Proxmox VE for Proxmox: safety score

C 62 Provisional Not reviewed Not tested read-only mode

Proxmox VE is a community MCP server for Proxmox with 31 read, 3 write and 2 destructive tools. It has a read-only mode and needs administrator access, to run locally, and a secret-like variable; its provisional OpsMCP grade is C (62%), last checked 16 Oct 2026.

Last checked 16 Oct 2026.

Manage Proxmox VE nodes, VMs, containers, storage and snapshots. Read-only by default.

Publisher's description

io.github.akmalovaa/proxmox-mcp · version 2.3.0

Tool capability partly scored. 3 of 4 factors scored.

Not hands-on tested. No test date, notes, or observed write behavior.

Proxmox GitHub Registry record Report this listing

Can it change or delete things?

Yes. The extracted tools include at least one destructive tool, so it can change or delete things.

Classified from the tool name, or from the description when the name has no listed verb.

50 tools

Tool	Class
`clone_vm` No description was extracted. from the name	Unknown
`create_container_snapshot` No description was extracted. from the name (create)	Write
`create_vm_snapshot` No description was extracted. from the name (create)	Write
`delete_container_snapshot` No description was extracted. from the name (delete)	Destructive
`delete_vm_snapshot` No description was extracted. from the name (delete)	Destructive
`get_cluster_backups` List all backup jobs configured in the cluster (vzdump schedules). from the name (get)	Read
`get_cluster_log` No description was extracted. from the name (get)	Read
`get_cluster_resources` No description was extracted. from the name (get)	Read
`get_cluster_status` Get overall cluster status: quorum state and node membership. from the name (get)	Read
`get_container_config` Get LXC container configuration: rootfs, network, resources, hostname. from the name (get)	Read
`get_container_interfaces` Get a running LXC container's network interfaces and IP addresses. from the name (get)	Read
`get_container_rrd_data` No description was extracted. from the name (get)	Read
`get_container_status` Get current runtime status of an LXC container (running/stopped, CPU, memory). from the name (get)	Read
`get_ha_status` Get current high-availability status: managed resources, their state and node. from the name (get)	Read
`get_next_vmid` Get the next available VM/container ID in the cluster. from the name (get)	Read
`get_node_disks` No description was extracted. from the name (get)	Read
`get_node_networks` No description was extracted. from the name (get)	Read
`get_node_rrd_data` No description was extracted. from the name (get)	Read
`get_node_services` No description was extracted. from the name (get)	Read
`get_node_status` No description was extracted. from the name (get)	Read
`get_node_tasks` No description was extracted. from the name (get)	Read
`get_node_updates` annotation disagrees No description was extracted. from the name (updates)	Write
`get_server_info` Report this MCP server's own configuration: risk level, versions, tool count. from the name (get)	Read
`get_storage_content` No description was extracted. from the name (get)	Read
`get_task_log` No description was extracted. from the name (get)	Read
`get_task_status` No description was extracted. from the name (get)	Read
`get_vm_config` Get VM configuration: hardware, boot order, disks, network, cloud-init, etc. from the name (get)	Read
`get_vm_network_interfaces` Get a running VM's network interfaces and IP addresses via the QEMU guest agent. from the name (get)	Read
`get_vm_rrd_data` No description was extracted. from the name (get)	Read
`get_vm_status` Get current runtime status of a VM (running/stopped, CPU, memory, uptime). from the name (get)	Read
`list_container_snapshots` List all snapshots of an LXC container. from the name (list)	Read
`list_containers` No description was extracted. from the name (list)	Read
`list_nodes` List all nodes in the Proxmox cluster with status, CPU, memory, and uptime. from the name (list)	Read
`list_pools` List resource pools used to group VMs, containers and storage. from the name (list)	Read
`list_storage` No description was extracted. from the name (list)	Read
`list_vm_snapshots` List all snapshots of a VM. from the name (list)	Read
`list_vms` No description was extracted. from the name (list)	Read
`migrate_vm` No description was extracted. from the name	Unknown
`reboot_container` Reboot an LXC container. Requires PROXMOX_RISK_LEVEL=lifecycle. from the name	Unknown
`reboot_vm` Reboot a VM via ACPI. Requires PROXMOX_RISK_LEVEL=lifecycle. from the name	Unknown
`resume_vm` Resume a suspended VM. Requires PROXMOX_RISK_LEVEL=lifecycle. from the name	Unknown
`rollback_container_snapshot` No description was extracted. from the name	Unknown
`rollback_vm_snapshot` No description was extracted. from the name	Unknown
`shutdown_container` No description was extracted. from the name	Unknown
`shutdown_vm` No description was extracted. from the name	Unknown
`start_container` Start an LXC container. Requires PROXMOX_RISK_LEVEL=lifecycle. from the name	Unknown
`start_vm` Start a VM. Requires PROXMOX_RISK_LEVEL=lifecycle. from the name	Unknown
`stop_container` Force-stop an LXC container. Requires PROXMOX_RISK_LEVEL=lifecycle. from the name	Unknown
`stop_vm` Force-stop a VM (like pulling the power). Requires PROXMOX_RISK_LEVEL=lifecycle. from the name	Unknown
`suspend_vm` Suspend a VM (pause execution, keep memory). Requires PROXMOX_RISK_LEVEL=lifecycle. from the name	Unknown

Score

62 of 100 points (62%). A factor that was not scored counts as 0 of its full weight.

OpsMCP rubric 2026-10-16.3. Checked 16 Oct 2026.
Factor	Points	Full weight	Status
Tool capability	24	35	Partly scored
Access	11	25	Scored
Maintenance	15	20	Scored
Publisher	12	20	Scored

Tool capability

31 read, 3 write, 2 destructive, 14 unknown.

The repository mentions a read-only mode. View the repository.

Access

Part	Value	Points	Where this came from
Scope	Administrator	2 of 10	Matched admin wording: root@pam
Where it runs	Local process	6 of 8	Registry package transport is stdio.
Credentials	Secret-like variable, secrecy not marked	3 of 7	Secret-like env vars without isSecret: PROXMOX_TOKEN_NAME, PROXMOX_REDACT_SECRETS

Maintenance

Part	Value	Points
Last commit	44 days	6 of 8
Releases	45 days	6 of 6
Issues	no issues filed	3 of 6

Publisher

Part	Value	Points	Where this came from
Who publishes it	Individual	3 of 8	GitHub owner type is User (akmalovaa).
Registry listing	Listed	5 of 5	Official registry server io.github.akmalovaa/proxmox-mcp matched repository github.com/akmalovaa/proxmox-mcp.
License	MIT	4 of 4	GitHub SPDX license MIT.
Stars	4	0 of 2	4 GitHub stars.
Repository age	168 days	0 of 1	Repository created 2026-05-01T20:56:03Z.

How the rubric works

What this score does not cover

This score is not a code audit and it is not a human review. It has not been hands-on tested. Nothing on this page is a certification.

Access needed

Variable	Required	Secret	Default	Description
`PROXMOX_HOST`	yes	unknown	unset	Proxmox host IP or hostname.
`PROXMOX_PORT`	unknown	unknown	8006	Proxmox API port.
`PROXMOX_VERIFY_SSL`	unknown	unknown	false	Verify the TLS certificate. Proxmox self-signs by default.
`PROXMOX_TIMEOUT`	unknown	unknown	15	Seconds to wait for each Proxmox API request.
`PROXMOX_USER`	unknown	unknown	root@pam	API user, including the realm.
`PROXMOX_TOKEN_NAME`	unknown	unknown	unset	API token name. Use this plus PROXMOX_TOKEN_VALUE, or PROXMOX_PASSWORD.
`PROXMOX_TOKEN_VALUE`	unknown	yes	unset	API token secret.
`PROXMOX_PASSWORD`	unknown	yes	unset	Password, used only when no API token is set.
`PROXMOX_RISK_LEVEL`	unknown	unknown	read	Which tools exist: read-only, plus lifecycle, or everything.
`PROXMOX_TOOLS_ALLOW`	unknown	unknown	unset	Comma-separated tool names to register, intersected with the risk level. Unset = all of them.
`PROXMOX_REDACT_SECRETS`	unknown	unknown	true	Mask cipassword and sshkeys in every response.
`PROXMOX_MCP_TRANSPORT`	unknown	unknown	stdio	stdio (default) or streamable-http.
`PROXMOX_MCP_HOST`	unknown	unknown	127.0.0.1	HTTP bind address. Anything but loopback also needs PROXMOX_MCP_ALLOWED_HOSTS.
`PROXMOX_MCP_PORT`	unknown	unknown	8000	HTTP port.
`PROXMOX_MCP_PATH`	unknown	unknown	/mcp	Streamable HTTP endpoint path.
`PROXMOX_MCP_JSON_RESPONSE`	unknown	unknown	true	Answer with JSON instead of an SSE stream.
`PROXMOX_MCP_ALLOWED_HOSTS`	unknown	unknown	unset	Comma-separated Host headers to accept over HTTP; '*' disables the check.
`PROXMOX_MCP_ALLOWED_ORIGINS`	unknown	unknown	unset	Comma-separated browser origins allowed to call the endpoint. Empty = same-origin only.
`SENTRY_DSN`	unknown	yes	unset	Optional: report tool traces and errors to Sentry. Unset disables it.

Maintenance

Archived: no
Last commit: 2 Sep 2026 · ff252d4
Latest release: 2.3.0 · 1 Sep 2026
Issues: 0 open · 0 closed
Stars: 4
License: MIT
Repository created: 1 May 2026

npm and PyPI

npm: No npm package in the registry entry.
PyPI: proxmox-ve-mcp · version 2.3.0 · downloads last month 189 · published 1 Sep 2026
Maintainers: Artur Akmalov

Install

Source: registry. This is the published command, not a rewritten one.

# requires PROXMOX_HOST: Proxmox host IP or hostname.
uvx proxmox-ve-mcp==2.3.0
docker run ghcr.io/akmalovaa/proxmox-mcp:2.3.0

Other Proxmox servers

Badge

The SVG is generated for this server. The embed links to this server page.

Embed snippet

[![OpsMCP C provisional](https://opsmcp.dev/badge/akmalovaa-proxmox-mcp.svg)](https://opsmcp.dev/servers/akmalovaa-proxmox-mcp/)

Sources for this listing

github:priority-seed
registry:lookup

Official registry server io.github.akmalovaa/proxmox-mcp matched repository github.com/akmalovaa/proxmox-mcp.