What can you do with this server?

Proximo is a governed MCP server that lets an AI agent inspect, plan, and safely change Proxmox infrastructure (PVE, PBS, PMG, PDM) while producing a tamper-evident audit trail. * proximo_find — search every published API address in plain words ("list datastores"); a verb picks the method; returns access type and blast-radius tier. * proximo_plan — read-only verdict for one address: the exact change, live current state, and vendor parameters; mutates nothing. * proximo_read — run any GET on any plane: lean rows with totals, fields= selection, since= change detection, wait= on task status, and diagnose=true health/advisory battery for a node or guest. * proximo_call — governed POST/PUT/DELETE, dry-run by default; needs confirm=true, an armed operator, and an authored tier; waits on tasks and supports undo via a receipt's undo.id. * audit_entries — read the keyed hash-chained ledger back (filter by action/target, mutations only). * audit_verify — walk the chain, report the first break, catch truncation with expected_head, or verify a sealed archive. * Breadth — ~1,804 API addresses across four products plus opt-in, allowlisted LXC exec / node shell lanes the REST API can't reach. * Safety — read-only default, PLAN/PROVE/UNDO/DIAGNOSE pillars, plus opt-in CONSENT approval and a CONTAIN kill-switch; Proxmox RBAC token scope is the enforced floor.

Which integrations are available for this server?

Provides tools for managing Proxmox VE, Proxmox Backup Server, Proxmox Mail Gateway, and Proxmox Datacenter Manager, including guest lifecycle, storage, snapshots, container exec, and a trust layer for safe AI-driven infrastructure operations.

How do I use Proximo?

1. Click on "Deploy Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@Proximo list all VMs on node pve1" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

Proximo

by john-broadway

Overview Schema Source Related Servers Discussions Admin

Python

Local

Named for Proximo, the lanista of Gladiator. The story is the design, joint for joint.

He armed his fighter with exactly what he needed, never more. He answered for every move in the arena. A lanista, not a jailer. The Spaniard earns his name by conduct, on the record, and the helmet comes off: truth said plainly, at cost. His last act opened the cages, holding the wooden sword of his own freedom. A tool should hope to end that well.

"Win the crowd and you will win your freedom."

The others make you pick: a read-only toy, or full keys and pray. Proximo won't. Every dangerous move is planned: the verdict, the live target and the change, before anything runs. Every move is proven: a tamper-evident record. And undoable wherever the platform gives us a primitive: a mutation captures the record it is about to change and puts it back through the vendor's own write; a risky in-container command can take a snapshot first, and refuses to run if it can't.

Trust built into the substrate, not bolted on after. Hand an AI agent the keys; keep the receipts.

Sovereign and agent-agnostic. Your metal, your token, a ledger you own. No cloud, no phone-home, no standing server unless you opt in.

What it does

Ask, in plain English: "why is ct 105 thrashing?" An AI agent pulls node and guest status, tails the logs, and (if you opened that lane) runs a diagnostic inside the container to find out.

If there's a fix, it shows you the plan before it touches anything: the verdict, the target as it stands, the exact change. Takes a snapshot first if you ask it to, and won't run if it can't. Applies. Hands you a keyed receipt of exactly what changed, with the before-state captured so it can be put back.

It does all of that with six tools, over every address the four Proxmox products publish. No wrappers, no catalog to page through, no tool per endpoint: find the address, plan it, read or call it, and prove the record. The whole surface fits a small local model's window.

That's the product: a hypervisor an AI can operate without being able to wreck it.

Read-only by default. No mutation runs on the first call: it returns its blast radius as a plan for you to see first. A tamper-evident receipt for every change.

The comparison isn't Proximo vs. the GUI. It's Proximo vs. handing an LLM your root token and hoping.

Don't take our word for any of it. Verify it yourself.

# 1. The tool count is real. Ask the door itself, cold (=> 6).
#    (in a clone of this repo, after `uv sync`)
uv run python -c "import asyncio; from proximo.core.doors.mcp import build_server; \
print(len(asyncio.run(build_server().list_tools())))"

# 2. The container image is what the repo built. Sigstore provenance (exit 0 = verified):
gh attestation verify oci://ghcr.io/john-broadway/proximo:latest --owner john-broadway

# 3. The security posture is graded by a third party, not by us:
#    https://scorecard.dev/viewer/?uri=github.com/john-broadway/proximo

The rest is in VERIFY.md: forge a ledger byte and watch verify() refuse, grep the outbound surface for phone-home (there is none). These checks work on any tool, from any vendor. Demand them everywhere.

Related MCP server: ProxmoxMCP-Plus

Quickstart

// your MCP client config (Claude Desktop / Claude Code / Cursor / …)
{
  "mcpServers": {
    "proximo": {
      "command": "uvx",
      "args": ["proximo-proxmox"],
      "timeout": 60,                                     // startup is ~3.5s; a 3s client default drops the server silently
      "env": {
        "PROXIMO_API_BASE_URL": "https://your-pve:8006/api2/json",
        "PROXIMO_TOKEN_PATH": "/path/to/token-file"   // USER@REALM!TOKENID=SECRET, by reference, never inlined
      }
    }
  }
}

Claude Code, one line:

claude mcp add proximo --env PROXIMO_API_BASE_URL=https://your-pve:8006/api2/json \
  --env PROXIMO_TOKEN_PATH=/path/to/token-file -- uvx proximo-proxmox

Or install with one click:

Install in VS Code Install in Cursor

Both prompt for the token file path; the secret never lands in client config. No token yet? uvx proximo-proxmox mint pve prints the least-privilege runbook.

Then preflight what your token can actually do (read-only):

uvx proximo-proxmox doctor

Start with a read-only token. Proximo is useful long before you grant it write. Full token-first walkthrough: docs/SETUP.md · more install paths: Install & run.

Why Proximo exists

The Proxmox MCP landscape is split. API-based servers manage nodes and VMs but structurally cannot run a command inside an LXC: the REST API has no exec endpoint. SSH-based servers can, through broad shell access with little scoping.

Proximo builds the principled whole. Both halves, one audited surface, least-privilege. Trust by construction:

	Read-only inspector	Full-access executor	Proximo
Can mutate	no, that's the safety	yes	yes, plan recorded first, then `confirm=true`
Preview before a change	n/a	rarely	default: blast radius + live state, every mutation
Record of what happened	no	app logs, editable	keyed hash-chained ledger, tamper-evident, on by default
Undo	n/a	rare	snapshot-first, wherever the platform can snapshot
Command inside an LXC	no	broad SSH	opt-in, fail-closed CTID allowlist
Products covered	usually PVE	usually PVE	PVE + PBS + PMG + PDM, one audited plane
Verify the artifact you run	varies	varies	signed image · PyPI provenance · SBOM · Scorecard

(The archetype columns describe the split above, not any specific project. There is no official Proxmox MCP; Proximo is a community project, standing on its own.)

The trust layer: what makes Proximo different

The spine has six pillars. Four stand by default:

Control	What it does
PLAN	Every mutation first returns a recorded preview: the exact change, live state, blast radius, an advisory risk rating. Nothing mutates without its plan recorded; one `confirm=true` call records and performs.
PROVE	Keyed (HMAC-SHA256), hash-chained audit ledger; `audit_verify` catches edits, reordering, insertion. Pin the head off-box (`expected_head`) to catch truncation too: that's the strong guarantee, and it's opt-in.
UNDO	One rule: every mutation with a GET twin captures the record before it runs, and the receipt carries an `undo.id`; the restore is the vendor's own write at the same path, with the captured record, as a governed mutation (planned, armed, receipted, itself undoable). A container command can take a snapshot first and then fail closed if it can't. Where the vendor publishes no write to put a record back (a delete, a collection, a path with no PUT) the answer is a sentence, never a guessed reverse call.
DIAGNOSE	Read-only evidence battery + node health → advisory flags that surface incompleteness too, so an empty list never reads as a false clean bill.

Two are yours to raise, by design, off until their state paths exist, because both are only worth having if those paths sit outside the agent's reach. A pillar Proximo raised for you would be a pillar the agent could lower for itself:

Pillar (off until configured)	What it holds
CONSENT	Independent, out-of-band approval per plan: an agent (compromised, confused, or steered by injected text) cannot confirm its own mutation. Grants live in a directory only you write (`PROXIMO_CONSENT_DIR`), expire on a TTL, and never clear a taint.
CONTAIN	The kill-switch: one trip file halts every mutation immediately, mid-incident, no redeploy and no restart. Checked fresh on every mutation; fails closed. Put the trip path where only you can write (`PROXIMO_CONTAIN_TRIP_PATH`).

proximo doctor reports the spine: which pillars stand, which sockets are empty, and exactly how to fill them. Four more controls ship off until configured: ARM (a mutation runs only while the served token is the write token), a FORBID/RATE ENVELOPE, TAINT (the prompt-injection mitigation), and PRINCIPAL (who-asked attribution). Scope and lease are not Proximo's any more: the write token's own ACL is the scope and its own expire is the lease, both enforced by Proxmox, and proximo mint prints the commands that make such a token. What each control defends against: SECURITY.md.

Honesty note (load-bearing): risk ratings are an advisory heuristic, not a sandbox — LOW means "no state change," not "safe," and the absence of a HIGH flag is not a safety signal. Review every change yourself. The floor beneath it all is the token you mint: Proxmox RBAC holds even if Proximo's process is fully compromised — a stronger guarantee than anything Proximo's own code provides. Scope it to exactly what you mean to grant: SECURITY.md.

Hold any tool to this, including this one: The Keys Test. Ten questions to ask before you hand an AI agent real infrastructure. Proximo's own scorecard published, partials included.

Demo

The record defends itself:

Surfaces & tools: one control plane

Surface	Backend	For
Proxmox VE	REST API + scoped token	node/guest lifecycle, storage, SDN, identity, HA, firewall
Proxmox Backup Server	REST API + scoped token	datastores, namespaces, snapshots, sync, GC, verify, tape
Proxmox Mail Gateway	Ticket auth	mail flow, quarantine, filtering rules, domains, services
Proxmox Datacenter Manager	API token	federated fleet: reads plus governed control (power/snapshot/migrate, dry-run-first)
Container and node shell	`ssh` → `pct exec`, a fixed host battery	run-command-in-container, `psql`, log tailing, a host health read: what the API structurally can't do. Opt-in lanes, each behind its own switch and allowlist, judged like any mutation

Those backends are deliberately boring. Anyone can call them. The product is the trust layer over them.

Six tools, every address. The vendor publishes the API; Proximo serves it whole and governs each address by what it is: 1,804 published addresses across the four products, 884 reads, 785 mutations open to an armed operator each with an authored blast-radius tier, 32 opened by an operator's switch (guest agent, container and node shell), 5 on the download lane, 20 held on purpose with a sentence, 78 excluded as not JSON calls. The record is generated from the vendor's own schema and a stale copy fails the suite: docs/arena.md.

Where an operator actually starts, in the six-tool grammar:

You want to…	Say	Worth knowing
Find the address	`proximo_find "list datastores"`	verbs pick the method; the vendor's own words match
See the whole cluster at once	`proximo_read pve /cluster/resources`	lean rows (names, states, ids) and a total; `fields=all` for the vendor's rows
Find out why a container is sick	`proximo_read pve /nodes/{node}/lxc/{vmid} diagnose=true`	the battery: status, storage, failed tasks, and the shell probes if that lane is open
Power / lifecycle, any mutation	`proximo_plan`, then `proximo_call … confirm=true`	the plan reads the target first; nothing moves without `confirm=true`, an arm and a tier
Put it back	`proximo_call pve undo <undo.id>`	the captured record, written back through the vendor's own PUT
Preflight a token / config	`proximo doctor`	run this before wiring an agent
Prove the record wasn't touched	`audit_verify`	on every door, always

The six tools with typed inputs: docs/TOOLS.md · the walkthrough: docs/SETUP.md.

Install & run

The core alone, no model in the loop: the same install ships proximo-core pve GET /nodes/pve1/status (or --plan on any address: the verdict and the published schema, touching nothing). Its import closure is httpx and nothing else (measured by a test); every published address on all four products; the same arm gate, tiers and audit ledger as the MCP door. The core has its own network doors, each the 0.44 face's perimeter with the core behind it: proximo-mcp-http (MCP over streamable HTTP), proximo-http (REST, POST /tools/{name} with an OpenAPI document) and proximo-a2a (an Agent2Agent card whose skills are the six tools).

📦 0.47.0: on PyPI, GitHub, and GHCR (signed multi-arch image).
New in 0.47.0 (self-owned grants refused; a stdlib ledger checker). A consent grant owned by the agent's own user is refused, so an agent running as its own account cannot approve itself; on a one-user box, PROXIMO_CONSENT_SAME_USER=advisory accepts such grants as a speed bump and marks every one advisory. A grant spends once by a marker, even where the directory will not let Proximo delete it. docs/ledger-format.md writes the ledger down, and scripts/verify_ledger.py checks a log, given its key, with the standard library alone; audit_verify no longer crashes on a planted row. VM snapshot, start and shutdown have their own tiers.
Recent: 0.46.2 derived six data-file columns the way the build does and removed two dead example keys. See SECURITY.md for what each control honestly holds.

Proximo runs on your machine, on demand. No daemon, no open port.

uvx proximo-proxmox            # zero-install run (PyPI package: proximo-proxmox; command stays `proximo`)
# or: pip install proximo-proxmox            the MCP core
# or: pip install "proximo-proxmox[a2a]"     + the optional A2A face
# or: pip install "proximo-proxmox[http]"    + the optional HTTP/OpenAPI face
# or: pip install "proximo-proxmox[mcp-http]" + the optional MCP-over-streamable-HTTP face
# or, from source:  git clone https://github.com/john-broadway/proximo.git && cd proximo && uv pip install -e .

Wire it into your MCP client as the command proximo, with the PROXIMO_* env vars; see packaging/proximo.env.example.

Docker (GHCR): docker run -i --rm … ghcr.io/john-broadway/proximo:latest. Multi-arch, SBOM, sigstore-signed provenance (gh attestation verify oci://ghcr.io/john-broadway/proximo --owner john-broadway). Mirrored to Docker Hub (docker.io/jebroadway/proximo, identical digest); GHCR stays the signed primary.

Safe by default: API-only out of the box. The two near-root edges are opt-in and say so loudly: LXC exec (PROXIMO_ENABLE_EXEC=1, near-root on the host) and the qemu-guest-agent edge (PROXIMO_ENABLE_AGENT=1, near-root in a guest). Each is scoped by its own fail-closed allowlist.
Smallest footprint by construction: the door advertises six schemas and nothing else. Measured on this release, tools/list over stdio is 5,544 bytes on the wire (about 1,400 tokens at the four-bytes-a-token heuristic; 1,568 as a stock 1.5B's chat template renders it, counted by its server), and that is the whole cost of connecting; the estate behind it is searched, not loaded. There is nothing to scope: a plane you have not configured is simply not reachable, a plane you have is reachable whole, and the gates do not shrink with the doorway. PLAN and PROVE apply to every address however small the model.

The network faces (experimental, opt-in): proximo-a2a speaks Agent2Agent. proximo-http serves plain HTTP + generated /openapi.json for no-code clients. proximo-mcp-http serves MCP itself over Streamable HTTP (the SDK's native transport) for networked MCP clients: no third-party stdio→HTTP bridge, so the perimeter stays Proximo's. LXC on your Proxmox host, one line: on the PVE node as root, bash -c "$(curl -fsSL https://raw.githubusercontent.com/john-broadway/proximo/main/packaging/lxc/ct/proximo.sh)" builds a Debian 13 container running proximo-mcp-http with Proximo from PyPI, its own service user, and a minted bearer on port 41243. Community-scripts engine (MIT) pointed at Proximo's own tree, their telemetry off; the same line inside the container updates it. Details: docs/SETUP.md, files: packaging/lxc/.

All three serve the full surface through the same spine as MCP. No second code path; trust spine and token scope inherited. Fail-closed perimeter: loopback, bearer-token required off-localhost, DNS-rebind and CSRF defended. Details: SECURITY.md.

At scale

One container is the demo. A cluster is the point.

The whole cluster in one call. proximo_read pve /cluster/resources: every VM, node, storage pool, SDN object, as lean rows with a total.
One tamper-evident record across every node. "Show me every state-changing action this month, and prove the log wasn't touched" becomes a query you can actually answer. No human at the CLI walks away with that.
Where the time comes back. On one node a senior at the CLI is faster, and that's fine. Across a dozen nodes and hundreds of guests, a bounded, audited agent earns its keep.

Many boxes, one Proximo: register remotes in a TOML file (secrets by reference, never inlined), point PROXIMO_TARGETS at it, aim a call with target="edge-pve" (the shell door: --target edge-pve). The target travels with the call. PLAN and EXECUTE hit the same box, the ledger records which, cross-plane calls error. Config shape: packaging/targets.example.toml.

Status: the arena record

🩸 0.47.0: Self-owned grants refused; a stdlib ledger checker. A grant the agent's own user owns is refused (opt-in PROXIMO_CONSENT_SAME_USER=advisory for one-user boxes, marked on every receipt); grants spend once by a marker, judged on one stat. The ledger format is written down, a stdlib checker agrees with the core on each planted break in its tests, and audit_verify reads rows as written. 1,858 tests. Every release before it (every pillar, every redteam, every fix) lives in CHANGELOG.md.

The numbers, honestly: six tools over 1,804 published addresses, governed by what each address is (its method decides read or write, total by construction; the blast-radius tier is the one human-authored column, and an untiered mutation is refused, armed or not). 1,858 in-process tests (ruff + pyright clean) pin the engine, the six pillars, the doors and the records, and a gate round neuters each pillar's gate one at a time and asks the suite to notice. This workspace administers its own Proxmox estate through Proximo daily (dogfood).

Proven live (not mocks): the governed path end to end against a real PVE 9 node through this door, plans reading the live target, receipts on the keyed chain, before-state captures and their restore. The 0.44 wrappers' live record (a 3-node cluster, PBS, PMG, PDM, a real cross-datacenter move) stays in CHANGELOG.md where it was earned; it is not re-claimed for the core. Not yet proven — said plainly: a small local model finishing a whole task through this door. Measured and driven on this release: a stock 1.5B behind llama.cpp with a 4,096-token context the server enforces, against a real PVE node, read-only. Its calls landed and the door's refusals named the fix each time (an invented field, the real ones listed); the prompt peaked at 3,074 tokens; the model did not finish the task, it invented a number. The window holds; a 1.5B does not. Hardware-watchdog fencing (needs physical iTCO/IPMI), and behavior at production scale. The 20 held addresses are never fired: refused by sentence, by design, not a gap.

Documentation

Document	What it answers
Setup	Token-first walkthrough: mint a least-privilege token, verify it, widen deliberately.
The Junction	Why Proximo exists: two roots on two planes, and the door that governs both lanes.
Verify	Every trust claim paired with the command that proves it. Run them cold.
Security	The two-deployment trust model, every control, what each honestly holds, reporting.
Threat model	What Proximo defends against, what it doesn't, where the boundaries sit.
Tools	The six tools, typed inputs: find, plan, read, call, and the two ledger reads.
Agents	The page written for the agent itself: Proximo's sharp edges, stated first.
Known issues	What's broken or odd right now, said plainly.
Contributing	Dev setup, the CI gates, what a PR is expected to keep intact.
Changelog	Every release, every redteam, every fix: the full build history.

License

Apache-2.0, chosen for the patent grant that suits infrastructure tooling. Full text in LICENSE.

Credits

Built by John Broadway with Claude and Maude: a human-AI partnership, and the first thing we made on this box to give away to the world. Claude Opus 4.8 built the trust pillars and the original tool surface and has carried the work since; Claude Fable 5 ran the 101-agent release audit and the first publish. Every commit carries its co-author trailer.

"Are you not entertained?" Stars, issues, and sparring partners welcome. Strength and honor. ⚔️

Available Tools

6 tools

audit_entriesB

Read-only

READ-ONLY: read the PROVE ledger back, newest first, bounded, rows with ids; says when it truncated.

Name	Required	Description	Default
`limit`	No
`action`	No
`target`	No
`mutations_only`	No

Output Schema

Name	Required	Description
No output parameters

TDQS

B3.1/5.0

Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, so the safety profile is covered. The description adds useful behavior beyond annotations: results are newest-first, bounded, include row ids, and the response indicates when truncation occurred.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single compact sentence with no wasted words. The READ-ONLY constraint and ordering behavior are front-loaded, though the telegraphic style is slightly terse.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return-shape explanation is not required. However, with four fully undocumented parameters and no filter semantics, the description is incomplete for correct invocation of action, target, and mutations_only.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must explain the four parameters. It hints at bounding via 'bounded' (likely the limit), but says nothing about action, target, or mutations_only filters, leaving most parameter meaning undocumented.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: 'read the PROVE ledger back'. It distinguishes itself from audit_verify by describing a ledger read rather than verification, though it does not explicitly name the sibling distinction.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description says the tool is READ-ONLY and reads the ledger, but gives no explicit guidance on when to use it versus audit_verify or proximo_read. There are no stated exclusions, prerequisites, or alternative-selection rules.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

audit_verifyA

Read-only

READ-ONLY: walk the chain and report the first break; expected_head catches a cut tail; path= verifies a sealed archive beside the ledger.

Name	Required	Description	Default
`path`	No
`expected_head`	No

Output Schema

Name	Required	Description
No output parameters

TDQS

A3.6/5.0

Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, so the leading 'READ-ONLY' earns nothing, but the description adds real behavior: it reports the *first* break (not all breaks) and detects a truncated tail via expected_head. It does not state whether a break is surfaced as an error or a result value, which is the main remaining gap.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with the read-only flag first and each clause earning its place. The compressed '=' shorthand and semicolon chaining make it slightly cryptic but nothing is padded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists so return values need not be described, and both optional parameters get a mention. Still, for a verification tool the definition leaves unclear what a successful verification looks like and whether a detected break raises an error, which an agent needs to call it confidently.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description carries the burden and does explain both parameters' intent (expected_head for tail-cut detection, path for a sealed archive beside the ledger). It is still telegraphic: no indication of whether path is a file or directory, nor what format expected_head takes as a hash.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a concrete operation: walk the chain and report the first break, i.e. verify ledger chain integrity. The verb+resource are specific and distinguishable from audit_entries (which presumably lists), though the description never names that sibling or defines what 'the chain' refers to.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The two parameter clauses imply usage scenarios ('expected_head catches a cut tail', 'path=<archive> verifies a sealed archive'), which is useful when-to-use guidance. However it never says when to skip verification, when to prefer audit_entries, or what the default no-parameter call covers.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

proximo_callA

MUTATION: run a governed POST/PUT/DELETE. Dry-run by default: without confirm=true it returns the plan (verdict, consent id, current, change) and mutates nothing. Refused unless the operator is armed AND the address carries an authored blast-radius tier. Every call, refused or executed, is receipted. A task-backed call is waited on (wait=N s, default 60, max 600; 0 submits only) and reports finished, failed or timed out under 'task'. method=undo with path=<undo.id> puts that receipt's capture back through the vendor's PUT, plan first; withheld or unpublished keys come back as skipped.

Name	Required	Description	Default
`args`	No
`path`	Yes
`wait`	No
`plane`	Yes
`method`	Yes
`confirm`	No

Output Schema

Name	Required	Description
No output parameters

TDQS

A4.7/5.0

Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only declare readOnlyHint=false; the description carries everything else an agent needs: mutation is gated by arming and blast-radius tier, every call is receipted, dry-run returns verdict/consent id/current/change, task polling bounds, and undo replays a receipt's capture with skipped keys withheld.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the mutation/dry-run fact, then the gating condition, then task and undo behavior — a sensible priority order. Some sentences are dense run-ons (the task-backed call clause) but nothing is filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 6-parameter governed mutation tool with an output schema and only a readOnlyHint annotation, the description covers safety gating, dry-run payload shape, asynchronous task results, and undo semantics. An agent can invoke it correctly without further reading.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so the description must compensate, and it does: confirm=true to execute, wait semantics (default 60, max 600, 0 submits only), method=undo with path=<undo.id>, and method/plane/path as a governed vendor call. Only 'args' and the plane enum values go unexplained.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Opens with 'MUTATION: run a governed POST/PUT/DELETE', naming the exact verb class and resource scope, which cleanly separates it from proximo_read, proximo_plan and proximo_find. The dry-run-by-default and undo modes are stated as part of the same core purpose.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives strong when/when-not conditions: dry-run unless confirm=true, refused unless the operator is armed and the address has an authored blast-radius tier, and wait=0 to submit without polling. It does not explicitly reference proximo_plan or proximo_read as the read-only/preview path, so the routing between siblings is left partly implicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

proximo_findA

Read-only

READ-ONLY: search every API address the planes publish, in plain words ('list datastores', 'guest status'). A verb picks the method; other words match the path, the vendor's description, parameter names. 5 by default. Returns access and the authored blast-radius tier.

Name	Required	Description	Default
`limit`	No
`plane`	No
`query`	Yes

Output Schema

Name	Required	Description
No output parameters

TDQS

A3.5/5.0

Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, and the description reinforces READ-ONLY while adding useful behavior: how query words are matched, that a verb selects the method, the default result count, and that results include access and blast-radius tier. It does not cover permissions, rate limits, or pagination beyond the default.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and front-loaded with READ-ONLY and the core search purpose. Every sentence contributes useful information without repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return-value detail is less necessary, and the description does summarize the result as access plus blast-radius tier. However, for a 3-parameter tool it omits the plane parameter entirely and gives no sibling-tool routing guidance, leaving clear gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so the description must compensate. It explains the query parameter's matching behavior and mentions the default of 5, but it never mentions the plane parameter or its pve/pbs/pmg/pdm enum options, leaving a required routing choice undocumented.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description gives a specific verb and resource: search every API address the planes publish. The plain-word examples clarify what is being searched, but sibling tools such as proximo_read and proximo_call are not named, so the boundary is implied rather than explicit.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It implies use for discovery by saying to search API addresses in plain words and giving example queries. However, it does not state when to use this versus proximo_read, proximo_call, or proximo_plan, nor does it give any when-not guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

proximo_planA

Read-only

READ-ONLY: the governed verdict for one address and the vendor's published parameters. Mutates nothing. A mutation's plan also reads the target (one governed read, receipted): current, change (from/to per argument), noop. Run before proximo_call. path may be words: one match is planned, several come back to pick from.

Name	Required	Description	Default
`args`	No
`path`	Yes
`plane`	Yes
`method`	Yes

Output Schema

Name	Required	Description
No output parameters

TDQS

A3.8/5.0

Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Consistent with readOnlyHint=true ('READ-ONLY', 'Mutates nothing') and adds real context beyond the annotation: a mutation's plan performs one governed, receipted read of the target, and the plan classifies state as current/change/noop. The receipted-read side effect is exactly the kind of disclosure annotations cannot carry; only the audit/receipt mechanism itself is left vague.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the READ-ONLY guarantee and mutation-free framing, then the ordering constraint. The telegraphic phrasing ('receipted', 'noop', 'current, change') is dense but no sentence is redundant; only the fragmented style slightly hurts readability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return shapes need not be described, and the safety/ordering story is complete. But for a four-parameter planning tool with zero schema description coverage, leaving 'plane' and 'method' unexplained means an agent cannot reliably construct a call from the description alone.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate: it does explain path (accepts words, may match one or several) and implies args behavior via 'change (from/to per argument)'. However, 'plane' (pve/pbs/pmg/pdm enum) and 'method' are never explained, leaving two of four parameters opaque.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific outcome: the governed verdict/plan for one address plus the vendor's published parameters, and explicitly says it is a read-only preview run before proximo_call. The verb 'plan' and the resource (an addressed API call, per plane/method/path) are identifiable even though the domain jargon ('governed verdict', 'plane') is never unpacked.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'Run before proximo_call' gives an explicit ordering relative to the main sibling, and 'path may be words: one match is planned, several come back to pick from' tells the agent when to expect a disambiguation response. No explicit when-not-use case is stated, but the sequencing guidance is unambiguous.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

proximo_readA

Read-only

READ-ONLY: run any GET the plane publishes, by path. Rows come back LEAN with a total (names, states, ids) unless fields='all' or fields='name,status'. Over the cap: counts per state and the odd rows; fields= gets rows. since='24h' (30m, 7d): what changed, from the door's own snapshots, no vendor call. Credentials come back withheld. wait=N on a .../tasks/{upid}/status address waits up to N s (max 600) for the task's end. diagnose=true on a node or guest path: its health reads and advisory flags, one call.

Name	Required	Description	Default
`path`	Yes
`wait`	No
`plane`	Yes
`since`	No
`fields`	No
`params`	No
`diagnose`	No

Output Schema

Name	Required	Description
No output parameters

TDQS

A4/5.0

Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnlyHint annotation, the description discloses important behavior: rows are lean by default, over-cap responses return counts and odd rows, credentials are withheld, since uses local snapshots without a vendor call, wait is capped at 600 seconds, and diagnose adds health reads. These details materially improve safe and correct invocation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded and dense with useful information, with little filler. Some clauses are cryptic and run together, such as 'the odd rows' and 'the door's own snapshots,' which slightly reduces clarity but not enough to undermine the compact structure.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool is complex: seven parameters, no schema descriptions, and multiple behavioral modes. The description covers many important behaviors and an output schema exists, but it omits meaningful explanation of the params object and plane/path semantics, so it is only partially complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate. It explains fields, since, wait, and diagnose well, but it does not explain the params object, the plane enum values, or the expected path format, leaving several parameters underspecified.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: 'run any GET the plane publishes, by path,' and the READ-ONLY prefix makes the operation type clear. It does not explicitly distinguish itself from siblings such as proximo_call or proximo_find, so it falls short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives clear usage context for key parameters: fields controls row detail, since selects changed records, wait applies to task status paths, and diagnose applies to node or guest paths. It does not state when to prefer this over sibling tools or when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

9 tool updatesv0.46.2Oct 24, 2026

Changedaudit_entries15 fields changed

addedInput schema / properties / action / anyOf

Added value: +[
+  {
+    "type": "string"
+  },
+  {
+    "type": "null"
+  }
+]

removedInput schema / properties / action / description

Removed value: -"Only this exact tool name, e.g. 'pve_guest_config_set'."

addedInput schema / properties / action / title
```
Added value: +"Action"
```
removedInput schema / properties / action / type
```
Removed value: -[
-  "string",
-  "null"
-]
```

removedInput schema / properties / limit / description

Removed value: -"Newest N entries to return (default 20)."

addedInput schema / properties / limit / title
```
Added value: +"Limit"
```
removedInput schema / properties / mutations_only / description
```
Removed value: -"Only entries that changed state."
```
addedInput schema / properties / mutations_only / title
```
Added value: +"Mutations Only"
```

removedInput schema / properties / principal

Removed value: -{
-  "default": null,
-  "description": "Only entries attributed to this caller id.",
-  "type": [
-    "string",
-    "null"
-  ]
-}

addedInput schema / properties / target / anyOf

Added value: +[
+  {
+    "type": "string"
+  },
+  {
+    "type": "null"
+  }
+]

removedInput schema / properties / target / description

Removed value: -"Only entries against this exact target, e.g. 'vmid=100'."

addedInput schema / properties / target / title
```
Added value: +"Target"
```
removedInput schema / properties / target / type
```
Removed value: -[
-  "string",
-  "null"
-]
```
addedInput schema / title
```
Added value: +"audit_entriesArguments"
```

changedOutput schema / (root)

Previous value: -nullNew value: +{
+  "additionalProperties": true,
+  "title": "audit_entriesDictOutput",
+  "type": "object"
+}

Changedaudit_verify7 fields changed

addedInput schema / properties / expected_head / anyOf

Added value: +[
+  {
+    "type": "string"
+  },
+  {
+    "type": "null"
+  }
+]

removedInput schema / properties / expected_head / description

Removed value: -"64-char hex head() value pinned off-box; verifying against it also catches tail truncation, a forged tail-append, or a full ledger replacement. Omit to fall back to PROXIMO_AUDIT_EXPECTED_HEAD."

addedInput schema / properties / expected_head / title
```
Added value: +"Expected Head"
```
removedInput schema / properties / expected_head / type
```
Removed value: -[
-  "string",
-  "null"
-]
```

addedInput schema / properties / path

Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "title": "Path"
+}

addedInput schema / title
```
Added value: +"audit_verifyArguments"
```

changedOutput schema / (root)

Previous value: -nullNew value: +{
+  "additionalProperties": true,
+  "title": "audit_verifyDictOutput",
+  "type": "object"
+}

Changedproximo_call11 fields changed

addedInput schema / properties / args

Added value: +{
+  "anyOf": [
+    {
+      "additionalProperties": true,
+      "type": "object"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "title": "Args"
+}

removedInput schema / properties / arguments

Removed value: -{
-  "anyOf": [
-    {
-      "additionalProperties": true,
-      "type": "object"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null,
-  "description": "The tool's arguments as an object, e.g. {'vmid': 100, 'action': 'reboot'}. Get the shape from proximo_tool_schema. Omit/null for a no-arg tool."
-}

addedInput schema / properties / confirm

Added value: +{
+  "default": false,
+  "title": "Confirm",
+  "type": "boolean"
+}

addedInput schema / properties / method

Added value: +{
+  "title": "Method",
+  "type": "string"
+}

addedInput schema / properties / path

Added value: +{
+  "title": "Path",
+  "type": "string"
+}

addedInput schema / properties / plane

Added value: +{
+  "enum": [
+    "pve",
+    "pbs",
+    "pmg",
+    "pdm"
+  ],
+  "title": "Plane",
+  "type": "string"
+}

removedInput schema / properties / tool

Removed value: -{
-  "description": "Exact tool name to run, e.g. 'pve_guest_power' (from proximo_find_tools). Non-resident names are fine.",
-  "type": "string"
-}

addedInput schema / properties / wait

Added value: +{
+  "anyOf": [
+    {
+      "type": "integer"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "title": "Wait"
+}

changedInput schema / required

Previous value: -[
-  "tool"
-]New value: +[
+  "plane",
+  "method",
+  "path"
+]

addedInput schema / title
```
Added value: +"_callArguments"
```

changedOutput schema / (root)

Previous value: -nullNew value: +{
+  "additionalProperties": true,
+  "title": "_callDictOutput",
+  "type": "object"
+}

Addedproximo_find
Removedproximo_find_tools
Addedproximo_plan

Changedproximo_read12 fields changed

removedInput schema / properties / arguments

Removed value: -{
-  "anyOf": [
-    {
-      "additionalProperties": true,
-      "type": "object"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null,
-  "title": "Arguments"
-}

addedInput schema / properties / diagnose

Added value: +{
+  "default": false,
+  "title": "Diagnose",
+  "type": "boolean"
+}

addedInput schema / properties / fields

Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "title": "Fields"
+}

addedInput schema / properties / params

Added value: +{
+  "anyOf": [
+    {
+      "additionalProperties": true,
+      "type": "object"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "title": "Params"
+}

addedInput schema / properties / path

Added value: +{
+  "title": "Path",
+  "type": "string"
+}

addedInput schema / properties / plane

Added value: +{
+  "enum": [
+    "pve",
+    "pbs",
+    "pmg",
+    "pdm"
+  ],
+  "title": "Plane",
+  "type": "string"
+}

addedInput schema / properties / since

Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "title": "Since"
+}

removedInput schema / properties / tool

Removed value: -{
-  "title": "Tool",
-  "type": "string"
-}

addedInput schema / properties / wait

Added value: +{
+  "anyOf": [
+    {
+      "type": "integer"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "title": "Wait"
+}

changedInput schema / required

Previous value: -[
-  "tool"
-]New value: +[
+  "plane",
+  "path"
+]

changedInput schema / title

Previous value: -"proximo_readArguments"New value: +"_readArguments"

changedOutput schema / (root)

Previous value: -nullNew value: +{
+  "additionalProperties": true,
+  "title": "_readDictOutput",
+  "type": "object"
+}

Removedproximo_recall
Removedproximo_tool_schema

1 tool updatev0.36.0Aug 23, 2026
- Addedproximo_read

2 tool updatesv0.32.0Aug 11, 2026

Changedproximo_call2 fields changed

addedInput schema / properties / arguments / description

Added value: +"The tool's arguments as an object, e.g. {'vmid': 100, 'action': 'reboot'}. Get the shape from proximo_tool_schema. Omit/null for a no-arg tool."

addedInput schema / properties / tool / description

Added value: +"Exact tool name to run, e.g. 'pve_guest_power' (from proximo_find_tools). Non-resident names are fine."

Changedproximo_find_tools3 fields changed

addedOutput schema / properties / result / anyOf

Added value: +[
+  {
+    "items": {
+      "additionalProperties": true,
+      "type": "object"
+    },
+    "type": "array"
+  },
+  {
+    "additionalProperties": true,
+    "type": "object"
+  }
+]

removedOutput schema / properties / result / items

Removed value: -{
-  "additionalProperties": true,
-  "type": "object"
-}

removedOutput schema / properties / result / type
```
Removed value: -"array"
```

720 tool updatesv0.31.1Aug 7, 2026
- Addedaudit_entries
- Changedaudit_verify4 fields changed
  - removedInput schema / properties / expected_head / anyOf
```
Removed value: -[
-  {
-    "type": "string"
-  },
-  {
-    "type": "null"
-  }
-]
```
  - removedInput schema / properties / expected_head / title
```
Removed value: -"Expected Head"
```
  - addedInput schema / properties / expected_head / type
```
Added value: +[
+  "string",
+  "null"
+]
```
  - removedInput schema / title
```
Removed value: -"audit_verifyArguments"
```
- Removedct_diagnose
- Removedct_exec
- Removedct_logs
- Removedct_psql
- Removedpbs_acl_get
- Removedpbs_acl_update
- Removedpbs_acme_account_create
- Removedpbs_acme_account_delete
- Removedpbs_acme_account_get
- Removedpbs_acme_account_list
- Removedpbs_acme_account_update
- Removedpbs_acme_cert_order
- Removedpbs_acme_cert_renew
- Removedpbs_acme_challenge_schema
- Removedpbs_acme_directories
- Removedpbs_acme_plugin_create
- Removedpbs_acme_plugin_delete
- Removedpbs_acme_plugin_get
- Removedpbs_acme_plugin_update
- Removedpbs_acme_plugins_list
- Removedpbs_acme_tos
- Removedpbs_admin_gc_jobs_list
- Removedpbs_admin_prune_jobs_list
- Removedpbs_admin_sync_jobs_list
- Removedpbs_admin_traffic_control_status
- Removedpbs_admin_verify_jobs_list
- Removedpbs_apt_changelog
- Removedpbs_apt_repositories_get
- Removedpbs_apt_repository_add
- Removedpbs_apt_repository_set
- Removedpbs_apt_update_refresh
- Removedpbs_apt_updates_list
- Removedpbs_apt_versions
- Removedpbs_datastore_active_operations
- Removedpbs_datastore_create
- Removedpbs_datastore_delete
- Removedpbs_datastore_get
- Removedpbs_datastore_mount
- Removedpbs_datastore_prune
- Removedpbs_datastore_rrd
- Removedpbs_datastore_s3_refresh
- Removedpbs_datastore_status
- Removedpbs_datastore_unmount
- Removedpbs_datastore_update
- Removedpbs_datastores_list
- Removedpbs_datastores_usage
- Removedpbs_encryption_key_create
- Removedpbs_encryption_key_delete
- Removedpbs_encryption_key_list
- Removedpbs_encryption_key_toggle_archive
- Removedpbs_gc_start
- Removedpbs_gc_status
- Removedpbs_group_change_owner
- Removedpbs_group_delete
- Removedpbs_group_move
- Removedpbs_group_notes_get
- Removedpbs_group_notes_set
- Removedpbs_groups_list
- Removedpbs_job_create
- Removedpbs_job_delete
- Removedpbs_job_run
- Removedpbs_job_update
- Removedpbs_jobs_list
- Removedpbs_metrics_influxdb_http_create
- Removedpbs_metrics_influxdb_http_delete
- Removedpbs_metrics_influxdb_http_get
- Removedpbs_metrics_influxdb_http_list
- Removedpbs_metrics_influxdb_http_update
- Removedpbs_metrics_influxdb_udp_create
- Removedpbs_metrics_influxdb_udp_delete
- Removedpbs_metrics_influxdb_udp_get
- Removedpbs_metrics_influxdb_udp_list
- Removedpbs_metrics_influxdb_udp_update
- Removedpbs_metrics_servers_list
- Removedpbs_metrics_status
- Removedpbs_namespace_create
- Removedpbs_namespace_delete
- Removedpbs_namespace_move
- Removedpbs_namespaces_list
- Removedpbs_node_cert_delete
- Removedpbs_node_cert_upload
- Removedpbs_node_certificates_list
- Removedpbs_node_config_get
- Removedpbs_node_config_set
- Removedpbs_node_disk_directory_create
- Removedpbs_node_disk_directory_delete
- Removedpbs_node_disk_directory_list
- Removedpbs_node_disk_initgpt
- Removedpbs_node_disk_smart
- Removedpbs_node_disk_wipe
- Removedpbs_node_disk_zfs_create
- Removedpbs_node_disk_zfs_get
- Removedpbs_node_disk_zfs_list
- Removedpbs_node_disks_list
- Removedpbs_node_dns_get
- Removedpbs_node_dns_set
- Removedpbs_node_identity
- Removedpbs_node_journal
- Removedpbs_node_network_iface_create
- Removedpbs_node_network_iface_delete
- Removedpbs_node_network_iface_get
- Removedpbs_node_network_iface_update
- Removedpbs_node_network_list
- Removedpbs_node_network_reload
- Removedpbs_node_network_revert
- Removedpbs_node_report
- Removedpbs_node_rrd
- Removedpbs_node_service_control
- Removedpbs_node_service_status
- Removedpbs_node_services_list
- Removedpbs_node_status
- Removedpbs_node_subscription_check
- Removedpbs_node_subscription_delete
- Removedpbs_node_subscription_get
- Removedpbs_node_subscription_set
- Removedpbs_node_syslog
- Removedpbs_node_task_log
- Removedpbs_node_task_status
- Removedpbs_node_task_stop
- Removedpbs_node_time_get
- Removedpbs_node_time_set
- Removedpbs_notification_endpoint_create
- Removedpbs_notification_endpoint_delete
- Removedpbs_notification_endpoint_get
- Removedpbs_notification_endpoint_list
- Removedpbs_notification_endpoint_update
- Removedpbs_notification_matcher_delete
- Removedpbs_notification_matcher_field_values
- Removedpbs_notification_matcher_fields
- Removedpbs_notification_matcher_get
- Removedpbs_notification_matcher_set
- Removedpbs_notification_matchers_list
- Removedpbs_notification_target_test
- Removedpbs_notification_targets_list
- Removedpbs_permissions_get
- Removedpbs_prune
- Removedpbs_pull
- Removedpbs_push
- Removedpbs_realm_ad_create
- Removedpbs_realm_ad_delete
- Removedpbs_realm_ad_get
- Removedpbs_realm_ad_list
- Removedpbs_realm_ad_update
- Removedpbs_realm_ldap_create
- Removedpbs_realm_ldap_delete
- Removedpbs_realm_ldap_get
- Removedpbs_realm_ldap_list
- Removedpbs_realm_ldap_update
- Removedpbs_realm_openid_create
- Removedpbs_realm_openid_delete
- Removedpbs_realm_openid_get
- Removedpbs_realm_openid_list
- Removedpbs_realm_openid_update
- Removedpbs_realm_pam_get
- Removedpbs_realm_pam_set
- Removedpbs_realm_pbs_get
- Removedpbs_realm_pbs_set
- Removedpbs_realm_sync
- Removedpbs_remote_create
- Removedpbs_remote_delete
- Removedpbs_remote_get
- Removedpbs_remote_scan
- Removedpbs_remote_scan_groups
- Removedpbs_remote_scan_namespaces
- Removedpbs_remote_update
- Removedpbs_remotes_list
- Removedpbs_roles_list
- Removedpbs_s3_check
- Removedpbs_s3_client_create
- Removedpbs_s3_client_delete
- Removedpbs_s3_client_get
- Removedpbs_s3_client_list
- Removedpbs_s3_client_update
- Removedpbs_s3_list_buckets
- Removedpbs_s3_reset_counters
- Removedpbs_snapshot_delete
- Removedpbs_snapshot_notes_set
- Removedpbs_snapshot_protected_get
- Removedpbs_snapshot_protected_set
- Removedpbs_snapshots_list
- Removedpbs_tape_backup
- Removedpbs_tape_backup_job_create
- Removedpbs_tape_backup_job_delete
- Removedpbs_tape_backup_job_get
- Removedpbs_tape_backup_job_list
- Removedpbs_tape_backup_job_run
- Removedpbs_tape_backup_job_update
- Removedpbs_tape_changer_create
- Removedpbs_tape_changer_delete
- Removedpbs_tape_changer_get
- Removedpbs_tape_changer_list
- Removedpbs_tape_changer_status
- Removedpbs_tape_changer_transfer
- Removedpbs_tape_changer_update
- Removedpbs_tape_drive_barcode_label_media
- Removedpbs_tape_drive_cartridge_memory
- Removedpbs_tape_drive_catalog
- Removedpbs_tape_drive_clean
- Removedpbs_tape_drive_create
- Removedpbs_tape_drive_delete
- Removedpbs_tape_drive_eject
- Removedpbs_tape_drive_format
- Removedpbs_tape_drive_get
- Removedpbs_tape_drive_inventory
- Removedpbs_tape_drive_inventory_update
- Removedpbs_tape_drive_label_media
- Removedpbs_tape_drive_list
- Removedpbs_tape_drive_load_media
- Removedpbs_tape_drive_load_slot
- Removedpbs_tape_drive_read_label
- Removedpbs_tape_drive_restore_key
- Removedpbs_tape_drive_rewind
- Removedpbs_tape_drive_status
- Removedpbs_tape_drive_unload
- Removedpbs_tape_drive_update
- Removedpbs_tape_drive_volume_statistics
- Removedpbs_tape_key_create
- Removedpbs_tape_key_delete
- Removedpbs_tape_key_get
- Removedpbs_tape_key_list
- Removedpbs_tape_key_update_password
- Removedpbs_tape_media_content
- Removedpbs_tape_media_destroy
- Removedpbs_tape_media_list
- Removedpbs_tape_media_move
- Removedpbs_tape_media_sets
- Removedpbs_tape_media_status_get
- Removedpbs_tape_media_status_set
- Removedpbs_tape_pool_create
- Removedpbs_tape_pool_delete
- Removedpbs_tape_pool_get
- Removedpbs_tape_pool_list
- Removedpbs_tape_pool_update
- Removedpbs_tape_restore
- Removedpbs_tape_scan_changers
- Removedpbs_tape_scan_drives
- Removedpbs_tasks_list
- Removedpbs_tfa_add
- Removedpbs_tfa_delete
- Removedpbs_tfa_entry_get
- Removedpbs_tfa_list
- Removedpbs_tfa_unlock
- Removedpbs_tfa_update
- Removedpbs_tfa_user_get
- Removedpbs_tfa_webauthn_get
- Removedpbs_tfa_webauthn_set
- Removedpbs_token_create
- Removedpbs_token_delete
- Removedpbs_token_update
- Removedpbs_traffic_control_delete
- Removedpbs_traffic_control_upsert
- Removedpbs_traffic_controls_list
- Removedpbs_user_create
- Removedpbs_user_delete
- Removedpbs_user_get
- Removedpbs_user_token_get
- Removedpbs_user_tokens_list
- Removedpbs_user_update
- Removedpbs_users_list
- Removedpbs_verify_start
- Removedpbs_version
- Removedpdm_acl_list
- Removedpdm_node_status
- Removedpdm_pbs_datastores_list
- Removedpdm_pbs_remote_status
- Removedpdm_pbs_snapshots_list
- Removedpdm_ping
- Removedpdm_pve_cluster_status
- Removedpdm_pve_lxc_config
- Removedpdm_pve_lxc_list
- Removedpdm_pve_lxc_migrate
- Removedpdm_pve_lxc_power
- Removedpdm_pve_lxc_remote_migrate
- Removedpdm_pve_lxc_snapshot_create
- Removedpdm_pve_lxc_snapshot_delete
- Removedpdm_pve_lxc_snapshot_rollback
- Removedpdm_pve_node_list
- Removedpdm_pve_qemu_config
- Removedpdm_pve_qemu_list
- Removedpdm_pve_qemu_migrate
- Removedpdm_pve_qemu_power
- Removedpdm_pve_qemu_remote_migrate
- Removedpdm_pve_qemu_snapshot_create
- Removedpdm_pve_qemu_snapshot_delete
- Removedpdm_pve_qemu_snapshot_rollback
- Removedpdm_pve_resources
- Removedpdm_remote_config_get
- Removedpdm_remote_version
- Removedpdm_remotes_list
- Removedpdm_resources_list
- Removedpdm_resources_status
- Removedpdm_roles_list
- Removedpdm_tasks_list
- Removedpdm_users_list
- Removedpdm_version
- Removedpmg_action_bcc_create
- Removedpmg_action_bcc_update
- Removedpmg_action_delete
- Removedpmg_action_disclaimer_create
- Removedpmg_action_disclaimer_update
- Removedpmg_action_field_create
- Removedpmg_action_field_update
- Removedpmg_action_notification_create
- Removedpmg_action_notification_update
- Removedpmg_action_objects_list
- Removedpmg_action_removeattachments_create
- Removedpmg_action_removeattachments_update
- Removedpmg_apt_changelog
- Removedpmg_apt_repositories_get
- Removedpmg_apt_repository_add
- Removedpmg_apt_repository_set
- Removedpmg_apt_update_refresh
- Removedpmg_apt_updates_list
- Removedpmg_apt_versions
- Removedpmg_backup_create
- Removedpmg_doctor
- Removedpmg_domain_create
- Removedpmg_domain_delete
- Removedpmg_domains_list
- Removedpmg_mynetworks_add
- Removedpmg_mynetworks_remove
- Removedpmg_node_rrddata
- Removedpmg_node_status
- Removedpmg_node_syslog
- Removedpmg_postfix_flush
- Removedpmg_postfix_qshape
- Removedpmg_quarantine_action
- Removedpmg_quarantine_attachment
- Removedpmg_quarantine_blocklist_add
- Removedpmg_quarantine_blocklist_list
- Removedpmg_quarantine_blocklist_remove
- Removedpmg_quarantine_spam
- Removedpmg_quarantine_spamstatus
- Removedpmg_quarantine_spamusers
- Removedpmg_quarantine_virus
- Removedpmg_quarantine_virusstatus
- Removedpmg_quarantine_welcomelist_add
- Removedpmg_quarantine_welcomelist_list
- Removedpmg_quarantine_welcomelist_remove
- Removedpmg_relay_config
- Removedpmg_ruledb_digest
- Removedpmg_ruledb_rule_action_attach
- Removedpmg_ruledb_rule_action_detach
- Removedpmg_ruledb_rule_actions_list
- Removedpmg_ruledb_rule_create
- Removedpmg_ruledb_rule_delete
- Removedpmg_ruledb_rule_from_attach
- Removedpmg_ruledb_rule_from_detach
- Removedpmg_ruledb_rule_from_list
- Removedpmg_ruledb_rule_get
- Removedpmg_ruledb_rule_to_attach
- Removedpmg_ruledb_rule_to_detach
- Removedpmg_ruledb_rule_to_list
- Removedpmg_ruledb_rule_update
- Removedpmg_ruledb_rule_what_attach
- Removedpmg_ruledb_rule_what_detach
- Removedpmg_ruledb_rule_what_list
- Removedpmg_ruledb_rule_when_attach
- Removedpmg_ruledb_rule_when_detach
- Removedpmg_ruledb_rule_when_list
- Removedpmg_ruledb_rules_list
- Removedpmg_service_control
- Removedpmg_service_status
- Removedpmg_spam_config
- Removedpmg_spam_config_update
- Removedpmg_statistics_domains
- Removedpmg_statistics_mail
- Removedpmg_statistics_mailcount
- Removedpmg_statistics_receiver
- Removedpmg_statistics_recent
- Removedpmg_statistics_sender
- Removedpmg_statistics_spamscores
- Removedpmg_statistics_virus
- Removedpmg_tasks_list
- Removedpmg_tracker_detail
- Removedpmg_tracker_list
- Removedpmg_transport_create
- Removedpmg_transport_delete
- Removedpmg_what_group_create
- Removedpmg_what_group_delete
- Removedpmg_what_group_get
- Removedpmg_what_group_objects
- Removedpmg_what_group_update
- Removedpmg_what_groups_list
- Removedpmg_what_object_add
- Removedpmg_what_object_delete
- Removedpmg_what_object_update
- Removedpmg_when_group_create
- Removedpmg_when_group_delete
- Removedpmg_when_group_get
- Removedpmg_when_group_objects
- Removedpmg_when_group_update
- Removedpmg_when_groups_list
- Removedpmg_when_object_add
- Removedpmg_when_object_delete
- Removedpmg_when_object_update
- Removedpmg_who_group_create
- Removedpmg_who_group_delete
- Removedpmg_who_group_get
- Removedpmg_who_group_objects
- Removedpmg_who_group_update
- Removedpmg_who_groups_list
- Removedpmg_who_object_add
- Removedpmg_who_object_delete
- Removedpmg_who_object_update
- Addedproximo_call
- Addedproximo_find_tools
- Addedproximo_recall
- Addedproximo_tool_schema
- Removedpve_acl_list
- Removedpve_acl_modify
- Removedpve_acl_prune
- Removedpve_acme_account_create
- Removedpve_acme_account_delete
- Removedpve_acme_account_update
- Removedpve_acme_cert_order
- Removedpve_acme_cert_renew
- Removedpve_acme_cert_revoke
- Removedpve_acme_plugin_create
- Removedpve_acme_plugin_delete
- Removedpve_acme_plugin_update
- Removedpve_agent_exec
- Removedpve_agent_file_read
- Removedpve_agent_file_write
- Removedpve_agent_fs
- Removedpve_agent_info
- Removedpve_agent_set_password
- Removedpve_apt_changelog
- Removedpve_apt_repositories_get
- Removedpve_apt_repository_add
- Removedpve_apt_repository_set
- Removedpve_apt_update_refresh
- Removedpve_apt_updates_list
- Removedpve_apt_versions
- Removedpve_backup
- Removedpve_backup_delete
- Removedpve_backup_freshness
- Removedpve_backup_job_create
- Removedpve_backup_job_delete
- Removedpve_backup_job_list
- Removedpve_backup_job_update
- Removedpve_backup_list
- Removedpve_ceph_cfg_db
- Removedpve_ceph_cfg_raw
- Removedpve_ceph_cfg_value
- Removedpve_ceph_cmd_safety
- Removedpve_ceph_crush
- Removedpve_ceph_flag_get
- Removedpve_ceph_flag_set
- Removedpve_ceph_flags_list
- Removedpve_ceph_flags_set
- Removedpve_ceph_fs_create
- Removedpve_ceph_fs_destroy
- Removedpve_ceph_fs_list
- Removedpve_ceph_init
- Removedpve_ceph_log
- Removedpve_ceph_mds_create
- Removedpve_ceph_mds_destroy
- Removedpve_ceph_mds_list
- Removedpve_ceph_metadata
- Removedpve_ceph_mgr_create
- Removedpve_ceph_mgr_destroy
- Removedpve_ceph_mgr_list
- Removedpve_ceph_mon_create
- Removedpve_ceph_mon_destroy
- Removedpve_ceph_mon_list
- Removedpve_ceph_osd_create
- Removedpve_ceph_osd_destroy
- Removedpve_ceph_osd_in
- Removedpve_ceph_osd_lv_info
- Removedpve_ceph_osd_metadata
- Removedpve_ceph_osd_out
- Removedpve_ceph_osd_scrub
- Removedpve_ceph_osd_tree
- Removedpve_ceph_pool_create
- Removedpve_ceph_pool_destroy
- Removedpve_ceph_pool_list
- Removedpve_ceph_pool_set
- Removedpve_ceph_pool_status
- Removedpve_ceph_rules
- Removedpve_ceph_service_restart
- Removedpve_ceph_service_start
- Removedpve_ceph_service_stop
- Removedpve_ceph_status
- Removedpve_clone
- Removedpve_cloudinit_get
- Removedpve_cloudinit_set
- Removedpve_cluster_resources
- Removedpve_cluster_status
- Removedpve_create_container
- Removedpve_create_vm
- Removedpve_delete_guest
- Removedpve_diagnose
- Removedpve_disk_move
- Removedpve_disk_resize
- Removedpve_doctor
- Removedpve_firewall_alias_create
- Removedpve_firewall_alias_delete
- Removedpve_firewall_alias_list
- Removedpve_firewall_alias_update
- Removedpve_firewall_ipset_create
- Removedpve_firewall_ipset_delete
- Removedpve_firewall_ipset_entry_add
- Removedpve_firewall_ipset_entry_remove
- Removedpve_firewall_options_get
- Removedpve_firewall_options_set
- Removedpve_firewall_rule_add
- Removedpve_firewall_rule_remove
- Removedpve_firewall_rule_update
- Removedpve_firewall_rules_list
- Removedpve_firewall_security_group_create
- Removedpve_firewall_security_group_delete
- Removedpve_firewall_set_enabled
- Removedpve_group_create
- Removedpve_group_delete
- Removedpve_group_get
- Removedpve_group_update
- Removedpve_groups_list
- Removedpve_guest_config_get
- Removedpve_guest_config_revert
- Removedpve_guest_config_set
- Removedpve_guest_migrate
- Removedpve_guest_power
- Removedpve_guest_status
- Removedpve_ha_groups_list
- Removedpve_ha_resource_add
- Removedpve_ha_resource_remove
- Removedpve_ha_resources_list
- Removedpve_ha_rule_create
- Removedpve_ha_rule_delete
- Removedpve_ha_rule_update
- Removedpve_ha_rules_list
- Removedpve_hardware_list
- Removedpve_ipset_list
- Removedpve_list_guests
- Removedpve_mapping_pci_create
- Removedpve_mapping_pci_delete
- Removedpve_mapping_pci_list
- Removedpve_mapping_pci_update
- Removedpve_mapping_usb_create
- Removedpve_mapping_usb_delete
- Removedpve_mapping_usb_list
- Removedpve_mapping_usb_update
- Removedpve_metrics_server_delete
- Removedpve_metrics_server_list
- Removedpve_metrics_server_set
- Removedpve_network_apply
- Removedpve_network_iface_create
- Removedpve_network_iface_update
- Removedpve_network_list
- Removedpve_node_acme_domains_set
- Removedpve_node_cert_delete
- Removedpve_node_cert_upload
- Removedpve_node_certificates
- Removedpve_node_disk_initgpt
- Removedpve_node_disk_smart
- Removedpve_node_disk_wipe
- Removedpve_node_disks_list
- Removedpve_node_dns
- Removedpve_node_dns_set
- Removedpve_node_hosts_get
- Removedpve_node_hosts_set
- Removedpve_node_journal
- Removedpve_node_migrateall
- Removedpve_node_rrddata
- Removedpve_node_service_control
- Removedpve_node_service_status
- Removedpve_node_services_list
- Removedpve_node_startall
- Removedpve_node_status
- Removedpve_node_stopall
- Removedpve_node_storage_backend_create
- Removedpve_node_storage_backend_delete
- Removedpve_node_storage_backend_list
- Removedpve_node_subscription
- Removedpve_node_syslog
- Removedpve_node_time_get
- Removedpve_node_time_set
- Removedpve_notification_endpoint_create
- Removedpve_notification_endpoint_delete
- Removedpve_notification_endpoint_list
- Removedpve_notification_endpoint_update
- Removedpve_notification_matcher_delete
- Removedpve_notification_matcher_set
- Removedpve_notification_test
- Removedpve_overbroad_grants
- Removedpve_pool_create
- Removedpve_pool_delete
- Removedpve_pool_get
- Removedpve_pool_update
- Removedpve_pools_list
- Removedpve_realm_create
- Removedpve_realm_delete
- Removedpve_realm_get
- Removedpve_realm_update
- Removedpve_realms_list
- Removedpve_replication_create
- Removedpve_replication_delete
- Removedpve_replication_update
- Removedpve_restore
- Removedpve_role_create
- Removedpve_role_delete
- Removedpve_role_update
- Removedpve_roles_list
- Removedpve_rollback
- Removedpve_sdn_apply
- Removedpve_sdn_controller_create
- Removedpve_sdn_controller_delete
- Removedpve_sdn_controller_get
- Removedpve_sdn_controller_update
- Removedpve_sdn_controllers_list
- Removedpve_sdn_dns_create
- Removedpve_sdn_dns_delete
- Removedpve_sdn_dns_get
- Removedpve_sdn_dns_list
- Removedpve_sdn_dns_update
- Removedpve_sdn_dry_run
- Removedpve_sdn_fabric_create
- Removedpve_sdn_fabric_delete
- Removedpve_sdn_fabric_get
- Removedpve_sdn_fabric_node_create
- Removedpve_sdn_fabric_node_delete
- Removedpve_sdn_fabric_node_get
- Removedpve_sdn_fabric_node_update
- Removedpve_sdn_fabric_nodes_list
- Removedpve_sdn_fabric_nodes_list_all
- Removedpve_sdn_fabric_status_interfaces
- Removedpve_sdn_fabric_status_neighbors
- Removedpve_sdn_fabric_status_routes
- Removedpve_sdn_fabric_update
- Removedpve_sdn_fabrics_all
- Removedpve_sdn_fabrics_list
- Removedpve_sdn_ipam_create
- Removedpve_sdn_ipam_delete
- Removedpve_sdn_ipam_get
- Removedpve_sdn_ipam_status
- Removedpve_sdn_ipam_update
- Removedpve_sdn_ipams_list
- Removedpve_sdn_lock_acquire
- Removedpve_sdn_lock_release
- Removedpve_sdn_prefix_list_create
- Removedpve_sdn_prefix_list_delete
- Removedpve_sdn_prefix_list_entries_list
- Removedpve_sdn_prefix_list_entry_create
- Removedpve_sdn_prefix_list_entry_delete
- Removedpve_sdn_prefix_list_entry_get
- Removedpve_sdn_prefix_list_entry_update
- Removedpve_sdn_prefix_list_get
- Removedpve_sdn_prefix_list_update
- Removedpve_sdn_prefix_lists_list
- Removedpve_sdn_rollback
- Removedpve_sdn_route_map_entries_list
- Removedpve_sdn_route_map_entries_list_all
- Removedpve_sdn_route_map_entry_create
- Removedpve_sdn_route_map_entry_delete
- Removedpve_sdn_route_map_entry_get
- Removedpve_sdn_route_map_entry_update
- Removedpve_sdn_route_maps_list
- Removedpve_sdn_subnet_create
- Removedpve_sdn_subnet_delete
- Removedpve_sdn_subnet_get
- Removedpve_sdn_subnet_list
- Removedpve_sdn_subnet_update
- Removedpve_sdn_vnet_create
- Removedpve_sdn_vnet_delete
- Removedpve_sdn_vnet_firewall_options_get
- Removedpve_sdn_vnet_firewall_options_set
- Removedpve_sdn_vnet_firewall_rule_add
- Removedpve_sdn_vnet_firewall_rule_get
- Removedpve_sdn_vnet_firewall_rule_remove
- Removedpve_sdn_vnet_firewall_rule_update
- Removedpve_sdn_vnet_firewall_rules_list
- Removedpve_sdn_vnet_get
- Removedpve_sdn_vnet_ip_create
- Removedpve_sdn_vnet_ip_delete
- Removedpve_sdn_vnet_ip_update
- Removedpve_sdn_vnet_mac_vrf
- Removedpve_sdn_vnet_update
- Removedpve_sdn_vnets_list
- Removedpve_sdn_zone_bridges
- Removedpve_sdn_zone_content
- Removedpve_sdn_zone_create
- Removedpve_sdn_zone_delete
- Removedpve_sdn_zone_get
- Removedpve_sdn_zone_ip_vrf
- Removedpve_sdn_zone_status_list
- Removedpve_sdn_zone_update
- Removedpve_sdn_zones_list
- Removedpve_security_groups_list
- Removedpve_snapshot_create
- Removedpve_snapshot_delete
- Removedpve_snapshot_list
- Removedpve_storage_config_get
- Removedpve_storage_config_list
- Removedpve_storage_content
- Removedpve_storage_content_delete
- Removedpve_storage_create
- Removedpve_storage_delete
- Removedpve_storage_download
- Removedpve_storage_status
- Removedpve_storage_update
- Removedpve_task_log
- Removedpve_task_status
- Removedpve_task_stop
- Removedpve_task_wait
- Removedpve_tasks_list
- Removedpve_template_convert
- Removedpve_tfa_delete
- Removedpve_tfa_get
- Removedpve_tfa_list
- Removedpve_token_create
- Removedpve_token_revoke
- Removedpve_tokens_list
- Removedpve_user_create
- Removedpve_user_delete
- Removedpve_user_get
- Removedpve_user_update
- Removedpve_users_list
113 tool updatesv0.24.0Jul 17, 2026
- Addedpve_ceph_cfg_db
- Addedpve_ceph_cfg_raw
- Addedpve_ceph_cfg_value
- Addedpve_ceph_cmd_safety
- Addedpve_ceph_crush
- Addedpve_ceph_flag_get
- Addedpve_ceph_flag_set
- Addedpve_ceph_flags_list
- Addedpve_ceph_flags_set
- Addedpve_ceph_fs_create
- Addedpve_ceph_fs_destroy
- Addedpve_ceph_fs_list
- Addedpve_ceph_init
- Addedpve_ceph_log
- Addedpve_ceph_mds_create
- Addedpve_ceph_mds_destroy
- Addedpve_ceph_mds_list
- Addedpve_ceph_metadata
- Addedpve_ceph_mgr_create
- Addedpve_ceph_mgr_destroy
- Addedpve_ceph_mgr_list
- Addedpve_ceph_mon_create
- Addedpve_ceph_mon_destroy
- Addedpve_ceph_mon_list
- Addedpve_ceph_osd_create
- Addedpve_ceph_osd_destroy
- Addedpve_ceph_osd_in
- Addedpve_ceph_osd_lv_info
- Addedpve_ceph_osd_metadata
- Addedpve_ceph_osd_out
- Addedpve_ceph_osd_scrub
- Addedpve_ceph_osd_tree
- Addedpve_ceph_pool_create
- Addedpve_ceph_pool_destroy
- Addedpve_ceph_pool_list
- Addedpve_ceph_pool_set
- Addedpve_ceph_pool_status
- Addedpve_ceph_rules
- Addedpve_ceph_service_restart
- Addedpve_ceph_service_start
- Addedpve_ceph_service_stop
- Addedpve_ceph_status
- Changedpve_sdn_apply2 fields changed
  - addedInput schema / properties / lock_token
```
Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "description": "SDN cluster lock token to use for this write, if one is held (from pve_sdn_lock_acquire).",
+  "title": "Lock Token"
+}
```
  - addedInput schema / properties / release_lock
```
Added value: +{
+  "anyOf": [
+    {
+      "type": "boolean"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "description": "Whether PVE releases the lock automatically after a successful commit (only relevant when lock_token is given; PVE's own default is True — omit to use it).",
+  "title": "Release Lock"
+}
```
- Addedpve_sdn_controller_create
- Addedpve_sdn_controller_delete
- Addedpve_sdn_controller_get
- Addedpve_sdn_controller_update
- Addedpve_sdn_controllers_list
- Addedpve_sdn_dns_create
- Addedpve_sdn_dns_delete
- Addedpve_sdn_dns_get
- Addedpve_sdn_dns_list
- Addedpve_sdn_dns_update
- Addedpve_sdn_dry_run
- Addedpve_sdn_fabric_create
- Addedpve_sdn_fabric_delete
- Addedpve_sdn_fabric_get
- Addedpve_sdn_fabric_node_create
- Addedpve_sdn_fabric_node_delete
- Addedpve_sdn_fabric_node_get
- Addedpve_sdn_fabric_node_update
- Addedpve_sdn_fabric_nodes_list
- Addedpve_sdn_fabric_nodes_list_all
- Addedpve_sdn_fabric_status_interfaces
- Addedpve_sdn_fabric_status_neighbors
- Addedpve_sdn_fabric_status_routes
- Addedpve_sdn_fabric_update
- Addedpve_sdn_fabrics_all
- Addedpve_sdn_fabrics_list
- Addedpve_sdn_ipam_create
- Addedpve_sdn_ipam_delete
- Addedpve_sdn_ipam_get
- Addedpve_sdn_ipam_status
- Addedpve_sdn_ipam_update
- Addedpve_sdn_ipams_list
- Addedpve_sdn_lock_acquire
- Addedpve_sdn_lock_release
- Addedpve_sdn_prefix_list_create
- Addedpve_sdn_prefix_list_delete
- Addedpve_sdn_prefix_list_entries_list
- Addedpve_sdn_prefix_list_entry_create
- Addedpve_sdn_prefix_list_entry_delete
- Addedpve_sdn_prefix_list_entry_get
- Addedpve_sdn_prefix_list_entry_update
- Addedpve_sdn_prefix_list_get
- Addedpve_sdn_prefix_list_update
- Addedpve_sdn_prefix_lists_list
- Addedpve_sdn_rollback
- Addedpve_sdn_route_map_entries_list
- Addedpve_sdn_route_map_entries_list_all
- Addedpve_sdn_route_map_entry_create
- Addedpve_sdn_route_map_entry_delete
- Addedpve_sdn_route_map_entry_get
- Addedpve_sdn_route_map_entry_update
- Addedpve_sdn_route_maps_list
- Addedpve_sdn_subnet_get
- Addedpve_sdn_vnet_firewall_options_get
- Addedpve_sdn_vnet_firewall_options_set
- Addedpve_sdn_vnet_firewall_rule_add
- Addedpve_sdn_vnet_firewall_rule_get
- Addedpve_sdn_vnet_firewall_rule_remove
- Addedpve_sdn_vnet_firewall_rule_update
- Addedpve_sdn_vnet_firewall_rules_list
- Addedpve_sdn_vnet_get
- Addedpve_sdn_vnet_ip_create
- Addedpve_sdn_vnet_ip_delete
- Addedpve_sdn_vnet_ip_update
- Addedpve_sdn_vnet_mac_vrf
- Addedpve_sdn_zone_bridges
- Addedpve_sdn_zone_content
- Addedpve_sdn_zone_get
- Addedpve_sdn_zone_ip_vrf
- Addedpve_sdn_zone_status_list
110 tool updatesv0.23.0Jul 16, 2026
- Addedpbs_admin_gc_jobs_list
- Addedpbs_admin_prune_jobs_list
- Addedpbs_admin_sync_jobs_list
- Addedpbs_admin_traffic_control_status
- Addedpbs_admin_verify_jobs_list
- Addedpbs_datastore_active_operations
- Addedpbs_datastore_mount
- Addedpbs_datastore_prune
- Addedpbs_datastore_rrd
- Addedpbs_datastore_s3_refresh
- Addedpbs_datastore_unmount
- Addedpbs_datastores_usage
- Addedpbs_encryption_key_create
- Addedpbs_encryption_key_delete
- Addedpbs_encryption_key_list
- Addedpbs_encryption_key_toggle_archive
- Addedpbs_group_delete
- Addedpbs_group_move
- Addedpbs_group_notes_get
- Addedpbs_group_notes_set
- Addedpbs_groups_list
- Addedpbs_metrics_influxdb_http_create
- Addedpbs_metrics_influxdb_http_delete
- Addedpbs_metrics_influxdb_http_get
- Addedpbs_metrics_influxdb_http_list
- Addedpbs_metrics_influxdb_http_update
- Addedpbs_metrics_influxdb_udp_create
- Addedpbs_metrics_influxdb_udp_delete
- Addedpbs_metrics_influxdb_udp_get
- Addedpbs_metrics_influxdb_udp_list
- Addedpbs_metrics_influxdb_udp_update
- Addedpbs_metrics_servers_list
- Addedpbs_metrics_status
- Addedpbs_namespace_move
- Addedpbs_node_config_get
- Addedpbs_node_config_set
- Addedpbs_node_identity
- Addedpbs_node_report
- Addedpbs_node_rrd
- Addedpbs_pull
- Addedpbs_push
- Addedpbs_remote_scan
- Addedpbs_remote_scan_groups
- Addedpbs_remote_scan_namespaces
- Addedpbs_s3_check
- Addedpbs_s3_client_create
- Addedpbs_s3_client_delete
- Addedpbs_s3_client_get
- Addedpbs_s3_client_list
- Addedpbs_s3_client_update
- Addedpbs_s3_list_buckets
- Addedpbs_s3_reset_counters
- Addedpbs_snapshot_protected_get
- Addedpbs_tape_backup
- Addedpbs_tape_backup_job_create
- Addedpbs_tape_backup_job_delete
- Addedpbs_tape_backup_job_get
- Addedpbs_tape_backup_job_list
- Addedpbs_tape_backup_job_run
- Addedpbs_tape_backup_job_update
- Addedpbs_tape_changer_create
- Addedpbs_tape_changer_delete
- Addedpbs_tape_changer_get
- Addedpbs_tape_changer_list
- Addedpbs_tape_changer_status
- Addedpbs_tape_changer_transfer
- Addedpbs_tape_changer_update
- Addedpbs_tape_drive_barcode_label_media
- Addedpbs_tape_drive_cartridge_memory
- Addedpbs_tape_drive_catalog
- Addedpbs_tape_drive_clean
- Addedpbs_tape_drive_create
- Addedpbs_tape_drive_delete
- Addedpbs_tape_drive_eject
- Addedpbs_tape_drive_format
- Addedpbs_tape_drive_get
- Addedpbs_tape_drive_inventory
- Addedpbs_tape_drive_inventory_update
- Addedpbs_tape_drive_label_media
- Addedpbs_tape_drive_list
- Addedpbs_tape_drive_load_media
- Addedpbs_tape_drive_load_slot
- Addedpbs_tape_drive_read_label
- Addedpbs_tape_drive_restore_key
- Addedpbs_tape_drive_rewind
- Addedpbs_tape_drive_status
- Addedpbs_tape_drive_unload
- Addedpbs_tape_drive_update
- Addedpbs_tape_drive_volume_statistics
- Addedpbs_tape_key_create
- Addedpbs_tape_key_delete
- Addedpbs_tape_key_get
- Addedpbs_tape_key_list
- Addedpbs_tape_key_update_password
- Addedpbs_tape_media_content
- Addedpbs_tape_media_destroy
- Addedpbs_tape_media_list
- Addedpbs_tape_media_move
- Addedpbs_tape_media_sets
- Addedpbs_tape_media_status_get
- Addedpbs_tape_media_status_set
- Addedpbs_tape_pool_create
- Addedpbs_tape_pool_delete
- Addedpbs_tape_pool_get
- Addedpbs_tape_pool_list
- Addedpbs_tape_pool_update
- Addedpbs_tape_restore
- Addedpbs_tape_scan_changers
- Addedpbs_tape_scan_drives
- Addedpbs_version
128 tool updatesv0.22.0Jul 15, 2026
- Addedpbs_acl_get
- Addedpbs_acl_update
- Addedpbs_acme_account_create
- Addedpbs_acme_account_delete
- Addedpbs_acme_account_get
- Addedpbs_acme_account_list
- Addedpbs_acme_account_update
- Addedpbs_acme_cert_order
- Addedpbs_acme_cert_renew
- Addedpbs_acme_challenge_schema
- Addedpbs_acme_directories
- Addedpbs_acme_plugin_create
- Addedpbs_acme_plugin_delete
- Addedpbs_acme_plugin_get
- Addedpbs_acme_plugin_update
- Addedpbs_acme_plugins_list
- Addedpbs_acme_tos
- Addedpbs_apt_changelog
- Addedpbs_apt_repositories_get
- Addedpbs_apt_repository_add
- Addedpbs_apt_repository_set
- Addedpbs_apt_update_refresh
- Addedpbs_apt_updates_list
- Addedpbs_apt_versions
- Addedpbs_node_cert_delete
- Addedpbs_node_cert_upload
- Addedpbs_node_certificates_list
- Addedpbs_node_disk_directory_create
- Addedpbs_node_disk_directory_delete
- Addedpbs_node_disk_directory_list
- Addedpbs_node_disk_initgpt
- Addedpbs_node_disk_smart
- Addedpbs_node_disk_wipe
- Addedpbs_node_disk_zfs_create
- Addedpbs_node_disk_zfs_get
- Addedpbs_node_disk_zfs_list
- Addedpbs_node_disks_list
- Addedpbs_node_dns_get
- Addedpbs_node_dns_set
- Addedpbs_node_journal
- Addedpbs_node_network_iface_create
- Addedpbs_node_network_iface_delete
- Addedpbs_node_network_iface_get
- Addedpbs_node_network_iface_update
- Addedpbs_node_network_list
- Addedpbs_node_network_reload
- Addedpbs_node_network_revert
- Addedpbs_node_service_control
- Addedpbs_node_service_status
- Addedpbs_node_services_list
- Addedpbs_node_status
- Addedpbs_node_subscription_check
- Addedpbs_node_subscription_delete
- Addedpbs_node_subscription_get
- Addedpbs_node_subscription_set
- Addedpbs_node_syslog
- Addedpbs_node_task_log
- Addedpbs_node_task_status
- Addedpbs_node_task_stop
- Addedpbs_node_time_get
- Addedpbs_node_time_set
- Addedpbs_notification_endpoint_create
- Addedpbs_notification_endpoint_delete
- Addedpbs_notification_endpoint_get
- Addedpbs_notification_endpoint_list
- Addedpbs_notification_endpoint_update
- Addedpbs_notification_matcher_delete
- Addedpbs_notification_matcher_field_values
- Addedpbs_notification_matcher_fields
- Addedpbs_notification_matcher_get
- Addedpbs_notification_matcher_set
- Addedpbs_notification_matchers_list
- Addedpbs_notification_target_test
- Addedpbs_notification_targets_list
- Addedpbs_permissions_get
- Addedpbs_realm_ad_create
- Addedpbs_realm_ad_delete
- Addedpbs_realm_ad_get
- Addedpbs_realm_ad_list
- Addedpbs_realm_ad_update
- Addedpbs_realm_ldap_create
- Addedpbs_realm_ldap_delete
- Addedpbs_realm_ldap_get
- Addedpbs_realm_ldap_list
- Addedpbs_realm_ldap_update
- Addedpbs_realm_openid_create
- Addedpbs_realm_openid_delete
- Addedpbs_realm_openid_get
- Addedpbs_realm_openid_list
- Addedpbs_realm_openid_update
- Addedpbs_realm_pam_get
- Addedpbs_realm_pam_set
- Addedpbs_realm_pbs_get
- Addedpbs_realm_pbs_set
- Addedpbs_roles_list
- Addedpbs_tfa_add
- Addedpbs_tfa_delete
- Addedpbs_tfa_entry_get
- Addedpbs_tfa_list
- Addedpbs_tfa_unlock
- Addedpbs_tfa_update
- Addedpbs_tfa_user_get
- Addedpbs_tfa_webauthn_get
- Addedpbs_tfa_webauthn_set
- Addedpbs_token_create
- Addedpbs_token_delete
- Addedpbs_token_update
- Addedpbs_user_create
- Addedpbs_user_delete
- Addedpbs_user_get
- Addedpbs_user_token_get
- Addedpbs_user_tokens_list
- Addedpbs_user_update
- Addedpbs_users_list
- Addedpmg_apt_changelog
- Addedpmg_apt_repositories_get
- Addedpmg_apt_repository_add
- Addedpmg_apt_repository_set
- Addedpmg_apt_update_refresh
- Addedpmg_apt_updates_list
- Addedpmg_apt_versions
- Addedpve_apt_changelog
- Addedpve_apt_repositories_get
- Addedpve_apt_repository_add
- Addedpve_apt_repository_set
- Addedpve_apt_update_refresh
- Addedpve_apt_updates_list
- Addedpve_apt_versions

320 tool updatesv0.21.0Jul 13, 2026

Changedaudit_verify1 field changed

addedInput schema / properties / expected_head / description

Added value: +"64-char hex head() value pinned off-box; verifying against it also catches tail truncation, a forged tail-append, or a full ledger replacement. Omit to fall back to PROXIMO_AUDIT_EXPECTED_HEAD."

Changedct_diagnose3 fields changed

addedInput schema / properties / ctid / description

Added value: +"Numeric CTID of the LXC container to diagnose."

addedInput schema / properties / kind / description

Added value: +"Guest type; only `lxc` is meaningful here since diagnostics are container-specific."

addedInput schema / properties / node / description

Added value: +"PVE node the container runs on. Omit to resolve it automatically from the cluster."

Changedct_exec4 fields changed

addedInput schema / properties / command / description

Added value: +"Argv list to run inside the container (not a shell string)."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; true executes."

addedInput schema / properties / ctid / description

Added value: +"Numeric CTID of the target LXC container (allowlist-scoped)."

addedInput schema / properties / snapshot / description

Added value: +"Take a fail-closed auto-undo snapshot before running."

Changedct_logs3 fields changed

addedInput schema / properties / ctid / description

Added value: +"Numeric CTID of the LXC container to read logs from."

addedInput schema / properties / lines / description

Added value: +"Number of most-recent log lines to return."

addedInput schema / properties / unit / description

Added value: +"Name of the systemd unit to tail journalctl for (e.g. `nginx.service`)."

Changedct_psql5 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; true executes."

addedInput schema / properties / ctid / description

Added value: +"Numeric CTID of the container running PostgreSQL (allowlist-scoped)."

addedInput schema / properties / db / description
```
Added value: +"Target database name."
```

addedInput schema / properties / snapshot / description

Added value: +"Take a fail-closed auto-undo snapshot before running."

addedInput schema / properties / sql / description

Added value: +"SQL to run via psql inside the container, as the database OS user."

Changedpbs_datastore_create7 fields changed

addedInput schema / properties / comment / description

Added value: +"Free-text comment/description for the datastore."

addedInput schema / properties / confirm / description

Added value: +"Set True to execute; False (default) only returns the dry-run plan."

addedInput schema / properties / gc_schedule / description

Added value: +"Garbage-collection schedule as a PBS calendar-event string (e.g. 'daily')."

addedInput schema / properties / name / description
```
Added value: +"Name for the new PBS datastore."
```

addedInput schema / properties / notification_mode / description

Added value: +"Notification delivery mode for this datastore (PBS notification-mode value)."

addedInput schema / properties / path / description

Added value: +"Filesystem path on the PBS node where the datastore will be created."

addedInput schema / properties / prune_schedule / description

Added value: +"Prune-job schedule as a PBS calendar-event string (e.g. 'daily')."

Changedpbs_datastore_delete4 fields changed

addedInput schema / properties / confirm / description

Added value: +"Set True to execute; False (default) only returns the dry-run plan."

addedInput schema / properties / destroy_data / description

Added value: +"If True, destroys all backup data (HIGH, no undo); default only detaches config."

addedInput schema / properties / keep_job_configs / description

Added value: +"If True, keep job configs referencing this datastore instead of removing them."

addedInput schema / properties / name / description
```
Added value: +"PBS datastore name to delete."
```

Changedpbs_datastore_get1 field changed
- addedInput schema / properties / name / description
```
Added value: +"PBS datastore name."
```
Changedpbs_datastore_status1 field changed
- addedInput schema / properties / store / description
```
Added value: +"PBS datastore name."
```

Changedpbs_datastore_update6 fields changed

addedInput schema / properties / comment / description

Added value: +"Free-text comment/description for the datastore."

addedInput schema / properties / confirm / description

Added value: +"Set True to execute; False (default) only returns the dry-run plan."

addedInput schema / properties / gc_schedule / description

Added value: +"Garbage-collection schedule as a PBS calendar-event string (e.g. 'daily')."

addedInput schema / properties / name / description
```
Added value: +"PBS datastore name to update."
```

addedInput schema / properties / notification_mode / description

Added value: +"Notification delivery mode for this datastore (PBS notification-mode value)."

addedInput schema / properties / prune_schedule / description

Added value: +"Prune-job schedule as a PBS calendar-event string (e.g. 'daily')."

Changedpbs_gc_start2 fields changed

addedInput schema / properties / confirm / description

Added value: +"Set True to execute; False (default) only returns the dry-run plan."

addedInput schema / properties / store / description

Added value: +"PBS datastore name to run garbage collection on."

Changedpbs_gc_status1 field changed
- addedInput schema / properties / store / description
```
Added value: +"PBS datastore name."
```

Changedpbs_group_change_owner6 fields changed

addedInput schema / properties / backup_id / description

Added value: +"Backup group ID (e.g. VMID/CTID or host name)."

addedInput schema / properties / backup_type / description

Added value: +"Backup type of the group: 'vm', 'ct', or 'host'."

addedInput schema / properties / confirm / description

Added value: +"Set True to execute; False (default) only returns the dry-run plan."

addedInput schema / properties / new_owner / description

Added value: +"PBS auth ID (user@realm or api-token) to become the new owner of the backup group."

addedInput schema / properties / ns / description

Added value: +"Namespace path the backup group lives in; omit for the root namespace."

addedInput schema / properties / store / description
```
Added value: +"PBS datastore name."
```

Changedpbs_job_create7 fields changed

addedInput schema / properties / comment / description
```
Added value: +"Free-text note stored on the job."
```

addedInput schema / properties / confirm / description

Added value: +"Gate: false returns a dry-run PLAN, true executes the creation."

addedInput schema / properties / job_id / description

Added value: +"Unique ID for the new PBS scheduled job."

addedInput schema / properties / job_type / description

Added value: +"PBS job type: sync | verify | prune."

addedInput schema / properties / ns / description

Added value: +"PBS namespace the job operates on; omit for the root namespace."

addedInput schema / properties / schedule / description

Added value: +"Proxmox calendar-event schedule string for the job."

addedInput schema / properties / store / description

Added value: +"PBS datastore the job operates on."

Changedpbs_job_delete3 fields changed
- addedInput schema / properties / confirm / description
```
Added value: +"Gate: false returns a dry-run PLAN, true executes the deletion."
```
- addedInput schema / properties / job_id / description
```
Added value: +"ID of the PBS scheduled job to delete."
```
- addedInput schema / properties / job_type / description
```
Added value: +"PBS job type: sync | verify | prune."
```

Changedpbs_job_run3 fields changed

addedInput schema / properties / confirm / description

Added value: +"Gate: false returns a dry-run PLAN, true executes the run."

addedInput schema / properties / job_id / description

Added value: +"ID of the PBS scheduled job to trigger immediately."

addedInput schema / properties / job_type / description

Added value: +"PBS job type: sync | verify | prune."

Changedpbs_job_update6 fields changed

addedInput schema / properties / comment / description

Added value: +"New free-text note; omit to leave unchanged."

addedInput schema / properties / confirm / description

Added value: +"Gate: false returns a dry-run PLAN, true executes the update."

addedInput schema / properties / job_id / description

Added value: +"ID of the existing PBS scheduled job to update."

addedInput schema / properties / job_type / description

Added value: +"PBS job type: sync | verify | prune."

addedInput schema / properties / ns / description

Added value: +"New PBS namespace the job operates on; omit to leave unchanged."

addedInput schema / properties / schedule / description

Added value: +"New Proxmox calendar-event schedule string; omit to leave unchanged."

Changedpbs_jobs_list1 field changed
- addedInput schema / properties / job_type / description
```
Added value: +"Scheduled-job type to list: 'sync', 'verify', or 'prune'."
```

Changedpbs_namespace_create4 fields changed

addedInput schema / properties / confirm / description

Added value: +"Set True to execute; False (default) only returns the dry-run plan."

addedInput schema / properties / name / description

Added value: +"Namespace name/segment to create."

addedInput schema / properties / parent / description

Added value: +"Parent namespace path to create under; omit for the root namespace."

addedInput schema / properties / store / description
```
Added value: +"PBS datastore name."
```

Changedpbs_namespace_delete4 fields changed

addedInput schema / properties / confirm / description

Added value: +"Set True to execute; False (default) only returns the dry-run plan."

addedInput schema / properties / delete_groups / description

Added value: +"If True, deletes groups/snapshots in namespace (HIGH, no undo); else must be empty."

addedInput schema / properties / ns / description
```
Added value: +"Namespace path to delete."
```
addedInput schema / properties / store / description
```
Added value: +"PBS datastore name."
```

Changedpbs_namespaces_list3 fields changed
- addedInput schema / properties / max_depth / description
```
Added value: +"Maximum recursion depth below the parent namespace."
```
- addedInput schema / properties / parent / description
```
Added value: +"Parent namespace path to list children of; omit for the root namespace."
```
- addedInput schema / properties / store / description
```
Added value: +"PBS datastore name."
```

Changedpbs_prune11 fields changed

addedInput schema / properties / backup_id / description

Added value: +"Backup group ID (e.g. VMID/CTID or host name) to scope pruning to."

addedInput schema / properties / backup_type / description

Added value: +"Backup type filter: 'vm', 'ct', or 'host'."

addedInput schema / properties / confirm / description

Added value: +"Proximo dry-run gate: True executes (subject to dry_run); default only plans."

addedInput schema / properties / dry_run / description

Added value: +"PBS-side preview: True (default) previews only; False actually deletes snapshots."

addedInput schema / properties / keep_daily / description
```
Added value: +"Number of daily backups to keep."
```

addedInput schema / properties / keep_last / description

Added value: +"Number of most-recent backups to always keep."

addedInput schema / properties / keep_monthly / description
```
Added value: +"Number of monthly backups to keep."
```
addedInput schema / properties / keep_weekly / description
```
Added value: +"Number of weekly backups to keep."
```
addedInput schema / properties / keep_yearly / description
```
Added value: +"Number of yearly backups to keep."
```

addedInput schema / properties / ns / description

Added value: +"Namespace path to scope pruning to; omit for the root namespace."

addedInput schema / properties / store / description
```
Added value: +"PBS datastore name to prune."
```

Changedpbs_realm_sync4 fields changed

addedInput schema / properties / confirm / description

Added value: +"Gate: false returns a dry-run PLAN, true executes the sync."

addedInput schema / properties / dry_run / description

Added value: +"If true, ask PBS itself to preview the sync without applying it (separate from the tool's own confirm gate)."

addedInput schema / properties / realm / description

Added value: +"PBS LDAP/AD auth realm ID to sync users from."

addedInput schema / properties / remove_vanished / description

Added value: +"If true, also delete PBS users no longer present in the directory."

Changedpbs_remote_create8 fields changed

addedInput schema / properties / auth_id / description

Added value: +"PBS auth ID (user@realm or api-token) used to authenticate to the remote."

addedInput schema / properties / comment / description

Added value: +"Free-text comment/description for the remote."

addedInput schema / properties / confirm / description

Added value: +"Set True to execute; False (default) only returns the dry-run plan."

addedInput schema / properties / fingerprint / description

Added value: +"TLS cert fingerprint of the remote PBS server (public data, not redacted)."

addedInput schema / properties / host / description

Added value: +"Hostname or IP address of the remote PBS server."

addedInput schema / properties / name / description

Added value: +"Name for the new PBS remote sync-source."

addedInput schema / properties / password / description

Added value: +"Password or API token secret for auth_id; redacted from all plans/logs/ledger."

addedInput schema / properties / port / description

Added value: +"TCP port of the remote PBS API; defaults to the standard PBS port if omitted."

Changedpbs_remote_delete2 fields changed

addedInput schema / properties / confirm / description

Added value: +"Set True to execute; False (default) only returns the dry-run plan."

addedInput schema / properties / name / description

Added value: +"PBS remote sync-source name to delete."

Changedpbs_remote_get1 field changed
- addedInput schema / properties / name / description
```
Added value: +"PBS remote sync-source name."
```

Changedpbs_remote_update8 fields changed

addedInput schema / properties / auth_id / description

Added value: +"New PBS auth ID (user@realm or api-token) used to authenticate to the remote."

addedInput schema / properties / comment / description

Added value: +"New free-text comment/description for the remote."

addedInput schema / properties / confirm / description

Added value: +"Set True to execute; False (default) only returns the dry-run plan."

addedInput schema / properties / fingerprint / description

Added value: +"New TLS cert fingerprint of the remote PBS server (public data, not redacted)."

addedInput schema / properties / host / description

Added value: +"New hostname or IP address of the remote PBS server."

addedInput schema / properties / name / description

Added value: +"PBS remote sync-source name to update."

addedInput schema / properties / password / description

Added value: +"New password or API token secret; redacted from plans/logs/ledger."

addedInput schema / properties / port / description

Added value: +"New TCP port of the remote PBS API."

Changedpbs_snapshot_delete6 fields changed

addedInput schema / properties / backup_id / description

Added value: +"Backup group ID (e.g. VMID/CTID or host name)."

addedInput schema / properties / backup_time / description

Added value: +"Snapshot timestamp as a Unix epoch integer, identifying the exact backup run."

addedInput schema / properties / backup_type / description

Added value: +"Backup type of the snapshot: 'vm', 'ct', or 'host'."

addedInput schema / properties / confirm / description

Added value: +"Set True to execute; False (default) only returns the dry-run plan."

addedInput schema / properties / ns / description

Added value: +"Namespace path the snapshot lives in; omit for the root namespace."

addedInput schema / properties / store / description
```
Added value: +"PBS datastore name."
```

Changedpbs_snapshot_notes_set7 fields changed

addedInput schema / properties / backup_id / description

Added value: +"Backup group ID (e.g. VMID/CTID or host name)."

addedInput schema / properties / backup_time / description

Added value: +"Snapshot timestamp as a Unix epoch integer, identifying the exact backup run."

addedInput schema / properties / backup_type / description

Added value: +"Backup type of the snapshot: 'vm', 'ct', or 'host'."

addedInput schema / properties / confirm / description

Added value: +"Set True to execute; False (default) only returns the dry-run plan."

addedInput schema / properties / notes / description

Added value: +"Free-text notes to attach to the snapshot, replacing any existing notes."

addedInput schema / properties / ns / description

Added value: +"Namespace path the snapshot lives in; omit for the root namespace."

addedInput schema / properties / store / description
```
Added value: +"PBS datastore name."
```

Changedpbs_snapshot_protected_set7 fields changed

addedInput schema / properties / backup_id / description

Added value: +"Backup group ID (e.g. VMID/CTID or host name)."

addedInput schema / properties / backup_time / description

Added value: +"Snapshot timestamp as a Unix epoch integer, identifying the exact backup run."

addedInput schema / properties / backup_type / description

Added value: +"Backup type of the snapshot: 'vm', 'ct', or 'host'."

addedInput schema / properties / confirm / description

Added value: +"Set True to execute; False (default) only returns the dry-run plan."

addedInput schema / properties / ns / description

Added value: +"Namespace path the snapshot lives in; omit for the root namespace."

addedInput schema / properties / protected / description

Added value: +"True shields the snapshot from pruning/GC (LOW); False allows auto-deletion (HIGH)."

addedInput schema / properties / store / description
```
Added value: +"PBS datastore name."
```

Changedpbs_snapshots_list4 fields changed
- addedInput schema / properties / backup_id / description
```
Added value: +"Backup group ID (e.g. VMID/CTID or host name) to filter by."
```
- addedInput schema / properties / backup_type / description
```
Added value: +"Backup type filter: 'vm', 'ct', or 'host'."
```
- addedInput schema / properties / ns / description
```
Added value: +"Namespace path to filter by; omit for the root namespace."
```
- addedInput schema / properties / store / description
```
Added value: +"PBS datastore name."
```

Changedpbs_tasks_list4 fields changed

addedInput schema / properties / errors / description

Added value: +"If True, return only tasks that ended in error."

addedInput schema / properties / limit / description

Added value: +"Maximum number of tasks to return."

addedInput schema / properties / node / description

Added value: +"PBS node name; defaults to 'localhost' (standard single-node PBS name)."

addedInput schema / properties / running / description

Added value: +"If True, return only currently-running tasks."

Changedpbs_traffic_control_delete2 fields changed
- addedInput schema / properties / confirm / description
```
Added value: +"Set True to execute; False (default) only returns the dry-run plan."
```
- addedInput schema / properties / name / description
```
Added value: +"Traffic-control rule name to delete."
```

Changedpbs_traffic_control_upsert9 fields changed

addedInput schema / properties / burst_in / description

Added value: +"Inbound burst bandwidth allowance in bytes."

addedInput schema / properties / burst_out / description

Added value: +"Outbound burst bandwidth allowance in bytes."

addedInput schema / properties / comment / description

Added value: +"Free-text comment/description for the rule."

addedInput schema / properties / confirm / description

Added value: +"Set True to execute; False (default) only returns the dry-run plan."

addedInput schema / properties / name / description

Added value: +"Traffic-control rule name; creates it if new, updates it if it already exists."

addedInput schema / properties / network / description
```
Added value: +"Network/CIDR this rule applies to."
```

addedInput schema / properties / rate_in / description

Added value: +"Sustained inbound bandwidth limit in bytes/second."

addedInput schema / properties / rate_out / description

Added value: +"Sustained outbound bandwidth limit in bytes/second."

addedInput schema / properties / timeframe / description

Added value: +"Time window this rule is active (PBS traffic-control timeframe format)."

Changedpbs_verify_start5 fields changed

addedInput schema / properties / backup_id / description

Added value: +"Backup group ID (e.g. VMID/CTID or host name) to scope verification to."

addedInput schema / properties / backup_type / description

Added value: +"Backup type filter: 'vm', 'ct', or 'host'."

addedInput schema / properties / confirm / description

Added value: +"Set True to execute; False (default) only returns the dry-run plan."

addedInput schema / properties / ns / description

Added value: +"Namespace path to scope verification to; omit for the root namespace."

addedInput schema / properties / store / description
```
Added value: +"PBS datastore name to verify."
```

Changedpdm_acl_list2 fields changed

addedInput schema / properties / exact / description

Added value: +"If true, match the given path exactly rather than including sub-paths."

addedInput schema / properties / path / description

Added value: +"Optional ACL path filter, e.g. '/'; omit to list all entries."

Changedpdm_node_status1 field changed
- addedInput schema / properties / node / description
```
Added value: +"PDM node name; PDM is single-node so this defaults to 'localhost'."
```
Changedpdm_pbs_datastores_list1 field changed
- addedInput schema / properties / remote / description
```
Added value: +"PDM-registered PBS remote name, from pdm_remotes_list."
```
Changedpdm_pbs_remote_status1 field changed
- addedInput schema / properties / remote / description
```
Added value: +"PDM-registered PBS remote name, from pdm_remotes_list."
```

Changedpdm_pbs_snapshots_list3 fields changed

addedInput schema / properties / datastore / description

Added value: +"PBS datastore name on the remote to list snapshots from."

addedInput schema / properties / ns / description

Added value: +"Optional PBS namespace filter; omit to use the default namespace."

addedInput schema / properties / remote / description

Added value: +"PDM-registered PBS remote name, from pdm_remotes_list."

Changedpdm_pve_cluster_status1 field changed
- addedInput schema / properties / remote / description
```
Added value: +"PDM-registered PVE remote name, from pdm_remotes_list."
```

Changedpdm_pve_lxc_config5 fields changed

addedInput schema / properties / node / description

Added value: +"Optional PVE node name; not required for PDM to resolve the container."

addedInput schema / properties / remote / description

Added value: +"PDM-registered PVE remote name, from pdm_remotes_list."

addedInput schema / properties / snapshot / description

Added value: +"Optional snapshot name to read config from instead of the live config."

addedInput schema / properties / state / description

Added value: +"PDM config-state selector, required by the PDM API; 'active' returns the current config."

addedInput schema / properties / vmid / description
```
Added value: +"Numeric CT ID on the remote."
```

Changedpdm_pve_lxc_list2 fields changed

addedInput schema / properties / node / description

Added value: +"Optional PVE node name to restrict the listing to; omit to list cluster-wide."

addedInput schema / properties / remote / description

Added value: +"PDM-registered PVE remote name, from pdm_remotes_list."

Changedpdm_pve_lxc_migrate5 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a PLAN only; True submits it."

addedInput schema / properties / online / description

Added value: +"True attempts online (restart) migration — real downtime for LXC; else the container must be stopped."

addedInput schema / properties / remote / description

Added value: +"PDM-registered remote (Proxmox cluster) hosting the container."

addedInput schema / properties / target / description

Added value: +"Destination node name within the same remote's cluster."

addedInput schema / properties / vmid / description

Added value: +"Numeric CTID of the container to migrate, as a string."

Changedpdm_pve_lxc_power4 fields changed

addedInput schema / properties / action / description

Added value: +"Power action: 'start', 'stop', or 'shutdown'."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes."

addedInput schema / properties / remote / description

Added value: +"PDM-registered remote (Proxmox cluster) hosting the container."

addedInput schema / properties / vmid / description

Added value: +"Numeric CTID of the target container, as a string."

Changedpdm_pve_lxc_remote_migrate9 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a PLAN only; True submits it."

addedInput schema / properties / delete / description

Added value: +"True deletes container after successful move (destructive)."

addedInput schema / properties / online / description

Added value: +"True attempts online (restart) migration — real downtime for LXC; else the container must be stopped."

addedInput schema / properties / remote / description

Added value: +"PDM-registered remote (Proxmox cluster) hosting the container."

addedInput schema / properties / target_bridge / description

Added value: +"Source-to-target network bridge mapping, e.g. 'vmbr0:vmbr0'."

addedInput schema / properties / target_remote / description

Added value: +"Destination PDM-registered remote (a different datacenter)."

addedInput schema / properties / target_storage / description

Added value: +"Source-to-target storage mapping, e.g. 'local-lvm:local-lvm'."

addedInput schema / properties / target_vmid / description

Added value: +"CTID on the destination; omit to keep same CTID."

addedInput schema / properties / vmid / description

Added value: +"Numeric CTID of the container to migrate, as a string."

Changedpdm_pve_lxc_snapshot_create5 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a PLAN only; True creates it."

addedInput schema / properties / description / description

Added value: +"Optional free-text note stored with the snapshot."

addedInput schema / properties / remote / description

Added value: +"PDM-registered remote (Proxmox cluster) hosting the container."

addedInput schema / properties / snapname / description
```
Added value: +"Name to give the new snapshot."
```

addedInput schema / properties / vmid / description

Added value: +"Numeric CTID of the target container, as a string."

Changedpdm_pve_lxc_snapshot_delete4 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a PLAN only; True deletes it."

addedInput schema / properties / remote / description

Added value: +"PDM-registered remote (Proxmox cluster) hosting the container."

addedInput schema / properties / snapname / description
```
Added value: +"Name of the snapshot to delete."
```

addedInput schema / properties / vmid / description

Added value: +"Numeric CTID of the target container, as a string."

Changedpdm_pve_lxc_snapshot_rollback4 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a PLAN only; True runs it."

addedInput schema / properties / remote / description

Added value: +"PDM-registered remote (Proxmox cluster) hosting the container."

addedInput schema / properties / snapname / description

Added value: +"Name of the snapshot to roll back to."

addedInput schema / properties / vmid / description

Added value: +"Numeric CTID of the target container, as a string."

Changedpdm_pve_node_list1 field changed
- addedInput schema / properties / remote / description
```
Added value: +"PDM-registered PVE remote name, from pdm_remotes_list."
```

Changedpdm_pve_qemu_config5 fields changed

addedInput schema / properties / node / description

Added value: +"Optional PVE node name; not required for PDM to resolve the VM."

addedInput schema / properties / remote / description

Added value: +"PDM-registered PVE remote name, from pdm_remotes_list."

addedInput schema / properties / snapshot / description

Added value: +"Optional snapshot name to read config from instead of the live config."

addedInput schema / properties / state / description

Added value: +"PDM config-state selector, required by the PDM API; 'active' returns the current config."

addedInput schema / properties / vmid / description
```
Added value: +"Numeric VM ID on the remote."
```

Changedpdm_pve_qemu_list2 fields changed

addedInput schema / properties / node / description

Added value: +"Optional PVE node name to restrict the listing to; omit to list cluster-wide."

addedInput schema / properties / remote / description

Added value: +"PDM-registered PVE remote name, from pdm_remotes_list."

Changedpdm_pve_qemu_migrate5 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a PLAN only; True submits it."

addedInput schema / properties / online / description

Added value: +"True live-migrates the VM; else it must be stopped."

addedInput schema / properties / remote / description

Added value: +"PDM-registered remote (Proxmox cluster) currently hosting the VM."

addedInput schema / properties / target / description

Added value: +"Destination node name within the same remote's cluster."

addedInput schema / properties / vmid / description

Added value: +"Numeric VMID of the VM to migrate, as a string."

Changedpdm_pve_qemu_power4 fields changed

addedInput schema / properties / action / description

Added value: +"Power action: 'start', 'stop', 'shutdown', or 'resume'."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes."

addedInput schema / properties / remote / description

Added value: +"PDM-registered remote (Proxmox cluster) hosting the VM."

addedInput schema / properties / vmid / description

Added value: +"Numeric VMID of the target VM, as a string."

Changedpdm_pve_qemu_remote_migrate9 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a PLAN only; True submits it."

addedInput schema / properties / delete / description

Added value: +"True deletes source VM after successful move (irreversible)."

addedInput schema / properties / online / description

Added value: +"True live-migrates the VM; else it must be stopped."

addedInput schema / properties / remote / description

Added value: +"PDM-registered remote (Proxmox cluster) currently hosting the VM."

addedInput schema / properties / target_bridge / description

Added value: +"Source-to-target network bridge mapping, e.g. 'vmbr0:vmbr0'."

addedInput schema / properties / target_remote / description

Added value: +"Destination PDM-registered remote (a different datacenter)."

addedInput schema / properties / target_storage / description

Added value: +"Source-to-target storage mapping, e.g. 'local-lvm:local-lvm'."

addedInput schema / properties / target_vmid / description

Added value: +"VMID on the destination; omit to keep same VMID."

addedInput schema / properties / vmid / description

Added value: +"Numeric VMID of the VM to migrate, as a string."

Changedpdm_pve_qemu_snapshot_create6 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a PLAN only; True creates it."

addedInput schema / properties / description / description

Added value: +"Optional free-text note stored with the snapshot."

addedInput schema / properties / remote / description

Added value: +"PDM-registered remote (Proxmox cluster) hosting the VM."

addedInput schema / properties / snapname / description
```
Added value: +"Name to give the new snapshot."
```

addedInput schema / properties / vmid / description

Added value: +"Numeric VMID of the target VM, as a string."

addedInput schema / properties / vmstate / description

Added value: +"True includes the VM's RAM state (larger, slower snapshot)."

Changedpdm_pve_qemu_snapshot_delete4 fields changed
- addedInput schema / properties / confirm / description
```
Added value: +"False (default) returns a PLAN only; True deletes it."
```
- addedInput schema / properties / remote / description
```
Added value: +"PDM-registered remote (Proxmox cluster) hosting the VM."
```
- addedInput schema / properties / snapname / description
```
Added value: +"Name of the snapshot to delete."
```
- addedInput schema / properties / vmid / description
```
Added value: +"Numeric VMID of the target VM, as a string."
```
Changedpdm_pve_qemu_snapshot_rollback4 fields changed
- addedInput schema / properties / confirm / description
```
Added value: +"False (default) returns a PLAN only; True runs it."
```
- addedInput schema / properties / remote / description
```
Added value: +"PDM-registered remote (Proxmox cluster) hosting the VM."
```
- addedInput schema / properties / snapname / description
```
Added value: +"Name of the snapshot to roll back to."
```
- addedInput schema / properties / vmid / description
```
Added value: +"Numeric VMID of the target VM, as a string."
```

Changedpdm_pve_resources2 fields changed

addedInput schema / properties / kind / description

Added value: +"Optional resource-type filter, e.g. 'vm', 'storage', 'node', 'sdn'."

addedInput schema / properties / remote / description

Added value: +"PDM-registered PVE remote name, from pdm_remotes_list."

Changedpdm_remote_config_get1 field changed
- addedInput schema / properties / remote_id / description
```
Added value: +"Remote name as shown in pdm_remotes_list."
```
Changedpdm_remote_version1 field changed
- addedInput schema / properties / remote_id / description
```
Added value: +"Remote name as shown in pdm_remotes_list."
```
Changedpdm_users_list1 field changed
- addedInput schema / properties / include_tokens / description
```
Added value: +"If true, include API token entries alongside user accounts."
```

Changedpmg_action_bcc_create5 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / info / description
```
Added value: +"Optional free-text description."
```

addedInput schema / properties / name / description

Added value: +"Name for the new BCC action object."

addedInput schema / properties / original / description

Added value: +"If True, BCC the original unmodified mail instead of the processed copy."

addedInput schema / properties / target / description
```
Added value: +"BCC recipient email address."
```

Changedpmg_action_bcc_update6 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / id_ / description

Added value: +"Compound action object ID (e.g. '13_26') from pmg_action_objects_list."

addedInput schema / properties / info / description

Added value: +"New free-text description; omit to keep current value."

addedInput schema / properties / name / description

Added value: +"New action object name; omit to keep current value."

addedInput schema / properties / original / description

Added value: +"If True, BCC the original unmodified mail instead of the processed copy."

addedInput schema / properties / target / description

Added value: +"New BCC recipient email address; omit to keep current value."

Changedpmg_action_delete2 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / id_ / description

Added value: +"Compound action object ID (e.g. '13_26') from pmg_action_objects_list."

Changedpmg_action_disclaimer_create6 fields changed

addedInput schema / properties / add_separator / description

Added value: +"Insert a separator line before the disclaimer; maps to API param 'add-separator'."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / disclaimer / description

Added value: +"Disclaimer text to append/prepend to mail."

addedInput schema / properties / info / description
```
Added value: +"Optional free-text description."
```

addedInput schema / properties / name / description

Added value: +"Name for the new disclaimer action object."

addedInput schema / properties / position / description

Added value: +"Where to insert the disclaimer: 'start' or 'end'."

Changedpmg_action_disclaimer_update7 fields changed

addedInput schema / properties / add_separator / description

Added value: +"Insert a separator line before the disclaimer; maps to API param 'add-separator'."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / disclaimer / description

Added value: +"New disclaimer text; omit to keep current value."

addedInput schema / properties / id_ / description

Added value: +"Compound action object ID (e.g. '13_26') from pmg_action_objects_list."

addedInput schema / properties / info / description

Added value: +"New free-text description; omit to keep current value."

addedInput schema / properties / name / description

Added value: +"New action object name; omit to keep current value."

addedInput schema / properties / position / description

Added value: +"Where to insert the disclaimer: 'start' or 'end'."

Changedpmg_action_field_create5 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / field / description
```
Added value: +"Mail header field to set."
```
addedInput schema / properties / info / description
```
Added value: +"Optional free-text description."
```

addedInput schema / properties / name / description

Added value: +"Name for the new field-modification action object."

addedInput schema / properties / value / description

Added value: +"Value to assign to the header field."

Changedpmg_action_field_update6 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / field / description

Added value: +"New mail header field to set; required (PMG rejects partial updates)."

addedInput schema / properties / id_ / description

Added value: +"Compound action object ID (e.g. '13_26') from pmg_action_objects_list."

addedInput schema / properties / info / description

Added value: +"New free-text description; omit to keep current value."

addedInput schema / properties / name / description

Added value: +"New action object name; required (PMG rejects partial updates)."

addedInput schema / properties / value / description

Added value: +"New value to assign to the header field; required (PMG rejects partial updates)."

Changedpmg_action_notification_create7 fields changed

addedInput schema / properties / attach / description

Added value: +"If True, attach the original message to the notification."

addedInput schema / properties / body_text / description

Added value: +"Notification email body text; maps to API param 'body'."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / info / description
```
Added value: +"Optional free-text description."
```

addedInput schema / properties / name / description

Added value: +"Name for the new notification action object."

addedInput schema / properties / subject / description
```
Added value: +"Notification email subject line."
```

addedInput schema / properties / to / description

Added value: +"Notification recipient email address."

Changedpmg_action_notification_update8 fields changed

addedInput schema / properties / attach / description

Added value: +"If True, attach the original message to the notification."

addedInput schema / properties / body_text / description

Added value: +"New notification body text; maps to API param 'body'; required (PMG rejects partial updates)."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / id_ / description

Added value: +"Compound action object ID (e.g. '13_26') from pmg_action_objects_list."

addedInput schema / properties / info / description

Added value: +"New free-text description; omit to keep current value."

addedInput schema / properties / name / description

Added value: +"New action object name; required (PMG rejects partial updates)."

addedInput schema / properties / subject / description

Added value: +"New notification subject line; required (PMG rejects partial updates)."

addedInput schema / properties / to / description

Added value: +"New notification recipient email address; required (PMG rejects partial updates)."

Changedpmg_action_removeattachments_create6 fields changed

addedInput schema / properties / all_ / description

Added value: +"If True, remove all attachments; maps to API param 'all'."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / info / description
```
Added value: +"Optional free-text description."
```

addedInput schema / properties / name / description

Added value: +"Name for the new remove-attachments action object."

addedInput schema / properties / quarantine / description

Added value: +"If True, quarantine removed attachments instead of discarding them."

addedInput schema / properties / text / description

Added value: +"Replacement text inserted in place of removed attachments."

Changedpmg_action_removeattachments_update7 fields changed

addedInput schema / properties / all_ / description

Added value: +"If True, remove all attachments; maps to API param 'all'."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / id_ / description

Added value: +"Compound action object ID (e.g. '13_26') from pmg_action_objects_list."

addedInput schema / properties / info / description

Added value: +"New free-text description; omit to keep current value."

addedInput schema / properties / name / description

Added value: +"New action object name; omit to keep current value."

addedInput schema / properties / quarantine / description

Added value: +"If True, quarantine removed attachments instead of discarding them."

addedInput schema / properties / text / description

Added value: +"New replacement text; omit to keep current value."

Changedpmg_backup_create4 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / node / description

Added value: +"PMG node name; defaults to the configured node."

addedInput schema / properties / notify / description

Added value: +"Notification mode: always|error|never (default never)."

addedInput schema / properties / statistic / description

Added value: +"Whether to include mail statistics in the backup (default True)."

Changedpmg_doctor1 field changed
- addedInput schema / properties / node / description
```
Added value: +"PMG node name; defaults to the configured node."
```

Changedpmg_domain_create3 fields changed

addedInput schema / properties / comment / description

Added value: +"Optional free-text comment stored with the domain."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / domain / description

Added value: +"Domain name to add as a managed mail domain, e.g. 'example.com'."

Changedpmg_domain_delete2 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / domain / description

Added value: +"Managed mail domain name to delete, e.g. 'example.com'."

Changedpmg_mynetworks_add3 fields changed

addedInput schema / properties / cidr / description

Added value: +"Network in CIDR notation to trust as an internal relay, e.g. '10.0.0.0/8'."

addedInput schema / properties / comment / description

Added value: +"Optional free-text comment stored with the mynetworks entry."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

Changedpmg_mynetworks_remove2 fields changed

addedInput schema / properties / cidr / description

Added value: +"Network in CIDR notation to remove from the trusted mynetworks list."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

Changedpmg_node_rrddata3 fields changed
- addedInput schema / properties / cf / description
```
Added value: +"RRD consolidation function: AVERAGE|MAX."
```
- addedInput schema / properties / node / description
```
Added value: +"PMG node name; defaults to the configured node."
```
- addedInput schema / properties / timeframe / description
```
Added value: +"RRD timeframe: hour|day|week|month|year."
```
Changedpmg_node_status1 field changed
- addedInput schema / properties / node / description
```
Added value: +"PMG node name; defaults to the configured node."
```

Changedpmg_node_syslog6 fields changed

addedInput schema / properties / limit / description

Added value: +"Maximum syslog entries to return."

addedInput schema / properties / node / description

Added value: +"PMG node name; defaults to the configured node."

addedInput schema / properties / service / description

Added value: +"Filter syslog entries by service name."

addedInput schema / properties / since / description

Added value: +"Only return entries at or after this time (journalctl-style time spec)."

addedInput schema / properties / start / description

Added value: +"Pagination offset into the syslog entries."

addedInput schema / properties / until / description

Added value: +"Only return entries at or before this time (journalctl-style time spec)."

Changedpmg_postfix_flush2 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / node / description

Added value: +"PMG node name; defaults to the configured node."

Changedpmg_postfix_qshape1 field changed
- addedInput schema / properties / node / description
```
Added value: +"PMG node name; defaults to the configured node."
```

Changedpmg_quarantine_action3 fields changed

addedInput schema / properties / action / description

Added value: +"Action to apply: deliver|delete|mark-seen|mark-unseen|blocklist|welcomelist."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / mail_ids / description

Added value: +"Single quarantined mail ID, or a comma-separated list of IDs, to act on."

Changedpmg_quarantine_attachment3 fields changed

addedInput schema / properties / end / description

Added value: +"Unix epoch end of the window; omit for no upper bound."

addedInput schema / properties / pmail / description

Added value: +"Scope the attachment quarantine read to this user's mailbox; defaults to the authenticated PMG user."

addedInput schema / properties / start / description

Added value: +"Unix epoch start of the window; omit for no lower bound."

Changedpmg_quarantine_blocklist_add3 fields changed

addedInput schema / properties / address / description

Added value: +"Email address to add to the quarantine blocklist."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / pmail / description

Added value: +"Scope the blocklist entry to this user's mailbox; defaults to the authenticated PMG user."

Changedpmg_quarantine_blocklist_list1 field changed

addedInput schema / properties / pmail / description

Added value: +"Scope the blocklist read to this user's mailbox; defaults to the authenticated PMG user."

Changedpmg_quarantine_blocklist_remove3 fields changed

addedInput schema / properties / address / description

Added value: +"Email address to remove from the quarantine blocklist."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / pmail / description

Added value: +"Scope the blocklist removal to this user's mailbox; defaults to the authenticated PMG user."

Changedpmg_quarantine_spamusers3 fields changed

addedInput schema / properties / end / description

Added value: +"Unix epoch end of the window; omit for no upper bound."

addedInput schema / properties / quarantine_type / description

Added value: +"Quarantine type to list users for: spam|virus|attachment (default spam)."

addedInput schema / properties / start / description

Added value: +"Unix epoch start of the window; omit for no lower bound."

Changedpmg_quarantine_virus3 fields changed

addedInput schema / properties / end / description

Added value: +"Unix epoch end of the window; omit for no upper bound."

addedInput schema / properties / pmail / description

Added value: +"Scope the virus quarantine read to this user's mailbox; defaults to the authenticated PMG user."

addedInput schema / properties / start / description

Added value: +"Unix epoch start of the window; omit for no lower bound."

Changedpmg_quarantine_welcomelist_add3 fields changed

addedInput schema / properties / address / description

Added value: +"Email address to add to the quarantine welcomelist."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / pmail / description

Added value: +"Scope the welcomelist entry to this user's mailbox; defaults to the authenticated PMG user."

Changedpmg_quarantine_welcomelist_list1 field changed

addedInput schema / properties / pmail / description

Added value: +"Scope the welcomelist read to this user's mailbox; defaults to the authenticated PMG user."

Changedpmg_quarantine_welcomelist_remove3 fields changed

addedInput schema / properties / address / description

Added value: +"Email address to remove from the quarantine welcomelist."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / pmail / description

Added value: +"Scope the welcomelist removal to this user's mailbox; defaults to the authenticated PMG user."

Changedpmg_ruledb_rule_action_attach3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / id_ / description

Added value: +"Rule ID to attach the action group to."

addedInput schema / properties / ogroup / description

Added value: +"Numeric action group ID from pmg_action_objects_list to attach to the rule."

Changedpmg_ruledb_rule_action_detach3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / id_ / description

Added value: +"Rule ID to detach the action group from."

addedInput schema / properties / ogroup / description

Added value: +"Numeric action group ID currently attached to the rule to detach."

Changedpmg_ruledb_rule_actions_list1 field changed
- addedInput schema / properties / id_ / description
```
Added value: +"RuleDB rule ID (positive integer string, e.g. '100')."
```

Changedpmg_ruledb_rule_create13 fields changed

addedInput schema / properties / active / description

Added value: +"Whether the rule is active on creation; defaults False since active rules affect live mail processing."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / direction / description

Added value: +"Mail direction the rule applies to: 0=inbound, 1=outbound, 2=both."

addedInput schema / properties / from_and / description

Added value: +"AND (True) vs OR (False) logic across attached 'from' groups."

addedInput schema / properties / from_invert / description

Added value: +"If True, invert the 'from' group match."

addedInput schema / properties / name / description
```
Added value: +"Name for the new RuleDB rule."
```

addedInput schema / properties / priority / description

Added value: +"Rule priority 0-100; lower numbers are evaluated with higher priority."

addedInput schema / properties / to_and / description

Added value: +"AND (True) vs OR (False) logic across attached 'to' groups."

addedInput schema / properties / to_invert / description

Added value: +"If True, invert the 'to' group match."

addedInput schema / properties / what_and / description

Added value: +"AND (True) vs OR (False) logic across attached 'what' groups."

addedInput schema / properties / what_invert / description

Added value: +"If True, invert the 'what' group match."

addedInput schema / properties / when_and / description

Added value: +"AND (True) vs OR (False) logic across attached 'when' groups."

addedInput schema / properties / when_invert / description

Added value: +"If True, invert the 'when' group match."

Changedpmg_ruledb_rule_delete2 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / id_ / description

Added value: +"Rule ID (positive integer string, e.g. '100')."

Changedpmg_ruledb_rule_from_attach3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / id_ / description

Added value: +"Rule ID to attach the group to."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'who' group ID from pmg_who_groups_list to attach as the 'from' condition."

Changedpmg_ruledb_rule_from_detach3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / id_ / description

Added value: +"Rule ID to detach the group from."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'who' group ID currently attached as the 'from' condition to detach."

Changedpmg_ruledb_rule_from_list1 field changed
- addedInput schema / properties / id_ / description
```
Added value: +"RuleDB rule ID (positive integer string, e.g. '100')."
```
Changedpmg_ruledb_rule_get1 field changed
- addedInput schema / properties / id_ / description
```
Added value: +"RuleDB rule ID (positive integer string, e.g. '100')."
```

Changedpmg_ruledb_rule_to_attach3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / id_ / description

Added value: +"Rule ID to attach the group to."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'who' group ID from pmg_who_groups_list to attach as the 'to' condition."

Changedpmg_ruledb_rule_to_detach3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / id_ / description

Added value: +"Rule ID to detach the group from."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'who' group ID currently attached as the 'to' condition to detach."

Changedpmg_ruledb_rule_to_list1 field changed
- addedInput schema / properties / id_ / description
```
Added value: +"RuleDB rule ID (positive integer string, e.g. '100')."
```

Changedpmg_ruledb_rule_update14 fields changed

addedInput schema / properties / active / description

Added value: +"Whether the rule is active; True begins live mail processing under this rule."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / direction / description

Added value: +"Mail direction the rule applies to: 0=inbound, 1=outbound, 2=both."

addedInput schema / properties / from_and / description

Added value: +"AND (True) vs OR (False) logic across attached 'from' groups."

addedInput schema / properties / from_invert / description

Added value: +"If True, invert the 'from' group match."

addedInput schema / properties / id_ / description

Added value: +"Rule ID (positive integer string, e.g. '100')."

addedInput schema / properties / name / description

Added value: +"New rule name; omit to keep current value."

addedInput schema / properties / priority / description

Added value: +"New rule priority 0-100; lower numbers are evaluated with higher priority."

addedInput schema / properties / to_and / description

Added value: +"AND (True) vs OR (False) logic across attached 'to' groups."

addedInput schema / properties / to_invert / description

Added value: +"If True, invert the 'to' group match."

addedInput schema / properties / what_and / description

Added value: +"AND (True) vs OR (False) logic across attached 'what' groups."

addedInput schema / properties / what_invert / description

Added value: +"If True, invert the 'what' group match."

addedInput schema / properties / when_and / description

Added value: +"AND (True) vs OR (False) logic across attached 'when' groups."

addedInput schema / properties / when_invert / description

Added value: +"If True, invert the 'when' group match."

Changedpmg_ruledb_rule_what_attach3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / id_ / description

Added value: +"Rule ID to attach the group to."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'what' group ID from pmg_what_groups_list to attach as a content condition."

Changedpmg_ruledb_rule_what_detach3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / id_ / description

Added value: +"Rule ID to detach the group from."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'what' group ID currently attached as a content condition to detach."

Changedpmg_ruledb_rule_what_list1 field changed
- addedInput schema / properties / id_ / description
```
Added value: +"RuleDB rule ID (positive integer string, e.g. '100')."
```

Changedpmg_ruledb_rule_when_attach3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / id_ / description

Added value: +"Rule ID to attach the group to."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'when' group ID from pmg_when_groups_list to attach as a timeframe condition."

Changedpmg_ruledb_rule_when_detach3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / id_ / description

Added value: +"Rule ID to detach the group from."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'when' group ID currently attached as a timeframe condition to detach."

Changedpmg_ruledb_rule_when_list1 field changed
- addedInput schema / properties / id_ / description
```
Added value: +"RuleDB rule ID (positive integer string, e.g. '100')."
```

Changedpmg_service_control4 fields changed

addedInput schema / properties / action / description

Added value: +"Control action: start|stop|restart|reload."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / node / description

Added value: +"PMG node name; defaults to the configured node."

addedInput schema / properties / service / description

Added value: +"PMG service name, e.g. postfix, pmgproxy, pmgdaemon, clamav, spamassassin."

Changedpmg_service_status2 fields changed

addedInput schema / properties / node / description

Added value: +"PMG node name; defaults to the configured node."

addedInput schema / properties / service / description

Added value: +"PMG service name, e.g. postfix, pmgproxy, pmgdaemon, pmgmirror, pmgtunnel, pmg-smtp-filter, clamav, spamassassin."

Changedpmg_spam_config_update12 fields changed

addedInput schema / properties / bounce_score / description

Added value: +"Spam score threshold added for bounce/NDR-shaped messages; omit to leave unchanged."

addedInput schema / properties / clamav_heuristic_score / description

Added value: +"Spam score added when ClamAV heuristic detection fires; omit to leave unchanged."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / delete / description

Added value: +"Comma-separated field names to reset to their PMG defaults."

addedInput schema / properties / extract_text / description

Added value: +"Whether to extract text from attachments for spam scanning; omit to leave unchanged."

addedInput schema / properties / languages / description

Added value: +"Space-separated language codes used for spam language-based scoring; omit to leave unchanged."

addedInput schema / properties / maxspamsize / description

Added value: +"Maximum message size in bytes scanned for spam; omit to leave unchanged."

addedInput schema / properties / rbl_checks / description

Added value: +"Whether to enable RBL (realtime blocklist) checks; omit to leave unchanged."

addedInput schema / properties / use_awl / description

Added value: +"Whether to enable the auto-whitelist; omit to leave unchanged."

addedInput schema / properties / use_bayes / description

Added value: +"Whether to enable Bayesian spam classification; omit to leave unchanged."

addedInput schema / properties / use_razor / description

Added value: +"Whether to enable Razor collaborative spam filtering; omit to leave unchanged."

addedInput schema / properties / wl_bounce_relays / description

Added value: +"Whitelisted bounce-relay hosts, space-separated; omit to leave unchanged."

Changedpmg_statistics_domains2 fields changed

addedInput schema / properties / end / description

Added value: +"Unix epoch end of the stats window; omit for no upper bound."

addedInput schema / properties / start / description

Added value: +"Unix epoch start of the stats window; omit for no lower bound."

Changedpmg_statistics_mailcount3 fields changed

addedInput schema / properties / end / description

Added value: +"Unix epoch end of the window; omit for no upper bound."

addedInput schema / properties / start / description

Added value: +"Unix epoch start of the window; omit for no lower bound."

addedInput schema / properties / timespan / description

Added value: +"Histogram bucket size in seconds, 3600-31622400 (default 3600 = 1 hour)."

Changedpmg_statistics_receiver4 fields changed

addedInput schema / properties / end / description

Added value: +"Unix epoch end of the window; omit for no upper bound."

addedInput schema / properties / filter_ / description

Added value: +"Optional search string to filter recipients."

addedInput schema / properties / orderby / description

Added value: +"Raw sort spec passed through to the PMG API."

addedInput schema / properties / start / description

Added value: +"Unix epoch start of the window; omit for no lower bound."

Changedpmg_statistics_recent1 field changed
- addedInput schema / properties / hours / description
```
Added value: +"Lookback window in hours, 1-24 (default 1)."
```

Changedpmg_statistics_sender4 fields changed

addedInput schema / properties / end / description

Added value: +"Unix epoch end of the window; omit for no upper bound."

addedInput schema / properties / filter_ / description

Added value: +"Optional search string to filter senders."

addedInput schema / properties / orderby / description

Added value: +"Accepted for compatibility but ignored — PMG 9.1 rejects orderby on this endpoint."

addedInput schema / properties / start / description

Added value: +"Unix epoch start of the window; omit for no lower bound."

Changedpmg_statistics_spamscores2 fields changed

addedInput schema / properties / end / description

Added value: +"Unix epoch end of the stats window; omit for no upper bound."

addedInput schema / properties / start / description

Added value: +"Unix epoch start of the stats window; omit for no lower bound."

Changedpmg_statistics_virus2 fields changed

addedInput schema / properties / end / description

Added value: +"Unix epoch end of the stats window; omit for no upper bound."

addedInput schema / properties / start / description

Added value: +"Unix epoch start of the stats window; omit for no lower bound."

Changedpmg_tasks_list9 fields changed
- addedInput schema / properties / errors / description
```
Added value: +"If True, return only failed tasks."
```
- addedInput schema / properties / limit / description
```
Added value: +"Maximum tasks to return."
```
- addedInput schema / properties / node / description
```
Added value: +"PMG node name; defaults to the configured node."
```
- addedInput schema / properties / since / description
```
Added value: +"Unix epoch: only tasks started at or after this time."
```
- addedInput schema / properties / start / description
```
Added value: +"Pagination offset into the task list."
```
- addedInput schema / properties / statusfilter / description
```
Added value: +"Filter tasks by status text."
```
- addedInput schema / properties / typefilter / description
```
Added value: +"Filter tasks by task type."
```
- addedInput schema / properties / until / description
```
Added value: +"Unix epoch: only tasks started at or before this time."
```
- addedInput schema / properties / userfilter / description
```
Added value: +"Filter tasks by the user that started them."
```

Changedpmg_tracker_detail4 fields changed

addedInput schema / properties / end / description

Added value: +"Unix epoch end of the tracker window; omit for no upper bound."

addedInput schema / properties / id_ / description

Added value: +"Mail/queue tracker ID to fetch detail for."

addedInput schema / properties / node / description

Added value: +"PMG node name; defaults to the configured node."

addedInput schema / properties / start / description

Added value: +"Unix epoch start of the tracker window; omit for no lower bound."

Changedpmg_tracker_list9 fields changed

addedInput schema / properties / end / description

Added value: +"Unix epoch end of the tracker window; omit for no upper bound."

addedInput schema / properties / from_ / description

Added value: +"Filter by envelope sender address."

addedInput schema / properties / greylist / description

Added value: +"If set, filter to (or exclude) greylisted entries."

addedInput schema / properties / limit / description

Added value: +"Maximum entries to return, 0-100000 (default 2000)."

addedInput schema / properties / ndr / description

Added value: +"If set, filter to (or exclude) non-delivery-report entries."

addedInput schema / properties / node / description

Added value: +"PMG node name; defaults to the configured node."

addedInput schema / properties / start / description

Added value: +"Unix epoch start of the tracker window; omit for no lower bound."

addedInput schema / properties / target / description
```
Added value: +"Filter by recipient address."
```

addedInput schema / properties / xfilter / description

Added value: +"Free-text filter applied to tracker entries."

Changedpmg_transport_create7 fields changed

addedInput schema / properties / comment / description

Added value: +"Optional free-text comment stored with the transport rule."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / domain / description

Added value: +"Destination domain the transport rule applies to."

addedInput schema / properties / host / description

Added value: +"Next-hop relay hostname or IP for mail to this domain."

addedInput schema / properties / port / description

Added value: +"TCP port to connect to on the relay host, 1-65535 (default 25)."

addedInput schema / properties / protocol / description

Added value: +"Transport protocol: smtp|lmtp (default smtp)."

addedInput schema / properties / use_mx / description

Added value: +"Whether to use MX lookup for the relay host (default True)."

Changedpmg_transport_delete2 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / domain / description

Added value: +"Destination domain whose transport rule should be deleted."

Changedpmg_what_group_create5 fields changed

addedInput schema / properties / and_ / description

Added value: +"AND (True) vs OR (False) logic across group members; maps to API param 'and'."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / info / description

Added value: +"Optional free-text description of the group."

addedInput schema / properties / invert / description

Added value: +"If True, invert the group's match result."

addedInput schema / properties / name / description

Added value: +"Name for the new 'what' object group."

Changedpmg_what_group_delete2 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'what' object group ID (e.g. '8') from pmg_what_groups_list."

Changedpmg_what_group_get1 field changed

addedInput schema / properties / ogroup / description

Added value: +"'what' object group numeric ID (e.g. '2') from pmg_what_groups_list — not the group name."

Changedpmg_what_group_objects1 field changed

addedInput schema / properties / ogroup / description

Added value: +"'what' object group numeric ID (e.g. '2') from pmg_what_groups_list — not the group name."

Changedpmg_what_group_update6 fields changed

addedInput schema / properties / and_ / description

Added value: +"AND (True) vs OR (False) logic across group members; maps to API param 'and'."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / info / description

Added value: +"New free-text description; omit to keep current value."

addedInput schema / properties / invert / description

Added value: +"If True, invert the group's match result."

addedInput schema / properties / name / description

Added value: +"New name for the group; omit to keep current value."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'what' object group ID (e.g. '8') from pmg_what_groups_list."

Changedpmg_what_object_add10 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / contenttype / description

Added value: +"MIME content type to match; used for type_='contenttype'/'archivefilter'."

addedInput schema / properties / field / description

Added value: +"Mail header field name to match; used for type_='matchfield'."

addedInput schema / properties / filename / description

Added value: +"Filename pattern to match; used for type_='filenamefilter'/'archivefilenamefilter'."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'what' object group ID (e.g. '8') from pmg_what_groups_list."

addedInput schema / properties / only_content / description

Added value: +"Match content only, not filename; maps to API param 'only-content'."

addedInput schema / properties / spamlevel / description

Added value: +"Spam score threshold; used for type_='spamfilter'."

addedInput schema / properties / top_part_only / description

Added value: +"Restrict match to the top MIME part only; maps to API param 'top-part-only'."

addedInput schema / properties / type_ / description

Added value: +"Object type: contenttype|matchfield|spamfilter|virusfilter|filenamefilter|archivefilter|archivefilenamefilter."

addedInput schema / properties / value / description

Added value: +"Value/pattern to match against the field; used for type_='matchfield'."

Changedpmg_what_object_delete3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / id_ / description

Added value: +"Object ID (numeric string) from pmg_what_group_objects."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'what' object group ID (e.g. '8') from pmg_what_groups_list."

Changedpmg_what_object_update11 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / contenttype / description

Added value: +"New MIME content type; used for type_='contenttype'/'archivefilter'."

addedInput schema / properties / field / description

Added value: +"Mail header field name to match; used for type_='matchfield'."

addedInput schema / properties / filename / description

Added value: +"New filename pattern; used for type_='filenamefilter'/'archivefilenamefilter'."

addedInput schema / properties / id_ / description

Added value: +"Object ID (numeric string) from pmg_what_group_objects."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'what' object group ID (e.g. '8') from pmg_what_groups_list."

addedInput schema / properties / only_content / description

Added value: +"Match content only, not filename; maps to API param 'only-content'."

addedInput schema / properties / spamlevel / description

Added value: +"New spam score threshold; used for type_='spamfilter'."

addedInput schema / properties / top_part_only / description

Added value: +"Restrict match to the top MIME part only; maps to API param 'top-part-only'."

addedInput schema / properties / type_ / description

Added value: +"Object type: contenttype|matchfield|spamfilter|virusfilter|filenamefilter|archivefilter|archivefilenamefilter."

addedInput schema / properties / value / description

Added value: +"Value/pattern to match against the field; used for type_='matchfield'."

Changedpmg_when_group_create5 fields changed

addedInput schema / properties / and_ / description

Added value: +"AND (True) vs OR (False) logic across group members; maps to API param 'and'."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / info / description

Added value: +"Optional free-text description of the group."

addedInput schema / properties / invert / description

Added value: +"If True, invert the group's match result."

addedInput schema / properties / name / description

Added value: +"Name for the new 'when' object group."

Changedpmg_when_group_delete2 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'when' object group ID (e.g. '4') from pmg_when_groups_list."

Changedpmg_when_group_get1 field changed

addedInput schema / properties / ogroup / description

Added value: +"'when' object group numeric ID (e.g. '2') from pmg_when_groups_list — not the group name."

Changedpmg_when_group_objects1 field changed

addedInput schema / properties / ogroup / description

Added value: +"'when' object group numeric ID (e.g. '2') from pmg_when_groups_list — not the group name."

Changedpmg_when_group_update6 fields changed

addedInput schema / properties / and_ / description

Added value: +"AND (True) vs OR (False) logic across group members; maps to API param 'and'."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / info / description

Added value: +"New free-text description; omit to keep current value."

addedInput schema / properties / invert / description

Added value: +"If True, invert the group's match result."

addedInput schema / properties / name / description

Added value: +"New name for the group; omit to keep current value."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'when' object group ID (e.g. '4') from pmg_when_groups_list."

Changedpmg_when_object_add4 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / end / description

Added value: +"Timeframe end time in H:i format (e.g. '17:00')."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'when' object group ID (e.g. '4') from pmg_when_groups_list."

addedInput schema / properties / start / description

Added value: +"Timeframe start time in H:i format (e.g. '08:00')."

Changedpmg_when_object_delete3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / id_ / description

Added value: +"Object ID (numeric string) from pmg_when_group_objects."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'when' object group ID (e.g. '4') from pmg_when_groups_list."

Changedpmg_when_object_update5 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / end / description

Added value: +"New timeframe end time in H:i format (e.g. '17:00'); required, PMG rejects partial updates."

addedInput schema / properties / id_ / description

Added value: +"Object ID (numeric string) from pmg_when_group_objects."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'when' object group ID (e.g. '4') from pmg_when_groups_list."

addedInput schema / properties / start / description

Added value: +"New timeframe start time in H:i format (e.g. '08:00'); required, PMG rejects partial updates."

Changedpmg_who_group_create5 fields changed

addedInput schema / properties / and_ / description

Added value: +"AND (True) vs OR (False) logic across group members; maps to API param 'and'."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / info / description

Added value: +"Optional free-text description of the group."

addedInput schema / properties / invert / description

Added value: +"If True, invert the group's match result."

addedInput schema / properties / name / description

Added value: +"Name for the new 'who' object group."

Changedpmg_who_group_delete2 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'who' object group ID (e.g. '2') from pmg_who_groups_list."

Changedpmg_who_group_get1 field changed

addedInput schema / properties / ogroup / description

Added value: +"'who' object group numeric ID (e.g. '2') from pmg_who_groups_list — not the group name."

Changedpmg_who_group_objects1 field changed

addedInput schema / properties / ogroup / description

Added value: +"'who' object group numeric ID (e.g. '2') from pmg_who_groups_list — not the group name."

Changedpmg_who_group_update6 fields changed

addedInput schema / properties / and_ / description

Added value: +"AND (True) vs OR (False) logic across group members; maps to API param 'and'."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / info / description

Added value: +"New free-text description; omit to keep current value."

addedInput schema / properties / invert / description

Added value: +"If True, invert the group's match result."

addedInput schema / properties / name / description

Added value: +"New name for the group; omit to keep current value."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'who' object group ID (e.g. '2') from pmg_who_groups_list."

Changedpmg_who_object_add11 fields changed

addedInput schema / properties / cidr / description

Added value: +"CIDR network to match; required when type_='network'."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / domain / description

Added value: +"Domain to match; required when type_='domain'."

addedInput schema / properties / email / description

Added value: +"Email address to match; required when type_='email'."

addedInput schema / properties / group / description

Added value: +"LDAP group name; used when type_='ldap'."

addedInput schema / properties / ip / description

Added value: +"IP address to match; required when type_='ip'."

addedInput schema / properties / mode / description

Added value: +"LDAP lookup mode; used when type_='ldap'."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'who' object group ID (e.g. '2') from pmg_who_groups_list."

addedInput schema / properties / profile / description

Added value: +"LDAP profile name; used when type_='ldap'."

addedInput schema / properties / regex / description

Added value: +"Regex pattern to match; required when type_='regex'."

addedInput schema / properties / type_ / description

Added value: +"Object type: email|domain|regex|ip|network|ldap — selects which sub-path/fields apply."

Changedpmg_who_object_delete3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / id_ / description

Added value: +"Object ID (numeric string) from pmg_who_group_objects."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'who' object group ID (e.g. '2') from pmg_who_groups_list."

Changedpmg_who_object_update12 fields changed

addedInput schema / properties / cidr / description

Added value: +"New CIDR network; used when type_='network'."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; True executes the mutation."

addedInput schema / properties / domain / description

Added value: +"New domain; used when type_='domain'."

addedInput schema / properties / email / description

Added value: +"New email address; used when type_='email'."

addedInput schema / properties / group / description

Added value: +"LDAP group name; used when type_='ldap'."

addedInput schema / properties / id_ / description

Added value: +"Object ID (numeric string) from pmg_who_group_objects."

addedInput schema / properties / ip / description

Added value: +"New IP address; used when type_='ip'."

addedInput schema / properties / mode / description

Added value: +"LDAP lookup mode; used when type_='ldap'."

addedInput schema / properties / ogroup / description

Added value: +"Numeric 'who' object group ID (e.g. '2') from pmg_who_groups_list."

addedInput schema / properties / profile / description

Added value: +"LDAP profile name; used when type_='ldap'."

addedInput schema / properties / regex / description

Added value: +"New regex pattern; used when type_='regex'."

addedInput schema / properties / type_ / description

Added value: +"Object type: email|domain|regex|ip|network|ldap — selects which sub-path/fields apply."

Changedpve_acl_modify7 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN preview; True executes the mutation."

addedInput schema / properties / delete / description

Added value: +"False to grant the roles, True to revoke them."

addedInput schema / properties / kind / description

Added value: +"Principal type of target: 'user', 'group', or 'token'."

addedInput schema / properties / path / description

Added value: +"Resource path the ACL entry applies to, e.g. '/vms/100' or '/'."

addedInput schema / properties / propagate / description

Added value: +"Whether the grant propagates to child paths below `path`."

addedInput schema / properties / roles / description

Added value: +"Comma-separated role id(s) to grant or revoke, e.g. 'PVEVMAdmin'."

addedInput schema / properties / target / description

Added value: +"Principal the ACL entry applies to: userid, groupid, or tokenid depending on kind."

Changedpve_acl_prune7 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN preview; True executes the mutation."

addedInput schema / properties / kind / description

Added value: +"Principal type of target: 'user', 'group', or 'token'."

addedInput schema / properties / narrow_path / description

Added value: +"Optional narrower path to scope the re-grant to, instead of the original path."

addedInput schema / properties / narrow_role / description

Added value: +"Optional narrower role id to re-grant in place of the removed one."

addedInput schema / properties / path / description

Added value: +"Resource path of the over-broad ACL entry to prune, e.g. '/'."

addedInput schema / properties / roleid / description

Added value: +"The over-broad role id to remove, as identified by pve_overbroad_grants."

addedInput schema / properties / target / description

Added value: +"Principal the over-broad grant belongs to: userid, groupid, or tokenid depending on kind."

Changedpve_acme_account_create5 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the account registration."

addedInput schema / properties / contact / description

Added value: +"Contact email address for the ACME account (CA renewal/expiry notices)."

addedInput schema / properties / directory / description

Added value: +"ACME directory URL of the CA to register with; omit to use PVE's default CA."

addedInput schema / properties / name / description

Added value: +"Name to register the new ACME account under (cluster/acme/account/{name})."

addedInput schema / properties / tos_url / description

Added value: +"URL of the CA's terms-of-service to accept; omit to accept the CA's default ToS."

Changedpve_acme_account_delete2 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the irreversible deletion."

addedInput schema / properties / name / description

Added value: +"Name of the ACME account to deactivate and delete from the CA."

Changedpve_acme_account_update3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the update."

addedInput schema / properties / contact / description

Added value: +"New contact email address for the ACME account; omit to leave unchanged."

addedInput schema / properties / name / description

Added value: +"Name of the existing ACME account to update."

Changedpve_acme_cert_order3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True submits the ACME order task."

addedInput schema / properties / force / description

Added value: +"Overwrite an existing custom certificate on the node if one is already installed."

addedInput schema / properties / node / description

Added value: +"Target PVE node name; omit to use the configured default node."

Changedpve_acme_cert_renew3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True submits the ACME renewal task."

addedInput schema / properties / force / description

Added value: +"Renew now even if the current certificate has more than 30 days left before expiry."

addedInput schema / properties / node / description

Added value: +"Target PVE node name; omit to use the configured default node."

Changedpve_acme_cert_revoke2 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True submits the irreversible revocation task."

addedInput schema / properties / node / description

Added value: +"Target PVE node name; omit to use the configured default node."

Changedpve_acme_plugin_create6 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the plugin creation."

addedInput schema / properties / data / description

Added value: +"Plugin-specific credential/config data (e.g. API tokens) required by the DNS provider."

addedInput schema / properties / disable / description

Added value: +"Set to disable the plugin on creation; omit to leave it enabled."

addedInput schema / properties / dns_api / description

Added value: +"DNS provider API name for a DNS-01 challenge (e.g. 'cf', 'route53'); maps to PVE's 'api' field."

addedInput schema / properties / plugin_id / description

Added value: +"Identifier for the new ACME DNS challenge plugin (cluster/acme/plugins/{plugin_id})."

addedInput schema / properties / plugin_type / description

Added value: +"ACME challenge plugin type, e.g. 'dns' for a DNS-01 challenge plugin."

Changedpve_acme_plugin_delete2 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the deletion."

addedInput schema / properties / plugin_id / description

Added value: +"Identifier of the ACME DNS challenge plugin to delete."

Changedpve_acme_plugin_update6 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the update."

addedInput schema / properties / data / description

Added value: +"New plugin-specific credential/config data; omit to leave unchanged."

addedInput schema / properties / digest / description

Added value: +"Config digest for optimistic-locking the update against concurrent changes; omit to skip the check."

addedInput schema / properties / disable / description

Added value: +"Set to enable/disable the plugin; omit to leave unchanged."

addedInput schema / properties / dns_api / description

Added value: +"New DNS provider API name for a DNS-01 challenge; maps to PVE's 'api' field. Omit to leave unchanged."

addedInput schema / properties / plugin_id / description

Added value: +"Identifier of the existing ACME DNS challenge plugin to update."

Changedpve_agent_exec5 fields changed

addedInput schema / properties / command / description

Added value: +"Argv list to run in the guest via the qemu-agent."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN; true executes."

addedInput schema / properties / node / description

Added value: +"PVE node the guest runs on; omit to resolve automatically."

addedInput schema / properties / timeout / description

Added value: +"Seconds to poll for exit before returning status='running'."

addedInput schema / properties / vmid / description

Added value: +"Numeric VMID of the target QEMU guest (allowlist-scoped)."

Changedpve_agent_file_read3 fields changed

addedInput schema / properties / file / description

Added value: +"Absolute path of the file to read inside the guest."

addedInput schema / properties / node / description

Added value: +"Proxmox node name hosting the guest; auto-detected if omitted."

addedInput schema / properties / vmid / description

Added value: +"Numeric VM ID of the guest to read from via the qemu-agent."

Changedpve_agent_file_write5 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the write."

addedInput schema / properties / content / description

Added value: +"File content to write; unconditionally redacted from the ledger (fingerprint only)."

addedInput schema / properties / file / description

Added value: +"Absolute path of the file to write inside the guest."

addedInput schema / properties / node / description

Added value: +"Proxmox node name hosting the guest; auto-detected if omitted."

addedInput schema / properties / vmid / description

Added value: +"Numeric VM ID of the guest to write to via the qemu-agent."

Changedpve_agent_fs4 fields changed

addedInput schema / properties / command / description

Added value: +"Filesystem operation: fsfreeze-freeze, fsfreeze-thaw, or fstrim."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the command."

addedInput schema / properties / node / description

Added value: +"Proxmox node name hosting the guest; auto-detected if omitted."

addedInput schema / properties / vmid / description

Added value: +"Numeric VM ID of the guest to operate on via the qemu-agent."

Changedpve_agent_info4 fields changed

addedInput schema / properties / command / description

Added value: +"qemu-agent query: ping, info, get-fsinfo, get-host-name, get-osinfo, get-time, get-timezone, get-users, get-vcpus, network-get-interfaces, get-memory-blocks, fsfreeze-status, or exec-status."

addedInput schema / properties / node / description

Added value: +"Proxmox node name hosting the guest; auto-detected if omitted."

addedInput schema / properties / pid / description

Added value: +"Process id returned by pve_agent_exec; required only when command='exec-status'."

addedInput schema / properties / vmid / description

Added value: +"Numeric VM ID of the guest to query via the qemu-agent."

Changedpve_agent_set_password5 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the password change."

addedInput schema / properties / node / description

Added value: +"Proxmox node name hosting the guest; auto-detected if omitted."

addedInput schema / properties / password / description

Added value: +"New password for the guest OS user; unconditionally redacted from the ledger."

addedInput schema / properties / username / description

Added value: +"Guest OS username whose password will be changed."

addedInput schema / properties / vmid / description

Added value: +"Numeric VM ID of the guest whose OS user password is being set."

Changedpve_backup7 fields changed

addedInput schema / properties / compress / description

Added value: +"Compression algorithm for the archive, e.g. zstd, gzip, lzo, or 0 (no compression)."

addedInput schema / properties / confirm / description

Added value: +"Gate: false returns a dry-run PLAN, true executes the backup."

addedInput schema / properties / kind / description
```
Added value: +"Guest type: lxc or qemu."
```

addedInput schema / properties / mode / description

Added value: +"Backup mode: snapshot (online, brief) | suspend (RAM-quiesced pause) | stop (HALTS the guest)."

addedInput schema / properties / node / description

Added value: +"Proxmox node hosting the guest; defaults to the configured node if omitted."

addedInput schema / properties / storage / description

Added value: +"Storage ID to write the backup archive to."

addedInput schema / properties / vmid / description

Added value: +"Numeric ID of the guest (VM or CT) to back up."

Changedpve_backup_delete4 fields changed

addedInput schema / properties / confirm / description

Added value: +"Gate: false returns a dry-run PLAN, true executes the deletion."

addedInput schema / properties / node / description

Added value: +"Proxmox node hosting the storage; defaults to the configured node if omitted."

addedInput schema / properties / storage / description

Added value: +"Storage ID holding the backup archive."

addedInput schema / properties / volid / description

Added value: +"Volume ID of the backup archive to delete (as returned by pve_backup_list)."

Changedpve_backup_freshness2 fields changed

addedInput schema / properties / grace_hours / description

Added value: +"Hours of slack padded onto each job's parsed cadence before a backup is flagged stale."

addedInput schema / properties / max_age_hours / description

Added value: +"Override for max acceptable backup age in hours; if omitted, age expectation is derived from each guest's backup job schedule."

Changedpve_backup_job_create12 fields changed

addedInput schema / properties / all_guests / description

Added value: +"If true, back up every guest on the cluster; mutually exclusive with vmid and pool."

addedInput schema / properties / comment / description
```
Added value: +"Free-text note stored on the job."
```

addedInput schema / properties / compress / description

Added value: +"Compression algorithm for archives, e.g. zstd, gzip, lzo, or 0 (no compression)."

addedInput schema / properties / confirm / description

Added value: +"Gate: false returns a dry-run PLAN, true executes the creation."

addedInput schema / properties / enabled / description

Added value: +"Whether the job is active; defaults to enabled if omitted."

addedInput schema / properties / exclude / description

Added value: +"CSV of guest IDs to exclude when all_guests=True."

addedInput schema / properties / job_id / description

Added value: +"Unique ID for the new PVE backup job."

addedInput schema / properties / mode / description

Added value: +"Backup mode: snapshot | suspend | stop; defaults to Proxmox's own default if omitted."

addedInput schema / properties / pool / description

Added value: +"Resource pool of guests to back up; mutually exclusive with vmid and all_guests."

addedInput schema / properties / schedule / description

Added value: +"Proxmox calendar-event schedule string, e.g. 'sat 02:00' or a systemd.time-style spec."

addedInput schema / properties / storage / description

Added value: +"Storage ID the job writes backups to."

addedInput schema / properties / vmid / description

Added value: +"CSV of guest IDs to include; mutually exclusive with all_guests and pool."

Changedpve_backup_job_delete2 fields changed
- addedInput schema / properties / confirm / description
```
Added value: +"Gate: false returns a dry-run PLAN, true executes the deletion."
```
- addedInput schema / properties / job_id / description
```
Added value: +"ID of the PVE backup job to delete."
```

Changedpve_backup_job_update9 fields changed

addedInput schema / properties / comment / description

Added value: +"New free-text note; omit to leave unchanged."

addedInput schema / properties / compress / description

Added value: +"New compression algorithm, e.g. zstd, gzip, lzo, or 0 (no compression); omit to leave unchanged."

addedInput schema / properties / confirm / description

Added value: +"Gate: false returns a dry-run PLAN, true executes the update."

addedInput schema / properties / enabled / description

Added value: +"Whether the job is active; omit to leave unchanged."

addedInput schema / properties / job_id / description

Added value: +"ID of the existing PVE backup job to update."

addedInput schema / properties / mode / description

Added value: +"New backup mode: snapshot | suspend | stop; omit to leave unchanged."

addedInput schema / properties / schedule / description

Added value: +"New Proxmox calendar-event schedule string; omit to leave unchanged."

addedInput schema / properties / storage / description

Added value: +"New storage ID for the job's backups; omit to leave unchanged."

addedInput schema / properties / vmid / description

Added value: +"New CSV of guest IDs the job covers; omit to leave unchanged."

Changedpve_backup_list2 fields changed

addedInput schema / properties / node / description

Added value: +"Proxmox node hosting the storage; defaults to the configured node if omitted."

addedInput schema / properties / storage / description

Added value: +"Storage ID to list backup archives from."

Changedpve_clone9 fields changed

addedInput schema / properties / confirm / description

Added value: +"Leave `false` (default) to get a dry-run PLAN; set `true` to execute the clone."

addedInput schema / properties / full / description

Added value: +"If true, make a full independent copy of the disks; if false (default), make a space-saving linked clone."

addedInput schema / properties / kind / description

Added value: +"Guest type: `lxc` for a container or `qemu` for a VM."

addedInput schema / properties / name / description

Added value: +"Name to give the new cloned guest."

addedInput schema / properties / newid / description

Added value: +"Numeric ID to assign to the new cloned guest."

addedInput schema / properties / node / description

Added value: +"PVE node the source guest runs on. Omit to resolve it automatically from the cluster."

addedInput schema / properties / pool / description

Added value: +"Resource pool to place the new guest in — needed when the calling token is pool-scoped."

addedInput schema / properties / storage / description

Added value: +"Target storage for the full clone's disks (full=True only); keeps the clone off the source storage. Refused for a linked clone."

addedInput schema / properties / vmid / description

Added value: +"Numeric ID of the source guest to clone — VMID for a QEMU VM or CTID for an LXC container."

Changedpve_cloudinit_get3 fields changed

addedInput schema / properties / kind / description

Added value: +"Guest type; cloud-init applies to `qemu` guests."

addedInput schema / properties / node / description

Added value: +"PVE node the guest runs on. Omit to resolve it automatically from the cluster."

addedInput schema / properties / vmid / description

Added value: +"Numeric VMID of the QEMU guest to read cloud-init config from."

Changedpve_cloudinit_set5 fields changed

addedInput schema / properties / changes / description

Added value: +"Cloud-init fields to change, e.g. {'ciuser': 'admin', 'sshkeys': '...', 'ipconfig0': 'ip=dhcp'}."

addedInput schema / properties / confirm / description

Added value: +"Leave `false` (default) to get a dry-run PLAN with secrets masked; set `true` to execute."

addedInput schema / properties / kind / description

Added value: +"Guest type; cloud-init applies to `qemu` guests."

addedInput schema / properties / node / description

Added value: +"PVE node the guest runs on. Omit to resolve it automatically from the cluster."

addedInput schema / properties / vmid / description

Added value: +"Numeric VMID of the QEMU guest to set cloud-init config on."

Changedpve_cluster_resources1 field changed

addedInput schema / properties / resource_type / description

Added value: +"Optional filter: 'vm', 'storage', 'node', or 'sdn'; omit to list all resource types."

Changedpve_create_container6 fields changed

addedInput schema / properties / confirm / description

Added value: +"Leave `false` (default) to get a dry-run PLAN; set `true` to execute the creation."

addedInput schema / properties / node / description

Added value: +"PVE node to create the container on. Omit to use the configured default node."

addedInput schema / properties / options / description

Added value: +"Extra Proxmox create params (e.g. cores, memory, net0, rootfs, password) merged into the request."

addedInput schema / properties / ostemplate / description

Added value: +"Storage volume ID of the OS template to install, e.g. `local:vztmpl/debian-12-standard_12.2-1_amd64.tar.zst`."

addedInput schema / properties / storage / description

Added value: +"Storage backend name to place the container's root filesystem on."

addedInput schema / properties / vmid / description

Added value: +"Numeric CTID to assign to the new LXC container."

Changedpve_create_vm4 fields changed

addedInput schema / properties / confirm / description

Added value: +"Leave `false` (default) to get a dry-run PLAN; set `true` to execute the creation."

addedInput schema / properties / node / description

Added value: +"PVE node to create the VM on. Omit to use the configured default node."

addedInput schema / properties / options / description

Added value: +"Extra Proxmox create params (e.g. cores, memory, net0, scsi0, ostype) merged into the request."

addedInput schema / properties / vmid / description

Added value: +"Numeric VMID to assign to the new QEMU VM."

Changedpve_delete_guest6 fields changed

addedInput schema / properties / confirm / description

Added value: +"Leave `false` (default) to get a dry-run PLAN naming exactly what will be destroyed; set `true` to execute."

addedInput schema / properties / force / description

Added value: +"Force removal even if the guest is still running or the backend reports an inconsistent state."

addedInput schema / properties / kind / description

Added value: +"Guest type: `lxc` for a container or `qemu` for a VM."

addedInput schema / properties / node / description

Added value: +"PVE node the guest runs on. Omit to resolve it automatically from the cluster."

addedInput schema / properties / purge / description

Added value: +"If true, also remove the guest from replication/backup jobs and HA resources referencing it."

addedInput schema / properties / vmid / description

Added value: +"Numeric ID of the guest to destroy — VMID for a QEMU VM or CTID for an LXC container."

Changedpve_diagnose1 field changed

addedInput schema / properties / node / description

Added value: +"PVE node to gather health evidence for. Omit to use the configured default node."

Changedpve_disk_move7 fields changed

addedInput schema / properties / confirm / description

Added value: +"Leave `false` (default) to get a dry-run PLAN; set `true` to execute the move."

addedInput schema / properties / delete_source / description

Added value: +"If true, delete the source copy after the move (HIGH risk); if false (default), keep it."

addedInput schema / properties / disk / description

Added value: +"Disk key to move, e.g. `scsi0` or `rootfs`."

addedInput schema / properties / kind / description

Added value: +"Guest type: `lxc` for a container or `qemu` for a VM."

addedInput schema / properties / node / description

Added value: +"PVE node the guest runs on. Omit to resolve it automatically from the cluster."

addedInput schema / properties / target_storage / description
```
Added value: +"Storage backend name to move the disk to."
```

addedInput schema / properties / vmid / description

Added value: +"Numeric ID of the guest — VMID for a QEMU VM or CTID for an LXC container."

Changedpve_disk_resize6 fields changed

addedInput schema / properties / confirm / description

Added value: +"Leave `false` (default) to get a dry-run PLAN; set `true` to execute the resize."

addedInput schema / properties / disk / description

Added value: +"Disk key to resize, e.g. `scsi0` or `rootfs`."

addedInput schema / properties / kind / description

Added value: +"Guest type: `lxc` for a container or `qemu` for a VM."

addedInput schema / properties / node / description

Added value: +"PVE node the guest runs on. Omit to resolve it automatically from the cluster."

addedInput schema / properties / size / description

Added value: +"New size, as a grow-only delta like `+10G` (shrinking is refused as destructive)."

addedInput schema / properties / vmid / description

Added value: +"Numeric ID of the guest — VMID for a QEMU VM or CTID for an LXC container."

Changedpve_firewall_alias_create8 fields changed

addedInput schema / properties / cidr / description

Added value: +"IP address or CIDR network the alias resolves to."

addedInput schema / properties / comment / description

Added value: +"Free-text comment stored with the alias."

addedInput schema / properties / confirm / description

Added value: +"Set True to execute the mutation; False (default) only returns a dry-run PLAN."

addedInput schema / properties / kind / description

Added value: +"Guest kind for scope='guest': 'qemu' or 'lxc'."

addedInput schema / properties / name / description

Added value: +"Name for the new alias, referenced by rules as this name."

addedInput schema / properties / node / description

Added value: +"Node name, required for scope='guest'."

addedInput schema / properties / scope / description

Added value: +"Firewall scope: 'cluster' or 'guest' (no node-scope aliases in the PVE API)."

addedInput schema / properties / vmid / description

Added value: +"Guest VMID/CTID, required for scope='guest'."

Changedpve_firewall_alias_delete7 fields changed

addedInput schema / properties / confirm / description

Added value: +"Set True to execute the mutation; False (default) only returns a dry-run PLAN."

addedInput schema / properties / digest / description

Added value: +"Optimistic-lock digest forwarded to PVE to abort if the alias changed; this tool's PLAN does not surface a digest to copy (only the rule tools do)."

addedInput schema / properties / kind / description

Added value: +"Guest kind for scope='guest': 'qemu' or 'lxc'."

addedInput schema / properties / name / description
```
Added value: +"Name of the alias to delete."
```

addedInput schema / properties / node / description

Added value: +"Node name, required for scope='guest'."

addedInput schema / properties / scope / description

Added value: +"Firewall scope: 'cluster' or 'guest' (no node-scope aliases in the PVE API)."

addedInput schema / properties / vmid / description

Added value: +"Guest VMID/CTID, required for scope='guest'."

Changedpve_firewall_alias_list4 fields changed

addedInput schema / properties / kind / description

Added value: +"Guest kind for scope='guest': 'qemu' or 'lxc'."

addedInput schema / properties / node / description

Added value: +"Node name, required for scope='guest'."

addedInput schema / properties / scope / description

Added value: +"Firewall scope: 'cluster' or 'guest' (no node-scope aliases in the PVE API)."

addedInput schema / properties / vmid / description

Added value: +"Guest VMID/CTID, required for scope='guest'."

Changedpve_firewall_alias_update10 fields changed

addedInput schema / properties / cidr / description

Added value: +"New IP address/CIDR the alias should resolve to; omit to leave unchanged."

addedInput schema / properties / comment / description

Added value: +"New free-text comment; omit to leave unchanged."

addedInput schema / properties / confirm / description

Added value: +"Set True to execute the mutation; False (default) only returns a dry-run PLAN."

addedInput schema / properties / digest / description

Added value: +"Optimistic-lock digest forwarded to PVE to abort if the alias changed; this tool's PLAN does not surface a digest to copy (only the rule tools do)."

addedInput schema / properties / kind / description

Added value: +"Guest kind for scope='guest': 'qemu' or 'lxc'."

addedInput schema / properties / name / description

Added value: +"Name of the existing alias to update."

addedInput schema / properties / node / description

Added value: +"Node name, required for scope='guest'."

addedInput schema / properties / rename / description

Added value: +"New name to rename the alias to; omit to keep the current name."

addedInput schema / properties / scope / description

Added value: +"Firewall scope: 'cluster' or 'guest' (no node-scope aliases in the PVE API)."

addedInput schema / properties / vmid / description

Added value: +"Guest VMID/CTID, required for scope='guest'."

Changedpve_firewall_ipset_create7 fields changed

addedInput schema / properties / comment / description

Added value: +"Free-text comment stored with the IP set."

addedInput schema / properties / confirm / description

Added value: +"Set True to execute the mutation; False (default) only returns a dry-run PLAN."

addedInput schema / properties / kind / description

Added value: +"Guest kind for scope='guest': 'qemu' or 'lxc'."

addedInput schema / properties / name / description

Added value: +"Name for the new IP set, referenced by rules as '+name'."

addedInput schema / properties / node / description

Added value: +"Node name, required for scope='guest'."

addedInput schema / properties / scope / description

Added value: +"Firewall scope: 'cluster' or 'guest' (no node-scope ipsets in the PVE API)."

addedInput schema / properties / vmid / description

Added value: +"Guest VMID/CTID, required for scope='guest'."

Changedpve_firewall_ipset_delete7 fields changed

addedInput schema / properties / confirm / description

Added value: +"Set True to execute the mutation; False (default) only returns a dry-run PLAN."

addedInput schema / properties / force / description

Added value: +"If True, wipe all member entries so the (now-empty) IP set can be deleted."

addedInput schema / properties / kind / description

Added value: +"Guest kind for scope='guest': 'qemu' or 'lxc'."

addedInput schema / properties / name / description
```
Added value: +"Name of the IP set to delete."
```

addedInput schema / properties / node / description

Added value: +"Node name, required for scope='guest'."

addedInput schema / properties / scope / description

Added value: +"Firewall scope: 'cluster' or 'guest' (no node-scope ipsets in the PVE API)."

addedInput schema / properties / vmid / description

Added value: +"Guest VMID/CTID, required for scope='guest'."

Changedpve_firewall_ipset_entry_add9 fields changed

addedInput schema / properties / cidr / description

Added value: +"IP address or CIDR network to add as a member entry."

addedInput schema / properties / comment / description

Added value: +"Free-text comment stored with the entry."

addedInput schema / properties / confirm / description

Added value: +"Set True to execute the mutation; False (default) only returns a dry-run PLAN."

addedInput schema / properties / kind / description

Added value: +"Guest kind for scope='guest': 'qemu' or 'lxc'."

addedInput schema / properties / name / description

Added value: +"Name of the IP set to add the entry to."

addedInput schema / properties / node / description

Added value: +"Node name, required for scope='guest'."

addedInput schema / properties / nomatch / description

Added value: +"If True, this entry is an exclusion (negative match) rather than an inclusion."

addedInput schema / properties / scope / description

Added value: +"Firewall scope: 'cluster' or 'guest' (no node-scope ipsets in the PVE API)."

addedInput schema / properties / vmid / description

Added value: +"Guest VMID/CTID, required for scope='guest'."

Changedpve_firewall_ipset_entry_remove8 fields changed

addedInput schema / properties / cidr / description

Added value: +"IP address or CIDR network of the member entry to remove."

addedInput schema / properties / confirm / description

Added value: +"Set True to execute the mutation; False (default) only returns a dry-run PLAN."

addedInput schema / properties / digest / description

Added value: +"Optimistic-lock digest forwarded to PVE to abort if the set changed; this tool's PLAN does not surface a digest to copy (only the rule tools do)."

addedInput schema / properties / kind / description

Added value: +"Guest kind for scope='guest': 'qemu' or 'lxc'."

addedInput schema / properties / name / description

Added value: +"Name of the IP set to remove the entry from."

addedInput schema / properties / node / description

Added value: +"Node name, required for scope='guest'."

addedInput schema / properties / scope / description

Added value: +"Firewall scope: 'cluster' or 'guest' (no node-scope ipsets in the PVE API)."

addedInput schema / properties / vmid / description

Added value: +"Guest VMID/CTID, required for scope='guest'."

Changedpve_firewall_options_get4 fields changed

addedInput schema / properties / kind / description

Added value: +"Guest kind for scope='guest': 'qemu' or 'lxc'."

addedInput schema / properties / node / description

Added value: +"Node name, required for scope='node' or scope='guest'."

addedInput schema / properties / scope / description

Added value: +"Firewall scope: 'cluster', 'node', or 'guest'."

addedInput schema / properties / vmid / description

Added value: +"Guest VMID/CTID, required for scope='guest'."

Changedpve_firewall_options_set8 fields changed

addedInput schema / properties / confirm / description

Added value: +"Set True to execute the mutation; False (default) only returns a dry-run PLAN."

addedInput schema / properties / delete / description

Added value: +"List of option keys to unset/remove."

addedInput schema / properties / digest / description

Added value: +"Optimistic-lock digest forwarded to PVE to abort if the options changed; this tool's PLAN does not surface a digest to copy (only the rule tools do)."

addedInput schema / properties / kind / description

Added value: +"Guest kind for scope='guest': 'qemu' or 'lxc'."

addedInput schema / properties / node / description

Added value: +"Node name, required for scope='node' or scope='guest'."

addedInput schema / properties / options / description

Added value: +"Key-value bag of firewall options to set, e.g. policy_in, policy_out, log_ratelimit, enable, ebtables."

addedInput schema / properties / scope / description

Added value: +"Firewall scope: 'cluster', 'node', or 'guest'."

addedInput schema / properties / vmid / description

Added value: +"Guest VMID/CTID, required for scope='guest'."

Changedpve_firewall_rule_add14 fields changed

addedInput schema / properties / action / description

Added value: +"Rule action: 'ACCEPT', 'DROP', or 'REJECT'."

addedInput schema / properties / comment / description

Added value: +"Free-text comment stored with the rule."

addedInput schema / properties / confirm / description

Added value: +"Set True to execute the mutation; False (default) only returns a dry-run PLAN."

addedInput schema / properties / dest / description

Added value: +"Destination address/CIDR/alias to match, or None for any."

addedInput schema / properties / direction / description

Added value: +"Traffic direction the rule matches: 'in' or 'out'."

addedInput schema / properties / dport / description

Added value: +"Destination port or port range to match, e.g. '22' or '8000:8010'."

addedInput schema / properties / enable / description

Added value: +"Whether the rule is active immediately (True) or created disabled (False)."

addedInput schema / properties / kind / description

Added value: +"Guest kind for scope='guest': 'qemu' or 'lxc'."

addedInput schema / properties / node / description

Added value: +"Node name, required for scope='node' or scope='guest'."

addedInput schema / properties / proto / description

Added value: +"IP protocol to match, e.g. 'tcp', 'udp', 'icmp'."

addedInput schema / properties / scope / description

Added value: +"Firewall scope: 'cluster', 'node', or 'guest'."

addedInput schema / properties / source / description

Added value: +"Source address/CIDR/alias to match, or None for any."

addedInput schema / properties / sport / description

Added value: +"Source port or port range to match, e.g. '22' or '8000:8010'."

addedInput schema / properties / vmid / description

Added value: +"Guest VMID/CTID, required for scope='guest'."

Changedpve_firewall_rule_remove7 fields changed

addedInput schema / properties / confirm / description

Added value: +"Set True to execute the mutation; False (default) only returns a dry-run PLAN."

addedInput schema / properties / digest / description

Added value: +"Optimistic-lock digest from the PLAN preview; pass on confirm to abort if the rule list changed since."

addedInput schema / properties / kind / description

Added value: +"Guest kind for scope='guest': 'qemu' or 'lxc'."

addedInput schema / properties / node / description

Added value: +"Node name, required for scope='node' or scope='guest'."

addedInput schema / properties / pos / description

Added value: +"Rule position (0-based index) in the target scope's rule list."

addedInput schema / properties / scope / description

Added value: +"Firewall scope: 'cluster', 'node', or 'guest'."

addedInput schema / properties / vmid / description

Added value: +"Guest VMID/CTID, required for scope='guest'."

Changedpve_firewall_rule_update16 fields changed

addedInput schema / properties / action / description

Added value: +"New rule action: 'ACCEPT', 'DROP', or 'REJECT'; omit to leave unchanged."

addedInput schema / properties / comment / description

Added value: +"New free-text comment; omit to leave unchanged."

addedInput schema / properties / confirm / description

Added value: +"Set True to execute the mutation; False (default) only returns a dry-run PLAN."

addedInput schema / properties / dest / description

Added value: +"New destination address/CIDR/alias to match; omit to leave unchanged."

addedInput schema / properties / digest / description

Added value: +"Optimistic-lock digest from the PLAN preview; pass on confirm to abort if the rule list changed since."

addedInput schema / properties / direction / description

Added value: +"New traffic direction: 'in' or 'out'; omit to leave unchanged."

addedInput schema / properties / dport / description

Added value: +"New destination port or port range; omit to leave unchanged."

addedInput schema / properties / enable / description

Added value: +"New enabled state for the rule; omit to leave unchanged."

addedInput schema / properties / kind / description

Added value: +"Guest kind for scope='guest': 'qemu' or 'lxc'."

addedInput schema / properties / node / description

Added value: +"Node name, required for scope='node' or scope='guest'."

addedInput schema / properties / pos / description

Added value: +"Rule position (0-based index) in the target scope's rule list."

addedInput schema / properties / proto / description

Added value: +"New IP protocol to match, e.g. 'tcp'/'udp'/'icmp'; omit to leave unchanged."

addedInput schema / properties / scope / description

Added value: +"Firewall scope: 'cluster', 'node', or 'guest'."

addedInput schema / properties / source / description

Added value: +"New source address/CIDR/alias to match; omit to leave unchanged."

addedInput schema / properties / sport / description

Added value: +"New source port or port range; omit to leave unchanged."

addedInput schema / properties / vmid / description

Added value: +"Guest VMID/CTID, required for scope='guest'."

Changedpve_firewall_rules_list4 fields changed

addedInput schema / properties / kind / description

Added value: +"Guest kind for scope='guest': 'qemu' or 'lxc'."

addedInput schema / properties / node / description

Added value: +"Node name, required for scope='node' or scope='guest'."

addedInput schema / properties / scope / description

Added value: +"Firewall scope: 'cluster', 'node', or 'guest'."

addedInput schema / properties / vmid / description

Added value: +"Guest VMID/CTID, required for scope='guest'."

Changedpve_firewall_security_group_create3 fields changed

addedInput schema / properties / comment / description

Added value: +"Free-text comment stored with the group."

addedInput schema / properties / confirm / description

Added value: +"Set True to execute the mutation; False (default) only returns a dry-run PLAN."

addedInput schema / properties / group / description

Added value: +"Name for the new cluster security group."

Changedpve_firewall_security_group_delete2 fields changed

addedInput schema / properties / confirm / description

Added value: +"Set True to execute the mutation; False (default) only returns a dry-run PLAN."

addedInput schema / properties / group / description

Added value: +"Name of the cluster security group to delete."

Changedpve_firewall_set_enabled6 fields changed

addedInput schema / properties / confirm / description

Added value: +"Set True to execute the mutation; False (default) only returns a dry-run PLAN."

addedInput schema / properties / enabled / description

Added value: +"Desired firewall state: True to turn on, False to turn off."

addedInput schema / properties / kind / description

Added value: +"Guest kind for scope='guest': 'qemu' or 'lxc'."

addedInput schema / properties / node / description

Added value: +"Node name, required for scope='node' or scope='guest'."

addedInput schema / properties / scope / description

Added value: +"Firewall scope: 'cluster', 'node', or 'guest'."

addedInput schema / properties / vmid / description

Added value: +"Guest VMID/CTID, required for scope='guest'."

Changedpve_group_create3 fields changed
- addedInput schema / properties / comment / description
```
Added value: +"Optional free-text comment."
```
- addedInput schema / properties / confirm / description
```
Added value: +"False (default) returns a dry-run PLAN preview; True executes the mutation."
```
- addedInput schema / properties / groupid / description
```
Added value: +"New group id."
```
Changedpve_group_delete2 fields changed
- addedInput schema / properties / confirm / description
```
Added value: +"False (default) returns a dry-run PLAN preview; True executes the mutation."
```
- addedInput schema / properties / groupid / description
```
Added value: +"Group id to delete."
```
Changedpve_group_get1 field changed
- addedInput schema / properties / groupid / description
```
Added value: +"Group id to look up."
```
Changedpve_group_update3 fields changed
- addedInput schema / properties / comment / description
```
Added value: +"New free-text comment."
```
- addedInput schema / properties / confirm / description
```
Added value: +"False (default) returns a dry-run PLAN preview; True executes the mutation."
```
- addedInput schema / properties / groupid / description
```
Added value: +"Group id to update."
```

Changedpve_guest_config_get3 fields changed

addedInput schema / properties / kind / description

Added value: +"Guest type: `lxc` for a container or `qemu` for a VM."

addedInput schema / properties / node / description

Added value: +"PVE node the guest runs on. Omit to resolve it automatically from the cluster."

addedInput schema / properties / vmid / description

Added value: +"Numeric ID of the guest — VMID for a QEMU VM or CTID for an LXC container."

Changedpve_guest_config_revert5 fields changed

addedInput schema / properties / confirm / description

Added value: +"Leave `false` (default) to get a dry-run PLAN; set `true` to execute the revert."

addedInput schema / properties / kind / description

Added value: +"Guest type: `lxc` for a container or `qemu` for a VM."

addedInput schema / properties / node / description

Added value: +"PVE node the guest runs on. Omit to resolve it automatically from the cluster."

addedInput schema / properties / prior_config / description

Added value: +"The prior config dict previously returned by pve_guest_config_set, to re-apply."

addedInput schema / properties / vmid / description

Added value: +"Numeric ID of the guest — VMID for a QEMU VM or CTID for an LXC container."

Changedpve_guest_config_set5 fields changed

addedInput schema / properties / changes / description

Added value: +"Config keys to change, e.g. {'cores': 4, 'memory': 2048, 'onboot': 1}."

addedInput schema / properties / confirm / description

Added value: +"Leave `false` (default) to get a dry-run PLAN with the per-key diff; set `true` to execute."

addedInput schema / properties / kind / description

Added value: +"Guest type: `lxc` for a container or `qemu` for a VM."

addedInput schema / properties / node / description

Added value: +"PVE node the guest runs on. Omit to resolve it automatically from the cluster."

addedInput schema / properties / vmid / description

Added value: +"Numeric ID of the guest — VMID for a QEMU VM or CTID for an LXC container."

Changedpve_guest_migrate6 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the migration."

addedInput schema / properties / kind / description
```
Added value: +"Guest type: 'lxc' or 'qemu'."
```

addedInput schema / properties / node / description

Added value: +"Source node name; defaults to the configured node."

addedInput schema / properties / online / description

Added value: +"QEMU: live migration (zero-downtime, needs shared storage). LXC: stop-move-start restart migration (real downtime). False = offline migration."

addedInput schema / properties / target / description

Added value: +"Destination node name to migrate the guest to."

addedInput schema / properties / vmid / description

Added value: +"Numeric VMID/CTID of the guest to migrate."

Changedpve_guest_power5 fields changed

addedInput schema / properties / action / description

Added value: +"Power action to perform: `start`, `stop`, `reboot`, or `shutdown`."

addedInput schema / properties / confirm / description

Added value: +"Leave `false` (default) to get a dry-run PLAN with blast radius; set `true` to execute the action."

addedInput schema / properties / kind / description

Added value: +"Guest type: `lxc` for a container or `qemu` for a VM."

addedInput schema / properties / node / description

Added value: +"PVE node the guest runs on. Omit to resolve it automatically from the cluster."

addedInput schema / properties / vmid / description

Added value: +"Numeric ID of the guest — VMID for a QEMU VM or CTID for an LXC container."

Changedpve_guest_status3 fields changed

addedInput schema / properties / kind / description

Added value: +"Guest type: `lxc` for a container or `qemu` for a VM."

addedInput schema / properties / node / description

Added value: +"PVE node the guest runs on. Omit to resolve it automatically from the cluster."

addedInput schema / properties / vmid / description

Added value: +"Numeric ID of the guest — VMID for a QEMU VM or CTID for an LXC container."

Changedpve_ha_resource_add7 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the change."

addedInput schema / properties / group / description

Added value: +"HA group to assign (PVE 8 only; PVE 9 removed groups in favor of HA rules — omit on PVE 9)."

addedInput schema / properties / kind / description
```
Added value: +"Guest type: 'lxc' or 'qemu'."
```

addedInput schema / properties / max_relocate / description

Added value: +"Max number of relocation attempts the CRM makes before giving up."

addedInput schema / properties / max_restart / description

Added value: +"Max number of restart attempts the CRM makes before giving up."

addedInput schema / properties / state / description

Added value: +"Desired HA state, e.g. 'started', 'stopped', 'disabled' ('stopped' has the CRM stop the guest)."

addedInput schema / properties / vmid / description

Added value: +"Numeric VMID/CTID of the guest to add to HA management."

Changedpve_ha_resource_remove3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the change."

addedInput schema / properties / kind / description
```
Added value: +"Guest type: 'lxc' or 'qemu'."
```

addedInput schema / properties / vmid / description

Added value: +"Numeric VMID/CTID of the guest to remove from HA management."

Changedpve_ha_rule_create9 fields changed

addedInput schema / properties / affinity / description

Added value: +"'positive' (keep resources together) or 'negative' (keep resources apart) — required for rule_type='resource-affinity'."

addedInput schema / properties / comment / description

Added value: +"Free-text comment stored with the rule."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the change."

addedInput schema / properties / disable / description

Added value: +"If True, the rule is created disabled (no effect until enabled)."

addedInput schema / properties / nodes / description

Added value: +"Comma-separated node list with optional priority, e.g. 'pve1:2,pve2' — required for rule_type='node-affinity'."

addedInput schema / properties / resources / description

Added value: +"Comma-separated HA resource SIDs the rule applies to, e.g. 'vm:100,ct:101'."

addedInput schema / properties / rule / description

Added value: +"New HA rule ID (name used to reference this rule)."

addedInput schema / properties / rule_type / description

Added value: +"Rule type: 'node-affinity' (requires nodes) or 'resource-affinity' (requires affinity)."

addedInput schema / properties / strict / description

Added value: +"node-affinity only: if True, resources may run ONLY on the listed nodes (availability risk if all are down)."

Changedpve_ha_rule_delete2 fields changed
- addedInput schema / properties / confirm / description
```
Added value: +"False (default) returns a dry-run PLAN only; True executes the deletion."
```
- addedInput schema / properties / rule / description
```
Added value: +"HA rule ID to delete."
```

Changedpve_ha_rule_update11 fields changed

addedInput schema / properties / affinity / description

Added value: +"'positive' or 'negative' (resource-affinity rules)."

addedInput schema / properties / comment / description

Added value: +"New free-text comment for the rule."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the change."

addedInput schema / properties / delete / description

Added value: +"List of field names to unset on the rule, e.g. ['strict', 'nodes']."

addedInput schema / properties / digest / description

Added value: +"Expected config digest for optimistic-locking; PUT is rejected if the stored digest differs."

addedInput schema / properties / disable / description

Added value: +"True to disable the rule, False to enable it, omit to leave unchanged."

addedInput schema / properties / nodes / description

Added value: +"New comma-separated node list with optional priority, e.g. 'pve1:2,pve2' (node-affinity rules)."

addedInput schema / properties / resources / description

Added value: +"New comma-separated HA resource SIDs the rule applies to, e.g. 'vm:100,ct:101'."

addedInput schema / properties / rule / description
```
Added value: +"HA rule ID to update."
```

addedInput schema / properties / rule_type / description

Added value: +"New rule type: 'node-affinity' or 'resource-affinity'."

addedInput schema / properties / strict / description

Added value: +"node-affinity only: True restricts resources to ONLY the listed nodes."

Changedpve_hardware_list2 fields changed
- addedInput schema / properties / hw_type / description
```
Added value: +"Device class to list: 'pci' (default) or 'usb'"
```
- addedInput schema / properties / node / description
```
Added value: +"PVE node name to list physical hardware devices on"
```

Changedpve_ipset_list4 fields changed

addedInput schema / properties / kind / description

Added value: +"Guest kind for scope='guest': 'qemu' or 'lxc'."

addedInput schema / properties / node / description

Added value: +"Node name, required for scope='guest'."

addedInput schema / properties / scope / description

Added value: +"Firewall scope: 'cluster' or 'guest' (no node-scope ipsets in the PVE API)."

addedInput schema / properties / vmid / description

Added value: +"Guest VMID/CTID, required for scope='guest'."

Changedpve_list_guests1 field changed

addedInput schema / properties / node / description

Added value: +"PVE node name to list guests on. Omit to list guests across the whole cluster."

Changedpve_mapping_pci_create4 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the creation"

addedInput schema / properties / description / description

Added value: +"Optional free-text description stored with the mapping"

addedInput schema / properties / map / description

Added value: +"PCI device map string(s) defining the physical device(s) covered by this mapping"

addedInput schema / properties / mapping_id / description

Added value: +"Unique ID for the new PCI cluster passthrough mapping"

Changedpve_mapping_pci_delete2 fields changed
- addedInput schema / properties / confirm / description
```
Added value: +"False (default) returns a dry-run PLAN only; True executes the deletion"
```
- addedInput schema / properties / mapping_id / description
```
Added value: +"ID of the PCI cluster mapping to delete"
```

Changedpve_mapping_pci_update5 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the update"

addedInput schema / properties / description / description

Added value: +"Optional free-text description to set on the mapping"

addedInput schema / properties / digest / description

Added value: +"Optional config digest for optimistic-concurrency check against the current config"

addedInput schema / properties / map / description

Added value: +"PCI device map string(s) defining the physical device(s) covered by this mapping"

addedInput schema / properties / mapping_id / description

Added value: +"ID of the existing PCI cluster mapping to update"

Changedpve_mapping_usb_create4 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the creation"

addedInput schema / properties / description / description

Added value: +"Optional free-text description stored with the mapping"

addedInput schema / properties / map / description

Added value: +"USB device map string(s) defining the physical device(s) covered by this mapping"

addedInput schema / properties / mapping_id / description

Added value: +"Unique ID for the new USB cluster passthrough mapping"

Changedpve_mapping_usb_delete2 fields changed
- addedInput schema / properties / confirm / description
```
Added value: +"False (default) returns a dry-run PLAN only; True executes the deletion"
```
- addedInput schema / properties / mapping_id / description
```
Added value: +"ID of the USB cluster mapping to delete"
```

Changedpve_mapping_usb_update5 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the update"

addedInput schema / properties / description / description

Added value: +"Optional free-text description to set on the mapping"

addedInput schema / properties / digest / description

Added value: +"Optional config digest for optimistic-concurrency check against the current config"

addedInput schema / properties / map / description

Added value: +"USB device map string(s) defining the physical device(s) covered by this mapping"

addedInput schema / properties / mapping_id / description

Added value: +"ID of the existing USB cluster mapping to update"

Changedpve_metrics_server_delete2 fields changed
- addedInput schema / properties / confirm / description
```
Added value: +"False (default) returns a dry-run PLAN only; True executes the deletion"
```
- addedInput schema / properties / metrics_id / description
```
Added value: +"ID of the metrics server definition to delete"
```

Changedpve_metrics_server_set7 fields changed

addedInput schema / properties / comment / description

Added value: +"Optional free-text comment stored with the metrics server definition"

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the create/update"

addedInput schema / properties / disable / description

Added value: +"True disables forwarding to this metrics server without deleting the definition"

addedInput schema / properties / metrics_id / description

Added value: +"Unique ID of the metrics server definition to create or update"

addedInput schema / properties / metrics_type / description

Added value: +"Metrics backend type, e.g. 'influxdb' or 'graphite'"

addedInput schema / properties / port / description

Added value: +"TCP/UDP port the metrics server listens on"

addedInput schema / properties / server / description

Added value: +"Hostname or IP address of the metrics server"

Changedpve_network_apply2 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True applies the staged config to the live network stack."

addedInput schema / properties / node / description

Added value: +"Node to apply staged network config on; defaults to the configured node."

Changedpve_network_iface_create5 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True stages the interface (still not live until pve_network_apply)."

addedInput schema / properties / iface / description

Added value: +"New interface name to create, e.g. vmbr1 or eth0.100."

addedInput schema / properties / iface_type / description

Added value: +"Interface type: bridge, bond, vlan, eth, or alias."

addedInput schema / properties / node / description

Added value: +"Node to create the interface on; defaults to the configured node."

addedInput schema / properties / options / description

Added value: +"Type-dependent fields: address, netmask, gateway, bridge_ports, etc."

Changedpve_network_iface_update4 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True stages the update (still not live until pve_network_apply)."

addedInput schema / properties / iface / description

Added value: +"Existing interface name to update, e.g. vmbr1 or eth0.100."

addedInput schema / properties / node / description

Added value: +"Node the interface lives on; defaults to the configured node."

addedInput schema / properties / options / description

Added value: +"Fields to update: address, netmask, bridge_ports, etc."

Changedpve_network_list2 fields changed

addedInput schema / properties / iface_type / description

Added value: +"Filter to one interface type: bridge, bond, vlan, eth, or alias."

addedInput schema / properties / node / description

Added value: +"Node name to list interfaces on; defaults to the configured node."

Changedpve_node_acme_domains_set5 fields changed

addedInput schema / properties / account / description

Added value: +"Name of the ACME account (created via pve_acme_account_create) to associate with the node."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the node config change."

addedInput schema / properties / domains / description

Added value: +"Domain names to request a certificate for; replaces any existing acmedomainN entries on the node."

addedInput schema / properties / node / description

Added value: +"Target PVE node name; omit to use the configured default node."

addedInput schema / properties / plugin / description

Added value: +"ACME DNS plugin ID for a DNS-01 challenge; omit to use standalone http-01 instead."

Changedpve_node_cert_delete3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the deletion."

addedInput schema / properties / node / description

Added value: +"PVE node name to delete the custom certificate from; defaults to the configured node if omitted."

addedInput schema / properties / restart / description

Added value: +"If True, reload pveproxy after deletion to apply the reverted self-signed certificate immediately."

Changedpve_node_cert_upload6 fields changed

addedInput schema / properties / certificates / description

Added value: +"PEM-encoded certificate chain (public, may appear in plans/logs)."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the certificate upload."

addedInput schema / properties / force / description

Added value: +"If True, overwrite an existing custom certificate without requiring it be replaced explicitly."

addedInput schema / properties / key / description

Added value: +"PEM-encoded TLS private key matching the certificate; a secret, unconditionally redacted in all output."

addedInput schema / properties / node / description

Added value: +"PVE node name to upload the certificate to; defaults to the configured node if omitted."

addedInput schema / properties / restart / description

Added value: +"If True, reload pveproxy after upload to apply the new certificate immediately (brief service interruption)."

Changedpve_node_certificates1 field changed
- addedInput schema / properties / node / description
```
Added value: +"PVE node name; defaults to the configured node"
```

Changedpve_node_disk_initgpt3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the irreversible GPT init."

addedInput schema / properties / disk / description

Added value: +"Device path/identifier of the disk to initialize with a new GPT partition table (e.g. /dev/sda); overwrites the existing partition table."

addedInput schema / properties / node / description

Added value: +"PVE node name the disk lives on; defaults to the configured node if omitted."

Changedpve_node_disk_smart2 fields changed

addedInput schema / properties / disk / description

Added value: +"Device path/identifier of the disk to query (e.g. /dev/sda), as listed by pve_node_disks_list."

addedInput schema / properties / node / description

Added value: +"PVE node name the disk lives on; defaults to the configured node if omitted."

Changedpve_node_disk_wipe3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the irreversible wipe."

addedInput schema / properties / disk / description

Added value: +"Device path/identifier of the disk to wipe (e.g. /dev/sda); ALL data and the partition table are destroyed."

addedInput schema / properties / node / description

Added value: +"PVE node name the disk lives on; defaults to the configured node if omitted."

Changedpve_node_disks_list3 fields changed
- addedInput schema / properties / node / description
```
Added value: +"PVE node name to query; defaults to the configured node if omitted."
```
- addedOutput schema / properties / result / items / additionalProperties
```
Added value: +true
```
- addedOutput schema / properties / result / items / type
```
Added value: +"object"
```
Changedpve_node_dns1 field changed
- addedInput schema / properties / node / description
```
Added value: +"PVE node name; defaults to the configured node"
```

Changedpve_node_dns_set6 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the DNS change."

addedInput schema / properties / dns1 / description

Added value: +"Primary DNS resolver IP address."

addedInput schema / properties / dns2 / description

Added value: +"Secondary DNS resolver IP address."

addedInput schema / properties / dns3 / description

Added value: +"Tertiary DNS resolver IP address."

addedInput schema / properties / node / description

Added value: +"PVE node name to configure; defaults to the configured node if omitted."

addedInput schema / properties / search / description

Added value: +"DNS search domain to set on the node."

Changedpve_node_hosts_get1 field changed
- addedInput schema / properties / node / description
```
Added value: +"PVE node name to query; defaults to the configured node if omitted."
```

Changedpve_node_hosts_set4 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the replacement."

addedInput schema / properties / data / description

Added value: +"Full replacement content for the node's /etc/hosts file."

addedInput schema / properties / digest / description

Added value: +"Expected content digest of the current /etc/hosts, for optimistic-concurrency conflict detection."

addedInput schema / properties / node / description

Added value: +"PVE node name to configure; defaults to the configured node if omitted."

Changedpve_node_journal4 fields changed

addedInput schema / properties / lastentries / description

Added value: +"Number of most-recent journal lines to return, max 5000 (values above are rejected)"

addedInput schema / properties / node / description

Added value: +"PVE node name; defaults to the configured node"

addedInput schema / properties / since / description

Added value: +"Only return entries at or after this timestamp (journalctl-compatible format)"

addedInput schema / properties / until / description

Added value: +"Only return entries at or before this timestamp (journalctl-compatible format)"

Changedpve_node_migrateall5 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the bulk migration."

addedInput schema / properties / maxworkers / description

Added value: +"Maximum number of parallel migration workers to run."

addedInput schema / properties / node / description

Added value: +"Source PVE node name whose guests to migrate; defaults to the configured node if omitted."

addedInput schema / properties / target / description

Added value: +"Destination PVE node name to migrate guests to."

addedInput schema / properties / vms / description

Added value: +"Optional comma-separated list of VMIDs/CTIDs to limit the scope; omit to migrate all guests on the node."

Changedpve_node_rrddata3 fields changed

addedInput schema / properties / cf / description

Added value: +"RRD consolidation function: 'AVERAGE' or 'MAX'; defaults to server-side default"

addedInput schema / properties / node / description

Added value: +"PVE node name; defaults to the configured node"

addedInput schema / properties / timeframe / description

Added value: +"RRD time window: 'hour', 'day', 'week', 'month', or 'year'"

Changedpve_node_service_control4 fields changed

addedInput schema / properties / action / description

Added value: +"Control action: 'start', 'stop', 'restart', or 'reload'"

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the service control"

addedInput schema / properties / node / description

Added value: +"PVE node name; defaults to the configured node"

addedInput schema / properties / service / description

Added value: +"systemd service name to control, e.g. 'pveproxy' or 'sshd'"

Changedpve_node_service_status2 fields changed
- addedInput schema / properties / node / description
```
Added value: +"PVE node name; defaults to the configured node"
```
- addedInput schema / properties / service / description
```
Added value: +"systemd service name, e.g. 'pveproxy' or 'sshd'"
```
Changedpve_node_services_list1 field changed
- addedInput schema / properties / node / description
```
Added value: +"PVE node name; defaults to the configured node"
```

Changedpve_node_startall3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the bulk start."

addedInput schema / properties / node / description

Added value: +"PVE node name whose guests to start; defaults to the configured node if omitted."

addedInput schema / properties / vms / description

Added value: +"Optional comma-separated list of VMIDs/CTIDs to limit the scope; omit to start all guests on the node."

Changedpve_node_status1 field changed
- addedInput schema / properties / node / description
```
Added value: +"PVE node name to query. Omit to use the configured default node."
```

Changedpve_node_stopall3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the bulk stop."

addedInput schema / properties / node / description

Added value: +"PVE node name whose guests to stop; defaults to the configured node if omitted."

addedInput schema / properties / vms / description

Added value: +"Optional comma-separated list of VMIDs/CTIDs to limit the scope; omit to stop ALL guests on the node."

Changedpve_node_storage_backend_create5 fields changed

addedInput schema / properties / backend / description

Added value: +"Storage backend type to create: one of lvm, lvmthin, zfs, directory."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the creation."

addedInput schema / properties / devices / description

Added value: +"Disk device(s) consumed by the new backend: comma-separated list for zfs, a single disk path for lvm/lvmthin/directory."

addedInput schema / properties / name / description

Added value: +"Name to assign to the new storage backend."

addedInput schema / properties / node / description

Added value: +"PVE node name to create the backend on; defaults to the configured node if omitted."

Changedpve_node_storage_backend_delete5 fields changed

addedInput schema / properties / backend / description

Added value: +"Storage backend type to destroy: one of lvm, lvmthin, zfs, directory."

addedInput schema / properties / cleanup / description

Added value: +"If True, also removes the underlying disk data/partitions during backend removal."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the irreversible destroy."

addedInput schema / properties / name / description

Added value: +"Name of the storage backend to destroy."

addedInput schema / properties / node / description

Added value: +"PVE node name the backend lives on; defaults to the configured node if omitted."

Changedpve_node_storage_backend_list5 fields changed

addedInput schema / properties / backend / description

Added value: +"Storage backend type to list: one of lvm, lvmthin, zfs, directory."

addedInput schema / properties / node / description

Added value: +"PVE node name to query; defaults to the configured node if omitted."

addedOutput schema / properties / result / anyOf

Added value: +[
+  {
+    "items": {},
+    "type": "array"
+  },
+  {
+    "additionalProperties": true,
+    "type": "object"
+  }
+]

removedOutput schema / properties / result / items
```
Removed value: -{}
```
removedOutput schema / properties / result / type
```
Removed value: -"array"
```

Changedpve_node_subscription1 field changed
- addedInput schema / properties / node / description
```
Added value: +"PVE node name; defaults to the configured node"
```

Changedpve_node_syslog2 fields changed

addedInput schema / properties / limit / description

Added value: +"Maximum number of syslog entries to return, max 5000 (values above are rejected)"

addedInput schema / properties / node / description

Added value: +"PVE node name; defaults to the configured node"

Changedpve_node_time_get1 field changed
- addedInput schema / properties / node / description
```
Added value: +"PVE node name to query; defaults to the configured node if omitted."
```

Changedpve_node_time_set3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the timezone change."

addedInput schema / properties / node / description

Added value: +"PVE node name to configure; defaults to the configured node if omitted."

addedInput schema / properties / timezone / description

Added value: +"IANA timezone name to set on the node (e.g. America/Chicago, UTC)."

Changedpve_notification_endpoint_create5 fields changed

addedInput schema / properties / comment / description

Added value: +"Optional free-text comment stored with the endpoint"

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the creation"

addedInput schema / properties / ep_type / description

Added value: +"Notification endpoint type: 'gotify', 'smtp', 'sendmail', or 'webhook'"

addedInput schema / properties / name / description

Added value: +"Unique name for the new notification endpoint"

addedInput schema / properties / options / description

Added value: +"Endpoint-specific config fields, e.g. sendmail: {'mailto-user':'root@pam'}; gotify: {'server':.., 'token':..}; webhook: {'url':..}"

Changedpve_notification_endpoint_delete3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the deletion"

addedInput schema / properties / ep_type / description

Added value: +"Notification endpoint type: 'gotify', 'smtp', 'sendmail', or 'webhook'"

addedInput schema / properties / name / description

Added value: +"Name of the notification endpoint to delete"

Changedpve_notification_endpoint_update5 fields changed

addedInput schema / properties / comment / description

Added value: +"Optional free-text comment to set on the endpoint"

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the update"

addedInput schema / properties / ep_type / description

Added value: +"Notification endpoint type: 'gotify', 'smtp', 'sendmail', or 'webhook'"

addedInput schema / properties / name / description

Added value: +"Name of the existing notification endpoint to update"

addedInput schema / properties / options / description

Added value: +"Endpoint-specific fields to change, same shape as create"

Changedpve_notification_matcher_delete2 fields changed
- addedInput schema / properties / confirm / description
```
Added value: +"False (default) returns a dry-run PLAN only; True executes the deletion"
```
- addedInput schema / properties / name / description
```
Added value: +"Name of the notification matcher to delete"
```

Changedpve_notification_matcher_set3 fields changed

addedInput schema / properties / comment / description

Added value: +"Optional free-text comment stored with the matcher"

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the create/update"

addedInput schema / properties / name / description

Added value: +"Name of the notification matcher (alert routing rule) to create or update"

Changedpve_notification_test2 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True sends a real test notification"

addedInput schema / properties / name / description

Added value: +"Name of the notification target to send a test notification to"

Changedpve_pool_create3 fields changed
- addedInput schema / properties / comment / description
```
Added value: +"Free-text comment stored with the pool."
```
- addedInput schema / properties / confirm / description
```
Added value: +"False (default) returns a dry-run PLAN only; True executes the creation."
```
- addedInput schema / properties / poolid / description
```
Added value: +"New pool ID to create."
```

Changedpve_pool_delete2 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the deletion."

addedInput schema / properties / poolid / description

Added value: +"Pool ID to delete; the pool must be empty first."

Changedpve_pool_get1 field changed
- addedInput schema / properties / poolid / description
```
Added value: +"Pool ID to look up."
```

Changedpve_pool_update5 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the change."

addedInput schema / properties / delete / description

Added value: +"False (default) adds the given vms/storage as members; True removes them instead."

addedInput schema / properties / poolid / description
```
Added value: +"Pool ID to update."
```

addedInput schema / properties / storage / description

Added value: +"Comma-separated storage ID list to add or remove from the pool."

addedInput schema / properties / vms / description

Added value: +"Comma-separated VMID/CTID list to add or remove from the pool."

Changedpve_realm_create5 fields changed

addedInput schema / properties / comment / description
```
Added value: +"Optional free-text comment."
```

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN preview; True executes the mutation."

addedInput schema / properties / options / description

Added value: +"Type-specific config fields passed verbatim to PVE (e.g. ldap: server1/base_dn/user_attr; ad: domain/server1; openid: issuer-url/client-id)."

addedInput schema / properties / realm / description
```
Added value: +"New realm id/name."
```

addedInput schema / properties / realm_type / description

Added value: +"Realm type: 'pam', 'pve', 'ldap', 'ad', or 'openid'."

Changedpve_realm_delete2 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN preview; True executes the mutation."

addedInput schema / properties / realm / description

Added value: +"Realm id to delete (built-in 'pam'/'pve' are refused)."

Changedpve_realm_get1 field changed

addedInput schema / properties / realm / description

Added value: +"Realm id to look up, e.g. 'pam', 'pve', or a configured ldap/ad/openid realm name."

Changedpve_realm_update4 fields changed

addedInput schema / properties / comment / description

Added value: +"New free-text comment; omit to leave unchanged."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN preview; True executes the mutation."

addedInput schema / properties / options / description

Added value: +"Type-specific config fields to update, passed verbatim to PVE (e.g. server1/base_dn/etc.)."

addedInput schema / properties / realm / description
```
Added value: +"Realm id to update."
```

Changedpve_replication_create8 fields changed

addedInput schema / properties / comment / description
```
Added value: +"Free-text note stored on the job."
```

addedInput schema / properties / confirm / description

Added value: +"Gate: false returns a dry-run PLAN, true executes the creation."

addedInput schema / properties / disable / description

Added value: +"If true, create the job in a disabled state."

addedInput schema / properties / rate / description

Added value: +"Bandwidth limit in MB/s; omit for unlimited."

addedInput schema / properties / rep_id / description

Added value: +"Unique ID for the new replication job."

addedInput schema / properties / rep_type / description

Added value: +"Replication job type, typically 'local'."

addedInput schema / properties / schedule / description

Added value: +"Proxmox calendar-event schedule string; omit for the default cadence."

addedInput schema / properties / target / description

Added value: +"Target node (or node/storage) to replicate to."

Changedpve_replication_delete2 fields changed
- addedInput schema / properties / confirm / description
```
Added value: +"Gate: false returns a dry-run PLAN, true executes the deletion."
```
- addedInput schema / properties / rep_id / description
```
Added value: +"ID of the replication job to delete."
```

Changedpve_replication_update6 fields changed

addedInput schema / properties / comment / description

Added value: +"New free-text note; omit to leave unchanged."

addedInput schema / properties / confirm / description

Added value: +"Gate: false returns a dry-run PLAN, true executes the update."

addedInput schema / properties / disable / description

Added value: +"Whether the job is disabled; omit to leave unchanged."

addedInput schema / properties / rate / description

Added value: +"New bandwidth limit in MB/s; omit to leave unchanged."

addedInput schema / properties / rep_id / description

Added value: +"ID of the existing replication job to update."

addedInput schema / properties / schedule / description

Added value: +"New Proxmox calendar-event schedule string; omit to leave unchanged."

Changedpve_restore8 fields changed

addedInput schema / properties / archive / description

Added value: +"Volume ID of the backup archive to restore from."

addedInput schema / properties / confirm / description

Added value: +"Gate: false returns a dry-run PLAN, true executes the restore."

addedInput schema / properties / force / description

Added value: +"If vmid already exists, overwrite/destroy the existing guest instead of failing."

addedInput schema / properties / kind / description
```
Added value: +"Guest type: lxc or qemu."
```

addedInput schema / properties / node / description

Added value: +"Proxmox node to restore onto; defaults to the configured node if omitted."

addedInput schema / properties / pool / description

Added value: +"Resource pool to place the restored guest in."

addedInput schema / properties / storage / description

Added value: +"Storage ID to restore the guest's disks onto (LXC only; ignored for QEMU)."

addedInput schema / properties / vmid / description

Added value: +"Numeric ID for the restored guest — new if free, existing to overwrite."

Changedpve_role_create3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN preview; True executes the mutation."

addedInput schema / properties / privs / description

Added value: +"Comma-separated privilege names for the role, e.g. 'VM.PowerMgmt,VM.Config.Disk'."

addedInput schema / properties / roleid / description
```
Added value: +"New role id."
```

Changedpve_role_delete2 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN preview; True executes the mutation."

addedInput schema / properties / roleid / description

Added value: +"Role id to delete (built-in roles are refused)."

Changedpve_role_update4 fields changed

addedInput schema / properties / append / description

Added value: +"If True, add `privs` to the role's existing privileges instead of replacing them."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN preview; True executes the mutation."

addedInput schema / properties / privs / description

Added value: +"Comma-separated privilege names to set (or add, if append=True)."

addedInput schema / properties / roleid / description
```
Added value: +"Role id to update."
```

Changedpve_rollback5 fields changed

addedInput schema / properties / confirm / description

Added value: +"Leave `false` (default) to get a dry-run PLAN with blast radius; set `true` to execute the rollback."

addedInput schema / properties / kind / description

Added value: +"Guest type: `lxc` for a container or `qemu` for a VM."

addedInput schema / properties / node / description

Added value: +"PVE node the guest runs on. Omit to resolve it automatically from the cluster."

addedInput schema / properties / snapname / description

Added value: +"Name of the snapshot to roll the guest back to."

addedInput schema / properties / vmid / description

Added value: +"Numeric ID of the guest — VMID for a QEMU VM or CTID for an LXC container."

Changedpve_sdn_apply1 field changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True applies pending SDN config cluster-wide."

Changedpve_sdn_subnet_create5 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the staged mutation."

addedInput schema / properties / lock_token / description

Added value: +"SDN cluster lock token to use for this write, if one is held."

addedInput schema / properties / options / description

Added value: +"Subnet options such as gateway, snat, and dhcp."

addedInput schema / properties / subnet / description

Added value: +"Subnet CIDR to create, e.g. 10.0.0.0/24."

addedInput schema / properties / vnet / description

Added value: +"SDN vnet name the subnet belongs to."

Changedpve_sdn_subnet_delete4 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the staged mutation."

addedInput schema / properties / lock_token / description

Added value: +"SDN cluster lock token to use for this write, if one is held."

addedInput schema / properties / subnet / description

Added value: +"Subnet id (CIDR) from pve_sdn_subnet_list to delete."

addedInput schema / properties / vnet / description

Added value: +"SDN vnet name the subnet belongs to."

Changedpve_sdn_subnet_list1 field changed
- addedInput schema / properties / vnet / description
```
Added value: +"SDN vnet name whose subnets to list."
```

Changedpve_sdn_subnet_update7 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the staged mutation."

addedInput schema / properties / delete / description
```
Added value: +"Subnet option keys to unset."
```

addedInput schema / properties / digest / description

Added value: +"Expected config digest for optimistic-concurrency checking."

addedInput schema / properties / lock_token / description

Added value: +"SDN cluster lock token to use for this write, if one is held."

addedInput schema / properties / options / description

Added value: +"Subnet fields to set (gateway, snat, dhcp, etc)."

addedInput schema / properties / subnet / description

Added value: +"Subnet id (CIDR) from pve_sdn_subnet_list to update."

addedInput schema / properties / vnet / description

Added value: +"SDN vnet name the subnet belongs to."

Changedpve_sdn_vnet_create5 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the staged mutation."

addedInput schema / properties / lock_token / description

Added value: +"SDN cluster lock token to use for this write, if one is held."

addedInput schema / properties / options / description

Added value: +"Vnet options such as tag, alias, and vlanaware."

addedInput schema / properties / vnet / description
```
Added value: +"New SDN vnet name to create."
```

addedInput schema / properties / zone / description

Added value: +"SDN zone id the vnet belongs to."

Changedpve_sdn_vnet_delete3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the staged mutation."

addedInput schema / properties / lock_token / description

Added value: +"SDN cluster lock token to use for this write, if one is held."

addedInput schema / properties / vnet / description

Added value: +"Existing SDN vnet name to delete."

Changedpve_sdn_vnet_update6 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the staged mutation."

addedInput schema / properties / delete / description
```
Added value: +"Vnet option keys to unset."
```

addedInput schema / properties / digest / description

Added value: +"Expected config digest for optimistic-concurrency checking."

addedInput schema / properties / lock_token / description

Added value: +"SDN cluster lock token to use for this write, if one is held."

addedInput schema / properties / options / description

Added value: +"Vnet fields to set (tag, alias, vlanaware, etc)."

addedInput schema / properties / vnet / description

Added value: +"Existing SDN vnet name to update."

Changedpve_sdn_zone_create5 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the staged mutation."

addedInput schema / properties / lock_token / description

Added value: +"SDN cluster lock token to use for this write, if one is held."

addedInput schema / properties / options / description

Added value: +"Type-specific zone options (e.g. bridge, mtu, controller)."

addedInput schema / properties / zone / description
```
Added value: +"New SDN zone id to create."
```

addedInput schema / properties / zone_type / description

Added value: +"Zone type: simple, vlan, qinq, vxlan, evpn, or faucet."

Changedpve_sdn_zone_delete3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the staged mutation."

addedInput schema / properties / lock_token / description

Added value: +"SDN cluster lock token to use for this write, if one is held."

addedInput schema / properties / zone / description
```
Added value: +"Existing SDN zone id to delete."
```

Changedpve_sdn_zone_update6 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the staged mutation."

addedInput schema / properties / delete / description
```
Added value: +"Zone option keys to unset."
```

addedInput schema / properties / digest / description

Added value: +"Expected config digest for optimistic-concurrency checking."

addedInput schema / properties / lock_token / description

Added value: +"SDN cluster lock token to use for this write, if one is held."

addedInput schema / properties / options / description

Added value: +"Zone fields to set (type-specific, e.g. bridge, mtu, controller)."

addedInput schema / properties / zone / description
```
Added value: +"Existing SDN zone id to update."
```

Changedpve_snapshot_create6 fields changed

addedInput schema / properties / confirm / description

Added value: +"Leave `false` (default) to get a dry-run PLAN; set `true` to execute the snapshot creation."

addedInput schema / properties / description / description

Added value: +"Optional free-text description stored on the snapshot."

addedInput schema / properties / kind / description

Added value: +"Guest type: `lxc` for a container or `qemu` for a VM."

addedInput schema / properties / node / description

Added value: +"PVE node the guest runs on. Omit to resolve it automatically from the cluster."

addedInput schema / properties / snapname / description
```
Added value: +"Name for the new snapshot."
```

addedInput schema / properties / vmid / description

Added value: +"Numeric ID of the guest — VMID for a QEMU VM or CTID for an LXC container."

Changedpve_snapshot_delete6 fields changed

addedInput schema / properties / confirm / description

Added value: +"Leave `false` (default) to get a dry-run PLAN; set `true` to execute the deletion."

addedInput schema / properties / force / description

Added value: +"Force removal even if the snapshot has children or the backend reports an inconsistent state."

addedInput schema / properties / kind / description

Added value: +"Guest type: `lxc` for a container or `qemu` for a VM."

addedInput schema / properties / node / description

Added value: +"PVE node the guest runs on. Omit to resolve it automatically from the cluster."

addedInput schema / properties / snapname / description
```
Added value: +"Name of the snapshot to delete."
```

addedInput schema / properties / vmid / description

Added value: +"Numeric ID of the guest — VMID for a QEMU VM or CTID for an LXC container."

Changedpve_snapshot_list3 fields changed

addedInput schema / properties / kind / description

Added value: +"Guest type: `lxc` for a container or `qemu` for a VM."

addedInput schema / properties / node / description

Added value: +"PVE node the guest runs on. Omit to resolve it automatically from the cluster."

addedInput schema / properties / vmid / description

Added value: +"Numeric ID of the guest — VMID for a QEMU VM or CTID for an LXC container."

Changedpve_storage_config_get1 field changed
- addedInput schema / properties / storage / description
```
Added value: +"Storage ID to look up."
```

Changedpve_storage_content3 fields changed

addedInput schema / properties / content / description

Added value: +"Filter by content type: `iso`, `vztmpl`, or `backup`. Omit to list all content."

addedInput schema / properties / node / description

Added value: +"PVE node hosting the storage. Omit to use the configured default node."

addedInput schema / properties / storage / description

Added value: +"Storage backend name to list content from."

Changedpve_storage_content_delete4 fields changed

addedInput schema / properties / confirm / description

Added value: +"Leave `false` (default) to get a dry-run PLAN — HIGH risk for a backup volume; set `true` to execute the deletion."

addedInput schema / properties / node / description

Added value: +"PVE node hosting the storage. Omit to use the configured default node."

addedInput schema / properties / storage / description

Added value: +"Storage backend name the content volume lives on."

addedInput schema / properties / volid / description

Added value: +"Volume ID of the content to delete (ISO, template, or backup), e.g. `local:vztmpl/debian-12.tar.zst`."

Changedpve_storage_create10 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the creation."

addedInput schema / properties / content / description

Added value: +"Comma-separated content types to allow, e.g. 'iso,backup,images'."

addedInput schema / properties / disable / description

Added value: +"If True, storage is created in a disabled state."

addedInput schema / properties / export / description

Added value: +"NFS export path (required for storage_type='nfs')."

addedInput schema / properties / nodes / description

Added value: +"Comma-separated node list this storage is available on; omit for all nodes."

addedInput schema / properties / path / description

Added value: +"Filesystem path (required for storage_type='dir')."

addedInput schema / properties / server / description

Added value: +"Remote host address (required for nfs/cifs/pbs)."

addedInput schema / properties / shared / description

Added value: +"If True, marks storage as shared across all nodes."

addedInput schema / properties / storage / description

Added value: +"New storage ID (name used across the cluster)."

addedInput schema / properties / storage_type / description

Added value: +"PVE storage driver type, e.g. 'dir', 'nfs', 'pbs'."

Changedpve_storage_delete2 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the deletion."

addedInput schema / properties / storage / description

Added value: +"Storage ID to remove cluster-wide (definition only; data on disk is not erased)."

Changedpve_storage_download8 fields changed

addedInput schema / properties / checksum / description

Added value: +"Expected checksum of the downloaded file, used to verify integrity."

addedInput schema / properties / checksum_algorithm / description

Added value: +"Algorithm the checksum was computed with (e.g. `sha256`). Required if checksum is given."

addedInput schema / properties / confirm / description

Added value: +"Leave `false` (default) to get a dry-run PLAN; set `true` to execute the download."

addedInput schema / properties / content / description

Added value: +"Content type of the downloaded file: `iso` or `vztmpl`."

addedInput schema / properties / filename / description

Added value: +"Filename to save the downloaded content as on the storage."

addedInput schema / properties / node / description

Added value: +"PVE node hosting the storage. Omit to use the configured default node."

addedInput schema / properties / storage / description

Added value: +"Storage backend name to download the file into."

addedInput schema / properties / url / description

Added value: +"Source URL to download the ISO or CT template from."

Changedpve_storage_status2 fields changed

addedInput schema / properties / node / description

Added value: +"PVE node hosting the storage. Omit to use the configured default node."

addedInput schema / properties / storage / description

Added value: +"Storage backend name to read capacity and state for."

Changedpve_storage_update7 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the change."

addedInput schema / properties / content / description

Added value: +"New comma-separated content type list, e.g. 'iso,backup,images'."

addedInput schema / properties / delete / description

Added value: +"Comma-separated list of config fields to unset on the storage definition."

addedInput schema / properties / disable / description

Added value: +"True to disable, False to enable, omit to leave unchanged."

addedInput schema / properties / nodes / description

Added value: +"New comma-separated node restriction list."

addedInput schema / properties / shared / description

Added value: +"True/False to set sharedness; omit to leave unchanged (must stay None for network-backed types like nfs/cifs/pbs, which reject an explicit shared flag)."

addedInput schema / properties / storage / description
```
Added value: +"Storage ID to update."
```

Changedpve_task_log4 fields changed

addedInput schema / properties / limit / description

Added value: +"Max number of log lines to return."

addedInput schema / properties / node / description

Added value: +"Node the task ran on; defaults to the configured node."

addedInput schema / properties / start / description

Added value: +"Line offset to start returning log output from (for pagination)."

addedInput schema / properties / upid / description

Added value: +"The task's Unique Process ID (UPID) string returned by an async operation."

Changedpve_task_status2 fields changed

addedInput schema / properties / node / description

Added value: +"PVE node the task is running on. Omit to resolve it automatically."

addedInput schema / properties / upid / description

Added value: +"Proxmox task UPID (unique process ID) returned by an async operation."

Changedpve_task_stop3 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN only; True executes the cancellation."

addedInput schema / properties / node / description

Added value: +"Node the task is running on; defaults to the configured node."

addedInput schema / properties / upid / description

Added value: +"The task's Unique Process ID (UPID) string to cancel."

Changedpve_task_wait4 fields changed

addedInput schema / properties / interval / description

Added value: +"Seconds between status polls, clamped to 1-60."

addedInput schema / properties / node / description

Added value: +"Node the task ran on; defaults to the configured node."

addedInput schema / properties / timeout / description

Added value: +"Max seconds to wait for the task to reach a terminal state, clamped to 1-600."

addedInput schema / properties / upid / description

Added value: +"The task's Unique Process ID (UPID) string to poll for completion."

Changedpve_tasks_list6 fields changed

addedInput schema / properties / errors / description

Added value: +"If True, only return tasks that ended in error."

addedInput schema / properties / limit / description

Added value: +"Max number of most-recent tasks to return, max 1000 (0 or negative is rejected)."

addedInput schema / properties / node / description

Added value: +"Node to list tasks from; defaults to the configured node."

addedInput schema / properties / statusfilter / description

Added value: +"Optional status filter, e.g. 'running', 'stopped'."

addedInput schema / properties / typefilter / description

Added value: +"Optional task-type filter, e.g. 'vzdump', 'qmigrate' (PVE task type string)."

addedInput schema / properties / vmid / description

Added value: +"Optional VMID/CTID to filter tasks to a single guest."

Changedpve_template_convert4 fields changed

addedInput schema / properties / confirm / description

Added value: +"Leave `false` (default) to get a dry-run PLAN flagging this as HIGH/irreversible; set `true` to execute."

addedInput schema / properties / kind / description

Added value: +"Guest type: `lxc` for a container or `qemu` for a VM."

addedInput schema / properties / node / description

Added value: +"PVE node the guest runs on. Omit to resolve it automatically from the cluster."

addedInput schema / properties / vmid / description

Added value: +"Numeric ID of the guest to convert into a template."

Changedpve_tfa_delete4 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN preview; True executes the mutation."

addedInput schema / properties / password / description

Added value: +"The user's current password, if PVE requires re-authentication for this mutation; never logged."

addedInput schema / properties / tfa_id / description
```
Added value: +"Id of the TFA factor to delete."
```

addedInput schema / properties / userid / description

Added value: +"User id whose TFA factor to delete, format 'user@realm'."

Changedpve_tfa_get2 fields changed

addedInput schema / properties / tfa_id / description

Added value: +"Specific TFA entry id to return; omit to return all of the user's entries."

addedInput schema / properties / userid / description

Added value: +"User id whose TFA entries to read, format 'user@realm'."

Changedpve_token_create6 fields changed

addedInput schema / properties / comment / description

Added value: +"Optional free-text comment describing the token's purpose."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN preview; True executes the mutation."

addedInput schema / properties / expire / description

Added value: +"Optional token expiry as a Unix timestamp; None means no expiry."

addedInput schema / properties / privsep / description

Added value: +"Privilege separation: True (default) restricts the token to its own ACL grants; False lets it inherit ALL owner permissions."

addedInput schema / properties / tokenid / description

Added value: +"Name for the new API token, unique per user."

addedInput schema / properties / userid / description
```
Added value: +"Owning user, format 'user@realm'."
```

Changedpve_token_revoke3 fields changed
- addedInput schema / properties / confirm / description
```
Added value: +"False (default) returns a dry-run PLAN preview; True executes the mutation."
```
- addedInput schema / properties / tokenid / description
```
Added value: +"Name of the API token to revoke."
```
- addedInput schema / properties / userid / description
```
Added value: +"Owning user, format 'user@realm'."
```
Changedpve_tokens_list1 field changed
- addedInput schema / properties / userid / description
```
Added value: +"Owning user, format 'user@realm'."
```

Changedpve_user_create9 fields changed

addedInput schema / properties / comment / description
```
Added value: +"Optional free-text comment."
```

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN preview; True executes the mutation."

addedInput schema / properties / email / description
```
Added value: +"Optional email address."
```

addedInput schema / properties / enable / description

Added value: +"Whether the account can log in; None defers to PVE's default (enabled)."

addedInput schema / properties / expire / description

Added value: +"Optional account expiry as a Unix timestamp; None means no expiry."

addedInput schema / properties / firstname / description
```
Added value: +"Optional first name."
```

addedInput schema / properties / groups / description

Added value: +"Comma-separated list of group ids to add the user to."

addedInput schema / properties / lastname / description
```
Added value: +"Optional last name."
```
addedInput schema / properties / userid / description
```
Added value: +"New user id, format 'user@realm'."
```

Changedpve_user_delete2 fields changed

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN preview; True executes the mutation."

addedInput schema / properties / userid / description

Added value: +"User id to delete, format 'user@realm'."

Changedpve_user_get1 field changed
- addedInput schema / properties / userid / description
```
Added value: +"User id to look up, format 'user@realm'."
```

Changedpve_user_update10 fields changed

addedInput schema / properties / append / description

Added value: +"If True, add `groups` to existing membership instead of replacing it."

addedInput schema / properties / comment / description

Added value: +"Optional free-text comment; omit to leave unchanged."

addedInput schema / properties / confirm / description

Added value: +"False (default) returns a dry-run PLAN preview; True executes the mutation."

addedInput schema / properties / email / description

Added value: +"Optional email address; omit to leave unchanged."

addedInput schema / properties / enable / description

Added value: +"Whether the account can log in; False stops login. Omit to leave unchanged."

addedInput schema / properties / expire / description

Added value: +"Account expiry as a Unix timestamp; omit to leave unchanged."

addedInput schema / properties / firstname / description

Added value: +"Optional first name; omit to leave unchanged."

addedInput schema / properties / groups / description

Added value: +"Comma-separated list of group ids; replaces membership unless append=True."

addedInput schema / properties / lastname / description

Added value: +"Optional last name; omit to leave unchanged."

addedInput schema / properties / userid / description

Added value: +"User id to update, format 'user@realm'."

364 tool updatesv0.20.0Jul 10, 2026

Changedct_diagnose1 field changed