Proxmox Plus MCP Server (rekkles)

Proxmox VE lifecycle operations via MCP and OpenAPI for VMs, LXCs, and cluster tasks.

Data last scanned yesterday · Reviewed 3 weeks ago

Overview

ProxmoxMCP-Plus functions as a centralized control plane that bridges AI agents and standard HTTP automation tools to Proxmox VE environments. It eliminates the need for manual API stitching by providing a unified interface for complex infrastructure tasks.

Our verdict

With a security score of 48/100, this project is classified as high-risk. This rating reflects the fact that it is a community-maintained tool that has not yet undergone independent editorial or security review, and critical components such as authentication and read-only mode configurations remain unverified. It is suitable for testing and non-critical development environments but should be approached with extreme caution in production infrastructure.

  • Supports both MCP agents and standard OpenAPI HTTP automation
  • Tracks persistent long-running Proxmox jobs via UPIDs
  • Maintains zero direct dependencies for a reduced supply-chain surface
  • Twelve-contributor project with active repository updates
  • Community-maintained without official Proxmox vendor support
  • Read-only mode and OAuth implementations currently unreviewed
  • Lacks independent editorial security vetting for its execution model

Tools

ToolDescriptionRisk
get_nodesInspect the cluster by getting nodes.low
get_cluster_statusInspect the cluster status.low
get_storageGet storage information.low
get_vmsGet a list of VMs.low
get_containersGet a list of containers.low
create_vmCreate a VM.medium
start_vmStart a VM.medium
stop_vmStop a VM.medium
delete_vmDelete a VM.high
create_containerCreate a container.medium

Compatibility

ClientLocalDockerRemoteRead-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

What configuration is required to start the server?

You must create a local configuration file based on the provided example, which requires your Proxmox host details, port, and authentication credentials including user, token name, and token value.

How do I enable container command execution?

To perform container command execution, you must add an SSH configuration section to your proxmox-config/config.json file.

Does the server support persistent storage for job tracking?

Yes, you can configure persistent job tracking by specifying a sqlite_path in the jobs section of your configuration file.

How can I secure the MCP HTTP transport?

You can secure the HTTP transport by setting an MCP_API_KEY environment variable and including it as a Bearer token in your client requests.

What are the two ways to access Proxmox via this server?

The server exposes operations through an MCP interface for AI agents and clients, and an OpenAPI interface for HTTP-based automation and dashboards.

Can I run the server in Docker?

Yes, the server supports Docker deployment for both the MCP HTTP transport and the OpenAPI bridge using the provided Docker Compose profiles.

Changelog

Badge

Proxmox Plus MCP Server (rekkles) security score, rated on RepoAI

Maintain this server? Add the live badge to your README.