rust-proxmoxmcp by mechubsec for Proxmox: score

B 72 Provisional Not reviewed Not tested

rust-proxmoxmcp by mechubsec is a community MCP server for Proxmox with 30 read, 2 write and 2 destructive tools. It does not have a read-only mode and needs to run locally; its provisional OpsMCP grade is B (72%), last checked 16 Oct 2026.

Last checked 16 Oct 2026.

Proxmox VE MCP server for many clusters: guest protection, plan/approve/apply change control. Rust.

Publisher's description

io.github.mechubsec/rustproxmoxmcp · version 0.11.0

Access partly scored. 3 of 4 factors scored.

Not hands-on tested. No test date, notes, or observed write behavior.

Proxmox GitHub Registry record Report this listing

Can it change or delete things?

Yes. The extracted tools include at least one destructive tool, so it can change or delete things.

Classified from the tool name, or from the description when the name has no listed verb.

34 tools

Tool	Class
`create_container` they name a guest but the guest does not exist yet, so the caller supplies the node, and it is the one place a guest-addressed call can reach the wrong host. from the name (create)	Write
`delete_backup` \| from the name (delete)	Destructive
`get_cluster_firewall_options` cluster \| Cluster-wide firewall options (enable, default policy) \| from the name (get)	Read
`get_cluster_firewall_rules` cluster \| Cluster-wide firewall rules \| from the name (get)	Read
`get_cluster_status` cluster \| Quorum and node membership \| from the name (get)	Read
`get_container_config` guest (LXC only) \| Configuration including Proxmox digest, with from the name (get)	Read
`get_container_ip` guest (LXC only) \| Network interfaces and addresses \| from the name (get)	Read
`get_containers` cluster \| All LXC guests with node, status, tags (paginated: from the name (get)	Read
`get_firewall_ipset_entries` cluster + ipset \| CIDR entries in one cluster-wide IPSet \| from the name (get)	Read
`get_firewall_security_group_rules` cluster + group \| Rules contained in one security group \| from the name (get)	Read
`get_guest_firewall_ipset_entries` guest + ipset \| CIDR entries in one IPSet of one guest \| from the name (get)	Read
`get_guest_firewall_options` guest \| Firewall options of one guest \| from the name (get)	Read
`get_guest_firewall_rules` guest \| Firewall rules of one guest \| from the name (get)	Read
`get_guest_status` guest \| Current runtime status \| from the name (get)	Read
`get_node_firewall_options` node \| Firewall options on one node \| from the name (get)	Read
`get_node_firewall_rules` node \| Firewall rules on one node \| from the name (get)	Read
`get_node_status` node \| Detailed status for one node \| from the name (get)	Read
`get_nodes` cluster \| All nodes with status and resource totals \| from the name (get)	Read
`get_proxmox_change_set` change set \| One change set's state and preview \| from the name (set)	Write
`get_storage` node \| Storage backends visible to one node \| from the name (get)	Read
`get_task_status` task \| Status of one task by UPID \| from the name (get)	Read
`get_vm_config` guest (QEMU only) \| Configuration including Proxmox digest, with from the name (get)	Read
`get_vms` cluster \| All QEMU guests with node, status, tags (paginated: from the name (get)	Read
`list_backups` storage \| Backup archives on one storage backend (paginated: from the name (list)	Read
`list_firewall_aliases` cluster \| Cluster-wide firewall address aliases \| from the name (list)	Read
`list_firewall_ipsets` cluster \| Cluster-wide IPSets \| from the name (list)	Read
`list_firewall_security_groups` cluster \| Security groups defined on the cluster \| from the name (list)	Read
`list_guest_firewall_aliases` guest \| Firewall address aliases of one guest \| from the name (list)	Read
`list_guest_firewall_ipsets` guest \| IPSets defined on one guest \| from the name (list)	Read
`list_isos` storage \| ISO images on one storage backend \| from the name (list)	Read
`list_snapshots` guest \| Snapshots of one guest \| from the name (list)	Read
`list_tasks` node \| Recent tasks on one node (not paginated -- Proxmox applies its own server-side window, typically the 50 most recent) \| from the name (list)	Read
`list_templates` storage \| Container templates on one storage backend \| from the name (list)	Read
`principal` bound waiver therefore refuses an apply run by a from the description (run)	Destructive

Score

72 of 100 points (72%). A factor that was not scored counts as 0 of its full weight.

OpsMCP rubric 2026-10-16.3. Checked 16 Oct 2026.
Factor	Points	Full weight	Status
Tool capability	32	35	Scored
Access	6	25	Partly scored
Maintenance	20	20	Scored
Publisher	14	20	Scored

Tool capability

30 read, 2 write, 2 destructive.

Access

Part	Value	Points	Where this came from
Scope	unknown	unknown	unknown
Where it runs	Local process	6 of 8	Registry package transport is stdio.
Credentials	unknown	unknown	unknown

Maintenance

Part	Value	Points
Last commit	0 days	8 of 8
Releases	4 days	6 of 6
Issues	31 closed / 31 issues (1.00)	6 of 6

Publisher

Part	Value	Points	Where this came from
Who publishes it	Organization	5 of 8	GitHub owner type is Organization (mechubsec). Not on the vendor allowlist.
Registry listing	Listed	5 of 5	Official registry server io.github.mechubsec/rustproxmoxmcp matched repository github.com/mechubsec/rustproxmoxmcp.
License	MIT	4 of 4	GitHub SPDX license MIT.
Stars	1	0 of 2	1 GitHub stars.
Repository age	83 days	0 of 1	Repository created 2026-07-25T03:12:46Z.

How the rubric works

What this score does not cover

This score is not a code audit and it is not a human review. It has not been hands-on tested. Nothing on this page is a certification.

Access needed

Environment variables: unknown. The registry entry does not list any.

Maintenance

Archived: no
Last commit: 16 Oct 2026 · 9acd389
Latest release: v0.11.1 · 12 Oct 2026
Issues: 0 open · 31 closed
Stars: 1
License: MIT
Repository created: 25 Jul 2026

npm and PyPI

npm: No npm package in the registry entry.
PyPI: No PyPI package in the registry entry.
Maintainers: unknown

Install

Source: registry. This is the published command, not a rewritten one.

docker run ghcr.io/mechubsec/rustproxmoxmcp:0.11.0

Other Proxmox servers

Badge

The SVG is generated for this server. The embed links to this server page.

Embed snippet

[![OpsMCP B provisional](https://opsmcp.dev/badge/mechubsec-rustproxmoxmcp.svg)](https://opsmcp.dev/servers/mechubsec-rustproxmoxmcp/)

Sources for this listing

github:priority-seed
registry:lookup

Official registry server io.github.mechubsec/rustproxmoxmcp matched repository github.com/mechubsec/rustproxmoxmcp.