High-risk tools in Proxmox

High severity Proxmox MCP Server 8 of 28 tools

8 of the 28 tools in Proxmox are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

pve_api_request Execute

Call any Proxmox API path. GET is allowed; POST/PUT/DELETE require confirm=true.
pve_migrate_vm Execute

Migrate a VM/container to another node. Requires confirm=true.
pve_reboot_vm Execute

Reboot a VM/container. Requires confirm=true.
pve_resume_vm Execute

Resume a VM/container. Requires confirm=true.
pve_shutdown_vm Execute

Gracefully shut down a VM/container. Requires confirm=true.
pve_start_vm Execute

Start a VM/container. Requires confirm=true.
pve_stop_vm Execute

Hard stop a VM/container. Requires confirm=true.
pve_suspend_vm Execute

Suspend a VM/container. Requires confirm=true.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Proxmox

Tools at high risk

Attacks that target this class

More on Proxmox

Enforce policy on every Proxmox tool call.