MCP Proxmox Server

242 tools. 203 can modify or destroy data without limits.

11 destructive tools with no built-in limits. Policy required.

Last updated:

203 can modify or destroy data
39 read-only
242 tools total

Community server · catalogue entry checked 11/06/2026

How to control MCP Proxmox Server ↓

What MCP Proxmox Server exposes to your agents

Read (39) Write / Execute (71) Destructive / Financial (11)
Critical Risk

The most dangerous MCP Proxmox Server tools

203 of MCP Proxmox Server's 242 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

How to control MCP Proxmox Server

PolicyLayer is an MCP gateway — it sits between your AI agents and MCP Proxmox Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "proxmox_delete_lxc": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "proxmox_assign_permission": {
    "limits": [
      {
        "counter": "proxmox_assign_permission_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "get_cluster_info": {
    "limits": [
      {
        "counter": "get_cluster_info_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register MCP Proxmox Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON MCP PROXMOX →

Instant setup, no code required.

All 242 MCP Proxmox Server tools

EXECUTE 33 tools
Execute proxmox_ai_scaling AI-powered predictive scaling based on usage patterns Execute proxmox_ansible_playbook Execute Ansible playbooks against Proxmox VMs Execute proxmox_api_gateway Deploy API gateway for enhanced API management Execute proxmox_auto_optimize Automatically optimize VM configurations based on usage patterns Execute proxmox_create_docker_swarm Create Docker Swarm cluster with manager and worker nodes. Execute proxmox_create_docker_swarm_preset Create Docker Swarm cluster with preset configurations (web, development, production). Execute proxmox_deploy_openshift_cluster Deploy complete OpenShift cluster (bootstrap + masters + workers). Execute proxmox_deploy_openshift_sno Deploy OpenShift Single Node Openshift (SNO) cluster. Execute proxmox_deploy_vpn_server Deploy VPN server for secure remote access Execute proxmox_docker_execute_command Execute Docker command on cluster node. Execute proxmox_docker_service_create Create Docker Swarm service. Execute proxmox_docker_service_scale Scale Docker Swarm service. Execute proxmox_docker_swarm_init Initialize Docker Swarm on primary manager node. Execute proxmox_docker_swarm_join Join node to existing Docker Swarm cluster. Execute proxmox_gitops_sync Sync infrastructure state with Git repository Execute proxmox_guest_exec proxmox_guest_exec Execute proxmox_integrate_service Integrate with external services for notifications and automation Execute proxmox_migrate_storage Migrate VM storage between different storage backends Execute proxmox_migrate_vm proxmox_migrate_vm Execute proxmox_reboot_vm proxmox_reboot_vm Execute proxmox_setup_monitoring Deploy comprehensive monitoring stack Execute proxmox_start_lxc proxmox_start_lxc Execute proxmox_start_vm proxmox_start_vm Execute proxmox_stop_lxc proxmox_stop_lxc Execute proxmox_stop_vm proxmox_stop_vm Execute proxmox_terraform_plan Execute Terraform plans for infrastructure as code Execute proxmox_wait_task proxmox_wait_task Execute proxmox_windows_configure_rdp Configure Windows Remote Desktop Protocol. Execute proxmox_windows_domain_join Join Windows VM to Active Directory domain. Execute proxmox_windows_execute_command Execute command on Windows VM via QEMU guest agent. Execute proxmox_windows_install_apps Install applications on Windows VM. Execute proxmox_windows_services Manage Windows services (list, restart). Execute proxmox_windows_updates Install Windows updates via PowerShell.
WRITE 38 tools
Write proxmox_assign_permission proxmox_assign_permission Write proxmox_backup_vm proxmox_backup_vm Write proxmox_clone_vm proxmox_clone_vm Write proxmox_cloudinit_set proxmox_cloudinit_set Write proxmox_configure_cloudinit_advanced Configure advanced CloudInit settings for VM. Write proxmox_configure_firewall Configure VM-level firewall rules Write proxmox_configure_lxc proxmox_configure_lxc Write proxmox_configure_vm proxmox_configure_vm Write proxmox_create_ignition_config Create and validate Ignition configuration for RHCOS. Write proxmox_create_lxc proxmox_create_lxc Write proxmox_create_pool proxmox_create_pool Write proxmox_create_preset_vm Create VM with preset configurations (web-server, docker-host, development). Write proxmox_create_rhcos_vm Create RHCOS VM with Ignition configuration. Write proxmox_create_snapshot proxmox_create_snapshot Write proxmox_create_vlan Create and configure VLANs for network segmentation Write proxmox_create_vm proxmox_create_vm Write proxmox_create_vm_cloudinit Create VM with advanced CloudInit configuration. Write proxmox_create_windows_preset Create Windows VM with preset configurations (web-server, domain-controller). Write proxmox_create_windows_vm Create Windows Server VM with automated installation and configuration. Write proxmox_docker_network_create Create Docker network in Swarm cluster. Write proxmox_download_os_template Download OS template from official sources. Write proxmox_lxc_notes_update Update LXC description/notes with validation and backup Write proxmox_manage_certificates Manage SSL certificates for Proxmox and VMs Write proxmox_notes_template Generate notes template with optional variable substitution Write proxmox_pool_add proxmox_pool_add Write proxmox_register_vm_as_host proxmox_register_vm_as_host Write proxmox_resize_vm_disk proxmox_resize_vm_disk Write proxmox_restore_vm proxmox_restore_vm Write proxmox_secret_store Secure secret storage for VM credentials and API keys Write proxmox_setup_mfa Setup multi-factor authentication for Proxmox users Write proxmox_setup_replication Setup storage replication between nodes Write proxmox_setup_webhooks Setup webhooks for event-driven automation Write proxmox_template_vm proxmox_template_vm Write proxmox_upload_iso proxmox_upload_iso Write proxmox_upload_template proxmox_upload_template Write proxmox_vm_firewall_set proxmox_vm_firewall_set Write proxmox_vm_nic_add proxmox_vm_nic_add Write proxmox_vm_notes_update Update VM description/notes with validation and backup
READ 39 tools
Read get_cluster_info Get information about a cluster. Read list_clusters List all configured Proxmox clusters. Read proxmox_docker_service_logs Get Docker Swarm service logs. Read proxmox_docker_swarm_status Get Docker Swarm cluster status and information. Read proxmox_get_all_cluster_status proxmox_get_all_cluster_status Read proxmox_list_all_clusters List all configured Proxmox clusters. Read proxmox_list_all_nodes_from_all_clusters List ALL nodes from ALL configured clusters. Read proxmox_list_all_vms_from_all_clusters List ALL VMs from ALL configured clusters. Read proxmox_list_bridges proxmox_list_bridges Read proxmox_list_lxc proxmox_list_lxc Read proxmox_list_nodes proxmox_list_nodes Read proxmox_list_os_templates List available OS templates and their configurations. Read proxmox_list_pools proxmox_list_pools Read proxmox_list_rhcos_streams List available RHCOS release streams and versions. Read proxmox_list_roles proxmox_list_roles Read proxmox_list_snapshots proxmox_list_snapshots Read proxmox_list_storage proxmox_list_storage Read proxmox_list_tasks proxmox_list_tasks Read proxmox_list_users proxmox_list_users Read proxmox_list_vms proxmox_list_vms Read proxmox_list_windows_versions List available Windows Server versions and configurations. Read proxmox_lxc_info proxmox_lxc_info Read proxmox_lxc_notes_read Read LXC description/notes with format detection and secret reference parsing Read proxmox_node_metrics proxmox_node_metrics Read proxmox_node_status proxmox_node_status Read proxmox_openshift_cluster_status Get OpenShift cluster status and health information. Read proxmox_performance_analysis Analyze VM and host performance with optimization suggestions Read proxmox_storage_content proxmox_storage_content Read proxmox_task_status proxmox_task_status Read proxmox_vm_firewall_get proxmox_vm_firewall_get Read proxmox_vm_info proxmox_vm_info Read proxmox_vm_metrics proxmox_vm_metrics Read proxmox_vm_notes_read Read VM description/notes with format detection and secret reference parsing Read proxmox_windows_vm_info Get detailed Windows VM information including RDP access. Read proxmox-download-rhcos proxmox-download-rhcos Read proxmox-get-cluster-info proxmox-get-cluster-info Read proxmox-list-clusters proxmox-list-clusters Read proxmox-validate-clusters proxmox-validate-clusters Read validate_clusters Validate connectivity to all clusters.

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Questions about MCP Proxmox Server

Can an AI agent delete data through the MCP Proxmox Server MCP server? +

Yes. The MCP Proxmox Server server exposes 11 destructive tools including proxmox_delete_lxc, proxmox_delete_pool, proxmox_delete_snapshot. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through MCP Proxmox Server? +

The MCP Proxmox Server server has 38 write tools including proxmox_assign_permission, proxmox_backup_vm, proxmox_clone_vm. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach MCP Proxmox Server.

How many tools does the MCP Proxmox Server MCP server expose? +

242 tools across 4 categories: Destructive, Execute, Read, Write. 39 are read-only. 203 can modify, create, or delete data.

How do I enforce a policy on MCP Proxmox Server? +

Register the MCP Proxmox Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every MCP Proxmox Server tool call.

Deterministic rules across all 242 MCP Proxmox Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

Instant setup, no code required.

242 MCP Proxmox Server tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from MCP Proxmox Server's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.