pvemcp
by yutho-o
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| PROXMOX_URL | No | Proxmox VE API URL; port 8006 is added if missing. | |
| PROXMOX_TOKEN | No | Full API token: user@realm!id=secret. | |
| PROXMOX_CONFIG | No | Path to a JSON file describing multiple clusters; supports ${VARIABLE} interpolation. | |
| PROXMOX_ELICIT | No | Ask for human confirmation before destructive actions when supported. | true |
| PROXMOX_CA_FILE | No | CA file to trust for TLS. | |
| PROXMOX_DRY_RUN | No | Expose write tools but do not send changes. | false |
| PROXMOX_UNBLOCK | No | Blocked methods to allow, e.g. POST /nodes/{node}/execute or /access/ticket. | |
| PROXMOX_PASSWORD | No | Password for password authentication. | |
| PROXMOX_SSH_PORT | No | SSH port on nodes. | 22 |
| PROXMOX_SSH_SUDO | No | Prefix commands with sudo -n if the user is not root. | false |
| PROXMOX_SSH_USER | No | SSH user on nodes. | root |
| PROXMOX_TOKEN_ID | No | API token ID when the token is split in two parts. | |
| PROXMOX_TOOLSETS | No | Tool domains to load, or all. | all except sdn, ceph, notifications, acme, mapping |
| PROXMOX_USERNAME | No | Username for password authentication, including realm, e.g. root@pam. | |
| PROXMOX_ALLOW_SSH | No | Enable SSH tools. | false |
| PROXMOX_AUDIT_LOG | No | JSONL file for logging writes, SSH commands, and refusals. | |
| PROXMOX_LOCAL_DIR | No | Only local directory allowed for file transfers; without it transfers are refused. | |
| PROXMOX_MCP_TOKEN | No | Bearer token for HTTP mode; required outside localhost. | |
| PROXMOX_SSH_AGENT | No | SSH agent socket, pageant, or Windows OpenSSH agent pipe. | |
| PROXMOX_SSH_NODES | No | Node-to-address mapping, e.g. pve1=10.0.0.11,pve2=10.0.0.12, or JSON. | |
| PROXMOX_VERIFY_SSL | No | Verify the TLS certificate. | true |
| PROXMOX_FINGERPRINT | No | Expected SHA-256 certificate fingerprint. | |
| PROXMOX_ALLOW_WRITES | No | Enable write tools. | false |
| PROXMOX_DEFAULT_NODE | No | Default node when a tool without vmid does not receive one. | |
| PROXMOX_SSH_KEY_FILE | No | Private SSH key file. | |
| PROXMOX_SSH_PASSWORD | No | SSH password alternative. | |
| PROXMOX_TOKEN_SECRET | No | API token secret when the token is split in two parts. | |
| PROXMOX_ALLOW_ELEVATED | No | Enable elevated write tools that can affect the host. | false |
| PROXMOX_GUEST_SSH_USER | No | SSH user for direct guest access. | root |
| PROXMOX_ALLOW_SENSITIVE | No | Enable sensitive read tools. | false |
| PROXMOX_PROTECTED_VMIDS | No | Guests protected from modification, e.g. 100,101. | |
| PROXMOX_SSH_KNOWN_HOSTS | No | Known hosts file. | ~/.ssh/known_hosts |
| PROXMOX_TIMEOUT_SECONDS | No | API request timeout in seconds (1-3600). | 30 |
| PROXMOX_ALLOW_GUEST_EXEC | No | Enable execution inside guests via the QEMU guest agent. | false |
| PROXMOX_CREDENTIALS_FILE | No | File containing the API token, either as one line mcp@pve!pvemcp=<secret> or with token_id= and token_secret= lines. | |
| PROXMOX_SSH_FINGERPRINTS | No | Pinned host keys, e.g. pve1=SHA256:..., or JSON. | |
| PROXMOX_MCP_ALLOWED_HOSTS | No | Allowed Host header values in HTTP mode. | |
| PROXMOX_TASK_WAIT_SECONDS | No | Task wait timeout in seconds (0-3600). | 30 |
| PROXMOX_GUEST_SSH_KEY_FILE | No | Private SSH key file for direct guest access. | |
| PROXMOX_GUEST_SSH_PASSWORD | No | SSH password for direct guest access. | |
| PROXMOX_MAX_RESPONSE_CHARS | No | Maximum response size in characters (2000-5000000). | 120000 |
| PROXMOX_SSH_KEY_PASSPHRASE | No | Passphrase for the SSH key. | |
| PROXMOX_SSH_HOST_KEY_POLICY | No | Host key policy: strict, accept-new, or off. | strict |
| PROXMOX_SSH_TIMEOUT_SECONDS | No | SSH command timeout in seconds. | 120 |
| PROXMOX_SSH_MAX_OUTPUT_BYTES | No | Maximum SSH output bytes kept per command. | 1048576 |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessSyncing