Proxmox VE runs on your own machine — the client starts it, so there is no endpoint to ping. 169 installs a week from pypi. Last commit 2 Sep 2026.
Manage Proxmox VE nodes, VMs, containers, storage and snapshots. Read-only by default.
Today is the operative word: we check Proxmox VE every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add proxmox-mcp -e 'PROXMOX_HOST=<PROXMOX_HOST>' -- uvx proxmox-ve-mcp
{
"mcpServers": {
"proxmox-mcp": {
"command": "uvx",
"args": [
"proxmox-ve-mcp"
],
"env": {
"PROXMOX_HOST": "<PROXMOX_HOST>"
}
}
}
}
[mcp_servers.proxmox-mcp]
command = "uvx"
args = ["proxmox-ve-mcp"]
env = { PROXMOX_HOST = "<PROXMOX_HOST>" }
{
"mcpServers": {
"proxmox-mcp": {
"command": "uvx",
"args": [
"proxmox-ve-mcp"
],
"env": {
"PROXMOX_HOST": "<PROXMOX_HOST>"
}
}
}
}
{
"servers": {
"proxmox-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"proxmox-ve-mcp"
],
"env": {
"PROXMOX_HOST": "<PROXMOX_HOST>"
}
}
}
}
Put your own value in place of
<PROXMOX_HOST> (Proxmox host IP or hostname).
The author’s registry entry marks it as required.
Optional settings from the registry entry, left out of the block above:
PROXMOX_PORT (Proxmox API port), PROXMOX_VERIFY_SSL (Verify the TLS certificate. Proxmox self-signs by default), PROXMOX_TIMEOUT (Seconds to wait for each Proxmox API request), PROXMOX_USER (API user, including the realm), PROXMOX_TOKEN_NAME (API token name. Use this plus PROXMOX_TOKEN_VALUE, or PROXMOX_PASSWORD), PROXMOX_TOKEN_VALUE (API token secret), PROXMOX_PASSWORD (Password, used only when no API token is set), PROXMOX_RISK_LEVEL (Which tools exist: read-only, plus lifecycle, or everything), PROXMOX_TOOLS_ALLOW (Comma-separated tool names to register, intersected with the risk level. Unset = all of them), PROXMOX_REDACT_SECRETS (Mask cipassword and sshkeys in every response), PROXMOX_MCP_TRANSPORT (stdio (default) or streamable-http), PROXMOX_MCP_HOST (HTTP bind address. Anything but loopback also needs PROXMOX_MCP_ALLOWED_HOSTS), PROXMOX_MCP_PORT (HTTP port), PROXMOX_MCP_PATH (Streamable HTTP endpoint path), PROXMOX_MCP_JSON_RESPONSE (Answer with JSON instead of an SSE stream), PROXMOX_MCP_ALLOWED_HOSTS (Comma-separated Host headers to accept over HTTP; '*' disables the check), PROXMOX_MCP_ALLOWED_ORIGINS (Comma-separated browser origins allowed to call the endpoint. Empty = same-origin only), SENTRY_DSN (Optional: report tool traces and errors to Sentry. Unset disables it).
Monitor and manage Proxmox VE clusters: VMs, containers, storage and backups. Read-only by default.
Proxmox VE MCP server for VMs, LXCs, snapshots, backups, storage, and cluster operations.
Drive iPhone/iPad via Appium/WebDriverAgent from AI agents — safe-by-default, read-only by default.
Manage Proxmox VE via Cursor: QEMU, LXC, storage, HA, firewall, access.
An MCP server that provides read access to your cloud storage providers, bank accounts and more.
Read-only health and storage diagnostics for an enrolled CMDOP machine fleet.
Managed Postgres MCP: projects, SQL, docs search, and storage buckets via OAuth.
MCP server for the Longhorn distributed storage manager API, with a --read-only mode.
Answers built from our own checks of this server.