High-risk tools in Proxmox MCP Server

High severity Proxmox MCP Server MCP Server 37 of 286 tools

37 of the 286 tools in Proxmox MCP Server are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

apply_sdn_changes Execute

Apply pending SDN configuration changes to all nodes.
bulk_migrate_guests Execute

Bulk migrate guests to a target node.
bulk_shutdown_guests Execute

Bulk shutdown guests across the cluster.
bulk_start_guests Execute

Bulk start guests across the cluster.
create_vzdump Execute

create_vzdump
get_vm_spiceproxy Execute

Create a SPICE proxy connection for a VM console.
get_vm_vncproxy Execute

Create a VNC proxy connection ticket for a VM (for console access).
join_cluster Execute

join_cluster
manage_node_service Execute

Start, stop, restart, or reload a system service on a node.
migrate_container Execute

migrate_container
migrate_ha_resource Execute

Request migration of an HA resource to a different node.
migrate_vm Execute

migrate_vm
order_node_certificate Execute

Order/renew ACME certificate for a node.
proxmox_api_raw Execute

Make an arbitrary Proxmox API call for any endpoint not covered by specific tools.
reboot_container Execute

Reboot a container.
reboot_vm Execute

Reboot a VM via ACPI.
relocate_ha_resource Execute

Request relocation of an HA resource to a different node.
reset_vm Execute

Hard reset a VM (like pressing the reset button).
resume_container Execute

Resume a suspended container.
resume_vm Execute

Resume a suspended/paused VM.
run_apt_update Execute

Refresh the package index on a node (apt update).
send_vm_key Execute

Send a key event to a VM (e.g. ctrl-alt-del).
send_vm_monitor_command Execute

Send a QEMU monitor command to a VM (advanced/low-level).
set_ceph_flags Execute

Set a Ceph global flag.
shutdown_container Execute

Gracefully shut down a container.
start_container Execute

Start a container.
start_vm Execute

Start a VM.
startall_node Execute

Start all VMs and containers on a node (respecting boot order).
stop_container Execute

Hard-stop a container (immediate, like power off).
stop_task Execute

Stop (abort) a running task.
stop_vm Execute

Hard-stop a VM (like pulling the power plug). Prefer shutdown_vm for graceful stop.
suspend_container Execute

Suspend (freeze) a container.
suspend_vm Execute

Suspend a VM (pause execution or hibernate to disk).
test_notification_target Execute

Send a test notification to a target.
vm_agent_exec Execute

Execute a command inside a VM via the QEMU Guest Agent.
vm_agent_set_password Execute

Set a user password inside a VM via the guest agent.
wakeonlan_node Execute

Send a Wake-on-LAN magic packet to a node.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Proxmox MCP Server

Tools at high risk

Attacks that target this class

More on Proxmox MCP Server

Enforce policy on every Proxmox MCP Server tool call.