Proximo — the Proxmox MCP you can hand the keys MCP server

by john-broadway·io.github.john-broadway/proximo-proxmox·v0.42.0

No reviews yet

The Proxmox MCP you can hand the keys: VE/PBS/PMG/PDM. Plan, prove, undo, diagnose. MCP/A2A/API.

A89/100grade A

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

A89/100

full report

Adoption

Established

47 stars700 downloads/wk

Reviews

Write one

Nobody has reviewed Proximo — the Proxmox MCP you can hand the keys yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Proximo — the Proxmox MCP you can hand the keys tools (9)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

_default_mcp
The stdio server's own FastMCP, resolved lazily — see the module docstring.
_snapshot_full_catalog
audit_entries
READ-ONLY: WHO changed WHAT and WHEN — guest configuration changes and every other audited action, read back from the PROVE ledger.
audit_verify
Verify the tamper-evident audit ledger's hash chain — PROVE the log is intact.
fence
Sandwich wrapper. `value` is serialized to a single JSON STRING (json.dumps with default=str) and placed in "data" — inner content can never shape-shift into sibling keys of the returned dict, however it's structured. Advisory only (see module HONEST LIMITS).
proximo_call
Call any Proximo tool by exact name, including ones not in this server's listed tools.
proximo_find_tools
proximo_read
READ-ONLY: run a read-only Proximo tool by exact name; refuses anything that can mutate (use proximo_call for those). Same flow: get the shape from proximo_tool_schema first.
proximo_tool_schema
Full description + JSON input schema for one tool found via proximo_find_tools.

Public scan report

scanner v0.1.8 · 2026-09-19 · same rubric, same numbers if you re-run it

no findings

Code scan145 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 1 days ago15/15
Maintainer identityregistry namespace matches repository owner6/10

Overall 89/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

What the publisher says

From the Proximo — the Proxmox MCP you can hand the keys repository's README, as published. We do not edit it. Read it on GitHub

Enter the ludus ↗ · Quickstart · Setup · Trust layer · Demo · Tools · Install · Security · Docs

Named for Proximo, the lanista of Gladiator. The story is the design, joint for joint.

He armed his fighter with exactly what he needed, never more. He answered for every move in the arena. A lanista, not a jailer. The Spaniard earns his name by conduct, on the record, and the helmet comes off: truth said plainly, at cost. His last act opened the cages, holding the wooden sword of his own freedom. A tool should hope to end that well.

"Win the crowd and you will win your freedom."

The others make you pick: a read-only toy, or full keys and pray. Proximo won't. Every dangerous move is planned: see the blast radius first. Every move is proven: a tamper-evident record. And undoable wherever the platform gives us a primitive: a config change hands back the exact prior state, and a risky in-container command can take a snapshot first, and refuses to run if it can't.

Trust built into the substrate, not bolted on after. Hand an AI agent the keys; keep the receipts.

Sovereign and agent-agnostic. Your metal, your token, a ledger you own. No cloud, no phone-home, no standing server unless you opt in.

What it does

Ask, in plain English: "why is ct 105 thrashing?" An AI agent pulls node and guest status, tails the logs, and runs a diagnostic inside the container to find out.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Grade history

2026-09-19restoreB → Ascore 89

Install directly

claude mcp add proximo-proxmox -- uvx proximo-proxmox

Add to Cursor

Proximo — the Proxmox MCP you can hand the keys: common questions

Is Proximo — the Proxmox MCP you can hand the keys MCP server safe?: Yes, by our scan: it is graded A (89/100). Read the Proximo — the Proxmox MCP you can hand the keys safety report
How do I install Proximo — the Proxmox MCP you can hand the keys?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Proximo — the Proxmox MCP you can hand the keys need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Proximo — the Proxmox MCP you can hand the keys maintained?: The last commit was 2 days ago (2026-09-19). The latest release is v0.42.0.