Proxmox VE MCP Server

Manage Proxmox VE nodes, VMs, containers, storage and snapshots. Read-only by default.

Local serverstdio

What is the Proxmox VE MCP Server?

Proxmox VE is an MCP integration. Manage Proxmox VE nodes, VMs, containers, storage and snapshots. Read-only by default.

Packages and local setup

The published pypi package is proxmox-ve-mcp, version 2.3.0. Its declared MCP transport is stdio.

The package declares PROXMOX_HOST (required): Proxmox host IP or hostname.; PROXMOX_PORT: Proxmox API port.; PROXMOX_VERIFY_SSL: Verify the TLS certificate. Proxmox self-signs by default.; PROXMOX_TIMEOUT: Seconds to wait for each Proxmox API request.; PROXMOX_USER: API user, including the realm.; PROXMOX_TOKEN_NAME: API token name. Use this plus PROXMOX_TOKEN_VALUE, or PROXMOX_PASSWORD.; PROXMOX_TOKEN_VALUE: API token secret.; PROXMOX_PASSWORD: Password, used only when no API token is set.; PROXMOX_RISK_LEVEL: Which tools exist: read-only, plus lifecycle, or everything.; PROXMOX_TOOLS_ALLOW: Comma-separated tool names to register, intersected with the risk level. Unset = all of them.; PROXMOX_REDACT_SECRETS: Mask cipassword and sshkeys in every response.; PROXMOX_MCP_TRANSPORT: stdio (default) or streamable-http.; PROXMOX_MCP_HOST: HTTP bind address. Anything but loopback also needs PROXMOX_MCP_ALLOWED_HOSTS.; PROXMOX_MCP_PORT: HTTP port.; PROXMOX_MCP_PATH: Streamable HTTP endpoint path.; PROXMOX_MCP_JSON_RESPONSE: Answer with JSON instead of an SSE stream.; PROXMOX_MCP_ALLOWED_HOSTS: Comma-separated Host headers to accept over HTTP; '' disables the check.; PROXMOX_MCP_ALLOWED_ORIGINS: Comma-separated browser origins allowed to call the endpoint. Empty = same-origin only.; SENTRY_DSN: Optional: report tool traces and errors to Sentry. Unset disables it..

The published oci package is ghcr.io/akmalovaa/proxmox-mcp:2.3.0. Its declared MCP transport is stdio.

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry · Project repository · Project website. This profile uses version 2.3.0 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related other integrations MCP servers for tools that cover the same kind of work.

Configuration

VariableDescriptionRequired
PROXMOX_HOSTProxmox host IP or hostname.Yes
PROXMOX_PORTProxmox API port.Optional
PROXMOX_VERIFY_SSLVerify the TLS certificate. Proxmox self-signs by default.Optional
PROXMOX_TIMEOUTSeconds to wait for each Proxmox API request.Optional
PROXMOX_USERAPI user, including the realm.Optional
PROXMOX_TOKEN_NAMEAPI token name. Use this plus PROXMOX_TOKEN_VALUE, or PROXMOX_PASSWORD.Optional
PROXMOX_TOKEN_VALUEAPI token secret.Optional
PROXMOX_PASSWORDPassword, used only when no API token is set.Optional
PROXMOX_RISK_LEVELWhich tools exist: read-only, plus lifecycle, or everything.Optional
PROXMOX_TOOLS_ALLOWComma-separated tool names to register, intersected with the risk level. Unset = all of them.Optional
PROXMOX_REDACT_SECRETSMask cipassword and sshkeys in every response.Optional
PROXMOX_MCP_TRANSPORTstdio (default) or streamable-http.Optional
PROXMOX_MCP_HOSTHTTP bind address. Anything but loopback also needs PROXMOX_MCP_ALLOWED_HOSTS.Optional
PROXMOX_MCP_PORTHTTP port.Optional
PROXMOX_MCP_PATHStreamable HTTP endpoint path.Optional
PROXMOX_MCP_JSON_RESPONSEAnswer with JSON instead of an SSE stream.Optional
PROXMOX_MCP_ALLOWED_HOSTSComma-separated Host headers to accept over HTTP; '' disables the check.Optional
PROXMOX_MCP_ALLOWED_ORIGINSComma-separated browser origins allowed to call the endpoint. Empty = same-origin only.Optional
SENTRY_DSNOptional: report tool traces and errors to Sentry. Unset disables it.Optional