← Back to search

io.github.antonio-mello-ai/mcp-proxmox

antonio-mello-ai Scanned 21d ago

Manage Proxmox VE clusters through AI assistants — VMs, containers, and more

C
62.4 / 100

Versions

1.2.1latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 34

list_nodes
annotations: none low

List all nodes in the Proxmox cluster with status, CPU, memory, and uptime.

get_node_status
annotations: none low

Get detailed status for a specific node including CPU model, memory, disk, and versions. Args: node: Name of the Proxmox node (e.g. 'pve', 'node1').

node str
list_vms
annotations: none low

List all QEMU virtual machines across the cluster. Args: node: Optional. Filter by node name. status: Optional. Filter by status ('running', 'stopped').

node string status string
list_containers
annotations: none low

List all LXC containers across the cluster. Args: node: Optional. Filter by node name. status: Optional. Filter by status ('running', 'stopped').

node string status string
get_guest_status
annotations: none low

Get detailed status of a VM or container by VMID. Auto-detects type and node. Args: vmid: The numeric ID of the VM or container (e.g. 100, 200).

vmid int
start_guest
annotations: none low

Start a stopped VM or container. Args: vmid: The numeric ID of the VM or container to start.

vmid int
stop_guest
annotations: none low

Force-stop a running VM or container. WARNING: May cause data loss. Args: vmid: The numeric ID of the VM or container to stop. confirm: Must be true to execute. First call without confirm shows a warning.

vmid int confirm bool
shutdown_guest
annotations: none low

Gracefully shut down a VM or container via ACPI signal (VMs) or init (containers). Args: vmid: The numeric ID of the VM or container to shut down.

vmid int
reboot_guest
annotations: none low

Reboot a running VM or container. Args: vmid: The numeric ID of the VM or container to reboot. confirm: Must be true to execute. First call without confirm shows a warning.

vmid int confirm bool
list_snapshots
annotations: none low

List all snapshots for a VM or container. Args: vmid: The numeric ID of the VM or container.

vmid int
create_snapshot
annotations: none low

Create a new snapshot for a VM or container. Args: vmid: The numeric ID of the VM or container. name: Snapshot name (alphanumeric, hyphens, underscores). description: Optional description for the snapshot.

name str vmid int description str
rollback_snapshot
annotations: none low

Rollback a VM or container to a previous snapshot. WARNING: All changes since the snapshot will be LOST. Args: vmid: The numeric ID of the VM or container. name: Name of the snapshot to rollback to. confirm: Must be true to execute. First call without confirm shows a warning.

name str vmid int confirm bool
delete_snapshot
annotations: none low

Delete a snapshot from a VM or container. Args: vmid: The numeric ID of the VM or container. name: Name of the snapshot to delete. confirm: Must be true to execute. First call without confirm shows a warning.

name str vmid int confirm bool
list_storages
annotations: none low

List storage pools across the cluster with capacity and usage info. Args: node: Optional. Filter by node name.

node string
list_storage_content
annotations: none low

List content of a storage pool (ISOs, templates, backups, disk images). Args: node: Name of the Proxmox node. storage_name: Name of the storage pool (e.g. 'local', 'local-lvm'). content_type: Optional. Filter by type: 'iso', 'vztmpl', 'backup', 'images', 'rootdir'.

node str content_type string storage_name str
create_vm
annotations: none low

Create a new QEMU virtual machine. The VM is created stopped by default. Use start_after_create=true to auto-start. Args: node: Target node name (e.g. 'pve'). name: VM name. cores: Number of CPU cores (default 1). memory: Memory in MB (default 2048). disk_size: Disk size with unit (default '32G'). Examples: '10G', '100G', '1T'. storage_pool: Storage for disk (default 'local-lvm'). iso: Optional ISO volume ID for installation (e.g. 'local:iso/ubuntu-24.04.iso'). os_type: OS type (default 'l26' for Linux). Options: l26, l24, win11, win10, other. net_bridge: Network bridge (default 'vmbr0'). start_after_create: Start VM after creation (default false). vmid: Optional specific VMID. Auto-assigned if not provided.

iso string name str node str vmid string cores int memory int os_type str disk_size str net_bridge str storage_pool str start_after_create bool
create_container
annotations: none low

Create a new LXC container from a template. Args: node: Target node name (e.g. 'pve'). name: Container hostname. template: Template volume ID (e.g. 'local:vztmpl/debian-12-standard_12.7-1_amd64.tar.zst'). Use list_storage_content with content_type='vztmpl' to find available templates. cores: Number of CPU cores (default 1). memory: Memory in MB (default 512). disk_size: Root disk size in GB (default 8). storage_pool: Storage for rootfs (default 'local-lvm'). net_bridge: Network bridge (default 'vmbr0'). password: Optional root password. ssh_public_keys: Optional SSH public keys for root access. start_after_create: Start container after creation (default false). vmid: Optional specific VMID. Auto-assigned if not provided.

name str node str vmid string cores int memory int password string template str disk_size int net_bridge str storage_pool str ssh_public_keys string start_after_create bool
clone_guest
annotations: none low

Clone an existing VM or container. Auto-detects type and node. Creates a full (independent) clone by default. Set full_clone=false for a linked clone. Args: vmid: Source VM/container VMID to clone. new_name: Optional name for the clone. target_node: Optional target node for the clone (for cross-node cloning). full_clone: Full clone (true, default) or linked clone (false). target_storage: Optional target storage for the clone's disks. new_vmid: Optional VMID for the clone. Auto-assigned if not provided.

vmid int new_name string new_vmid string full_clone bool target_node string target_storage string
delete_guest
annotations: none low

Permanently delete a VM or container. IRREVERSIBLE. The guest must be stopped before deletion. All disk images will be destroyed. Args: vmid: The numeric ID of the VM or container to delete. confirm: Must be true to execute. First call without confirm shows a warning.

vmid int confirm bool
list_backups
annotations: none low

List backup files across storages. Args: node: Optional. Filter by node name. storage_name: Optional. Filter by storage name. vmid: Optional. Filter by VMID to see backups of a specific guest.

node string vmid string storage_name string
create_backup
annotations: none low

Create a backup (vzdump) of a VM or container. Args: vmid: The numeric ID of the VM or container to back up. storage_name: Target storage for the backup (default 'local'). mode: Backup mode: 'snapshot' (no downtime, default), 'suspend', or 'stop'. compress: Compression: 'zstd' (default), 'lzo', 'gzip', or '0' (none). notes: Optional notes/description for the backup.

mode str vmid int notes str compress str storage_name str
restore_backup
annotations: none low

Restore a VM or container from a backup file. Args: volid: Volume ID of the backup (e.g. 'local:backup/vzdump-qemu-100-2024_03_04.vma.zst'). Use list_backups to find available backups. node: Target node for the restored guest. vmid: Optional VMID for the restored guest. Auto-assigned if not provided. storage_pool: Storage for restored disks (default 'local-lvm'). guest_type: Type of guest: 'vm' or 'container'. confirm: Must be true to execute. First call without confirm shows a warning.

node str vmid string volid str confirm bool guest_type str storage_pool str
exec_command
annotations: none low

Execute a command inside a QEMU VM via the guest agent. Requires qemu-guest-agent to be installed and running inside the VM. Not supported for LXC containers. Args: vmid: The numeric ID of the VM. command: The command to execute (e.g. 'hostname', 'df -h', 'systemctl status nginx'). timeout: Max seconds to wait for command completion (default 30, max 300).

vmid int command str timeout int
get_guest_metrics
annotations: none low

Get resource usage metrics (CPU, memory, network, disk I/O) for a VM or container. Args: vmid: The numeric ID of the VM or container. timeframe: Time range for metrics. Options: 'hour', 'day', 'week', 'month', 'year'.

vmid int timeframe str
list_tasks
annotations: none low

List recent tasks on a Proxmox node (backups, migrations, snapshots, etc.). Args: node: Name of the Proxmox node. limit: Maximum number of tasks to return (default 20, max 100). status: Optional. Filter by task status ('ok', 'error', 'running').

node str limit int status string
list_networks
annotations: none low

List network interfaces, bridges, and bonds on a Proxmox node. Args: node: Name of the Proxmox node (e.g. 'pve').

node str
resize_guest
annotations: none low

Resize CPU, memory, and/or disk of a VM or container. At least one of cores, memory, or disk_size must be provided. CPU and memory changes take effect on next reboot for running guests. Disk resize is immediate but IRREVERSIBLE (disks can only grow). Args: vmid: The numeric ID of the VM or container. cores: New number of CPU cores. memory: New memory size in MB. disk_size: Disk size change. Use '+10G' to add 10GB, or '50G' for absolute size. Supported units: K, M, G, T. disk: Disk name to resize (default 'scsi0' for VMs, auto-mapped to 'rootfs' for CTs). confirm: Must be true to execute. First call without confirm shows a warning.

disk str vmid int cores string memory string confirm bool disk_size string
list_firewall_rules
annotations: none low

List firewall rules. Can target a specific VM/CT, a node, or the cluster. Args: vmid: Optional. List rules for this VM/container. node: Optional. List rules for this node. Ignored if vmid is provided. If neither vmid nor node is provided, lists cluster-level rules.

node string vmid string
add_firewall_rule
annotations: none low

Add a firewall rule to a VM/CT, node, or cluster. Args: action: Rule action: 'ACCEPT', 'DROP', or 'REJECT'. type_: Rule direction: 'in' (incoming) or 'out' (outgoing). vmid: Optional. Add rule to this VM/container. node: Optional. Add rule to this node. Ignored if vmid is provided. proto: Optional. Protocol: 'tcp', 'udp', 'icmp', etc. dport: Optional. Destination port or range (e.g. '80', '8000-9000', '80,443'). sport: Optional. Source port or range. source: Optional. Source IP/CIDR (e.g. '192.168.1.0/24'). dest: Optional. Destination IP/CIDR. iface: Optional. Network interface (e.g. 'net0'). enable: Enable rule immediately (default true). comment: Optional description for the rule. pos: Optional position in the rule chain (0 = first). If neither vmid nor node is provided, adds a cluster-level rule.

pos string dest string node string vmid string dport string iface string proto string sport string type_ str action str enable bool source string comment str
delete_firewall_rule
annotations: none low

Delete a firewall rule by its position number. Use list_firewall_rules first to see rule positions. Args: pos: Position of the rule to delete (from list_firewall_rules output). vmid: Optional. Delete from this VM/container's rules. node: Optional. Delete from this node's rules. Ignored if vmid is provided. confirm: Must be true to execute. First call without confirm shows a warning. If neither vmid nor node is provided, deletes from cluster-level rules.

pos int node string vmid string confirm bool
migrate_guest
annotations: none low

Live migrate a VM or container to another node in the cluster. Args: vmid: The numeric ID of the VM or container to migrate. target_node: Name of the destination node (e.g. 'pve2'). online: Live migration (true, default) or offline (false). Online keeps the guest running. confirm: Must be true to execute. First call without confirm shows a warning.

vmid int online bool confirm bool target_node str
list_templates
annotations: none low

List all VM templates available in the cluster for cloning.

create_template
annotations: none low

Convert a stopped VM into a template. IRREVERSIBLE. Once converted, the VM can no longer be started — it can only be cloned. Args: vmid: The numeric ID of the VM to convert. confirm: Must be true to execute. First call without confirm shows a warning.

vmid int confirm bool
configure_cloud_init
annotations: none low

Configure cloud-init settings on a VM for automated provisioning. At least one parameter must be provided. Changes take effect on next boot. Args: vmid: The numeric ID of the VM. user: Default user name for cloud-init. password: Password for the default user. ssh_keys: SSH public keys (URL-encoded, newline-separated for multiple keys). ip_config: IP configuration string (e.g. 'ip=dhcp' or 'ip=10.0.0.5/24,gw=10.0.0.1'). nameserver: DNS server IP(s), space-separated. searchdomain: DNS search domain(s), space-separated.

user string vmid int password string ssh_keys string ip_config string nameserver string searchdomain string

Permissions 2

filesystem low
Server uses filesystem capabilities via: os
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 104

low
Tool 'rollback_snapshot' has no annotations annotation_checker · 100%
low
Tool 'list_nodes' has no annotations annotation_checker · 100%
low
Tool 'get_node_status' has no annotations annotation_checker · 100%
low
Tool 'list_vms' has no annotations annotation_checker · 100%
low
Tool 'list_containers' has no annotations annotation_checker · 100%
low
Tool 'get_guest_status' has no annotations annotation_checker · 100%
low
Tool 'start_guest' has no annotations annotation_checker · 100%
low
Tool 'stop_guest' has no annotations annotation_checker · 100%
low
Tool 'shutdown_guest' has no annotations annotation_checker · 100%
low
Tool 'reboot_guest' has no annotations annotation_checker · 100%
low
Tool 'list_snapshots' has no annotations annotation_checker · 100%
low
Tool 'create_snapshot' has no annotations annotation_checker · 100%
low
Tool 'delete_snapshot' has no annotations annotation_checker · 100%
low
Tool 'list_storages' has no annotations annotation_checker · 100%
low
Tool 'list_storage_content' has no annotations annotation_checker · 100%
low
Tool 'create_vm' has no annotations annotation_checker · 100%
low
Tool 'create_container' has no annotations annotation_checker · 100%
low
Tool 'clone_guest' has no annotations annotation_checker · 100%
low
Tool 'delete_guest' has no annotations annotation_checker · 100%
low
Tool 'list_backups' has no annotations annotation_checker · 100%
low
Tool 'create_backup' has no annotations annotation_checker · 100%
low
Tool 'restore_backup' has no annotations annotation_checker · 100%
low
Tool 'exec_command' has no annotations annotation_checker · 100%
low
Tool 'get_guest_metrics' has no annotations annotation_checker · 100%
low
Tool 'list_tasks' has no annotations annotation_checker · 100%
low
Tool 'list_networks' has no annotations annotation_checker · 100%
low
Tool 'resize_guest' has no annotations annotation_checker · 100%
low
Tool 'list_firewall_rules' has no annotations annotation_checker · 100%
low
Tool 'add_firewall_rule' has no annotations annotation_checker · 100%
low
Tool 'delete_firewall_rule' has no annotations annotation_checker · 100%
low
Tool 'migrate_guest' has no annotations annotation_checker · 100%
low
Tool 'list_templates' has no annotations annotation_checker · 100%
low
Tool 'create_template' has no annotations annotation_checker · 100%
low
Tool 'configure_cloud_init' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: mcp@1.26.0,<2 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.26.0,<2 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.26.0,<2 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.26.0,<2 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.26.0,<2 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.26.0,<2 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.26.0,<2 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.26.0,<2 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.26.0,<2 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.26.0,<2 (PYSEC-2026-3483) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (GHSA-9hjg-9r4m-mvj7) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (GHSA-9wx4-h78v-vm56) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (GHSA-gc5v-m9x4-r6x2) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (PYSEC-2026-1872) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (PYSEC-2026-1873) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (PYSEC-2026-2275) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (PYSEC-2026-2270) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: list_nodes manifest_parser · 90%
info
Tool: get_node_status manifest_parser · 90%
info
Tool: list_vms manifest_parser · 90%
info
Tool: list_containers manifest_parser · 90%
info
Tool: get_guest_status manifest_parser · 90%
info
Tool: start_guest manifest_parser · 90%
info
Tool: stop_guest manifest_parser · 90%
info
Tool: shutdown_guest manifest_parser · 90%
info
Tool: reboot_guest manifest_parser · 90%
info
Tool: list_snapshots manifest_parser · 90%
info
Tool: create_snapshot manifest_parser · 90%
info
Tool: rollback_snapshot manifest_parser · 90%
info
Tool: delete_snapshot manifest_parser · 90%
info
Tool: list_storages manifest_parser · 90%
info
Tool: list_storage_content manifest_parser · 90%
info
Tool: create_vm manifest_parser · 90%
info
Tool: create_container manifest_parser · 90%
info
Tool: clone_guest manifest_parser · 90%
info
Tool: delete_guest manifest_parser · 90%
info
Tool: list_backups manifest_parser · 90%
info
Tool: create_backup manifest_parser · 90%
info
Tool: restore_backup manifest_parser · 90%
info
Tool: exec_command manifest_parser · 90%
info
Tool: get_guest_metrics manifest_parser · 90%
info
Tool: list_tasks manifest_parser · 90%
info
Tool: list_networks manifest_parser · 90%
info
Tool: resize_guest manifest_parser · 90%
info
Tool: list_firewall_rules manifest_parser · 90%
critical
Tool poisoning in 'reboot_guest': Cross-tool prerequisite: 'first call/use' poisoning · 85%
info
Tool: add_firewall_rule manifest_parser · 90%
info
Tool: delete_firewall_rule manifest_parser · 90%
info
Tool: migrate_guest manifest_parser · 90%
info
Tool: list_templates manifest_parser · 90%
info
Tool: create_template manifest_parser · 90%
info
Tool: configure_cloud_init manifest_parser · 90%
info
Required env vars (5) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: filesystem access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'stop_guest': Cross-tool prerequisite: 'first call/use' poisoning · 85%
critical
Tool poisoning in 'rollback_snapshot': Cross-tool prerequisite: 'first call/use' poisoning · 85%
critical
Tool poisoning in 'delete_snapshot': Cross-tool prerequisite: 'first call/use' poisoning · 85%
critical
Tool poisoning in 'delete_guest': Cross-tool prerequisite: 'first call/use' poisoning · 85%
critical
Tool poisoning in 'restore_backup': Cross-tool prerequisite: 'first call/use' poisoning · 85%
critical
Tool poisoning in 'resize_guest': Cross-tool prerequisite: 'first call/use' poisoning · 85%
critical
Tool poisoning in 'delete_firewall_rule': Cross-tool prerequisite: 'first call/use' poisoning · 85%
critical
Tool poisoning in 'migrate_guest': Cross-tool prerequisite: 'first call/use' poisoning · 85%
critical
Tool poisoning in 'create_template': Cross-tool prerequisite: 'first call/use' poisoning · 85%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%