PlugWiki
ProxmoxMCP-Plus logo

ProxmoxMCP-Plus, a community MCP server for Proxmox VE

CommunityLocal
GetPyPIproxmox-mcp-plusrekklesna/proxmoxmcp-plusDocs

Lets your AI assistant check, create, start, snapshot and back up the VMs and containers on your Proxmox VE server.

ProxmoxMCP-Plus is a community server that connects Claude, Cursor, VS Code and other assistants to your Proxmox VE host through a Proxmox API token. You can ask it about nodes, storage and logs, or have it create, clone, start, stop and delete VMs and containers and manage snapshots and backups. Proxmox does not make its own MCP server, and this is the most starred community one. Before you connect it, decide how much it may change: the token you give it can delete real machines unless you limit it or use read-only mode.

Good for

  • Homelab owners who want to ask Claude what is running and spin up test VMs by describing them
  • Infrastructure admins who want snapshots, backups and restores done from chat with a job log
  • People running local models with Ollama or Open WebUI who want them to manage Proxmox
  • Teams that want a read-only view of nodes, storage and logs for troubleshooting

Works in

5 supported · 7 should work

Tap an app to see how to set it up and any known problems.

Install ProxmoxMCP-Plus MCP

Claude Code

  1. 1

    Copy this prompt.

    Add the ProxmoxMCP-Plus MCP server to Claude Code. Run this command:
    
    claude mcp add proxmoxmcp-plus -e PROXMOX_HOST=<PROXMOX_HOST> -e PROXMOX_USER=<PROXMOX_USER> -e PROXMOX_TOKEN_NAME=<PROXMOX_TOKEN_NAME> -e PROXMOX_TOKEN_VALUE=<PROXMOX_TOKEN_VALUE> -e PROXMOX_PORT=8006 -e PROXMOX_VERIFY_SSL=true -- uvx proxmox-mcp-plus
    
    Ask me for PROXMOX_HOST, PROXMOX_USER, PROXMOX_TOKEN_NAME, PROXMOX_TOKEN_VALUE and only put the values in that config, nowhere else.
    
    Then check that it loaded and tell me if I need to sign in or restart.
  2. 2

    Paste it into Claude Code. It shows the change and asks before running it.

Requires uv, Python 3.11+, Proxmox API token.

Read-only mode: Point PROXMOX_MCP_CONFIG at a config.json whose target has "readonly": true. The server then refuses anything that would change a VM or container.

Create an API token in Proxmox under Datacenter, Permissions, API Tokens, and give it only the privileges you need. Use a dedicated user rather than root where you can.

Instead of putting the token in this config, you can set only PROXMOX_MCP_CONFIG to the path of a config.json. You need that file for read-only mode, approval rules, SSH command tools and several Proxmox targets.

Self-signed certificates are rejected unless you turn on development mode.

Built from the package data we hold. Not yet tested by us.

Tools

  • Lists every virtual machine with its status and resource use

    Shows all VMs across your Proxmox cluster, whether each is running, and how much CPU and memory it uses.

    Try: “Which VMs are running right now and how much memory is each using?”

    Read · get_vms

  • Lists your LXC containers, optionally on one node, with their status

    Shows the LXC containers across the cluster or on one node, with status and optional resource stats.

    Try: “List all containers on node pve1 and show which are stopped.”

    Read · get_containers

  • Lists the nodes in your cluster with status, CPU and memory

    Shows each Proxmox node, whether it is online, and its CPU and memory use.

    Try: “Show me all my Proxmox nodes and how loaded they are.”

    Read · get_nodes

  • Shows detailed status for one node

    Gives detailed CPU, memory and status figures for a single Proxmox node.

    Try: “How is node pve1 doing right now?”

    Read · get_node_status

  • Shows overall cluster health and quorum

    Reports the health and configuration of the whole Proxmox cluster, including quorum.

    Try: “Is my cluster healthy and does it have quorum?”

    Read · get_cluster_status

  • Lists storage pools with usage across the cluster

    Shows every storage pool in the cluster, how full it is and how it is configured.

    Try: “Which storage pools are almost full?”

    Read · get_storage

  • Shows storage capacity on one node

    Shows how much space each storage has on a specific node, optionally for one storage ID.

    Try: “How much free space is left on local-lvm on pve2?”

    Read · get_node_storage

  • Shows a VM's full hardware and boot settings

    Returns a VM's configuration: CPU, memory, disks, network, BIOS and boot order.

    Try: “Show me the config of VM 101.”

    Read · get_vm_config

  • Shows a container's full configuration

    Returns an LXC container's configuration, such as cores, memory, disks and network.

    Try: “What are the network settings of container 200?”

    Read · get_container_config

  • Finds a running VM's IP addresses

    Reads a running VM's network interfaces and IP addresses through the QEMU guest agent.

    Try: “What IP did VM 105 get?”

    Read · get_vm_ip_addresses

  • Finds a running container's IP addresses

    Returns the current IP addresses of a running LXC container.

    Try: “What is the IP address of container 210?”

    Read · get_container_ip

  • Lists the snapshots of a VM or container

    Shows all snapshots taken of a given VM or container.

    Try: “What snapshots exist for VM 101?”

    Read · list_snapshots

Read from the source code

Pros and cons

Good

  • Covers the whole VM and container lifecycle, plus snapshots, backups, ISOs, storage and logs.
  • Read-only mode per target, plus allow and deny lists to hide tools.
  • Every tool is marked as read-only or risky, so your client can ask before risky calls.
  • Long tasks get a job ID you can poll, retry or cancel.
  • Runs locally with one command, or as a remote HTTP server with a key or sign-in.
  • Actively maintained, with frequent releases and every reported issue closed.
  • Free and MIT licensed.

Watch out

  • Community project, not made by Proxmox.
  • Approval checks for risky operations are off until you turn them on.
  • The full tool set is large and costs context on small models.
  • Read-only mode and approval rules need a config file, not just environment variables.
  • Running commands inside containers needs SSH access to the Proxmox host.
  • Needs Python 3.11 or later.

Permissions

high risk · 5 things to watch

High risk

The assistant can delete or roll back VMs, containers, snapshots and backups if your API token allows it. Use a token with only the privileges you need, and start in read-only mode.

What it can do

Watch out for

  • It can stop, delete and roll back VMs

    With a broad token the assistant can delete VMs, containers, snapshots and backups or force-stop guests. Give it a token limited to what you need, or use read-only mode. github.com

  • Approval checks are off by default

    Risky operations are only logged unless you switch the high-risk policy to enforce and set an approval token. Do that before using it on machines you care about. github.com

  • SSH command tools reach the Proxmox host

    Container and node command tools appear only if you add SSH settings, and their command filter is not a sandbox. Leave SSH out unless you need it. github.com

  • The examples use the root account

    The sample config uses root@pam. Create a separate Proxmox user and token with only the privileges you need. github.com

  • The HTTP mode needs a key

    The Docker HTTP mode will not start without a key and listens only on your own machine unless you change it. github.com

Security advisories

No published security advisories as of Nov 1, 2026.

Technical details
Turning on read-onlyDefine a named target in config.json with "readonly": true and point PROXMOX_MCP_CONFIG at the file; every mutating tool is then rejected. Pair it with an API token that only has audit privileges, and optionally hide tools with MCP_TOOL_ALLOWLIST or mcp.tool_allowlist.
Talks toYour Proxmox VE API. Your Proxmox node over SSH (only if you add SSH settings)
Sign-in and keysProxmox API token in environment variables in your client config, or in a local config.json.

Alternatives

Use ProxmoxMCP-Plus for day-to-day VM and container work with read-only and approval controls. Pick Proximo if you also run Proxmox Backup Server or Mail Gateway, and Servosity if you only want read-only reports.

ServerOfficialRunsCan change thingsGitHub stars
ProxmoxMCP-PlusThis pageCommunityLocalYes630
proxmox-mcpCommunityLocal–226
ProximoCommunityLocal–64
Proxmox VE MCP ServerCommunityLocal–26
Servosity ProxmoxCommunityLocalNo–

What people say

People like how fast the maintainer responds and mostly asked for ways to load fewer tools, which now exist.

What people like

  • The maintainer fixes reported bugs quickly, such as four Windows bugs fixed and released the next day.
  • Feature requests like a tool allowlist and resource pools were added within weeks.
  • People run it with local models, including Ollama and Open WebUI on a Jetson Orin Nano.

Common complaints

  • With every tool loaded it uses a lot of tokens, which hurts on small local models.
  • The HTTP mode demanded a key even behind Tailscale until an opt-out was added.

In their words

Questions

Is there an official Proxmox MCP server?

No. Proxmox does not publish one. ProxmoxMCP-Plus is a community project and the most starred Proxmox server.

Is ProxmoxMCP-Plus free?

Yes. It is open source under the MIT license and runs on your own machine or server.

Can I make it read-only?

Yes. Mark your Proxmox target as read-only in the config file, and the server rejects anything that would change a VM or container. Give it a token that can only read as well.

What permissions should the API token have?

Only what you plan to let the assistant do. Create a separate Proxmox user instead of using root, and add privileges such as VM.Audit for viewing or VM.Migrate for migrations only when you need them.

Can it delete my VMs?

Yes, if your token allows it. It can delete VMs, containers, snapshots and backups, so use read-only mode or a limited token until you trust it.

Can it run commands inside a VM or container?

Yes. VMs need the QEMU Guest Agent installed. Containers need SSH access to the Proxmox host, which you have to set up separately.

Does it work with a self-signed certificate?

Not by default. It refuses to start with certificate checks turned off unless you enable development mode, so add a trusted certificate to Proxmox instead.

How do I stop it from using so much context?

List only the tools you want in an allowlist, or turn on Code Mode, which swaps the full set for three tools.

Can I use it from a remote assistant or local model?

Yes. Run the Docker HTTP mode with a key and point your client at its address. A community guide runs it with Ollama and Open WebUI.

How do I add it to Claude Desktop or Cursor?

Use the steps in the install box above. You will need your Proxmox host, user, token name and token secret.

Examples

  • Create and start a container, then run a command inside it

    Source
  • Snapshot a VM before a risky change and roll it back if it breaks

    Take a snapshot of VM 105 called pre-upgrade, then roll back to it if the upgrade fails.

  • Download an installer ISO and create a container from a template

    Source
  • Clone a cloud-init template into a new VM and get its IP address

    Clone template 9000 into a new VM with 4 GB of RAM, start it and tell me its IP.

  • Run a local chat assistant on a Jetson Orin Nano that manages Proxmox

    Source

Information

updated Nov 2, 2026

Publisher
Community
Package
proxmox-mcp-plus
Registry
PyPI
Transport
stdio, Streamable HTTP
Auth
token in env
Version
0.6.8
License
MIT
Last commit
Oct 29, 2026
Open issues
0
Listed in
Official MCP registry

DocsGitHubPyPIOfficial MCP RegistryChangelogIssues

Other Proxmox MCP servers

Sources

Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.

Show all 13
  1. github.com · github.com
  2. Client Setup · github.com
  3. github.com · github.com
  4. github.com · github.com
  5. github.com · github.com
  6. github.com · github.com
  7. github.com · github.com
  8. github.com · github.com
  9. github.com · github.com
  10. github.com · github.com
  11. github.com · github.com
  12. github.com · github.com
  13. pypi.org · pypi.org

Facts from the official MCP registry, GitHub, npm, PyPI and the Docker catalog. Updated Nov 2, 2026.