pvewarden
access level: configurable✔ Source-reviewed Oct 2026
We read this project's source code and tool definitions (Oct 2026). This is a code review, not a live test against real systems. Re-check after upgrades.
| Repository | https://github.com/matousfiser/pvewarden |
|---|---|
| Category | Proxmox |
| Systems touched | Proxmox VE guests (Debian/Ubuntu VMs & LXCs): pending updates, snapshots, security/full upgrades, reboot, rollback |
| Access (as described) | configurable |
| License / price | Apache-2.0 / free |
| GitHub stars | 16 |
| Read tools | list_guests, check_updates, check_services, list_snapshots, update_result |
| Write / delete / exec tools | snapshot_guest, apply_updates, reboot_guest; rollback_snapshot / delete_snapshot / delete_old_snapshots (need human elicitation confirm) |
| Read-only mode | Partial: agent only sees guests in the pvewarden pool; updates need tag pvewarden-update and reboots need pvewarden-reboot; rollback/delete/no-snapshot updates require MCP elicitation the agent cannot answer |
| Safety notes | Strong model: forced-command SSH (no shell), per-guest keys, pool-scoped PVE token that cannot create/delete/reconfigure hosts. Auto-snapshots before updates; only official distro archives; third-party repos reported never installed. Early 0.1 — lab first. Clients without elicitation cannot confirm rollback. |
| Verified | yes (README review 2026-11-07) |
| Notes | Brand new (created 2026-10-31), early 0.1.x. Agent-safe guest patching — no shell, forced-command SSH gate, pool+tag scoped. Added 2026-11-07. |
📬 SysAdmin Agents
The SysAdmin Agents newsletter: new MCP servers, agent skills and safety notes for sysadmins. One email a week.