ProxmoxMCP-Plus runs on your own machine — the client starts it, so there is no endpoint to ping. 4 108 installs a week from pypi. Last commit 29 Oct 2026.
Proxmox VE MCP server for VMs, LXCs, snapshots, backups, storage, and cluster operations.
We read the source, 4 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
__import__(pkg)
process = subprocess.Popen(args, stdin=stdin, stdout=subprocess.PIPE, stderr=subprocess.PIPE)
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add proxmox-mcp-plus -e 'PROXMOX_HOST=<PROXMOX_HOST>' -e 'PROXMOX_USER=<PROXMOX_USER>' -e 'PROXMOX_TOKEN_NAME=<PROXMOX_TOKEN_NAME>' -e 'PROXMOX_TOKEN_VALUE=<PROXMOX_TOKEN_VALUE>' -- uvx proxmox-mcp-plus
{
"mcpServers": {
"proxmox-mcp-plus": {
"command": "uvx",
"args": [
"proxmox-mcp-plus"
],
"env": {
"PROXMOX_HOST": "<PROXMOX_HOST>",
"PROXMOX_TOKEN_NAME": "<PROXMOX_TOKEN_NAME>",
"PROXMOX_TOKEN_VALUE": "<PROXMOX_TOKEN_VALUE>",
"PROXMOX_USER": "<PROXMOX_USER>"
}
}
}
}
[mcp_servers.proxmox-mcp-plus]
command = "uvx"
args = ["proxmox-mcp-plus"]
env = { PROXMOX_HOST = "<PROXMOX_HOST>", PROXMOX_USER = "<PROXMOX_USER>", PROXMOX_TOKEN_NAME = "<PROXMOX_TOKEN_NAME>", PROXMOX_TOKEN_VALUE = "<PROXMOX_TOKEN_VALUE>" }
{
"mcpServers": {
"proxmox-mcp-plus": {
"command": "uvx",
"args": [
"proxmox-mcp-plus"
],
"env": {
"PROXMOX_HOST": "<PROXMOX_HOST>",
"PROXMOX_TOKEN_NAME": "<PROXMOX_TOKEN_NAME>",
"PROXMOX_TOKEN_VALUE": "<PROXMOX_TOKEN_VALUE>",
"PROXMOX_USER": "<PROXMOX_USER>"
}
}
}
}
{
"servers": {
"proxmox-mcp-plus": {
"type": "stdio",
"command": "uvx",
"args": [
"proxmox-mcp-plus"
],
"env": {
"PROXMOX_HOST": "<PROXMOX_HOST>",
"PROXMOX_TOKEN_NAME": "<PROXMOX_TOKEN_NAME>",
"PROXMOX_TOKEN_VALUE": "<PROXMOX_TOKEN_VALUE>",
"PROXMOX_USER": "<PROXMOX_USER>"
}
}
}
}
Put your own values in place of
<PROXMOX_HOST> (Hostname or IP address of the Proxmox VE API endpoint), <PROXMOX_USER> (Proxmox username with realm, for example root@pam), <PROXMOX_TOKEN_NAME> (Name of the Proxmox API token), <PROXMOX_TOKEN_VALUE> (Secret value of the Proxmox API token).
The author’s registry entry marks them as required.
Optional settings from the registry entry, left out of the block above:
PROXMOX_MCP_CONFIG (Optional path to a JSON config file. If set, file config is used before environment variable fallback), PROXMOX_PORT (Proxmox API port. Defaults to 8006), PROXMOX_VERIFY_SSL (Set to true to verify TLS certificates, or false for self-signed lab environments), PROXMOX_DEV_MODE (Set to true when using verify_ssl=false in a self-signed lab environment), PROXMOX_SERVICE (Proxmox service type. Defaults to PVE), MCP_TOOL_ALLOWLIST (Optional comma-separated exact tool names to expose. Do not set together with MCP_TOOL_DENYLIST), MCP_TOOL_DENYLIST (Optional comma-separated exact tool names to hide. Do not set together with MCP_TOOL_ALLOWLIST), LOG_LEVEL (Server log verbosity. Defaults to INFO).
Monitor and manage Proxmox VE clusters: VMs, containers, storage and backups. Read-only by default.
Proxmox VE in Claude: VMs, storage, backups; start, stop, snapshot after a yes.
MCP server for remote filesystem operations on cloud storage (Google Cloud Storage).
Manage Proxmox VE nodes, VMs, containers, storage and snapshots. Read-only by default.
Rust MCP server and CLI for Unraid GraphQL operations across NAS, Docker, VM, and storage workflows.
MCP server for InsForge BaaS — database, storage, edge functions, and deployments
Official Backblaze B2 MCP server for buckets, files, keys, Object Lock, and S3 storage.
MCP server for Firebase — Firestore, Storage, Auth, and Cloud Logging, with schema validation.
Answers built from our own checks of this server.