Critical-risk tools in Proxmox MCP Server

Critical severity Proxmox MCP Server MCP Server 28 of 286 tools

28 of the 286 tools in Proxmox MCP Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

convert_container_to_template Destructive

Convert a container into a template (irreversible).
convert_vm_to_template Destructive

Convert a VM into a template (irreversible).
delete_backup_job Destructive

Delete a scheduled backup job.
delete_cluster_firewall_rule Destructive

Delete a cluster-level firewall rule.
delete_container Destructive

delete_container
delete_container_snapshot Destructive

Delete a container snapshot.
delete_firewall_alias Destructive

Delete a firewall alias.
delete_firewall_ipset_entry Destructive

Remove an IP/CIDR from an IP set.
delete_group Destructive

Delete a group.
delete_ha_group Destructive

Delete an HA group.
delete_ha_resource Destructive

Remove a resource from HA management.
delete_pool Destructive

Delete a resource pool.
delete_replication_job Destructive

Delete a replication job.
delete_role Destructive

Delete a role.
delete_sdn_vnet Destructive

Delete an SDN VNet.
delete_sdn_zone Destructive

Delete an SDN zone.
delete_storage Destructive

Delete a storage pool configuration (does not delete data on the backend).
delete_storage_volume Destructive

Delete a volume from storage.
delete_user Destructive

Delete a user.
delete_user_token Destructive

Delete an API token.
delete_vm Destructive

Delete a VM. The VM must be stopped first.
delete_vm_snapshot Destructive

Delete a VM snapshot.
initialize_gpt Destructive

Initialize a disk with GPT partition table (WARNING: destroys all data).
prune_storage_backups Destructive

prune_storage_backups
rollback_container_snapshot Destructive

Rollback a container to a previous snapshot.
rollback_vm_snapshot Destructive

Rollback a VM to a previous snapshot (current state will be lost).
shutdown_vm Destructive

shutdown_vm
stopall_node Destructive

Stop all VMs and containers on a node.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Proxmox MCP Server

Tools at critical risk

Attacks that target this class

More on Proxmox MCP Server

Enforce policy on every Proxmox MCP Server tool call.