  }
}

Look again at what runs on a website

Annotations as tools/list sends them

Description for the model

Arguments

Result structuredContent, checked against the schema

Authentication

Request body JSON; unknown fields are refused

Response in data; the rest of the body as on every call

Statuses

Response in `data`; the rest of the body as on every call