Open-source MCP server for secure Proxmox node, VM, and LXC operations.
Connect Nandi to Claude, Cursor or any other MCP client and it stops being a tab you switch to. Open-source MCP server for secure Proxmox node, VM, and LXC operations. The nandi mcp server is what makes that connection.
Open source MCP server for Proxmox VE, powered by NANDI Services.
The toolset is worth reading before you wire it up, because it tells you what the integration is really for:
Backward — compatible aliases such as listNodes, getVMStatus, startVM, stopContainerread-only — Inventory, status, logs, metrics, and non-mutating diagnosticsread-execute — Read-only plus selected execution/lifecycle actionsfull — Create, update, delete, migrate, restore, and admin-level operationsPROXMOX_HOST — PROXMOX_USERPROXMOX_REALM — PROXMOX_TOKEN_NAMEPROXMOX_TOKEN_SECRET — PROXMOX_SSH_HOSTPROXMOX_SSH_USER — PROXMOX_SSH_KEY_PATHPVE_CATEGORIES — PVE_TOOL_BLACKLISTMCP_ALLOWED_HOSTS — MCP_ALLOWED_ORIGINSMCP_RATE_LIMIT_WINDOW_MS — MCP_RATE_LIMIT_MAXMCP_MAX_BODY_SIZE_BYTES — MCP_HEADERS_TIMEOUT_MSConfiguration is passed through the environment: PROXMOX_HOST, PROXMOX_TOKEN_SECRET, PROXMOX_SSH_HOST, PROXMOX_SSH_KEY_PATH. Treat anything key-shaped as a real credential — scope it to the minimum the server needs, and rotate it if it ever lands in a shared config.
The server ships on npm as nandi-proxmox-mcp, so your MCP client can launch it on demand — there is no separate build step. Add the server block to your client's configuration, restart it, and the tools register themselves.
Plenty of monitoring and observability servers cover similar ground. The differences that matter in practice are scope of access and how much setup stands between you and a working tool call. Nandi's toolset — Backward, read-only, read-execute and 11 more — is a fair guide to whether it matches your workflow. It is maintained by NANDI-Services; worth a glance at recent repository activity before you build anything load-bearing on it.
We check each listing at SyncDev against the project's documentation before it goes live — if something here drifts out of date, it is a bug worth reporting.
| Tool | What it does |
|---|---|
| Backward | compatible aliases such as listNodes, getVMStatus, startVM, stopContainer. |
| read-only | Inventory, status, logs, metrics, and non-mutating diagnostics. |
| read-execute | Read-only plus selected execution/lifecycle actions. |
| full | Create, update, delete, migrate, restore, and admin-level operations. |
| PROXMOX_HOST | PROXMOX_USER |
| PROXMOX_REALM | PROXMOX_TOKEN_NAME |
| PROXMOX_TOKEN_SECRET | PROXMOX_SSH_HOST |
| PROXMOX_SSH_USER | PROXMOX_SSH_KEY_PATH |
| PVE_CATEGORIES | PVE_TOOL_BLACKLIST |
| MCP_ALLOWED_HOSTS | MCP_ALLOWED_ORIGINS |
| MCP_RATE_LIMIT_WINDOW_MS | MCP_RATE_LIMIT_MAX |
| MCP_MAX_BODY_SIZE_BYTES | MCP_HEADERS_TIMEOUT_MS |
| MCP_REQUEST_TIMEOUT_MS | MCP_KEEPALIVE_TIMEOUT_MS |
| X-Content-Type-Options | nosniff |
{
"mcpServers": {
"nandi-proxmox": {
"command": "npx",
"args": ["-y", "nandi-proxmox-mcp"],
"env": {
"PROXMOX_HOST": "your-value",
"PROXMOX_TOKEN_SECRET": "your-value",
"PROXMOX_SSH_HOST": "your-value",
"PROXMOX_SSH_KEY_PATH": "your-value"
}
}
}
}Add to claude_desktop_config.json, then restart Claude Desktop.
| Variable | Description | Required |
|---|---|---|
| PROXMOX_HOST | Endpoint or connection string the server talks to. | Optional |
| PROXMOX_TOKEN_SECRET | Credential the server authenticates with. | Yes |
| PROXMOX_SSH_HOST | Endpoint or connection string the server talks to. | Optional |
| PROXMOX_SSH_KEY_PATH | Credential the server authenticates with. | Yes |
Give your coding agent the full DevTools toolbox: traces, network, console, heap snapshots and Lighthouse.
Dashboards, Prometheus and Loki queries, incidents and alerts — observability by conversation.
Errors with full context — stack traces, issue triage and AI-powered root-cause analysis from Sentry's server.
Enables enhanced web research capabilities for large language models through intelligent search queuing and advanced content extraction.
Automates browser interactions and enables Large Language Models (LLMs) to interact with web pages through Playwright and Chrome DevTools Protocol
Guides tool usage by providing recommendations for MCP tools at each problem-solving stage.