ProxmoxMCP-Plus by RekklesNA for Proxmox: score

C 64 Provisional Not reviewed Not tested

ProxmoxMCP-Plus by RekklesNA is a community MCP server for Proxmox with 26 read, 10 write and 10 destructive tools. It does not have a read-only mode and needs administrator access, to run locally, and a secret-like variable; its provisional OpsMCP grade is C (64%), last checked 16 Oct 2026.

Last checked 16 Oct 2026.

Proxmox VE MCP server for VMs, LXCs, snapshots, backups, storage, and cluster operations.

Publisher's description

io.github.RekklesNA/proxmox-mcp-plus · version 0.6.2

Tool capability partly scored. 3 of 4 factors scored.

Not hands-on tested. No test date, notes, or observed write behavior.

Proxmox GitHub Registry record Website Report this listing

Can it change or delete things?

Yes. The extracted tools include at least one destructive tool, so it can change or delete things.

Classified from the tool name, or from the description when the name has no listed verb.

60 tools

Tool	Class
`cancel_job` No description was extracted. from the name	Unknown
`clone_vm` No description was extracted. from the name	Unknown
`code_execute` No description was extracted. from the name (execute)	Destructive
`code_get_schema` No description was extracted. from the name (get)	Read
`code_search` No description was extracted. from the name (search)	Read
`create_backup` No description was extracted. from the name (create)	Write
`create_container` No description was extracted. from the name (create)	Write
`create_snapshot` No description was extracted. from the name (create)	Write
`create_vm` No description was extracted. from the name (create)	Write
`delete_backup` No description was extracted. from the name (delete)	Destructive
`delete_container` No description was extracted. from the name (delete)	Destructive
`delete_iso` No description was extracted. from the name (delete)	Destructive
`delete_snapshot` No description was extracted. from the name (delete)	Destructive
`delete_vm` No description was extracted. from the name (delete)	Destructive
`download_iso` No description was extracted. from the name	Unknown
`execute_container_command` No description was extracted. from the name (execute)	Destructive
`execute_node_command` No description was extracted. from the name (execute)	Destructive
`execute_vm_command` No description was extracted. from the name (execute)	Destructive
`get_cluster_log` No description was extracted. from the name (get)	Read
`get_cluster_status` No description was extracted. from the name (get)	Read
`get_container_config` No description was extracted. from the name (get)	Read
`get_container_ip` No description was extracted. from the name (get)	Read
`get_containers` No description was extracted. from the name (get)	Read
`get_guest_firewall_log` No description was extracted. from the name (get)	Read
`get_job` No description was extracted. from the name (get)	Read
`get_next_vmid` No description was extracted. from the name (get)	Read
`get_node_firewall_log` No description was extracted. from the name (get)	Read
`get_node_status` No description was extracted. from the name (get)	Read
`get_node_syslog` No description was extracted. from the name (get)	Read
`get_nodes` No description was extracted. from the name (get)	Read
`get_storage` No description was extracted. from the name (get)	Read
`get_task_log` No description was extracted. from the name (get)	Read
`get_vm_config` No description was extracted. from the name (get)	Read
`get_vm_ip_addresses` No description was extracted. from the name (get)	Read
`get_vms` No description was extracted. from the name (get)	Read
`list_backups` No description was extracted. from the name (list)	Read
`list_bridges` No description was extracted. from the name (list)	Read
`list_isos` No description was extracted. from the name (list)	Read
`list_jobs` No description was extracted. from the name (list)	Read
`list_snapshots` No description was extracted. from the name (list)	Read
`list_targets` No description was extracted. from the name (list)	Read
`list_templates` No description was extracted. from the name (list)	Read
`poll_job` No description was extracted. from the name	Unknown
`reconcile_job` No description was extracted. from the name	Unknown
`reset_vm` No description was extracted. from the name (reset)	Destructive
`restart_container` No description was extracted. from the name	Unknown
`restore_backup` No description was extracted. from the name	Unknown
`retry_job` No description was extracted. from the name	Unknown
`rollback_snapshot` No description was extracted. from the name	Unknown
`set_container_description` No description was extracted. from the name (set)	Write
`set_vm_description` No description was extracted. from the name (set)	Write
`shutdown_vm` No description was extracted. from the name	Unknown
`start_container` No description was extracted. from the name	Unknown
`start_vm` No description was extracted. from the name	Unknown
`stop_container` No description was extracted. from the name	Unknown
`stop_vm` No description was extracted. from the name	Unknown
`update_container_network` No description was extracted. from the name (update)	Write
`update_container_resources` No description was extracted. from the name (update)	Write
`update_container_ssh_keys` No description was extracted. from the name (update)	Write
`update_vm_config` No description was extracted. from the name (update)	Write

Score

64 of 100 points (64%). A factor that was not scored counts as 0 of its full weight.

OpsMCP rubric 2026-10-16.3. Checked 16 Oct 2026.
Factor	Points	Full weight	Status
Tool capability	18	35	Partly scored
Access	11	25	Scored
Maintenance	20	20	Scored
Publisher	15	20	Scored

Tool capability

26 read, 10 write, 10 destructive, 14 unknown.

Access

Part	Value	Points	Where this came from
Scope	Administrator	2 of 10	Matched admin wording: root@pam
Where it runs	Local process	6 of 8	Registry package transport is stdio.
Credentials	Secret-like variable, secrecy not marked	3 of 7	Secret-like env vars without isSecret: PROXMOX_TOKEN_NAME

Maintenance

Part	Value	Points
Last commit	4 days	8 of 8
Releases	4 days	6 of 6
Issues	20 closed / 20 issues (1.00)	6 of 6

Publisher

Part	Value	Points	Where this came from
Who publishes it	Individual	3 of 8	GitHub owner type is User (RekklesNA).
Registry listing	Listed	5 of 5	Official registry server io.github.RekklesNA/proxmox-mcp-plus (status active).
License	MIT	4 of 4	GitHub SPDX license MIT.
Stars	597	2 of 2	597 GitHub stars.
Repository age	511 days	1 of 1	Repository created 2025-05-23T07:19:12Z.

How the rubric works

What this score does not cover

This score is not a code audit and it is not a human review. It has not been hands-on tested. Nothing on this page is a certification.

Access needed

Variable	Required	Secret	Default	Description
`PROXMOX_MCP_CONFIG`	unknown	unknown	unset	Optional path to a JSON config file. If set, file config is used before environment variable fallback.
`PROXMOX_HOST`	yes	unknown	unset	Hostname or IP address of the Proxmox VE API endpoint.
`PROXMOX_USER`	yes	unknown	unset	Proxmox username with realm, for example root@pam.
`PROXMOX_TOKEN_NAME`	yes	unknown	unset	Name of the Proxmox API token.
`PROXMOX_TOKEN_VALUE`	yes	yes	unset	Secret value of the Proxmox API token.
`PROXMOX_PORT`	unknown	unknown	unset	Proxmox API port. Defaults to 8006.
`PROXMOX_VERIFY_SSL`	unknown	unknown	unset	Set to true to verify TLS certificates, or false for self-signed lab environments.
`PROXMOX_DEV_MODE`	unknown	unknown	unset	Set to true when using verify_ssl=false in a self-signed lab environment.
`PROXMOX_SERVICE`	unknown	unknown	unset	Proxmox service type. Defaults to PVE.
`MCP_TOOL_ALLOWLIST`	unknown	unknown	unset	Optional comma-separated exact tool names to expose. Do not set together with MCP_TOOL_DENYLIST.
`MCP_TOOL_DENYLIST`	unknown	unknown	unset	Optional comma-separated exact tool names to hide. Do not set together with MCP_TOOL_ALLOWLIST.
`LOG_LEVEL`	unknown	unknown	unset	Server log verbosity. Defaults to INFO.

Maintenance

Archived: no
Last commit: 12 Oct 2026 · 3d79bb0
Latest release: v0.6.2 · 12 Oct 2026
Issues: 0 open · 20 closed
Stars: 597
License: MIT
Repository created: 23 May 2025

npm and PyPI

npm: No npm package in the registry entry.
PyPI: proxmox-mcp-plus · version 0.6.2 · downloads last month 10,493 · published 12 Oct 2026
Maintainers: Kevin

Install

Source: registry. This is the published command, not a rewritten one.

# requires PROXMOX_HOST: Hostname or IP address of the Proxmox VE API endpoint.
# requires PROXMOX_USER: Proxmox username with realm, for example root@pam.
# requires PROXMOX_TOKEN_NAME: Name of the Proxmox API token.
# requires PROXMOX_TOKEN_VALUE: Secret value of the Proxmox API token.
uvx proxmox-mcp-plus==0.6.2

Other Proxmox servers

Badge

The SVG is generated for this server. The embed links to this server page.

Embed snippet

[![OpsMCP C provisional](https://opsmcp.dev/badge/rekklesna-proxmox-mcp-plus.svg)](https://opsmcp.dev/servers/rekklesna-proxmox-mcp-plus/)

Sources for this listing

registry:proxmox
github:proxmox mcp in:name,description

Official registry server io.github.RekklesNA/proxmox-mcp-plus (status active).