Proxmox MCP
io.github.Servosity/proxmox-mcp
About Proxmox MCP
Proxmox MCP is an MCP server published by the GitHub account Servosity. Read-only Proxmox VE and Backup Server: which client guests have a verified, recent restore point.
It runs on your own machine: your AI client starts it from the MCP bundle package proxmox-mcp.mcpb at version 0.1.2.
It asks for 4 secrets: PROXMOX_API_TOKEN, PROXMOX_PBS_API_TOKEN, PROXMOX_MCP_HTTP_TOKEN and PRINTING_PRESS_CLIENT_PROFILE. Give it a key with the least access that still works.
It also needs PROXMOX_HOST set before it starts.
Version 0.1.2 was published on 23 October 2026, and the source code is public, so you can read it before installing.
Written from the registry entry. 7 automated checks on registry metadata: 4 pass, 1 warn, 0 fail, 2 info. How we check.
What it asks for
| Variable | Required | Secret | Description |
|---|---|---|---|
PROXMOX_HOST | Yes | No | Proxmox VE host name or IP (API on port 8006). |
PROXMOX_API_TOKEN | Yes | Yes | Proxmox VE API token USER@REALM!TOKENID=SECRET; PVEAuditor, plus Datastore.AllocateSpace and VM.Backup if backups live on PVE storage. |
PROXMOX_TLS_FINGERPRINT | No | No | SHA-256 fingerprint of the PVE certificate to pin (stock Proxmox certificates are self-signed). |
PROXMOX_PBS_HOST | No | No | Optional Proxmox Backup Server host, host:port, or https://host:port (default port 8007). |
PROXMOX_PBS_API_TOKEN | No | Yes | Optional Proxmox Backup Server API token USER@REALM!TOKENID:SECRET (colon before the secret). |
PROXMOX_PBS_TLS_FINGERPRINT | No | No | Optional SHA-256 fingerprint of the PBS certificate to pin. |
PROXMOX_BASE_URL | No | No | Full PVE API base such as https://pve1:8006/api2/json; overrides PROXMOX_HOST. Leave blank to use PROXMOX_HOST. |
PROXMOX_CLUSTER | No | No | Name of the clusters.toml entry to use by default (same as --cluster). Leave blank to run across every configured cluster. |
PROXMOX_CLUSTERS_FILE | No | No | Path to the clusters.toml that lists client clusters. Leave blank for the default. Each cluster's token variables must also be in the server's environment. |
PROXMOX_USER_AGENT | No | No | Overrides the User-Agent the CLI sends on Proxmox requests. Leave blank to use the CLI's own. |
PROXMOX_MCP_READ_ONLY | No | No | Set to 1 to drop the sync, export, workflow archive and learnings forget/reject MCP tools. The learning-store tools (teach, playbook) still write locally. Proxmox itself is never written either way. Leave blank for the full tool set. |
PROXMOX_MCP_HTTP_TOKEN | No | Yes | Required only when running the MCP server with --transport http (a remote or hosted deployment); the server refuses to start without it. Callers must send a matching Authorization: Bearer header. Not needed for the default local stdio transport that Claude Desktop uses. |
PRINTING_PRESS_CLIENT_PROFILE | No | Yes | Leave blank. This connector registers no tenant-gated profile source, so the value is read but changes nothing; select client clusters with PROXMOX_CLUSTER or clusters.toml instead. |
Checks
| Check | Result | Detail |
|---|---|---|
| Source repository linked | Pass | https://github.com/servosity/msp-skills |
| Version pinned | Pass | Every package has an explicit version |
| Secrets requested | Warn | Asks for 4 secrets: PROXMOX_API_TOKEN, PROXMOX_PBS_API_TOKEN, PROXMOX_MCP_HTTP_TOKEN, PRINTING_PRESS_CLIENT_PROFILE |
| Known package registry | Pass | All packages come from npm, PyPI, OCI, NuGet or MCPB |
| Namespace ownership | Info | Name verified via GitHub account Servosity |
| Registry text aimed at the AI | Pass | Description and settings contain no hidden characters or instructions to the AI |
| Code red flags | Info | Package could not be read (too large) |
Popularity & health: 63 / 100
Worked out from public numbers and our own checks, not from user reviews or ratings. It says how used and how looked-after a server is, not whether it is safe.
14 forks, 379 merged pull requests. Sources: GitHub, npm, PyPI (pypistats.org) and Hacker News (Algolia), fetched 2026-10-31.
What people say
No Hacker News threads link to its source code.
Look further: search Reddit, search Hacker News, read its GitHub issues. These are not reviews we checked.
Facts
| Registry name | io.github.Servosity/proxmox-mcp |
|---|---|
| Publisher | GitHub account Servosity |
| How the name is verified | Name verified via GitHub account Servosity. The registry ties the name prefix to that account or domain; it does not check the code. |
| Type | Local: runs on your machine from a package |
| Packages | mcpb https://github.com/Servosity/msp-skills/releases/download/proxmox-v0.1.2/proxmox-mcp.mcpb 0.1.2 (stdio) |
| Version | 0.1.2 |
| Published | |
| Last updated | |
| Source repository | https://github.com/servosity/msp-skills |
| Website | None linked |
| Category | Cloud & infrastructure (assigned by keyword rule, not by hand) |
Related servers in Cloud & infrastructure
Proximo — the governed client for Proxmox7/7The governed client for Proxmox (PVE, PBS, PMG, PDM): plans, keeps…
ProxmoxMCP-Plus7/7Proxmox VE MCP server for VMs, LXCs, snapshots, backups, storage,…- rust-proxmoxmcp4/4Proxmox VE MCP server for many clusters: guest protection,…
- nandi-proxmox-mcp6/7MCP server for Proxmox VE management (VM, LXC, nodes)
- Proxbase4/4Create, test and break real Proxmox VE clusters in QEMU/KVM on the…
- Proxmox VE5/6Monitor and manage Proxmox VE clusters: VMs, containers, storage…