Proxmox MCP server & Claude connector

Does Proxmox have an official MCP server or Claude connector?

Community only

As of October 2026, no official Proxmox MCP server from Proxmox Server Solutions is verified. Community servers such as ProxmoxMCP-Plus run locally with a Proxmox API token and can create, start and delete VMs and containers. Treat the token like a root-level credential and scope its role tightly.

Last checked October 18, 2026

Verdict and evidence

What we checked: ProxmoxMCP-Plus (RekklesNA)
Published by: RekklesNA (community)
Runs: Runs locally
Sign-in: API key or token
Stage: unknown
Plan: Needs a Proxmox VE host and API token.

Evidence

ProxmoxMCP-Plus README (github.com, seen October 18, 2026)

What an AI can do in Proxmox

Read

List nodesget_nodes
List VMsget_vms
Cluster statusget_cluster_status

Create

Create a VMcreate_vm

Delete

Delete a VMdelete_vm

Run

Start a VMstart_vm
Roll back a snapshotrollback_snapshot
Run a command inside a VMexecute_vm_command

From the publisher’s documentation for the version we checked. Not every tool is listed.

Setup

Claude (claude.ai / Desktop)

Add to claude_desktop_config.json (stdio via uvx). Use a least-privilege API token.

{
  "mcpServers": {
    "proxmox-mcp-plus": {
      "command": "uvx",
      "args": ["proxmox-mcp-plus"],
      "env": {
        "PROXMOX_HOST": "your-proxmox-host",
        "PROXMOX_USER": "root@pam",
        "PROXMOX_TOKEN_NAME": "mcp-token",
        "PROXMOX_TOKEN_VALUE": "your-token-secret",
        "PROXMOX_PORT": "8006",
        "PROXMOX_VERIFY_SSL": "true"
      }
    }
  }
}

Source

Safety check

Flag
Publisher verified
Individual GitHub account, not Proxmox Server Solutions.
Flag
Auth model
Uses a Proxmox API token (name and value) in client config or a local file; permissions depend on that token's role. Optional SSH for container commands.
Flag
Write and delete access
Exposes delete_vm, delete_container, delete_snapshot and guest command execution. Offers tool allow/deny lists, a command policy and optional approval tokens, but no single read-only switch was seen.
Pass
Tool-description injection scan
Grepped the README for AI-directed instructions; none found. Source tool descriptions not read.
Pass
Repo maintenance
Pushed 2026-10-18, 599 stars, MIT, not archived.

FAQ

Does Proxmox have an official MCP server?

No official Proxmox MCP server is verified as of October 2026. The proxmox GitHub org shows no MCP repository.

Which community server is most used?

ProxmoxMCP-Plus has about 600 stars and was pushed on 2026-10-18, per the GitHub API.

Is it safe to give an AI my Proxmox token?

Limit the API token's role and privileges, enable TLS verification, and consider the server's tool allowlist; it can delete VMs and run guest commands.

Is Proxmox a Claude connector?

Not verified; claude.com/connectors/proxmox returned 404.

Is there a read-only mode?

No single switch was seen; use a read-only Proxmox role for the token or a tool allowlist.

Last reviewed October 18, 2026.

Compare Proxmox

All cloud & devops

Something changed?

Vendors ship MCP updates often. If Proxmox launched, changed or retired a server, tell us and we will re-check it against primary sources. Submit a correction.

New official MCP servers, weekly

One short email when vendors ship, change or retire an official server or Claude connector. Checked against primary sources, like every verdict here.