Proxmox MCP
Read-only Proxmox VE and Backup Server: which client guests have a verified, recent restore point.
The current version, v0.1.2, was published to the official MCP registry on 2026-10-23. It is distributed through a declared package, filed under Other by this index, and declares 13 environment variables. Removals and unreachable sources are measured across every server this index tracks, contract drift across the servers that answer in consecutive snapshots; the index's current counts put this record in context.
Using Proxmox MCP in Claude, Cursor, Gemini CLI, Cline, or Zed?
MCP tool contracts can change remotely with no version bump. The mcpindex gate pins each contract and HOLDs the call when it drifts-before your agent acts. Zero credentials. This is not the package install for this server itself (use Install this server for that).
Rewrites your MCP host config so each server launches behind the gate. Inspect first: curl -fsSL https://mcpindex.ai/install.sh | less
uv tool install mcpindex-gate && mcpindex-config-wireSemantic screen found no manipulation pattern in the description. Conformance probe not yet run.
mcpindex.integrity.descriptionpassINFOevidence“Tool lists guests with recent verified restore points.”via static_description
- - Semantic screen only - the deterministic conformance probe has not run on this server
- - Confidence is reported but not yet calibrated (v1)
- - Screen reads the tool description, not the live behavior
- - advisory
- - registry description only no input schema
- - screen model 8b
- - The registry listing (version, packages, links) changed after this screen ran - the description we assessed did not
Semantic screen: an LLM judge reads the tool description for hidden instructions (status PARTIAL). A pass means the description is not lying, not that the tool is safe: a high-capability tool with an honest description still warrants caution. The deterministic conformance probe has not been run on this server yet, so the screen here is semantic-only. Posture: advisory. Confidences are reported but not yet calibrated (calibrated=false at v1). Full verdict history is not shown on this page.
Own this server? Test a description on the public screen → It is a separate check from the verdict above, so the two can differ.
That verdict was true at screening time (snapshot 2026-10-23).
Contracts can change after screening, with no version bump. The gate pins Proxmox MCP’s tool contracts on first sight and holds any silent change before your agent acts - the check that keeps being true on Tuesday.
See your first HOLD in 2 minutes →
Related: how to trust an MCP server · screen before install · silent contract drift
People vet a server before wiring it in. One line on your project site or docs answers that with an independent record: screening verdict, registry provenance, contract drift history. It stays current as new screens and drift events land.
[Independent trust record for Proxmox MCP](https://mcpindex.ai/server/io-github-servosity-proxmox-mcp) - screening verdict, registry provenance, and contract drift monitoring.<a href="https://mcpindex.ai/server/io-github-servosity-proxmox-mcp">Independent trust record for Proxmox MCP</a> - screening verdict, registry provenance, and contract drift monitoring.A live verdict badge for your README or listing. It reflects the current screen, links back here, and updates when the verdict does.
[](https://mcpindex.ai/server/io-github-servosity-proxmox-mcp)<a href="https://mcpindex.ai/server/io-github-servosity-proxmox-mcp"><img src="https://mcpindex.ai/api/v1/badge/io-github-servosity-proxmox-mcp" alt="mcpindex verdict" height="20" /></a>PROXMOX_HOSTProxmox VE host name or IP (API on port 8006).
PROXMOX_API_TOKENProxmox VE API token USER@REALM!TOKENID=SECRET; PVEAuditor, plus Datastore.AllocateSpace and VM.Backup if backups live on PVE storage.
PROXMOX_TLS_FINGERPRINTSHA-256 fingerprint of the PVE certificate to pin (stock Proxmox certificates are self-signed).
PROXMOX_PBS_HOSTOptional Proxmox Backup Server host, host:port, or https://host:port (default port 8007).
PROXMOX_PBS_API_TOKENOptional Proxmox Backup Server API token USER@REALM!TOKENID:SECRET (colon before the secret).
PROXMOX_PBS_TLS_FINGERPRINTOptional SHA-256 fingerprint of the PBS certificate to pin.
PROXMOX_BASE_URLFull PVE API base such as https://pve1:8006/api2/json; overrides PROXMOX_HOST. Leave blank to use PROXMOX_HOST.
PROXMOX_CLUSTERName of the clusters.toml entry to use by default (same as --cluster). Leave blank to run across every configured cluster.
PROXMOX_CLUSTERS_FILEPath to the clusters.toml that lists client clusters. Leave blank for the default. Each cluster's token variables must also be in the server's environment.
PROXMOX_USER_AGENTOverrides the User-Agent the CLI sends on Proxmox requests. Leave blank to use the CLI's own.
PROXMOX_MCP_READ_ONLYSet to 1 to drop the sync, export, workflow archive and learnings forget/reject MCP tools. The learning-store tools (teach, playbook) still write locally. Proxmox itself is never written either way. Leave blank for the full tool set.
PROXMOX_MCP_HTTP_TOKENRequired only when running the MCP server with --transport http (a remote or hosted deployment); the server refuses to start without it. Callers must send a matching Authorization: Bearer header. Not needed for the default local stdio transport that Claude Desktop uses.
PRINTING_PRESS_CLIENT_PROFILELeave blank. This connector registers no tenant-gated profile source, so the value is read but changes nothing; select client clusters with PROXMOX_CLUSTER or clusters.toml instead.
Read-only research on tokens, Hyperliquid perps, Polymarket markets and your Ask Gina account.
Trade Hyperliquid perpetual futures from your Ask Gina wallet. Moves real funds.
Find, build and reprice QuoteWerks Web quotes with previews, plus margin and win-rate reports.