ProxmoxMCP-Plus MCP server

by RekklesNA·io.github.RekklesNA/proxmox-mcp-plus·v0.5.17

Proxmox VE MCP server for VMs, LXCs, snapshots, backups, storage, and cluster operations.

C65/100grade C

What users say

No reviews yet

Safety scan

C65/100

Adoption

Established

543 stars2.2k downloads/wk

Reviews

Nobody has reviewed ProxmoxMCP-Plus yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

No tool declarations could be read from the package source. They show once the server is installed.

scanner v0.1.3 · 2026-09-19 · same rubric, same numbers if you re-run it

1 high

Code scan48 source files scanned13/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 3 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

highWhole environment serialized (possible credential exfil)env.dump

proxmox_mcp_plus-0.5.17/src/proxmox_mcp/openapi_proxy.py: … server_command[1:] app.state.env = os.environ.copy() app.state.api_dependency = api_depe…

Overall 65/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

claude mcp add proxmox-mcp-plus -- uvx proxmox-mcp-plus

Is ProxmoxMCP-Plus MCP server safe?: With care: it is graded C, so read the findings first (65/100). Read the ProxmoxMCP-Plus safety report
How do I install ProxmoxMCP-Plus?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does ProxmoxMCP-Plus need an API key?: Yes. The registry entry asks for PROXMOX_TOKEN_VALUE.
Is ProxmoxMCP-Plus maintained?: The last commit was 3 days ago (2026-09-16). The latest release is v0.5.17.

Local package. It runs on your machine, not through the gateway.

PROXMOX_MCP_CONFIGOptional path to a JSON config file. If set, file config is used before environment variable fallback.
PROXMOX_HOSTHostname or IP address of the Proxmox VE API endpoint.
PROXMOX_USERProxmox username with realm, for example root@pam.
PROXMOX_TOKEN_NAMEName of the Proxmox API token.
PROXMOX_TOKEN_VALUEsecretSecret value of the Proxmox API token.
PROXMOX_PORTProxmox API port. Defaults to 8006.
PROXMOX_VERIFY_SSLSet to true to verify TLS certificates, or false for self-signed lab environments.
PROXMOX_DEV_MODESet to true when using verify_ssl=false in a self-signed lab environment.
PROXMOX_SERVICEProxmox service type. Defaults to PVE.
MCP_TOOL_ALLOWLISTOptional comma-separated exact tool names to expose. Do not set together with MCP_TOOL_DENYLIST.
MCP_TOOL_DENYLISTOptional comma-separated exact tool names to hide. Do not set together with MCP_TOOL_ALLOWLIST.
LOG_LEVELServer log verbosity. Defaults to INFO.

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/rekklesna-proxmox-mcp-plus.svg)](https://mcp.market/server/rekklesna-proxmox-mcp-plus)