Proxmox VE MCP Server

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

claude mcp add proxmox-mcp -- uvx proxmox-ve-mcp

{
  "mcpServers": {
    "proxmox-mcp": {
      "args": [
        "proxmox-ve-mcp"
      ],
      "command": "uvx"
    }
  }
}

[mcp_servers.proxmox-mcp]
command = "uvx"
args = ["proxmox-ve-mcp"]

{
  "mcpServers": {
    "proxmox-mcp": {
      "args": [
        "proxmox-ve-mcp"
      ],
      "command": "uvx"
    }
  }
}

{
  "mcpServers": {
    "proxmox-mcp": {
      "args": [
        "proxmox-ve-mcp"
      ],
      "command": "uvx"
    }
  }
}

This one needs environment variables set before it will start: PROXMOX_HOST (Proxmox host IP or hostname.), PROXMOX_PORT (Proxmox API port.), PROXMOX_VERIFY_SSL (Verify the TLS certificate. Proxmox self-signs by default.), PROXMOX_TIMEOUT (Seconds to wait for each Proxmox API request.), PROXMOX_USER (API user, including the realm.), PROXMOX_TOKEN_NAME (API token name. Use this plus PROXMOX_TOKEN_VALUE, or PROXMOX_PASSWORD.), PROXMOX_TOKEN_VALUE (API token secret.), PROXMOX_PASSWORD (Password, used only when no API token is set.), PROXMOX_RISK_LEVEL (Which tools exist: read-only, plus lifecycle, or everything.), PROXMOX_TOOLS_ALLOW (Comma-separated tool names to register, intersected with the risk level. Unset = all of them.), PROXMOX_REDACT_SECRETS (Mask cipassword and sshkeys in every response.), PROXMOX_MCP_TRANSPORT (stdio (default) or streamable-http.), PROXMOX_MCP_HOST (HTTP bind address. Anything but loopback also needs PROXMOX_MCP_ALLOWED_HOSTS.), PROXMOX_MCP_PORT (HTTP port.), PROXMOX_MCP_PATH (Streamable HTTP endpoint path.), PROXMOX_MCP_JSON_RESPONSE (Answer with JSON instead of an SSE stream.), PROXMOX_MCP_ALLOWED_HOSTS (Comma-separated Host headers to accept over HTTP; '*' disables the check.), PROXMOX_MCP_ALLOWED_ORIGINS (Comma-separated browser origins allowed to call the endpoint. Empty = same-origin only.), SENTRY_DSN (Optional: report tool traces and errors to Sentry. Unset disables it.). The author declared them in the registry entry; get the values from the project itself.