Configure IONOS MCP server

config/mcp/mcp.json

@@ -1,5 +1,11 @@
 {
   "mcpServers": {
+    "ionos": {
+      "url": "https://mcp.ionos.com/mcp",
+      "auth": "bearer",
+      "bearerTokenEnv": "IONOS_PAT",
+      "lifecycle": "lazy"
+    },
     "linear": {
       "url": "https://mcp.linear.app/mcp",
       "auth": "oauth",

module/home-manager.nix

@@ -33,6 +33,7 @@
     defaultSopsFile = ../secrets/secrets.yaml;
 
     secrets.firecrawl_api_key = { };
+    secrets.ionos_pat = { };
   };
 
   targets.darwin.defaults = {
@@ -129,6 +130,7 @@
       ];
       environment = {
         FIRECRAWL_API_KEY.file = config.sops.secrets.firecrawl_api_key.path;
+        IONOS_PAT.file = config.sops.secrets.ionos_pat.path;
       };
       settings = {
         defaultProvider = "openai-codex";

secrets/secrets.yaml

@@ -1,4 +1,5 @@
 firecrawl_api_key: ENC[AES256_GCM,data:T5o3SaZmteTq+c6Qw3pvYrW7+Yicio3EbfI3c+d1ZxbsHEU=,iv:bg+q7TZDdsyWI+nvDzX/LpMf2FTKEKBKgMXOhUMCAho=,tag:fmRHmgWfFfL4ckQcTKdshQ==,type:str]
+ionos_pat: ENC[AES256_GCM,data:UizMtJgoMAoYC4LPkP6hgmYjR5y2QL1ngfgZNkt7R53L8QSm7Yah7pDCZw==,iv:KzekpU5Bhy9RqtWWUK6ZFmsasJy6IiuAujDFn7dCqpM=,tag:/IEmHjS4Hw7+YsO2P7aXjQ==,type:str]
 sops:
     age:
         - enc: |
@@ -10,7 +11,7 @@ sops:
             ptUomL2W/we4iRbe1LnPHB1JqBuYZSEaXGgdFbGGf2iYw/jtEE5gTQ==
             -----END AGE ENCRYPTED FILE-----
           recipient: age106xkhmfrzqum2zkuxxfwjddesuwu6m99tqtt7s3pre4d4wejlp7qkhyfee
-    lastmodified: "2026-06-19T11:46:02Z"
-    mac: ENC[AES256_GCM,data:NqmNt+NagD6Fg0KiXkvSIZq/c73F78u7bZfsTFiKqezhcipfsex+71wriLTB3E3fEV9L0YseXWqbaXJjQnE26GoLaqHB232N9BUSw676tetb+5n59oi13FbaZl77OMsh7QZGQ1oSKWccmGm9UVo7T9YBgJHGys/ucqVTqaOAIlg=,iv:7PhfpF9TqgZPVSdi7/sacMSDBOr6fseSERbVisef98M=,tag:Ci6sKjA70Jj13y1JwPPUBQ==,type:str]
+    lastmodified: "2026-07-31T13:37:26Z"
+    mac: ENC[AES256_GCM,data:z0o0HITRWvzn8YTehdMhhPCtKosM7Jx0jRCfhV5iJzncjs5cBMi6H8s+0aCd/Ymst6TZsWdq+9I2icwM8SHDWzRrkXzzrPZmqZ+jl4A+tTNcVbRr18ymojg/kz3888jxedYeClRkUbzKGkv/saxOidO5PPyutExdKcomVdcj1kE=,iv:gfEkvBDWmSH9A1qwbx6hSq5k9Xh5DwMcWIvvtkVC6tc=,tag:nse1YX5rYp2DUUOwfYFl0Q==,type:str]
     unencrypted_suffix: _unencrypted
-    version: 3.13.1
+    version: 3.13.3