{"id":10252,"date":"2026-07-17T22:00:31","date_gmt":"2026-07-18T02:00:31","guid":{"rendered":"https:\/\/hostingdiscussion.com\/news\/?p=10252"},"modified":"2026-07-17T22:00:31","modified_gmt":"2026-07-18T02:00:31","slug":"cloudways-just-handed-ai-agents-the-keys-to-your-entire-hosting-account","status":"publish","type":"post","link":"https:\/\/hostingdiscussion.com\/news\/cloudways-just-handed-ai-agents-the-keys-to-your-entire-hosting-account\/","title":{"rendered":"Cloudways just handed AI agents the keys to your entire hosting account"},"content":{"rendered":"<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"auto\"><a href=\"https:\/\/www.cloudways.com\/en\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Cloudways<\/a> just handed AI agents access to nearly everything a hosting account touches, malware scans, staging environments, billing, team permissions, background jobs, and as a result, the update raises a question worth sitting with: how much control should a chatbot actually have over your infrastructure?<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"auto\">This week, the company&#8217;s Model Context Protocol server jumped to version 1.2.112, nearly doubling its tool count to 244, with 112 of those arriving fresh. The MCP server is the piece of software that lets AI tools like Claude, Cursor, or Windsurf act directly on hosting accounts. With the update in place, an agent can now restart a service, deploy code, run a security scan, or send a client invoice straight from a chat window, no dashboard needed.<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"auto\">Cloudways is not alone here. Its parent company, <a href=\"https:\/\/hostingdiscussion.com\/news\/digitalocean-bets-on-longer-contracts-as-ai-cloud-market-matures\/\">DigitalOcean<\/a>, shipped its own MCP server back in August 2025, and community-built versions already wrap other hosting panels, including one for <a href=\"https:\/\/hostingdiscussion.com\/news\/cpanel-issues-critical-updates-to-patch-high-risk-security-flaws\/\">cPanel<\/a> that exposes 164 tools of its own.<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"auto\">What actually matters here, though, isn&#8217;t the tool count. It&#8217;s what <a href=\"https:\/\/hostingdiscussion.com\/news\/cloudways-bets-on-ai-to-cut-website-downtime-from-hours-to-minutes\/\">Cloudways<\/a> changed underneath it. Instead of issuing one API key with blanket access to everything, the company now offers three permission tiers: read-only for monitoring, limited scope for specific tasks, and full access for total control. &#8220;Instead of one key with blanket access, you generate a token scoped to exactly what you want,&#8221; the company said.<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"auto\">That distinction matters more than it might sound, especially because the security research on this category of tool is genuinely unsettling. The firm BlueRock scanned more than 10,000 public MCP servers and found 9.2% carrying critical vulnerabilities, with 43% vulnerable to command injection, meaning an outsider could potentially run their own commands on the server.<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"auto\">In one proof-of-concept attack against Microsoft&#8217;s own MarkItDown MCP server, for example, BlueRock researchers used a separate flaw to pull AWS access keys directly out of a cloud instance&#8217;s metadata, keys that, depending on their permissions, could open a door into the wider AWS account.<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"auto\">Against that backdrop, scoped tokens aren&#8217;t a nice-to-have, they&#8217;re the difference between an agent that can fix one thing and an agent that becomes a single point of failure across every client site an agency manages. Ultimately, for anyone handing an <a href=\"https:\/\/hostingdiscussion.com\/news\/cloudflare-scans-200000-websites-and-finds-ai-agents-can-barely-use-any-of-them\/\">AI agent<\/a> the keys to a hosting account, the real question isn&#8217;t whether it&#8217;s convenient. It&#8217;s how narrowly that key gets cut.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cloudways just handed AI agents access to nearly everything a hosting account touches, malware scans, staging environments, billing, team permissions, background jobs, and as a result, the update raises a question worth sitting with: how much control should a chatbot actually have over your infrastructure? This week, the company&#8217;s Model Context Protocol server jumped to [&hellip;]<\/p>\n","protected":false},"author":20624,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[71],"tags":[7429,3992,3190,7427,7428,3717],"class_list":["post-10252","post","type-post","status-publish","format-standard","hentry","category-featured","tag-agentic-hosting-automation","tag-ai-agent","tag-cloudways","tag-hosting-management","tag-mcp-security","tag-mcp-server"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Cloudways just handed AI agents the keys to your entire hosting account - Web Hosting News<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hostingdiscussion.com\/news\/cloudways-just-handed-ai-agents-the-keys-to-your-entire-hosting-account\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cloudways just handed AI agents the keys to your entire hosting account - Web Hosting News\" \/>\n<meta property=\"og:description\" content=\"Cloudways just handed AI agents access to nearly everything a hosting account touches, malware scans, staging environments, billing, team permissions, background jobs, and as a result, the update raises a question worth sitting with: how much control should a chatbot actually have over your infrastructure? This week, the company&#8217;s Model Context Protocol server jumped to [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hostingdiscussion.com\/news\/cloudways-just-handed-ai-agents-the-keys-to-your-entire-hosting-account\/\" \/>\n<meta property=\"og:site_name\" content=\"Web Hosting News\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-18T02:00:31+00:00\" \/>\n<meta name=\"author\" content=\"Justine Juyad\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Justine Juyad\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/cloudways-just-handed-ai-agents-the-keys-to-your-entire-hosting-account\/\",\"url\":\"https:\/\/hostingdiscussion.com\/news\/cloudways-just-handed-ai-agents-the-keys-to-your-entire-hosting-account\/\",\"name\":\"Cloudways just handed AI agents the keys to your entire hosting account - Web Hosting News\",\"isPartOf\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#website\"},\"datePublished\":\"2026-07-18T02:00:31+00:00\",\"dateModified\":\"2026-07-18T02:00:31+00:00\",\"author\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3\"},\"breadcrumb\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/cloudways-just-handed-ai-agents-the-keys-to-your-entire-hosting-account\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/hostingdiscussion.com\/news\/cloudways-just-handed-ai-agents-the-keys-to-your-entire-hosting-account\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/cloudways-just-handed-ai-agents-the-keys-to-your-entire-hosting-account\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/hostingdiscussion.com\/news\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cloudways just handed AI agents the keys to your entire hosting account\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#website\",\"url\":\"https:\/\/hostingdiscussion.com\/news\/\",\"name\":\"Web Hosting News\",\"description\":\"Cloud and web hosting industry daily news\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/hostingdiscussion.com\/news\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3\",\"name\":\"Justine Juyad\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g\",\"caption\":\"Justine Juyad\"},\"description\":\"HostingDiscussion.com senior reporter\",\"sameAs\":[\"https:\/\/hostingdiscussion.com\/news\/\"],\"url\":\"https:\/\/hostingdiscussion.com\/news\/author\/justine-juyad\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cloudways just handed AI agents the keys to your entire hosting account - Web Hosting News","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hostingdiscussion.com\/news\/cloudways-just-handed-ai-agents-the-keys-to-your-entire-hosting-account\/","og_locale":"en_US","og_type":"article","og_title":"Cloudways just handed AI agents the keys to your entire hosting account - Web Hosting News","og_description":"Cloudways just handed AI agents access to nearly everything a hosting account touches, malware scans, staging environments, billing, team permissions, background jobs, and as a result, the update raises a question worth sitting with: how much control should a chatbot actually have over your infrastructure? This week, the company&#8217;s Model Context Protocol server jumped to [&hellip;]","og_url":"https:\/\/hostingdiscussion.com\/news\/cloudways-just-handed-ai-agents-the-keys-to-your-entire-hosting-account\/","og_site_name":"Web Hosting News","article_published_time":"2026-07-18T02:00:31+00:00","author":"Justine Juyad","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Justine Juyad","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/hostingdiscussion.com\/news\/cloudways-just-handed-ai-agents-the-keys-to-your-entire-hosting-account\/","url":"https:\/\/hostingdiscussion.com\/news\/cloudways-just-handed-ai-agents-the-keys-to-your-entire-hosting-account\/","name":"Cloudways just handed AI agents the keys to your entire hosting account - Web Hosting News","isPartOf":{"@id":"https:\/\/hostingdiscussion.com\/news\/#website"},"datePublished":"2026-07-18T02:00:31+00:00","dateModified":"2026-07-18T02:00:31+00:00","author":{"@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3"},"breadcrumb":{"@id":"https:\/\/hostingdiscussion.com\/news\/cloudways-just-handed-ai-agents-the-keys-to-your-entire-hosting-account\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hostingdiscussion.com\/news\/cloudways-just-handed-ai-agents-the-keys-to-your-entire-hosting-account\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/hostingdiscussion.com\/news\/cloudways-just-handed-ai-agents-the-keys-to-your-entire-hosting-account\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/hostingdiscussion.com\/news\/"},{"@type":"ListItem","position":2,"name":"Cloudways just handed AI agents the keys to your entire hosting account"}]},{"@type":"WebSite","@id":"https:\/\/hostingdiscussion.com\/news\/#website","url":"https:\/\/hostingdiscussion.com\/news\/","name":"Web Hosting News","description":"Cloud and web hosting industry daily news","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hostingdiscussion.com\/news\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3","name":"Justine Juyad","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g","caption":"Justine Juyad"},"description":"HostingDiscussion.com senior reporter","sameAs":["https:\/\/hostingdiscussion.com\/news\/"],"url":"https:\/\/hostingdiscussion.com\/news\/author\/justine-juyad\/"}]}},"views":154,"_links":{"self":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/10252","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/users\/20624"}],"replies":[{"embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/comments?post=10252"}],"version-history":[{"count":1,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/10252\/revisions"}],"predecessor-version":[{"id":10253,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/10252\/revisions\/10253"}],"wp:attachment":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/media?parent=10252"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/categories?post=10252"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/tags?post=10252"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}