Built for the AI Era
192 MCP tools (143 free) across 11 feature areas. Email with mail protection and a multi-IP sending pool, website analytics with a live map, bot protection, multi-PHP, Docker, security scanning and reseller hosting, with a Rust backend.
Why AI Server Management Matters
Most hosting panels were built before AI assistants. Amira was built for them.
Safer Than Raw SSH
Scoped API keys, permission-gated actions and a full log of every AI action. No root shell, no forgotten open ports.
Let AI Do the Routine Work
Deployments, DNS, SSL, email, security scans and backups — the AI does the steps through the panel, with the same limits.
One Request, Many Steps
One request sets up an app with SSL and a database. Developers spend more time on their product.
Help at Any Hour
Scan for malware late at night, deploy a hotfix on a Sunday, or ask why email stopped arriving.
Open Standard (MCP)
Not a private API. Works with Claude, ChatGPT, Cursor, Windsurf and other MCP clients.
Built AI-First
When we checked (October 2026), cPanel, Plesk, aaPanel and HestiaCP had no MCP server. Amira has 192 MCP tools built in — 143 of them free.
AI & MCP Integration
A hosting panel built around AI management from day one
Connect Claude, ChatGPT, or any MCP-compatible AI assistant and let it manage your server. Deploy apps, configure DNS, scan for malware — all through natural language.
MCP Server
Streamable HTTP endpoint built into the panel: 143 free tools, 192 in Solo Full, 231 in Agency
AI Chat Assistant
Built-in chat in the panel that can run the tools for you (Solo Full and Agency)
Claude & ChatGPT
Works with Claude Desktop, ChatGPT, Cursor, and any MCP client
Multi-Step Actions
AI deploys apps, manages DNS and sets up email; risky actions ask for confirmation
Large Uploads for AI
Agents upload archives and database dumps of up to 20 GB, resumable, outside the chat
WordPress AI (15 tools)
Install, configure, manage plugins/themes, users, and content via AI
Scoped & Audited
Every AI action is authenticated, permission-scoped, and logged
Cloudflare & Home Hosting
Host websites on your own server — even without a public IP
Serve the panel, webmail and any site through Cloudflare Tunnel from a machine at home or in the office, put Cloudflare Access in front of admin areas, send visitors through Cloudflare's firewall, and keep Cloudflare DNS in sync. Free in Solo Community. Agency can also give a home server real public IPs.
Cloudflare Tunnel
Publish sites with no public IP and no open web ports; tunnel-only mode closes 80/443
Cloudflare Access
Cloudflare sign-in in front of the panel, webmail or any site or path
Cloudflare Protection
Proxy a site through Cloudflare's firewall, then refuse visitors who use the server's IP directly
Real Visitor IPs
Logs, WAF, fail2ban and rate limits see the visitor, never a spoofed header
Zones & Token Check
Every zone your token reaches, what it can do, and how to fix what is missing
Public Address Behind NAT
DNS uses the router's public IP and follows it when it changes
Mail Gateways
Email for home servers through a small VPS — no mail software on it (Agency)
Public IPs from a Hub
Real public IPv4/IPv6 for a home server, from a VPS with spare addresses, for mail and websites (Agency)
Shared DNS
Share a Cloudflare zone, or part of one, with a hosting account (Agency)
Web Server Management
Nginx for Solo, OpenLiteSpeed for Agency.
Solo uses Nginx with per-domain config snippets. Agency runs OpenLiteSpeed with LSCache, and each hosting account runs PHP in its own processes as its own user.
Solo: Nginx
Per-domain config snippets in /etc/nginx/amira.d/{domain}/
Agency: OpenLiteSpeed
LSCache page cache and per-account PHP processes (LSAPI)
Multi-PHP
PHP 8.1, 8.2, 8.3, 8.4 — per-site version and PHP settings
AutoSSL
New sites get a Let's Encrypt certificate as soon as DNS points here, renewed automatically
Load Balancer
Spread a site across backend servers: round-robin, least-connections or IP-hash, with health checks
Bot Protection
Bot rules by name, path or referer (per domain in Solo; per site or server-wide, also by network, in Agency)
Email & Smart IP Routing
Your own mail server, with a sending pool for better delivery
Postfix, Dovecot, Rspamd and Amira Webmail in every edition, with login protection and sending limits against hacked mailboxes. Solo Full and Agency add a multi-IP sending pool with blocklist checks, warm-up and per-domain pinning. Agency adds Domain Security for DMARC.
Smart IP Pool
Mixed IPv4/IPv6 sending pool with priority round-robin and per-domain pinning (Solo Full and Agency)
Blocklist Monitoring
Pool addresses checked against 7 blocklists every 5 minutes, with failover and alerts
IP Warm-Up
New addresses start in a warm-up period, then become active automatically
DKIM / SPF / DMARC
Email authentication records published for you
Email Marketing
Campaigns, mailing lists, templates, and subscriber management (Solo Full and Agency)
Rspamd + ClamAV
Spam goes to Junk, greylisting, relay bots banned; ClamAV virus scanning when you turn it on
Login Protection
Failed mail logins per mailbox; password guessing from many addresses locks weak mailboxes
Sending Limits
Hourly and daily limits per mailbox; mail over the limit is held, a hacked mailbox paused
Delivery Logs
Real mail first, refusals explained in plain words; Track Delivery for customers in Agency
Domain Security (DMARC)
Which domains can move to p=quarantine safely, and a previewed switch (Agency)
DNS Management
Authoritative DNS you actually control
Run your own name servers with PowerDNS, or sync automatically with Cloudflare. Full zone management with automatic records and BIND zone import.
PowerDNS
Authoritative DNS with MySQL backend and full zone management
Cloudflare DNS
Zones, records and email DNS kept in sync with Cloudflare, with a preview before linking
Auto Records
Domain creation adds A, AAAA and MX; DKIM, SPF and DMARC come with email setup
Proxy by Default
New website records can go through Cloudflare; mail names always stay DNS-only
Zone Import
Bulk DNS zone import from existing providers (BIND format)
Public Address Behind NAT
Home and office servers publish the router's public IP, updated automatically
Database & Storage
Managed databases with zero config
Provision MySQL and PostgreSQL databases with per-database user permissions. Web-based file manager, scheduled backups, and remote backup destinations.
MySQL 8
Full management with per-database user permissions and size monitoring
PostgreSQL 16 + PostGIS
Databases on port 5433, PostGIS (maps) per database, reachable from Docker apps
File Manager
Web-based upload, download, edit, permissions, and archive extraction
Scheduled Backups
Incremental backups with retention; a backup never fills the disk
Remote Destinations
Back up to S3 or S3-compatible storage, Backblaze B2, SFTP, Google Drive and more (Solo Full and Agency)
Database Manager
Browse, edit and query MySQL and PostgreSQL in the browser — no phpMyAdmin
Storage Volumes
Put email, websites or backups on attached block storage (Agency)
Disk Usage & Quotas
Per-user disk usage; Agency enforces plan limits with quotas
Developer Tools
Your entire dev workflow in the browser
Web IDE, terminal, git deploy, and one-click hosting for Node.js, Python, Go, Rust and Docker apps.
Web IDE
VS Code in the browser via code-server (sandboxed per account in Agency)
Web Terminal
A terminal in the browser; Agency sandboxes it and logs each session
Git Deploy
Deploy on every push from GitHub, GitLab or Gitea (Solo also Bitbucket)
Node.js & Python
One-click deployment with PM2 (Node) and Gunicorn/Uvicorn (Python)
Docker Containers
Deploy, rebuild and monitor containers; engine tab with updates and clean-ups; Compose through the AI tools
WordPress Toolkit
One-click login, clone and staging, copy data, backup and security fixes per site (Agency)
Binary Apps
Deploy compiled Rust/Go binaries as system services that restart on crash
Security
Multi-layer defense, automated by AI
WAF, bot protection, malware scanning, rootkit detection, firewall management, fail2ban, and 2FA — all manageable through the panel UI and the AI tools. Agency also shows which bots visit your sites and stops them in one click.
WAF
ModSecurity with the OWASP Core Rule Set; JSON bodies checked; blocked requests explained, per-site exceptions
Bot Activity
Who visits each site and what they do; scraping detection and one-click blocks (Agency)
Outgoing Abuse
Accounts that mine, guess SSH passwords, spam or scan: slow down, block or suspend (Agency)
Threat Map
Where blocked and banned traffic comes from, live, with country flags (Agency)
Security Checkup
A nightly 0–100 security score with clear, one-click fixes (Agency)
Malware Scanner
ClamAV with scheduled scans, quarantine, and auto-cleanup
Rootkit Detection
Lynis, rkhunter, and chkrootkit with detailed reports
Firewall (UFW)
Allow/deny rules, plus fail2ban for SSH and mail sign-ins
2FA & Audit
TOTP two-factor authentication and an audit log of sign-ins, security changes and AI actions
Website Analytics
Know who reads your sites, without adding a tracking script
Visitors, page views and traffic from the web server's own logs. Any date range, visitor countries, CSV and PDF reports, and a live world map. No tracking script and no visitor addresses stored. Free in Solo Community.
From Server Logs
Visitors, page views, top pages, referrers, devices and browsers per site; nothing added to your pages
Any Date Range
24 hours, 7, 30 or 90 days, or a custom from–to range
Visitor Countries
Page views by country with flags; only the country code is counted
CSV & PDF
Export the current view to CSV, or download a print-ready PDF report (Lao included)
Live Traffic Map
Visits on a world map with a live feed in plain words; addresses masked
For Every Customer
Customers and resellers get Analytics for all their sites (Agency)
Migrate from cPanel
Bring your cPanel sites over without rebuilding them
Upload a cPanel backup and Amira recreates the account. Solo Full imports one account and converts its .htaccess rules to Nginx; Agency moves many accounts straight from a cPanel server over SSH, and between Amira servers.
One-Account Import
Domains, files, databases, mailboxes, SSL, DNS and cron from one cPanel backup (Solo Full)
Passwords Kept
MySQL users and mailboxes keep their passwords, so nothing breaks for users
.htaccess → Nginx
Rules become Nginx config and panel settings, checked with nginx -t before going live
Many Accounts over SSH
Pick accounts on a cPanel server, preview, queue, sync, cut over or roll back (Agency)
Server Transfers
Move one account or a whole server between Amira Agency servers, passwords kept (Agency)
Reseller & Business
Run a hosting company, not just a server
Multi-tenant hosting with reseller accounts, plan limits, a WHMCS provisioning API, cPanel import and one-click upgrades.
Reseller Accounts
Create resellers with their own plans, limits and customers
WHMCS Provisioning API
Create, suspend, unsuspend and terminate accounts from your billing system
Plan Limits
Per-plan limits for domains, databases, email accounts and disk
Account Isolation
Own Linux user, home folder, quota and PHP processes per account
Migrations & Transfers
cPanel accounts over SSH, and transfers between Amira servers
Customer Analytics
Customers and resellers see all their sites' traffic, with CSV and PDF
What Uses the Server
CPU and memory per Docker app, per account and per service
Custom Branding
Your own panel name, description and logo
One-Click Upgrades
Upgrade from a banner or through your AI; rolls back by itself on failure
192 Tools. One Protocol.
Every MCP tool is authenticated, scoped to user permissions, and audited. Here is how many tools each feature area has (Solo Full, plus the Agency-only tools).
Solo Community: 143 tools, free · Solo Full: 192 · Agency: 231
Ready to let AI manage your server?
Start free with Solo Community: 143 MCP tools and the full panel.