@aidalinfo/proxmox-mcp

MCP server for a Proxmox VE cluster, with two modes:

• readonly (default) — only read tools are exposed.
• full — read tools plus write tools (VM/LXC lifecycle, snapshots, migrate).

In readonly mode the write tools are never registered, so the model cannot call them.

Tools

Read (both modes): pve_version, pve_cluster_status, pve_cluster_resources, pve_nodes, pve_node_info, pve_vms, pve_vm_info, pve_containers, pve_container_info, pve_storage, pve_storage_content, pve_tasks, pve_raw_get.

Write (full only): pve_vm_action, pve_lxc_action, pve_snapshot_create, pve_snapshot_delete, pve_snapshot_rollback, pve_migrate.

Environment

| Var | Required | Default | Role | |---|---|---|---| | PROXMOX_HOST | yes | — | e.g. https://proxmox.example.com:8006 | | PROXMOX_TOKEN_ID | yes | — | e.g. claude@pve!readonly | | PROXMOX_TOKEN_SECRET | yes | — | token secret | | PROXMOX_MODE | no | readonly | readonly | full | | PROXMOX_TLS_INSECURE | no | false | true to skip TLS verification (self-signed certs) |

Register with Claude Code

claude mcp add proxmox --scope user \
  -e PROXMOX_HOST=https://proxmox.example.com:8006 \
  -e PROXMOX_TOKEN_ID='claude@pve!readonly' \
  -e PROXMOX_TOKEN_SECRET=... \
  -e PROXMOX_MODE=readonly \
  -e PROXMOX_TLS_INSECURE=true \
  -- npx -y @aidalinfo/proxmox-mcp

For read-only use, create a token with the PVEAuditor role rather than root@pam.