jebroadway/proximo repository overview

⁠Proximo

The Proxmox MCP you can hand the keys. All four products: PVE, PBS, PMG, PDM.

The others make you pick: a read-only toy, or full keys and pray. Proximo won't. Every dangerous move is planned: see the blast radius first. Every move is proven: a tamper-evident record. And undoable wherever the platform gives us a primitive: a config change hands back the exact prior state, and a risky in-container command can take a snapshot first, and refuses to run if it can't. Trust built into the substrate, not bolted on after. Hand an AI agent the keys; keep the receipts.

906 tools across all four Proxmox products: Virtual Environment, Backup Server, Mail Gateway, Datacenter Manager. One governed core over MCP, A2A, and HTTP. API-only by default; in-container exec is opt-in and says so loudly.

⁠This repository is the counting mirror

The signed primary lives on GHCR: ghcr.io/john-broadway/proximo (multi-arch, SBOM, sigstore provenance; verify with gh attestation verify oci://ghcr.io/john-broadway/proximo --owner john-broadway). Images here are copied from GHCR by digest, never rebuilt. The digests match; pull from either.

⁠Run

docker run -i --rm --env-file proximo.env docker.io/jebroadway/proximo:latest

MCP speaks stdio, so wire the container in as your MCP client's command. Configuration is PROXIMO_* environment variables against a scoped API token; the annotated example lives in the repo at 'packaging/proximo.env.example`. No daemon, no open port.

⁠Links

• GitHub⁠ · [project page] https://john-broadway.github.io/proximo/⁠) · [PyPI] https://pypi.org/project/proximo-proxmox/⁠)
• CHANGELOG⁠ · SECURITY⁠

Apache 2.0.