ProxmoxMCP-Plus
access level: write✔ Source-reviewed Oct 2026
We read this project's source code and tool definitions (Oct 2026). This is a code review, not a live test against real systems. Re-check after upgrades.
| Repository | https://github.com/RekklesNA/ProxmoxMCP-Plus |
|---|---|
| Category | Proxmox |
| Systems touched | Proxmox VE VMs, LXCs, backups, snapshots |
| Access (as described) | write |
| License / price | MIT / free |
| GitHub stars | 601 |
| Read tools | get_nodes, get_node_status, get_vms, get_vm_config, get_containers, get_storage, list_snapshots, list_backups, list_isos, get_cluster_status, get_node_syslog, get_task_log |
| Write / delete / exec tools | create/clone/migrate/start/stop/shutdown/reset/delete VM; create/delete container; create/delete snapshot; create/restore/delete backup; delete_iso, delete_volume, update_vm_config; execute_vm_command / execute_container_command / execute_node_command (shell) |
| Read-only mode | Partial: per-target read-only targets reject mutations; command_policy (deny_all/allowlist/audit_only + deny_patterns) for execute_*; high-risk approval list |
| Safety notes | Most powerful in the set: node/VM/container shell exec (container exec via SSH + pct exec). Use a scoped PVE API token, set read-only targets or deny_all. OpenAPI mode refuses no-auth unless PROXMOX_ALLOW_NO_AUTH=true. |
| Verified | yes (source review 2026-10-20) |
| Notes | — |
📬 SysAdmin Agents
The SysAdmin Agents newsletter: new MCP servers, agent skills and safety notes for sysadmins. One email a week.