Back to Home
BenjaminDuthe icon

proxmox-mcp

by BenjaminDuthe

Overview

MCP server enabling Claude to manage Proxmox VE infrastructure for VMs, LXC containers, snapshots, storage, and cluster resources.

Installation

Run Command
docker run --rm -it --env-file .env -e PROXMOX_SSH_KEY_PATH=/home/mcp/.ssh/id_proxmox -v ~/.ssh/id_proxmox:/home/mcp/.ssh/id_proxmox:ro proxmox-mcp

Environment Variables

  • PROXMOX_HOST
  • PROXMOX_TOKEN_ID
  • PROXMOX_TOKEN_SECRET
  • PROXMOX_USER
  • PROXMOX_PASSWORD
  • PROXMOX_PORT
  • PROXMOX_VERIFY_SSL
  • PROXMOX_TIMEOUT
  • PROXMOX_SSH_KEY_PATH
  • PROXMOX_SSH_USER
  • PROXMOX_SSH_PASSWORD
  • PROXMOX_SSH_PORT
  • PROXMOX_SSH_TIMEOUT

Security Notes

The server uses `httpx` and `asyncssh` to connect to Proxmox. By default, `PROXMOX_VERIFY_SSL` is set to `false` and SSH `known_hosts` is `None`, which disables certificate and host key verification. While convenient for self-signed Proxmox setups, this creates a man-in-the-middle vulnerability if not addressed with proper certificates. The `vm_file_write` tool has a list of `PROTECTED_PATHS` (e.g., `/etc/shadow`, `/etc/passwd`) preventing writes, but this can be bypassed with `force=True`. Granting an AI access to SSH tools (like `ssh_execute` as root) or file writing inside VMs via guest agent (even with `force=True`) carries significant risk and requires careful permission management of the API token.

Similar Servers

Stats

Interest Score0
Security Score6
Cost ClassMedium
Avg Tokens2500
Stars0
Forks0
Last Update2026-01-17

Tags

ProxmoxVirtualizationLXCVM ManagementAPI ClientSSH