Browse all guides
NABHCLOUD runs two separate MCP servers: an open catalogue server that anyone can query for plan details, pricing pages and guides without signing in, and a private account server that uses your API key to let an agent manage your own infrastructure.
Published 18 Oct 2026, updated 26 Oct 2026. Amounts mentioned below are in Indian Rupees and exclude GST unless stated otherwise; current plans and prices are shown on this page.
Browse our VPS plans — billed hourly, GST invoice included, servers ready within a minute.
Open catalogue server: works without any key
This open server handles queries about our catalogue only. No sign-up or key is required, every call is read-only, and it holds no personal data. You will find its endpoint address and server descriptor listed under the Developer section of the panel.
Available tools include get_plans, quote_server, get_support_info, search_guides and get_guide. Whatever an agent returns through these matches the plans and prices shown on this page.
Figures are returned in INR for customers billed in India, and in USD for customers located outside India, where GST does not apply.
Setting up an API key
An API key allows a script or AI agent to act on your behalf. You can generate one from within the panel.
- Go to Developer, then API keys
From the left-hand menu, select Developer, then API keys, then click New key.
- Label it and set its permissions
Give it a recognisable name, for example Claude or CI deploy. Pick either Read only or Full access, and set an expiry in days if you want one.
- Lock it to specific IP addresses
You may list the IP addresses or CIDR ranges permitted to use this key. Restricting a key this way reduces harm if it is exposed. The panel responds on both IPv4 and IPv6, so add your IPv6 address or range too if your network uses it, otherwise requests from that address will be rejected.
- Save the key immediately
It is displayed only once and cannot be retrieved again afterwards. Store it in your password manager right away. You may revoke any key at any time from this same screen.
Linking Claude or any other agent to your account
In the panel, go to Developer, then AI agents (MCP). This screen displays the account server endpoint along with a configuration snippet you can copy straight into Claude. Once you paste your key into it, the agent can view and manage your servers, limited by whatever that key allows.
The same screen also has a checker: paste in a key and it shows precisely which tools that key unlocks. A read-only key only exposes read-type tools.
Boundaries on what an agent is able to do
No agent can add funds to your wallet or settle invoices on its own. A key with write permission does let an agent withdraw an unpaid wallet top-up receipt, using cancel_topup_invoice or POST /api/v1/billing/invoices/<invoice id>/cancel, and this action never transfers money. Agents also cannot generate or view API keys, see a generated root password, or access any account other than yours.
With a write-enabled key, an agent is able to request pricing and ask for a server or Kubernetes cluster to be resized, using an idempotency key so that repeating the call does not trigger a second resize. Any upgrade is capped by whatever balance sits in your wallet: if funds fall short, the resize stays pending until you add money, and either you or the agent can call it off beforehand.
Shutting down a server, or removing a cluster, bucket or model key, needs a key that has full access, an IP restriction applied, destructive operations enabled, and the request coming from one of the permitted addresses.
Frequently asked questions
Is the NABHCLOUD MCP server publicly accessible?
There are two servers. The catalogue server is open, read-only and requires no key at all. The account server, by contrast, needs an API key generated from your panel.
Can an AI agent add money to or pay from my wallet?
No. Agents are never given the ability to add funds or settle invoices. The only related action available to them is cancelling an unpaid top-up receipt, which moves no money at all. No key can read or generate other keys either.
What do I do if a key gets exposed?
Go to Developer, then API keys, and click Revoke beside the affected key. Setting an IP restriction and an expiry date in advance reduces the damage such exposure can cause.
What happens when a script sends requests too fast?
Requests beyond the limit return HTTP 429, carrying the error code rate_limited and a Retry-After header. Wait however many seconds that header specifies before trying again. Sign-in attempts, one-time codes, password changes and new API key creation each carry their own separate limits, applied per address and per account.