cPanel AI is live:what the Assistant and MCP can touch

cPanel's AI features let a chat assistant answer questions about your hosting account and, if your host allows it, make small changes after you approve each one. A separate MCP connection lets an outside AI tool reach your account through access that your host controls. Both are switches you and your host decide on, and some important details are still not published.

Picture this: you log in to cPanel to add an email address, and the screen looks different. There is a chat box on the side, and under your account settings you see the words AI Assistant and MCP Connection. Nobody asked you, but now you have to decide what to allow.

By the end of this post you will know what each feature can touch, what to check before you say yes, and what to ask your host in one short message.

What cPanel AI is and what it is not

cPanel announced the general availability of cPanel AI on 17 September 2026 (we read the press release through Cybernews, a third-party host, so treat it as secondary to cPanel's own pages). The announcement grouped several products under that name: the new Meridian interface, Nova, Nova for WordPress, Sitejet AI, AI App Hosting, the AI Assistant, and MCP integration.

That is a lot of names. For a normal site owner with a cPanel account, three of them matter first: Meridian (the new look), the AI Assistant (the chat panel), and the MCP connection (a link that lets an AI tool outside cPanel work with your account).

Think of it like a new receptionist at your building. The receptionist can answer questions and point you to the right floor. With the building manager's permission, the receptionist can also do small jobs for you, but only after you sign a slip. The MCP connection is different: it is more like giving a contractor a key card, and the building manager decides which doors that card opens.

What cPanel AI is not: it is not a promise that your host has turned any of this on. The press release gave no regional schedule, tiers or pricing. Your host chooses which features to enable, and on which plans.

Why this matters: if you read about a feature online and do not see it in your account, that is normal. It is your host's decision, not a fault on your side.

Meridian is optional, and here is how to check it

Meridian is a new, goal-based cPanel interface. cPanel introduced it in cPanel & WHM version 138. It groups common tasks into six hubs: websites, email, files, databases, security and performance.

The release notes say clearly that Meridian is opt-in and is not a replacement for Jupiter, the interface most people know. Users can return to Jupiter through the Classic cPanel Theme option.

Heads up: there is an exception. In the version 1.3.3-1 notes, dated 10 September 2026, cPanel says accounts that were created on Meridian and never had Jupiter access can no longer switch back to Jupiter themselves. Accounts that started on Jupiter, or were moved to it later, can still switch if the host has the Theme Switching feature turned on.

So, before you get comfortable or uncomfortable with the new look, check two things:

• Do you see a Classic cPanel Theme option anywhere in your account?
• If not, was your account created on Meridian from the start?

If the answer to the second question is yes, ask your host how to move back if you want to. Do not assume you can do it alone.

Quick tip: on the server side, cPanel's product page says administrators can turn on Meridian per hosting package in WHM, and can preview it first with Feature Showcase. If you run your own server, that is the safer path: test it on one package before your customers see it.

What the AI Assistant can change, and who says yes

The release notes describe the AI Assistant as a chat panel inside Meridian. It answers account questions, explains features, guides you step by step, and helps diagnose issues using read-only account details.

That read-only part is the default. When your hosting provider enables it, the assistant can also make simple changes, such as creating an email account, but only after you approve the change.

Heads up: cPanel's own sources do not all say the same thing here. The release notes describe approved changes as available when the provider enables them. The cPanel AI product page says the assistant "can take actions on a customer's behalf, always with their confirmation first", but the cPanel blog post says executing actions is a future capability, and the press release (third-party copy) describes approved actions as a longer-term direction. At the time of writing (19 October 2026), the safest reading is this: some hosts may have approved changes turned on, many will not, and you should check in your own account.

There is also a newer safety feature. The 1.3.3-1 notes say the assistant now shows a record of the changes it made and flags the ones worth a closer look. If you decline a change, it gives you step-by-step manual instructions instead.

During early access the assistant is opt-in, and hosting providers enable it for their users. In WHM, the Feature Manager page lists it with the description "Enables the AI Assistant chat panel in the Meridian theme." So your host can turn it on or off per feature list.

Made-up example: Priya runs a small bakery site on shared hosting. She asks the assistant to create orders@example.com. It shows her the change it plans to make and waits. She reads it, clicks approve, and the mailbox appears. Later she opens the change record and sees one entry flagged for review: it is the same mailbox, flagged for a closer look. She checks the settings herself. Nothing went wrong, but the record told her where to look.

Why this matters: approval only protects you if you read what you approve. Treat each approval like signing a cheque, not like closing a pop-up.

What the MCP connection gives an AI tool

MCP (Model Context Protocol) is a standard way for AI tools to connect to other systems. If you want the background on how MCP access works and its general risks, our guide on AI agent security for WordPress hosting and MCP covers that. Here we stay with what cPanel's version means for your hosting account.

The 1.3.3-1 notes added a Connections tab that holds your API tokens and your MCP connection. They also say your hosting provider controls access through the MCP Connection feature in Feature Manager.

cPanel's setup guide, in short:

• Open Account Preferences, find the MCP Connection section, and click Link WebPros Account, then sign in.
• Download the mcp.json file or copy the connection details from the same section.
• Paste them into the mcpServers section of your AI tool's settings file. The page names Claude Code and gives ~/.claude.json for one user or .mcp.json in a repository root for shared use.
• Restart the tool, run /mcp, and finish sign-in in the browser window that opens.

To disconnect, you click Unlink WebPros Account. The page warns that this also disconnects your WebPros account from your cPanel account, so you need to log in to WebPros again to use it with cPanel later.

The cPanel blog describes the MCP server as giving AI agents "scoped, permissioned access the provider controls", with least-privilege access controls and audit logging that gives administrators visibility into what each AI agent can access.

Heads up: the setup guide itself does not explain which actions the connection allows, how tokens are scoped, or how to revoke access other than unlinking. That is the part you need to ask your host about.

Quick tip: if you put .mcp.json in a shared code repository, everyone who can read that repository sees the connection details. For a personal hosting account, the single-user file is the calmer choice.

Why this matters: the assistant asks you before each change. An AI tool connected through MCP may work through many steps in a row. What it can reach depends on scopes you cannot see from the setup page, so the questions below matter more for MCP than for the chat box.

What we do not know yet

At the time of writing (19 October 2026), these gaps are real. We looked for answers in cPanel's own pages and did not find them.

Data handling

The cPanel AI product page, the cPanel blog post and the press release say nothing about how long conversations or account data are kept, where they are processed, or whether they are used to train AI models. The blog says the assistant analyses account telemetry, but not how that data is stored. Until there is a written statement, assume you do not know, and ask.

MCP scopes

The blog talks about scoped permissions and audit logging. The setup page does not list the scopes, where the audit log lives, or who can read it. Your host may know more than the public pages say.

The MCP feature name in WHM

The release notes refer to an MCP Connection feature in Feature Manager. The WHM Feature Manager documentation page, when we checked it, listed the AI Assistant but did not mention MCP at all. The feature may exist in the product before the documentation catches up, but we could not confirm its name from the WHM docs.

Pricing and tiers

The sources do not line up. The cPanel AI product page says Meridian is included in the standard cPanel licence with no separate fee, and does not say whether the assistant, MCP or other AI products cost extra. The cPanel pricing page (last modified 14 October 2026, prices excluding VAT) lists list prices of $29.99 per month for Solo (1 account), $35.99 for Admin (up to 5), $53.99 for Pro (up to 30) and $69.99 for Premier (up to 100, with $0.49 per extra account). It lists the AI Assistant and MCP as new items marked as available in version 138 and higher, and separately says the Premier plan includes "All cPanel AI features".

That is licence pricing paid by hosts and server owners, not what you pay your host. Whether you get any of these features depends on your host and its plan. Do not plan around a feature until you see it in your own account.

A decision checklist before you approve anything

Go through this before you click approve in the chat panel or link an AI tool through MCP.

• Back up first. Take a full backup and keep a copy somewhere other than the server. Our guide on backing up a cPanel site with an offsite copy and a test restore walks through it.
• Turn on two-factor authentication. An AI feature that acts on your account is only as safe as the login in front of it. See two-factor authentication in cPanel, Plesk and DirectAdmin.
• Start read-only. Use the assistant for questions for a week before you let it change anything.
• Read the change record. After any approved change, open the assistant's record and look at anything it flags.
• Keep a second way in. Make sure someone else you trust, or your host's support, can reach the account if a change locks you out.
• Check how you get back to Jupiter. If your account was created on Meridian, ask your host before you rely on switching back.
• Link MCP only when you need it. Do not leave a connection active for a tool you tried once.
• Unlink what you do not use. Remember that unlinking also disconnects your WebPros account, so plan to sign in again later.
• Keep the settings file private. Do not commit connection details to a public repository.

Quick tip: if you run more than a hobby site, or you want an AI agent with wide access, a separate server is often a better home than your main shared account. Our article on cloud VPS architecture for AI agent hosting explains the trade-offs.

Questions to ask your host

• Which cPanel AI features are enabled on my plan, and are any of them charged separately?
• Is the AI Assistant read-only for me, or can it make approved changes?
• Where are my chat conversations and account data processed, how long are they kept, and are they used to train models?
• Which actions can an AI tool perform through the MCP connection, and can I limit them?
• Where is the audit log for MCP and assistant actions, and can I see it?
• If my account started on Meridian, how do I switch to the classic interface?
• How do I revoke an MCP connection without breaking my login?

The one message worth forwarding

Copy this, change the details, and send it to your host's support team:

"Hello, I see AI Assistant and MCP Connection options in my cPanel account (example: example.com, plan Basic). Before I use them, please confirm: 1) which cPanel AI features are enabled on my plan and whether any cost extra; 2) whether the AI Assistant can make changes on my account, and whether every change needs my approval; 3) where my conversations and account data are processed, how long they are kept, and whether they are used to train AI models; 4) which actions an AI tool can take through the MCP connection, whether I can limit them, and where I can see an audit log; 5) how I can fully revoke an MCP connection; 6) how I can switch back to the classic cPanel interface if I need to. Thank you."

Say yes to the parts you understand, ask about the parts nobody has written down, and keep a backup you have tested before you approve anything.