proxmox-mcp by mattoddie for Proxmox: safety score
D 51 Provisional Not reviewed Not tested read-only mode
proxmox-mcp by mattoddie is a community MCP server for Proxmox with 1 read, 4 write and 2 destructive tools. It has a read-only mode and its access requirements are unknown; its provisional OpsMCP grade is D (51%), last checked 16 Oct 2026.
MCP server for Proxmox VE: monitor and manage your cluster, VMs, containers, storage and backups from Claude and other AI assistants. Runs in Docker.
Access not scored. 3 of 4 factors scored.
Can it change or delete things?
Yes. The extracted tools include at least one destructive tool, so it can change or delete things.
| Tool | Class |
|---|---|
agent QEMU guest agent: OS, network and filesystem information, freeze/trim, and (with exec) commands and file access |
from the description (exec) | Destructive |
containers LXC containers: status, configuration, power, create, clone, volumes, migration, templates, interfaces, statistics |
from the description (create) | Write |
firewall Rules, options, aliases, IP sets and security groups at datacenter, node and guest level, firewall log |
from the description (sets) | Write |
nodes Node status and statistics, services, network interfaces, DNS, time, updates and repositories, subscriptions, certificates and ACME, logs, node power |
from the description (updates) | Write |
snapshots VM and container snapshots: list, create, roll back, delete, and a cluster-wide view of old snapshots |
from the description (delete) | Destructive |
tasks Proxmox tasks: list, inspect, read logs, wait for and stop them |
from the description (list) | Read |
vms QEMU VMs: status, configuration, power, create, clone, disks, migration, templates, cloud-init, statistics |
from the description (create) | Write |
Score
51 of 100 points (51%). A factor that was not scored counts as 0 of its full weight.
| Factor | Points | Full weight | Status |
|---|---|---|---|
| Tool capability | 25 | 35 | Scored |
| Access | unknown | 25 | Not scored |
| Maintenance | 17 | 20 | Scored |
| Publisher | 9 | 20 | Scored |
Tool capability
1 read, 4 write, 2 destructive.
The repository mentions a read-only mode. View the repository.
Access
| Part | Value | Points | Where this came from |
|---|---|---|---|
| Scope | unknown | unknown | unknown |
| Where it runs | unknown | unknown | unknown |
| Credentials | unknown | unknown | unknown |
Maintenance
| Part | Value | Points |
|---|---|---|
| Last commit | 0 days | 8 of 8 |
| Releases | 0 days | 6 of 6 |
| Issues | no issues filed | 3 of 6 |
Publisher
| Part | Value | Points | Where this came from |
|---|---|---|---|
| Who publishes it | Individual | 3 of 8 | GitHub owner type is User (mattoddie). |
| Registry listing | Not listed | 2 of 5 | No latest registry entry from search='proxmox-mcp' had repository github.com/mattoddie/proxmox-mcp. |
| License | MIT | 4 of 4 | GitHub SPDX license MIT. |
| Stars | 0 | 0 of 2 | 0 GitHub stars. |
| Repository age | 5 days | 0 of 1 | Repository created 2026-10-11T15:29:46Z. |
What this score does not cover
This score is not a code audit and it is not a human review. It has not been hands-on tested. Nothing on this page is a certification.
Access needed
Environment variables: unknown. The registry entry does not list any.
Maintenance
- Archived
- no
- Last commit
- 16 Oct 2026 · e0f3db5
- Latest release
- v0.3.0 · 16 Oct 2026
- Issues
- 0 open · 0 closed
- Stars
- 0
- License
- MIT
- Repository created
- 11 Oct 2026
npm and PyPI
- npm
- No npm package in the registry entry.
- PyPI
- No PyPI package in the registry entry.
- Maintainers
- unknown
Install
docker compose up -dOther Proxmox servers
Badge
Sources for this listing
github:priority-seed