Proximo — the Proxmox MCP you can hand the keys

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/john-broadway-proximo-proxmox

About

Use cases: cloud-management, monitoring-observability

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools

5 read · 0 write · 1 delete

Secrets

None asked for

Install scripts

Not scanned yet

Runs as

Python package

Tools (6)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• audit_entries

  READ-ONLY: read the PROVE ledger back, newest first, bounded, rows with ids; says when it truncated.

• audit_verify

  READ-ONLY: walk the chain and report the first break; expected_head catches a cut tail; path=<archive> verifies a sealed archive beside the ledger.

• proximo_call

  MUTATION: run a governed POST/PUT/DELETE. Dry-run by default: without confirm=true it returns the plan (verdict, consent id, current, change) and mutates nothing. Refused unless the operator is armed AND the address carries an authored blast-radius tier. Every call, refused or executed, is receipted. A task-backed call is waited on (wait=N s, default 60, max 600; 0 submits only) and reports finished, failed or timed out under 'task'. method=undo with path=<undo.id> puts that receipt's capture back through the vendor's PUT, plan first; withheld or unpublished keys come back as skipped.

• proximo_find

  READ-ONLY: search every API address the planes publish, in plain words ('list datastores', 'guest status'). A verb picks the method; other words match the path, the vendor's description, parameter names. 5 by default. Returns access and the authored blast-radius tier.

• proximo_plan

  READ-ONLY: the governed verdict for one address and the vendor's published parameters. Mutates nothing. A mutation's plan also reads the target (one governed read, receipted): current, change (from/to per argument), noop. Run before proximo_call. path may be words: one match is planned, several come back to pick from.

• proximo_read

  READ-ONLY: run any GET the plane publishes, by path. Rows come back LEAN with a total (names, states, ids) unless fields='all' or fields='name,status'. Over the cap: counts per state and the odd rows; fields= gets rows. since='24h' (30m, 7d): what changed, from the door's own snapshots, no vendor call. Credentials come back withheld. wait=N on a .../tasks/{upid}/status address waits up to N s (max 600) for the task's end. diagnose=true on a node or guest path: its health reads and advisory flags, one call.

Signals

Stars

56

Forks

11

Open issues

2

Contributors

3

Weekly downloads

911

Last commit

Oct 22, 2026 (6 days ago)

Last release

Oct 22, 2026 (6 days ago)

Last package publish

Oct 22, 2026 (6 days ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name

io.github.john-broadway/proximo-proxmox

Version

0.46.2

Auth

No auth

Packages

pypi proximo-proxmox

License

Apache-2.0

Repository

github.com/john-broadway/proximo

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registrygithub-graphql