Have manitu update the software on a website

manitu updates the software (Nextcloud) on a website, for the price it offers.

WWriteNot idempotentbetaNeeds service_webhosting

Tool

manitu_webhosting_web_vhost_application_updateon https://mcp.manitu.de/mcp

POST

/v1/webhosting/web/vhost/application/updateon https://api.manitu.de

Try it

Changes the account. Agents say what will happen and wait for an explicit yes before calling it.

Annotations as tools/list sends them

readOnlyHint falsedestructiveHint falseidempotentHint falseopenWorldHint false

Description for the model

Has manitu update the software on a website (vHost) of a web hosting package of the manitu customer account this connection works in, by site_id and fqdn from manitu_webhosting_web_vhost_list - only where manitu_webhosting_web_vhost_application_get shows update.by_manitu (today Nextcloud), for the price stated there. It runs in the background: follow it with manitu_workflow_get and its workflow_token; manitu charges only when it succeeds. CONSENT IN TWO CALLS: the first call (without consent_token) is answered with the conflict consent_required - its consent_list holds the AGB as a link and the price as a text, and a consent_token. Show the customer every item; only after an explicit yes to all of them call again with the consent_token (valid 15 minutes, once). Never agree on the customer's behalf. Refused with a conflict when nothing is on offer (update_not_available), the web space is nearly full (quota_nearly_full), the website shows no folder (not_a_website_with_folder), an update is running (workflow_running, with its workflow_token), the customer may not order (order_not_allowed, with reason_list) or the package cannot be changed now (not_configurable).

Arguments

site_idinteger | stringrequired

The site_id from manitu_webhosting_list - never guess one.

pattern ^[1-9][0-9]*$min 1

fqdnstringrequired

The website from manitu_webhosting_web_vhost_list. Never guess one.

min length 3max length 253

consent_tokenstringwrite-only

The consent_token from the consent_required answer of the same call - only after the customer agreed to everything in its consent_list. Valid 15 minutes, once.

min length 1max length 255

Result structuredContent, checked against the schema

workflowstring | nullrequired

What is being done, e.g. power_reboot or ngcobalt_site_web_database_copy.

One of create destroy power_start power_stop power_reboot reinstall ptr_set vnc_enable vnc_disable rescuesystem_enable rescuesystem_disable snapshot_create snapshot_delete snapshot_delete_all snapshot_revert telemetry_await iso_eject none account_contract_termination_finish ngcobalt_site_web_application_installation_set ngcobalt_site_web_application_installation_update ngcobalt_site_web_permission_set ngcobalt_site_web_database_copy network_librenms_discover null

workflow_idstring | nullrequired

The id of this run, as vserver/workflow/list names it; null for a workflow not kept as tasks.

statusstringrequired

pending: waiting to start; running: started, not finished (can take a while); done: finished, everything went through; error: finished, but it or part of it failed.

One of pending running done error

created_atstring | nullrequired

When it was asked for.

Format date-time

started_atstring | nullrequired

When it started; null while pending, and for a workflow that does not record it.

Format date-time

ended_atstring | nullrequired

When it finished; null until then.

Format date-time

updated_atstring | nullrequired

When it last changed.

Format date-time

workflow_tokenstring | nullrequired

Pass it to manitu_workflow_get to see how far the workflow is - as it is, never built or changed. A secret of this workflow: do not show it to anyone. null if there is none.

fqdnstringrequired

The website.

price_centintegerrequired

The price agreed to, in euro cent - charged only when the update succeeds.

Authentication

One of X-API-Key, Authorization: Bearer … - never more than one in a request. More

Request body JSON; unknown fields are refused

site_idinteger | stringrequired

The site_id from manitu_webhosting_list - never guess one.

pattern ^[1-9][0-9]*$min 1

fqdnstringrequired

The website from manitu_webhosting_web_vhost_list. Never guess one.

min length 3max length 253

consent_tokenstringwrite-only

The consent_token from the consent_required answer of the same call - only after the customer agreed to everything in its consent_list. Valid 15 minutes, once.

min length 1max length 255

Response in `data`; the rest of the body as on every call

workflowstring | nullrequired

What is being done, e.g. power_reboot or ngcobalt_site_web_database_copy.

workflow_idstring | nullrequired

The id of this run, as vserver/workflow/list names it; null for a workflow not kept as tasks.

statusstringrequired

pending: waiting to start; running: started, not finished (can take a while); done: finished, everything went through; error: finished, but it or part of it failed.

One of pending running done error

created_atstring | nullrequired

When it was asked for.

Format date-time

started_atstring | nullrequired

When it started; null while pending, and for a workflow that does not record it.

Format date-time

ended_atstring | nullrequired

When it finished; null until then.

Format date-time

updated_atstring | nullrequired

When it last changed.

Format date-time

workflow_tokenstring | nullrequired

Pass it to manitu_workflow_get to see how far the workflow is - as it is, never built or changed. A secret of this workflow: do not show it to anyone. null if there is none.

fqdnstringrequired

The website.

price_centintegerrequired

The price agreed to, in euro cent - charged only when the update succeeds.

Statuses

200Success.400The request does not match the declared input schema.401No credential was presented, or it was not recognised.403The credential is not permitted to use this operation.500The server failed. Nothing about the request was wrong. Whether a change took effect is not known - check before trying it again.503The channel this operation forwards through is unavailable.

MCPtools/call

Request

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "manitu_webhosting_web_vhost_application_update",
    "arguments": {
      "site_id": 12345,
      "fqdn": "example.com"
    }
  }
}

Result

{
  "structuredContent": {
    "workflow": "create",
    "workflow_id": "string",
    "status": "pending",
    "created_at": "2026-10-23T12:00:00+02:00",
    "started_at": "2026-10-23T12:00:00+02:00",
    "ended_at": "2026-10-23T12:00:00+02:00",
    "updated_at": "2026-10-23T12:00:00+02:00",
    "workflow_token": "eyJwYWdlIjoyfQ",
    "fqdn": "example.com",
    "price_cent": 1190
  },
  "content": [
    {
      "type": "text",
      "text": "… the same answer as text …"
    }
  ],
  "isError": false
}

POST/v1/webhosting/web/vhost/application/update

Request

curl -X POST 'https://api.manitu.de/v1/webhosting/web/vhost/application/update' \
  -H 'X-API-Key: $API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "site_id": 12345,
    "fqdn": "example.com"
  }'

const response = await fetch('https://api.manitu.de/v1/webhosting/web/vhost/application/update', {
  method: 'POST',
  headers: {
    'X-API-Key': process.env.API_KEY,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    "site_id": 12345,
    "fqdn": "example.com"
  }),
});
const answer = await response.json();

<?php

$curl = curl_init('https://api.manitu.de/v1/webhosting/web/vhost/application/update');

curl_setopt_array($curl, [
    CURLOPT_CUSTOMREQUEST  => 'POST',
    CURLOPT_HTTPHEADER     => [
        'X-API-Key: ' . getenv('API_KEY'),
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS     => '{"site_id":12345,"fqdn":"example.com"}',
    CURLOPT_RETURNTRANSFER => true,
]);

$answer = json_decode(curl_exec($curl), true);

import os

import requests

response = requests.request(
    "POST",
    "https://api.manitu.de/v1/webhosting/web/vhost/application/update",
    headers={"X-API-Key": os.environ["API_KEY"]},
    json={
        "site_id": 12345,
        "fqdn": "example.com",
    },
)
answer = response.json()

Response 200

{
  "status": {
    "type": "success",
    "code": 200
  },
  "meta": {},
  "data": {
    "workflow": "create",
    "workflow_id": "string",
    "status": "pending",
    "created_at": "2026-10-23T12:00:00+02:00",
    "started_at": "2026-10-23T12:00:00+02:00",
    "ended_at": "2026-10-23T12:00:00+02:00",
    "updated_at": "2026-10-23T12:00:00+02:00",
    "workflow_token": "eyJwYWdlIjoyfQ",
    "fqdn": "example.com",
    "price_cent": 1190
  }
}

Have manitu update the software on a website

Annotations as tools/list sends them

Description for the model

Arguments

Result structuredContent, checked against the schema

Authentication

Request body JSON; unknown fields are refused

Response in data; the rest of the body as on every call

Statuses

Response in `data`; the rest of the body as on every call