Proxmox VE MCP Server

io.github.akmalovaa/proxmox-mcp

Repository Registry

What is the Proxmox VE MCP server?

Manage Proxmox VE nodes, VMs, containers, storage and snapshots. Read-only by default.

How to install Proxmox VE

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

PROXMOX_HOST
required
Proxmox host IP or hostname.
PROXMOX_PORT
Proxmox API port.
PROXMOX_VERIFY_SSL
Verify the TLS certificate. Proxmox self-signs by default.
PROXMOX_TIMEOUT
Seconds to wait for each Proxmox API request.
PROXMOX_USER
API user, including the realm.
PROXMOX_TOKEN_NAME
API token name. Use this plus PROXMOX_TOKEN_VALUE, or PROXMOX_PASSWORD.
PROXMOX_TOKEN_VALUE
secret
API token secret.
PROXMOX_PASSWORD
secret
Password, used only when no API token is set.
PROXMOX_RISK_LEVEL
Which tools exist: read-only, plus lifecycle, or everything.
PROXMOX_TOOLS_ALLOW
Comma-separated tool names to register, intersected with the risk level. Unset = all of them.
PROXMOX_REDACT_SECRETS
Mask cipassword and sshkeys in every response.
PROXMOX_MCP_TRANSPORT
stdio (default) or streamable-http.
PROXMOX_MCP_HOST
HTTP bind address. Anything but loopback also needs PROXMOX_MCP_ALLOWED_HOSTS.
PROXMOX_MCP_PORT
HTTP port.
PROXMOX_MCP_PATH
Streamable HTTP endpoint path.
PROXMOX_MCP_JSON_RESPONSE
Answer with JSON instead of an SSE stream.
PROXMOX_MCP_ALLOWED_HOSTS
Comma-separated Host headers to accept over HTTP; '*' disables the check.
PROXMOX_MCP_ALLOWED_ORIGINS
Comma-separated browser origins allowed to call the endpoint. Empty = same-origin only.
SENTRY_DSN
secret
Optional: report tool traces and errors to Sentry. Unset disables it.

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "proxmox-mcp": {
      "command": "uvx",
      "args": [
        "proxmox-ve-mcp"
      ],
      "env": {
        "PROXMOX_HOST": "<YOUR_PROXMOX_HOST>",
        "PROXMOX_PORT": "<YOUR_PROXMOX_PORT>",
        "PROXMOX_VERIFY_SSL": "<YOUR_PROXMOX_VERIFY_SSL>",
        "PROXMOX_TIMEOUT": "<YOUR_PROXMOX_TIMEOUT>",
        "PROXMOX_USER": "<YOUR_PROXMOX_USER>",
        "PROXMOX_TOKEN_NAME": "<YOUR_PROXMOX_TOKEN_NAME>",
        "PROXMOX_TOKEN_VALUE": "<YOUR_PROXMOX_TOKEN_VALUE>",
        "PROXMOX_PASSWORD": "<YOUR_PROXMOX_PASSWORD>",
        "PROXMOX_RISK_LEVEL": "<YOUR_PROXMOX_RISK_LEVEL>",
        "PROXMOX_TOOLS_ALLOW": "<YOUR_PROXMOX_TOOLS_ALLOW>",
        "PROXMOX_REDACT_SECRETS": "<YOUR_PROXMOX_REDACT_SECRETS>",
        "PROXMOX_MCP_TRANSPORT": "<YOUR_PROXMOX_MCP_TRANSPORT>",
        "PROXMOX_MCP_HOST": "<YOUR_PROXMOX_MCP_HOST>",
        "PROXMOX_MCP_PORT": "<YOUR_PROXMOX_MCP_PORT>",
        "PROXMOX_MCP_PATH": "<YOUR_PROXMOX_MCP_PATH>",
        "PROXMOX_MCP_JSON_RESPONSE": "<YOUR_PROXMOX_MCP_JSON_RESPONSE>",
        "PROXMOX_MCP_ALLOWED_HOSTS": "<YOUR_PROXMOX_MCP_ALLOWED_HOSTS>",
        "PROXMOX_MCP_ALLOWED_ORIGINS": "<YOUR_PROXMOX_MCP_ALLOWED_ORIGINS>",
        "SENTRY_DSN": "<YOUR_SENTRY_DSN>"
      }
    }
  }
}

Related MCP servers

Android Security Analyzer

Maintained

MCP server for static security analysis of Android source code

TypeScript

View repository →

io.github.akomyagin/aimcpgate

Active

MCP gateway/proxy: multiplexes tool calls across upstream MCP servers into one catalog.

MIT

View repository →

io.github.akoskomuves/appstoreconnect-mcp

Active

App Store Connect for MCP clients: PPP pricing, subscriptions, TestFlight, reviews, reports & more

TypeScript

MIT

View repository →

CiteNexus

Active

Search scholarly sources, verify references, and export citations with traceable evidence.

Python

MIT

View repository →

ZulipChat MCP Server

Maintained

Connect Claude, Cursor, and other AI assistants to Zulip with 60+ messaging, search, and analytics tools.

Python

MIT

View repository →

io.github.aks129/healthclaw-guardrails

Active

Open-source security layer for AI agents accessing clinical data: PHI redaction, audit trails, step-up auth, and tenant isolation.

Python

MIT

View repository →