Enables execution of commands on a Proxmox host via SSH, allowing for the management and monitoring of virtual machines and containers while implementing security filters to prevent destructive system actions.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Proxmox SSH MCP Serverlist all virtual machines and their current status"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Proxmox SSH MCP Server
A Model Context Protocol (MCP) server that enables AI assistants to execute commands on a Proxmox host via SSH.
Features
SSH key-based authentication (no passwords in code)
Built-in security: dangerous commands are blocked
Single tool:
proxmox_run_host_command
Prerequisites
Node.js 18+
SSH key pair (
~/.ssh/id_ed25519)Public key added to Proxmox server's
~/.ssh/authorized_keys
Installation
Configuration
Set your Proxmox host via environment variables or edit index.js:
Option 1: Environment variables (recommended)
Option 2: Edit index.js directly
SSH Key Setup
The MCP server will automatically detect if SSH keys are missing or not configured and provide setup instructions. But here's the manual process:
Generate a key (if you don't have one):
ssh-keygen -t ed25519Copy public key to Proxmox:
Windows (PowerShell):
type $env:USERPROFILE\.ssh\id_ed25519.pub | ssh root@YOUR_PROXMOX_IP "mkdir -p ~/.ssh && chmod 700 ~/.ssh && cat >> ~/.ssh/authorized_keys && chmod 600 ~/.ssh/authorized_keys"Linux/Mac:
ssh-copy-id root@YOUR_PROXMOX_IPTest the connection:
ssh root@YOUR_PROXMOX_IP "echo 'SSH key auth works!'"
If you haven't set up SSH keys yet, the MCP server will return helpful instructions when you try to use it.
MCP Client Configuration
Add to your MCP client config (e.g., ~/.kiro/settings/mcp.json):
Usage
The server exposes one tool:
proxmox_run_host_command
Execute a command on the Proxmox host.
Input:
command(string, required): The command to execute
Example:
Response:
Security
The following commands are blocked for safety:
VM/Container deletion (
qm destroy,pct destroy)File operations (
rm,rmdir,dd)System operations (
shutdown,reboot,halt)Package removal (
apt remove,apt purge)Service management (
systemctl stop)Storage deletion (
zfs destroy,lvremove)
Destructive actions must be performed manually via the Proxmox web interface.
License
MIT