MCP 服务器

Proxmox MCP Server

An enterprise-grade management tool that enables Claude Code to securely interact with Proxmox VE for full VM and LXC container management. It provides single-command installation and comprehensive security controls for production-ready deployments.

README

Proxmox MCP Server

Enterprise-grade Proxmox VE management for Claude Code with bulletproof security

Quick Start

Get running in 10 minutes: Quick Start Guide

Key Features

🚀 Single-command installation - Deploy in minutes with sudo ./install.sh
🛡️ 85+ security controls with bulletproof protection against all attack vectors
🔧 Universal Claude Code access - Use from any project directory
📊 Enterprise monitoring with health checks and auto-healing
🔒 Compliance ready - SOC 2 / ISO 27001 / NIST framework support
🐳 Containerized - Docker-based deployment with production hardening
⚡ Full VM/LXC management - Create, clone, configure, and manage containers

Installation Preview

# Clone and install
git clone https://github.com/YOUR-ORG/ProxmoxMCP-Production.git
cd ProxmoxMCP-Production
sudo ./scripts/install/install.sh

# Add to Claude Code globally
claude mcp add --transport http proxmox-production http://YOUR_IP:8080/api/mcp

# Use from any Claude Code project
cd /any/project && claude

Documentation Navigation

🎯 I want to...

Goal	Documentation Path
Get started quickly	Quick Start
Complete installation	Installation Guide
Manage in production	Administration Guide
Integrate with systems	Integration Guide
Understand security	Security Guide
Troubleshoot issues	Troubleshooting

👥 Role-Based Documentation

🆕 New Users: Start with Getting Started
🔧 Administrators: Go to Administration
👩‍💻 Developers: See Integration
🛡️ Security Teams: Review Security

Architecture Overview

┌─────────────────┐    ┌─────────────────┐    ┌─────────────────┐
│   Claude Code   │◄──►│  Proxmox MCP    │◄──►│   Proxmox VE    │
│                 │    │     Server      │    │                 │
│  • Projects     │    │  • Docker       │    │  • VMs/LXCs     │
│  • Commands     │    │  • Security     │    │  • Storage      │
│  • Integration  │    │  • Monitoring   │    │  • Network      │
└─────────────────┘    └─────────────────┘    └─────────────────┘

Key Components:

MCP Server: FastMCP-based HTTP server with enterprise security
Security Layer: 85+ controls with bulletproof privilege restrictions
Container Runtime: Hardened Docker environment with resource limits
API Integration: Full Proxmox API access with token authentication
SSH Gateway: Secure command execution with audit logging

Security Features

🛡️ Zero Critical Vulnerabilities - Complete security validation with 85/85 tests passed
🔒 Root Protection - Bulletproof prevention of root user modification
🔐 Command Filtering - Whitelist-only approach with comprehensive dangerous command blocking
📊 Audit Logging - Complete I/O logging and security event monitoring
🏢 Enterprise Compliance - SOC 2, ISO 27001, CIS Controls, NIST CSF ready
🚫 Privilege Isolation - Restricted claude-user with minimal necessary permissions

Production Ready

✅ Tested Environments: Proxmox VE 7.x, 8.x
✅ Container Security: Non-root execution, read-only filesystem, capability dropping
✅ Resource Management: CPU/memory limits, health checks, auto-restart
✅ Network Security: Isolated container networks, firewall integration
✅ Backup/Recovery: Automated backup with rollback procedures
✅ Monitoring: Health endpoints, log aggregation, performance metrics

System Requirements

Proxmox VE: Version 7.0+ (tested on 8.4)
Operating System: Debian-based (Proxmox default)
Resources: 2GB RAM, 10GB disk space
Network: Internet access for package installation
Permissions: Root access for installation

Quick Commands

# Health check
curl http://YOUR_IP:8080/health

# View logs
cd /opt/proxmox-mcp/docker && docker-compose logs -f

# Restart service
cd /opt/proxmox-mcp/docker && docker-compose restart

# Update installation  
cd /opt/proxmox-mcp && git pull && sudo ./scripts/install/install.sh