Reference
proxmox-mcp
A six-tool MCP server that lets a model inspect Proxmox health, guests, storage, tasks, and backups while leaving restart, delete, create, and every other mutation structurally unavailable.
Who it is for — and why
Self-hosters and infrastructure teams that want model-assisted diagnosis without placing a write-capable infrastructure credential behind the model.
Proof you can inspect
- The adapter contains no POST, PUT, or DELETE path; all six advertised tools are read-only
- Node, storage, and guest allowlists shape both the runtime authorization check and the schema the model sees
- Credential-free simulation exercises the complete tool surface before an operator creates a real token
- The development gate runs 125 tests plus lint and static type checking
Limits
- Requires an operator-created read-only Proxmox token for live use
- Discovery is deliberately broader than the serving allowlist
- Remediation and write operations are out of scope
Quick start
git clone https://github.com/0xreconlion/proxmox-mcp.git && cd proxmox-mcp && uv syncSource-to-build: this project does not claim a packaged release. Its repository documents the required dependencies and the failure mode when one is missing.