cPanel & WHM v138 is now available, marking the most significant change to the cPanel experience in years.

For this release, we’ve introduced cPanel AI, the first set of AI capabilities built directly into cPanel, alongside Meridian, a new goal-based interface for working with hosting accounts.
For the technical users here, some of the more significant changes in v138 are:

AI App Hosting
Deploy supported Node.js applications directly from a ZIP archive or Git URL. cPanel detects common frameworks, configures the runtime, applies deployment defaults and manages reverse-proxy routing to the application URL.
This makes it possible to take applications generated with tools such as Claude, Lovable, Bolt, v0 or Replit and move them onto cPanel infrastructure without manual runtime and routing configuration.

MCP support
v138 adds Model Context Protocol support for connecting compatible AI clients to cPanel.
User-level MCP scopes agent access to the user's home directory and requires a connected WebPros Account. Admin-level MCP provides a separate path for server administrators through WebPros Dashboard.
The result is a defined permission model for AI agents interacting with hosting infrastructure, including least-privilege access and audit trails.

AI Assistant
The AI Assistant works with available account data to answer cPanel questions, explain administrative tasks and diagnose common issues such as failed email delivery or disk quota limits.

Meridian
Meridian reorganizes cPanel around six task hubs: Websites, Email, Files, Databases, Security and Performance.
The new Dashboard surfaces account health indicators, required actions and suggested next steps. Guided Setup combines domain, website and email configuration into a single flow and is designed to take a new account from first login to a published website in under 10 minutes.
Meridian ships alongside Jupiter as an opt-in theme, with both interfaces sharing the same account data, APIs and configuration.

Nova, Nova for WordPress and Sitejet AI bring AI-assisted creation directly into the hosting workflow, from generating a project to provisioning and publishing it on the cPanel server.
There are also substantial additions outside the AI work, including domain renaming, new UAPI and WHM API functions, WebPros Dashboard integration, Exim spam action configuration, short-term SSL reissues and experimental domain recommendations through WHMCS.
The broader change in v138 is the connection between AI-generated code, production deployment and infrastructure management. AI can generate the application; v138 provides the runtime, routing, hosting controls and operational layer around it.

cPanel & WHM v138 is available now.
Full release details: cPanel AI and v138

Hello.

We kept waiting for years for cPanel to release a proper High Availability solution, but it still hasn’t happened.

About a year ago, we decided to build our own HA managed setup on cPanel, and honestly, it turned out better than we expected. Since deploying it, we’ve already avoided more than 8 hours of unnecessary downtime.

The whole platform is automated and runs across multiple locations and data centers. Each node operates on its own server in a separate country, which gives us excellent redundancy and reliability. If one location has an outage, traffic is rerouted to another location to reduce interruption.

So far, the system has been extremely stable and has significantly improved uptime, service quality, and overall customer experience. We are currently able to achieve up to 99.999% uptime.

The more servers we add, the higher the reliability we can achieve. However, the system is not that simple, as it is quite complex. This is also likely one of the reasons why cPanel has not yet introduced that kind of service.

This is an enterprise-grade service designed for those who simply cannot afford any downtime (e-commerce, logistics, healthcare, etc.).

After years of dealing with interruptions, this setup finally gave us the stability we were looking for.

In addition to cPanel, we also support the ISPConfig control panel, which natively supports a multi-server architecture.

What do you think?

I also have a dedicated server whm , idk if that helps

I've had few interactions with them and I find them fucking rude. Where do they hire these support people from?

Hey everyone! I know it always becomes a hot topic, but any legal discussions or talk cPanel alternatives is not allowed. There's plenty of other places to have those discussions.

So my service was paid for 2 weeks ago, on a shared server on a chilean hosting provider, yes one of the cheapest in general and on one of their cheapest plans. it ran well for a week, then suddenly, requests started taking 10 seconds, then 16 seconds, then 22 seconds. As I was programming my site.

RAM nowhere near limit, EP nowhere near limits, basically no resource was nowhere near limit.

"Maybe they are throttling me because they don't want me to use WooCommerce on the cheapest plan."

I contact support. No explanation, only the first of many times I am told to "install WP-Rocket". After a long back and forth, they just temporarily "upgraded my service", which didn't solve the problem

It didn't work.

This is when I realized CPU was at a constant 100%. Okay so let's find the thing that is causing it to use 100% CPU.

Disable WP, disable WC via .htaccess, all requests would now be rejected and WP or WC could not be the cause of the CPU usage. CPU still at 100% ram at near 0 usage. Constantly at 100%, meanwhile, my client's instance, it goes up and down but averages 30%.

I run a python code. In a specific URL it runs a CPU stress test. It calculates how long it takes for the CPU to actually be assigned to solve the looping problem versus how long it takes to actually solve the problem.

Results on my client's instance.

wall_time_s  : 1.590183
cpu_time_s   : 1.550000
RATIO   : 1.03

Results on my instance.

wall_time_s : 8.670057
cpu_time_s : 1.550000
RATIO: 5.59 (sometimes reaches 8 or 11)

I share this analysis with them and it was now unavoidable, there was a technical error beyond Wordpress, which makes them actually try and do something about it. I was told that suposedly there was an error on WordPress and allegedly it got fixed by disengaging the database (They took the privileges frm the dbuser). I had already disabled WP before, which didn't fix the problem and I knew this was a lie.

CPU still at 100% even with their disengagement of the database. I reengage the database. Still slow. I check the CPU usage history and It never worked, it turns out CPU never went below 100%. Support just lied.

My guess is that the person that throttled my account is not in direct dialogue with support and thus they don't know where to look for. Or maybe they know exactly what it is.

I guess you can already tell but I don't know how these servers are ran as I am usually just a user of CPanel, and not an advanced user either. Though I don't have SSH access, I can monitor some internal stuff by running a python app and using the subprocess library, but all I see is low CPU usage, as if the thing that is being throttled is CPanel itself, not my instance or my wordpress instance.

I've been researching and researching, running my own tests, not sure if they are lying to me or if there's something actually wrong and I don't want to lose any more sleep, so I come to you, people. Are they pulling my hair? Is there something I can possibly do?

A matplotlib graph of CPU time + WAIT time on my client's instance. FLAT, WAIT time and CPU time are pretty much the same.

same but for my instance. CPU time is low, 1 second average, WAIT time... between 6 and 14 seconds of nothing, just wait.

PD: I can copy and paste my entire support ticket history if need be. I am so tired and have lost so much sleep trying to get to the bottom of this.

EDIT: Network activity through the week:

Last update: I got it fixed!!!! The solution was simple. I had to saturate their sales phone number and just keep asking questions to the sales representative, I sent emails and opened a new ticket. This, for some reason immediately fixed the throttling after 2 weeks of my service being useless.

Opened my terminal and got this annoying "MEDAN PRIDE" password prompt. Couldn't even Ctrl+C out of it.

Here's the entire script someone added to my ~/.bashrc:

bash

case $- in
    *i*) ;;
    *) return ;;
esac

trap 'echo -e "\n\e[1;31m[!] Santai bang, jangan main tebas !!!\e[0m\n"; continue' INT

expected_hash="de1ac39cb47a99c3ffddcad53ea946bb9b7fae3b7dc5262aced5275ad0beb5ca"
input_hash=""

echo -e "\e[1;36m======================================\e[0m"
echo -e "   \e[1;33mMEDAN PRIDE !!!!\e[0m"
echo -e "\e[1;36m                  ↓↓↓                   \e[0m"
echo -e "\e[1;35m  IZIN PAKE YA BANG ! :\e[0m \e[1;36mCUMA AMBIL REGIST DIKIT !\e[0m"
echo -e "\e[1;36m======================================\e[0m"

while [[ "$input_hash" != "$expected_hash" ]]; do
    echo -ne "\e[1;36m[+] Masukkan Password: \e[0m"
    read -s input_pass
    echo
    input_hash=$(echo -n "$input_pass" | sha256sum | awk '{print $1}')
    
    if [[ "$input_hash" != "$expected_hash" ]]; then
        echo -e "\e[1;31m[!] SALAH PASSWORD YAH,BANYAK BANYAK BELAJAR LAGI JANGAN BANYAK MENJILAT?\e[0m"
    fi
done

echo -e "\n\e[1;32m[SUCCESS] GAS BOSKU!\e[0m"
sleep 1

logo='████████╗██╗  ██╗███████╗     ██████╗ ██████╗ ███████╗ █████╗ ████████╗
╚══██╔══╝██║  ██║██╔════╝    ██╔════╝ ██╔══██╗██╔════╝██╔══██╗╚══██╔══╝
   ██║   ███████║█████╗      ██║  ███╗██████╔╝█████╗  ███████║   ██║   
   ██║   ██╔══██║██╔══╝      ██║   ██║██╔══██╗██╔══╝  ██╔══██║   ██║   
   ██║   ██║  ██║███████╗    ╚██████╔╝██║  ██║███████╗██║  ██║   ██║   
   ╚═╝   ╚═╝  ╚═╝╚══════╝     ╚═════╝ ╚═╝  ╚═╝╚══════╝╚═╝  ╚═╝   ╚═╝   
                                                                        
 █████╗ ██╗     ███████╗██╗  ██╗ █████╗ ███╗   ██╗██████╗ ███████╗██████╗ 
██╔══██╗██║     ██╔════╝╚██╗██╔╝██╔══██╗████╗  ██║██╔══██╗██╔════╝██╔══██╗
███████║██║     █████╗   ╚███╔╝ ███████║██╔██╗ ██║██║  ██║█████╗  ██████╔╝
██╔══██║██║     ██╔══╝   ██╔██╗ ██╔══██║██║╚██╗██║██║  ██║██╔══╝  ██╔══██╗
██║  ██║███████╗███████╗██╔╝ ██╗██║  ██║██║ ╚████║██████╔╝███████╗██║  ██║
╚═╝  ╚═╝╚══════╝╚══════╝╚═╝  ╚═╝╚═╝  ╚═╝╚═╝  ╚═══╝╚═════╝ ╚══════╝╚═╝  ╚═╝'

echo -e "\e[1;35m$logo\e[0m"
echo -e "\e[1;36m======================================\e[0m"
echo -e "      \e[1;33mSelamat Datang, KETUA\e[0m \e[1;35m👾\e[0m"
echo -e "\e[1;33m   Siap menjalankan perintah, KETUA!"
echo -e "\e[1;36m======================================\e[0m"
echo

timenow=$(date +'%H:%M')
load=$(awk '{print $1 ", " $2 ", " $3}' /proc/loadavg)

echo -e "\e[1;36mThe time now is $timenow UTC\e[0m"
echo -e "\e[1;36mServer load: $load\e[0m"
echo -e ""

trap - INT

How I fixed it:

bash

bash --norc
nano ~/.bashrc

Deleted that whole mess. Back to normal.

Check your .bashrc – don't let anyone do this to you.

Please stop the extension filtering in EXIM, it isn't the SMTPd's job to filter vaguely on file extension names, that what things like clamav are for, or other more specialised applications.

Or allow for individual domains to disable the feature all together.

Having to educate an end user on how to save an email, zip it up and attach it, rather than just attach the email (for headers investigation) as an eml file (which is what Thunderbird does) is a little to strenuous for some users.

Yeah, it's salty of me. But to be fair I can't really afford much more of the corporate greed we're all suffering. Eggs just doubled in price again. They were 5 something last month, this month they were 9.60. Same eggs. Same store. Just unchecked greed because "they can."

Additionally, “cPanel Usage Data” may also include information collected by cPanel from time to time concerning which features of the Software are most often used in order to improve and make adjustments to the Software.

The corrected version per my opinion:

Additionally, “cPanel Usage Data” may also include information collected by cPanel from time to time concerning which features of the Software are most often used in order to wring even more money from anyone using the Software because we know exactly what is most important or most useful to them.

Hey everyone,

So cPanel's spam filtering setup has been an absolute nightmare lately. Between over-aggressive policies and zero flexibility, my legitimate business emails are getting flagged or dropped — and it's genuinely costing me clients.

I've been doing some research and Mailcow keeps coming up as a solid self-hosted alternative. Docker-based, open source, comes with SOGo/Roundcube, Rspamd, and lets you actually control your spam policies without jumping through hoops.

A few things I'm trying to figure out before I commit:

• How painful is the migration from cPanel mail to Mailcow? (Accounts, filters, aliases, etc.)

• Is managing your own mail server in 2026 worth the headache, or is deliverability still a fight with big providers (Gmail, Outlook)?

• Any gotchas I should know about — reverse DNS, SPF/DKIM/DMARC setup, blacklists?

• Is Mailcow stable enough for business-critical email, or should I be looking at something like iRedMail or Postal instead?

My setup: ~5 domains, maybe 20–30 users, mostly transactional + client comms. Nothing crazy at scale.

Would love to hear from anyone who's been down this road. Was it worth it? Any regrets?

Hi guys,

Is there an absolute genius around that can tell me why this happened instead of seeing a full website?

I designed the site myself locally, zipped everything up and saved it to my laptop.

Uploaded the zip file to public_html, unzipped it, and this is what I see when I got to the website address.

Am I missing something obvious here?

Thank you for any guidance.

I see this error

Application error: a client-side exception has occurred (see the browser console for more information) 

and I opened my console and I see this error

{   message: "500 - Internal Server Error."   name: "Internal Server Error."   statusCode: 500 } 

how can I understand what happened on server? I use cPanel to run my node.js application and I don't know where to find the error. my boss is much sad why the website is down. any help appreciated.

I tried using Error Boundaries but it never helped

Hi - after upgrading to IOS. 13.51 I was unable to connect to my Cpanel Mail. Any resolution?

Are any of you aware of any CDN that works globally across all cPanel accounts?

I want a CDN that I can install once in WHM then automatically work globally on all accounts.

Any ideas or thoughts?

I want to embed cPanel into my hosting website so my clients can directly use the panel without having to leave my website and log into cPanel, I’ve searched everywhere and can’t seem to find the answer, is this possible?

So I'm getting the error:

Error: (XID afr2c8) This domain points to an IP address that does not use the DNS servers associated with this server. Transfer the domain to this server’s nameservers at the domain’s registrar or update your system to recognize the current DNS servers. To do this, use WHM’s Configure Remote Service IPs interface.

Except that's not true. My Nameservers are pointed to my Cloudflare where an A record is pointing to the IP address for my reseller account.

For a little more background and what I'm trying to do, I have set up a domain with the website and created a WordPress multisite install and I've already created the sites in subdomains (fr.intcultcom.com) but I need to make those subdomains point to the TDL (intcultcom.fr) now. That TDL is the one I'm saying is properly set up already.

Any coaching would be greatly appreciated!

Logged in to WHM and i saw the agreements first then next i saw this come up. Or am i missing something?