
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@mohn93/whmcs-mcp
Advanced tools
MCP Server for managing WHMCS installations - clients, products, billing, tickets, domains, and integrations
A Model Context Protocol (MCP) server for managing WHMCS (Web Host Manager Complete Solution) installations. This server provides comprehensive tools for managing clients, products, billing, support tickets, domains, and more through the WHMCS API.
Forked from scarecr0w12/whmcs-mcp-tool and published as
@mohn93/whmcs-mcp. Not affiliated with WHMCS or WebPros.
Pre-built prompt templates for common WHMCS workflows:
Real-time data endpoints for instant access:
whmcs://stats)whmcs://products)whmcs://support/departments)whmcs://payment-methods)whmcs://currencies)whmcs://servers)whmcs://tld-pricing)whmcs://promotions)whmcs://support/statuses)whmcs://admin/todo)docker run -it --rm \
-e WHMCS_API_URL="https://billing.example.com/" \
-e WHMCS_API_IDENTIFIER="your-identifier" \
-e WHMCS_API_SECRET="your-secret" \
ghcr.io/scarecr0w12/whmcs-mcp-tool:latest
See Docker Guide for detailed Docker deployment instructions.
Clone this repository:
git clone https://github.com/scarecr0w12/whmcs-mcp-tool.git
cd whmcs-mcp-tool
Install dependencies:
npm install
Build the project:
npm run build
Configure your WHMCS credentials:
cp .env.example .env
# Edit .env with your WHMCS API credentials
For detailed configuration instructions, see the Configuration Guide.
cp .env.example .env.env with your WHMCS credentialsSet the following environment variables:
| Variable | Required | Description |
|---|---|---|
WHMCS_API_URL | Yes | Your WHMCS installation URL (e.g., https://billing.example.com/) |
WHMCS_API_IDENTIFIER | Yes | API credential identifier |
WHMCS_API_SECRET | Yes | API credential secret |
WHMCS_ACCESS_KEY | No | Optional API access key for additional security |
WHMCS_ALLOW_MUTATIONS | No | Set to true to enable mutating tools (whmcs_resync_service, …). Default: disabled. |
For additional security, you can configure an API Access Key:
WHMCS_ACCESS_KEY environment variableThe server can be used directly with VS Code's MCP support. The configuration is already set up in .vscode/mcp.json.
npm run build# Development mode with auto-reload
npm run dev
# Production mode
npm run build
npm start
For complete parameter documentation, see the API Reference.
whmcs_get_clients - Get list of clientswhmcs_get_client_details - Get detailed client informationwhmcs_add_client - Create a new clientwhmcs_update_client - Update an existing clientwhmcs_delete_client - Delete a clientwhmcs_get_client_products - Get client's products/serviceswhmcs_get_client_domains - Get client's domainswhmcs_get_products - Get available productswhmcs_get_product_groups - Get product groupswhmcs_get_invoices - Get invoiceswhmcs_get_invoice - Get invoice detailswhmcs_create_invoice - Create an invoicewhmcs_update_invoice - Update an invoicewhmcs_add_payment - Add payment to invoicewhmcs_apply_credit - Apply credit to invoicewhmcs_get_transactions - Get transactionswhmcs_get_tickets - Get support ticketswhmcs_get_ticket - Get ticket detailswhmcs_open_ticket - Create a new ticketwhmcs_add_ticket_reply - Reply to a ticketwhmcs_update_ticket - Update ticket propertieswhmcs_delete_ticket - Delete a ticketwhmcs_get_support_departments - Get support departmentswhmcs_get_support_statuses - Get ticket statuseswhmcs_register_domain - Register a domainwhmcs_transfer_domain - Transfer a domainwhmcs_renew_domain - Renew a domainwhmcs_get_domain_whois - Get WHOIS informationwhmcs_get_domain_nameservers - Get nameserverswhmcs_update_domain_nameservers - Update nameserverswhmcs_get_domain_lock_status - Get lock statuswhmcs_update_domain_lock_status - Update lock statuswhmcs_get_tld_pricing - Get TLD pricingwhmcs_get_orders - Get orderswhmcs_accept_order - Accept an orderwhmcs_cancel_order - Cancel an orderwhmcs_delete_order - Delete an orderwhmcs_fraud_order - Mark as fraudulentwhmcs_pending_order - Set to pendingwhmcs_get_servers - Get configured serverswhmcs_module_create - Create/provision servicewhmcs_module_suspend - Suspend servicewhmcs_module_unsuspend - Unsuspend servicewhmcs_module_terminate - Terminate servicewhmcs_module_change_password - Change service passwordwhmcs_get_stats - Get system statisticswhmcs_get_admin_users - Get admin userswhmcs_get_payment_methods - Get payment methodswhmcs_get_currencies - Get currencieswhmcs_get_activity_log - Get activity logwhmcs_log_activity - Log an activitywhmcs_get_email_templates - Get email templateswhmcs_send_email - Send an emailwhmcs_get_todo_items - Get to-do itemswhmcs_get_affiliates - Get affiliateswhmcs_activate_affiliate - Activate an affiliatewhmcs_get_promotions - Get promotions/couponswhmcs_get_quotes - Get quoteswhmcs_create_quote - Create a quotewhmcs_accept_quote - Accept a quotewhmcs_delete_quote - Delete a quote.env file - It contains sensitive API credentialsRun the test script to verify your WHMCS connection:
npx tsx src/test.ts
See CONTRIBUTING.md for development guidelines.
# Install dependencies
npm install
# Run in development mode
npm run dev
# Build for production
npm run build
# Watch mode for development
npm run watch
This project is licensed under the MIT License - see the LICENSE file for details.
FAQs
MCP Server for managing WHMCS installations - clients, products, billing, tickets, domains, and integrations
We found that @mohn93/whmcs-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.