Proximo
access level: configurable✔ Source-reviewed Oct 2026
We read this project's source code and tool definitions (Oct 2026). This is a code review, not a live test against real systems. Re-check after upgrades.
| Repository | https://github.com/john-broadway/proximo |
|---|---|
| Category | Proxmox |
| Systems touched | Proxmox VE, Backup Server, Mail Gateway, Datacenter Manager |
| Access (as described) | configurable |
| License / price | Apache-2.0 / free |
| GitHub stars | 56 |
| Read tools | Find/read any Proxmox API address; read-only diagnose battery; token preflight |
| Write / delete / exec tools | Planned API calls (any PVE/PBS/PMG/PDM write), opt-in LXC command exec with CTID allowlist |
| Read-only mode | Yes: read-only by default; mutations return a plan first and need out-of-band human approval; kill-switch file halts writes |
| Safety notes | Strongest guardrails of the Proxmox set (plan, approve, undo receipt). Still: mint a least-privilege PVE token, since Proxmox RBAC is the real floor. |
| Verified | yes (README review 2026-10-24) |
| Notes | Six generic tools over the full Proxmox API. Added 2026-10-24. |
📬 SysAdmin Agents
The SysAdmin Agents newsletter: new MCP servers, agent skills and safety notes for sysadmins. One email a week.