Proxmox VE MCP server

by akmalovaa·io.github.akmalovaa/proxmox-mcp·v2.3.0

No reviews yet

Manage Proxmox VE nodes, VMs, containers, storage and snapshots. Read-only by default.

B83/100grade B

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

B83/100

full report

Adoption

Growing

2 stars22 downloads/wk

Reviews

Write one

Nobody has reviewed Proxmox VE yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Proxmox VE tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it

no findings

Code scan15 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 18 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Install directly

claude mcp add proxmox-mcp -- uvx proxmox-ve-mcp

Add to Cursor

Proxmox VE: common questions

Is Proxmox VE MCP server safe?: Mostly: it is graded B (83/100). Read the Proxmox VE safety report
How do I install Proxmox VE?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Proxmox VE need an API key?: Yes. The registry entry asks for PROXMOX_TOKEN_VALUE, PROXMOX_PASSWORD, SENTRY_DSN.
Is Proxmox VE maintained?: The last commit was 18 days ago (2026-09-02). The latest release is v2.3.0.
What can I use instead of Proxmox VE?: Servers from other publishers that do the same job: ProxmoxMCP-Plus MCP server.

Alternatives to Proxmox VE

Same job from other publishers: the closest match first, then the best rated.

ProxmoxMCP-Plus
Proxmox VE MCP server for VMs, LXCs, snapshots, backups, storage, and cluster operations.
not reviewed
Established
B

Run it through the gateway

Local package. It runs on your machine, not through the gateway.

Rating: —
Safety grade: B · 83/100
Stars: 2
Downloads/wk: 22
Price: Free
Licence: MIT
Transport: Local · mixed
Version: 2.3.0
Category: Everything else
Last release: 2026-09-02

Credentials it needs

PROXMOX_HOSTProxmox host IP or hostname.
PROXMOX_PORTProxmox API port.
PROXMOX_VERIFY_SSLVerify the TLS certificate. Proxmox self-signs by default.
PROXMOX_TIMEOUTSeconds to wait for each Proxmox API request.
PROXMOX_USERAPI user, including the realm.
PROXMOX_TOKEN_NAMEAPI token name. Use this plus PROXMOX_TOKEN_VALUE, or PROXMOX_PASSWORD.
PROXMOX_TOKEN_VALUEsecretAPI token secret.
PROXMOX_PASSWORDsecretPassword, used only when no API token is set.
PROXMOX_RISK_LEVELWhich tools exist: read-only, plus lifecycle, or everything.
PROXMOX_TOOLS_ALLOWComma-separated tool names to register, intersected with the risk level. Unset = all of them.
PROXMOX_REDACT_SECRETSMask cipassword and sshkeys in every response.
PROXMOX_MCP_TRANSPORTstdio (default) or streamable-http.
PROXMOX_MCP_HOSTHTTP bind address. Anything but loopback also needs PROXMOX_MCP_ALLOWED_HOSTS.
PROXMOX_MCP_PORTHTTP port.
PROXMOX_MCP_PATHStreamable HTTP endpoint path.
PROXMOX_MCP_JSON_RESPONSEAnswer with JSON instead of an SSE stream.
PROXMOX_MCP_ALLOWED_HOSTSComma-separated Host headers to accept over HTTP; '*' disables the check.
PROXMOX_MCP_ALLOWED_ORIGINSComma-separated browser origins allowed to call the endpoint. Empty = same-origin only.
SENTRY_DSNsecretOptional: report tool traces and errors to Sentry. Unset disables it.
PROXMOX_HOSTProxmox host IP or hostname.
PROXMOX_PORTProxmox API port.
PROXMOX_VERIFY_SSLVerify the TLS certificate. Proxmox self-signs by default.
PROXMOX_TIMEOUTSeconds to wait for each Proxmox API request.
PROXMOX_USERAPI user, including the realm.
PROXMOX_TOKEN_NAMEAPI token name. Use this plus PROXMOX_TOKEN_VALUE, or PROXMOX_PASSWORD.
PROXMOX_TOKEN_VALUEsecretAPI token secret.
PROXMOX_PASSWORDsecretPassword, used only when no API token is set.
PROXMOX_RISK_LEVELWhich tools exist: read-only, plus lifecycle, or everything.
PROXMOX_TOOLS_ALLOWComma-separated tool names to register, intersected with the risk level. Unset = all of them.
PROXMOX_REDACT_SECRETSMask cipassword and sshkeys in every response.
PROXMOX_MCP_TRANSPORTstdio (default) or streamable-http.
PROXMOX_MCP_HOSTHTTP bind address. Anything but loopback also needs PROXMOX_MCP_ALLOWED_HOSTS.
PROXMOX_MCP_PORTHTTP port.
PROXMOX_MCP_PATHStreamable HTTP endpoint path.
PROXMOX_MCP_JSON_RESPONSEAnswer with JSON instead of an SSE stream.
PROXMOX_MCP_ALLOWED_HOSTSComma-separated Host headers to accept over HTTP; '*' disables the check.
PROXMOX_MCP_ALLOWED_ORIGINSComma-separated browser origins allowed to call the endpoint. Empty = same-origin only.
SENTRY_DSNsecretOptional: report tool traces and errors to Sentry. Unset disables it.

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/akmalovaa-proxmox-mcp.svg)](https://mcp.market/server/akmalovaa-proxmox-mcp)

How the badge works