← All MCP servers
MCP server
Proximo — the governed client for Proxmox
mcp:john-broadway/proximo
The governed client for Proxmox (PVE, PBS, PMG, PDM): plans, keeps the receipts, puts things back.
Verdict
Not analyzed
Indexed from the registries, but not analyzed yet. Lineage and listings below are current.
Execution chain 218
What it calls, runs, installs, reads and writes, with the line that does it.
Environment variables 49
_
*
scripts/gate_mutations.py:209 · passthrough
<dynamic>
scripts/gen_door_contract.py:166 · write
BGN
CHECK_UPDATE_RELEASE
CL
COMMUNITY_SCRIPTS_CORE_DIR
CREATING
FUNCTIONS_FILE_PATH
GATEWAY
GN
INFO
IP
PATH
PROXIMO_A2A_SIGNING_KEY_FILE
PROXIMO_API_BASE_URL
src/proximo/core/arm.py:110 · read
PROXIMO_ARM_SOURCE
src/proximo/core/arm.py:91 · read
PROXIMO_AUDIT_EXPECTED_HEAD
PROXIMO_AUDIT_KEY_PATH
PROXIMO_AUDIT_LOG
PROXIMO_CALLER_KEYS_DIR
PROXIMO_CONSENT_DIR
PROXIMO_CONSENT_SAME_USER
PROXIMO_CONSENT_TTL_SECONDS
PROXIMO_CONTAIN_TRIP_PATH
PROXIMO_ENV_FILE
PROXIMO_FORBID
PROXIMO_PMG_CREDENTIAL_PATH
src/proximo/core/wire.py:149 · read
PROXIMO_PMG_PASSWORD_PATH
src/proximo/core/wire.py:154 · read
PROXIMO_PRINCIPAL
PROXIMO_RATE_MAX
PROXIMO_RATE_WINDOW
PROXIMO_RAW_MAX_BYTES
PROXIMO_READONLY_SOURCE
src/proximo/core/arm.py:93 · read
PROXIMO_RESTORE_DIR
PROXIMO_RESTORE_MAX_BYTES
PROXIMO_SMOKE_MCP_MAJOR
scripts/pypi_smoke.py:58 · read
PROXIMO_SMOKE_VERSION
scripts/pypi_smoke.py:56 · read
PROXIMO_SSH_TARGET
src/proximo/core/shell.py:74 · read
PROXIMO_STORE
src/proximo/core/store.py:50 · read
PROXIMO_STORE_DIR
src/proximo/core/store.py:54 · read
PROXIMO_SURFACES
PROXIMO_TAINT_FORBID
PROXIMO_TARGETS
PROXIMO_TOKEN_PATH
src/proximo/core/arm.py:92 · read
PROXIMO_UNDO
STD
TAB
YW
Commands run 44
__import__("base64")
tests/test_core_download.py:277 · dynamic_code
__import__("http")
tests/test_spine.py:809 · dynamic_code
__import__("pathlib")
tests/test_core_download.py:235 · dynamic_code
__import__("re")
tests/test_spine.py:743 · dynamic_code
<dynamic>
scripts/release_leak_audit.py:478 · via:read_ref_tree
base
tests/test_release_leak_audit.py:469 · via:_commit
bash -s
tests/test_mint.py:305 · process
carries an internal-only path
tests/test_release_leak_audit.py:487 · via:_commit
clean change
tests/test_release_leak_audit.py:471 · via:_commit
compile(apitree.published()["diagnose"])
src/proximo/core/diagnose.py:107 · dynamic_code
diff --name-only --diff-filter=d -z {…} {…}
scripts/release_leak_audit.py:488 · via:_git
git {…}
scripts/release_leak_audit.py:452 · process
git add -A
tests/test_release_leak_audit.py:460 · process
git commit -q -m {…}
tests/test_release_leak_audit.py:461 · process
git init -q {…}
tests/test_release_leak_audit.py:454 · process
git ls-files
tests/test_documented_env_is_read.py:29 · process
git ls-files --error-unmatch uv.lock
tests/test_requirements_lock.py:71 · process
git rev-parse --show-toplevel
scripts/release_leak_audit.py:417 · process
git show {…}
scripts/release_leak_audit.py:467 · process
HEAD
tests/test_release_leak_audit.py:439 · via:read_ref_tree
http://0.0.0.0:41242/
tests/test_httpface_auth.py:34 · via:build_app
http://10.1.2.3:41242/
tests/test_httpface_auth.py:25 · via:build_app
http://localhost/
tests/test_a2a_e2e.py:34 · via:build_app
import httpx
tests/test_closure.py:54 · via:_third_party_after
import proximo.core.doors.cli, proximo.core.doors.mcp, proximo.core.doors.mcphttp, proximo.core.doors.http, proximo.core.doors.a2a, proximo.core.wire
tests/test_closure.py:57 · via:_third_party_after
importlib.import_module(_DOORS[request.module.FACE])
tests/conftest.py:130 · dynamic_code
importlib.import_module(dotted)
tests/test_gate_mutations_inventory.py:129 · dynamic_code
importlib.import_module(head)
tests/test_gate_mutations_inventory.py:160 · dynamic_code
importlib.import_module(mod)
tests/conftest.py:144 · dynamic_code
leak in content
tests/test_release_leak_audit.py:503 · via:_commit
ls-tree -r --name-only -z {…}
scripts/release_leak_audit.py:463 · via:_git
ls-tree -r --name-only {…}
tests/test_release_leak_audit.py:253 · via:_git_out
read-tree {…}
scripts/release_leak_audit.py:512 · via:_git
rm -f --cached --quiet --ignore-unmatch -- {…}
scripts/release_leak_audit.py:524 · via:_git
source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL}/core/build.func")
packaging/lxc/ct/proximo.sh:12 · dynamic_code
ssh {…} {…} {…}
src/proximo/core/shell.py:174 · via:_run
status --porcelain
tests/test_release_leak_audit.py:277 · via:_git_out
true
tests/test_core_shell_lane.py:322 · via:_run
uv export --frozen {…} --format requirements-txt -o {…}
tests/test_requirements_lock.py:47 · process
uv pip install -q --python {…} {…}
tests/test_closure.py:84 · process
uv run proximo
scripts/gen_lobehub_manifest.py:85 · process
uv run pytest -q -x -p no:cacheprovider {…}
scripts/gate_mutations.py:208 · process
uv venv -q {…}
tests/test_closure.py:83 · process
write-tree
scripts/release_leak_audit.py:525 · via:_git
Files read 12
.ssh
src/proximo/core/mint.py:373 · literal
/etc/passwd
tests/test_ledger_chain.py:150 · literal
/etc/shadow
tests/test_mint.py:417 · literal
/home/ops/.ssh/authorized_keys
tests/test_mint.py:454 · literal
/opt/john's lab/zq9x-marker.key
tests/test_safe_text_paths.py:43 · via:_real_open_error
/opt/my lab/zq9x-marker.key
tests/test_safe_text_paths.py:44 · via:_real_open_error
/srv/a/.ssh/b
tests/test_mint.py:454 · literal
<dynamic>
scripts/_reqstamp.py:43 · read
$HOME/.ssh/x.token
tests/test_mint.py:454 · literal
AGENTS.md
tests/test_needs_are_documented.py:41 · literal
C:\Users\zq9x-marker\token.txt
tests/test_safe_text_paths.py:74 · via:_real_open_error
CLAUDE.md
tests/test_documented_env_is_read.py:25 · literal
Files written 18
scripts/release.sh:154 · write
>>
scripts/release.sh:142 · write
{…}
tests/test_closure.py:84 · command
/etc/proximo/mcp-bearer.token
/etc/proximo/proximo.env
/nodes/{node}
tests/test_core_diagnose.py:393 · via:run
/nodes/localhost
tests/test_core_diagnose.py:398 · via:run
/nodes/pve1
tests/test_core_diagnose.py:158 · via:run
/nodes/pve1/lxc/1201
tests/test_core_diagnose.py:267 · via:run
/nodes/pve1/qemu/101
tests/test_core_diagnose.py:297 · via:run
/nodes/pve1/storage
tests/test_core_diagnose.py:385 · via:run
/nowhere/at/all
tests/test_core_diagnose.py:387 · via:run
<dynamic>
scripts/_reqstamp.py:58 · write
~/.proximo
packaging/lxc/ct/proximo.sh:79 · write
$OUT
debian/tests/smoke:35 · write
$WORKDIR/token
debian/tests/smoke:21 · write
proximo-proxmox[mcp-http]==${CHECK_UPDATE_RELEASE#v}
packaging/lxc/ct/proximo.sh:78 · write
proximo-proxmox[mcp-http]==${PROXIMO_VERSION}
GitHub repositories 3
Host config written 4
/CLAUDE.md
tests/test_release_leak_audit.py:265 · literal
/etc/systemd/system/proximo-mcp-http.service
CLAUDE.md
scripts/release_leak_audit.py:63 · literal
systemctl enable -q --now proximo-mcp-http
Network calls 33
<dynamic>
0.0.0.0
tests/test_httpface_auth.py:34 · command
10.1.2.3
tests/test_httpface_auth.py:25 · command
127.0.0.1
debian/tests/smoke:33 · url
192.0.2.7
tests/test_spine.py:704 · url_literal
box.invalid
tests/test_spine.py:1115 · url_literal
east-box.invalid
tests/test_core_targets.py:26 · url_literal
east.invalid
tests/test_core_doctor.py:173 · url_literal
elsewhere.invalid
tests/test_core_download.py:246 · url_literal
env-box.invalid
tests/test_core_targets.py:25 · url_literal
estate.invalid
tests/test_mcp_door.py:200 · url_literal
evil.example
tests/test_a2a_signing.py:126 · url_literal
glama.ai
scripts/listing_drift.py:66 · url_literal
hub.docker.com
scripts/base_image_digest_check.py:24 · url_literal
lab2.invalid
tests/test_core_undo.py:571 · url_literal
lobehub.com
scripts/listing_drift.py:68 · url_literal
localhost
tests/test_a2a_e2e.py:34 · command
mcp.so
scripts/listing_drift.py:63 · url_literal
mcpservers.org
scripts/listing_drift.py:64 · url_literal
mine.invalid
tests/test_engine.py:315 · url_literal
other.invalid
tests/test_spine.py:662 · url_literal
pbs.invalid
tests/test_core_diagnose.py:399 · url_literal
pdm.invalid
tests/test_core_task_wait.py:363 · url_literal
pmg.invalid
tests/test_core_doctor.py:136 · url_literal
proxy
tests/test_spine.py:98 · url_literal
pve.example.invalid
tests/test_core_task_wait.py:157 · url_literal
pve.invalid
tests/test_core_diagnose.py:310 · url_literal
raw.githubusercontent.com
smithery.ai
scripts/listing_drift.py:65 · url_literal
unreachable.invalid
tests/test_core_download.py:31 · url_literal
www.pulsemcp.com
scripts/listing_drift.py:67 · url_literal
x
tests/test_spine.py:100 · url_literal
Packages 5
pypi:proximo-proxmox
CHANGELOG.md:998 · instructed
pypi:proximo-proxmox[mcp-http]
CHANGELOG.md:1916 · instructed
pypi:proximo-proxmox@0.48.1
server.json:31 · launch:server.json
pypi:proximo[a2a]
CHANGELOG.md:3264 · instructed
pypi:uv
llms-install.md:110 · instructed
URLs 50
http://::1:41241/
http://$
http://0.0.0.0:41242/
http://10.1.2.3:41242/
http://127.0.0.1
http://127.0.0.1:41241/
http://127.0.0.1:41242/
http://127.0.0.1:41243/
http://127.0.0.1:45999/
http://bob:PLANTED-URL@x:1
http://evil.example
http://evil.example/.well-known/jwks.json
http://evil.example/rpc
http://localhost
records/vendor.json.gz!/vendor.json:1
http://localhost:8080/
http://localhost:9000/rpc
http://localhost/
http://localhost/.well-known/jwks.json
http://localhost/mcp
http://svc:PLANTED-BEFORE@proxy:3128
http://user:p@ss@host
http://user:p@ss@host:3128/x
http://user:pass@host:port
http://username:password@host:port/
records/vendor.json.gz!/vendor.json:1
http://www.w3.org/2000/svg
https://127.0.0.1
https://127.0.0.1:1/api2/json
https://127.0.0.1:8006/api2/json
https://192.0.2.10:8006
https://192.0.2.10:8006/api2/json
https://192.0.2.7:8006
https://api.scorecard.dev/projects/github.com/john-broadway/proximo/badge
https://box.invalid
https://box.invalid:8006/api2/json
https://box.invalid:8006/x
https://cursor.com/install-mcp?name=
https://cursor.com/install-mcp?name=proximo&config=eyJjb21tYW5kIjoidXZ4IiwiYXJncyI6WyJwcm94aW1vLXByb3htb3giXSwiZW52Ijp7IlBST1hJTU9fQVBJX0JBU0VfVVJMIjoiaHR0cHM6Ly95b3VyLXB2ZTo4MDA2L2FwaTIvanNvbiIsIlBST1hJTU9fVE9LRU5fUEFUSCI6Ii9wYXRoL3RvL3Rva2VuLWZpbGUifX0%3D
https://east-box.invalid:8006/api2/json
https://east.invalid:8006/api2/json
https://edge.example.com:8006/api2/json
https://elsewhere.invalid/x
https://env-box.invalid:8006/api2/json
https://estate.invalid:8006/api2/json
https://files.pythonhosted.org/packages/01/77/2cf79bbfc4d12ca106437a6e170d6aaa01a373e93093118aaaef0e801bd4/cryptography-50.0.0-cp314-cp314t-manylinux_2_34_ppc64le.whl
https://files.pythonhosted.org/packages/01/ee/02a2c011bdab74c6fb3c75474d40b3052059d95df7e73351460c8588d963/h11-0.16.0.tar.gz
https://files.pythonhosted.org/packages/02/9a/b759b503d507f375b2b5c153e4d2ee0a75aa215b7f2489cf314f4541f2c0/charset_normalizer-3.4.7-cp314-cp314t-musllinux_1_2_armv7l.whl
https://files.pythonhosted.org/packages/02/a5/5197bfd06417837ac079921c66fa6393f1dea3557272a263cebfef69e432/pyjwt-2.15.0.tar.gz
https://files.pythonhosted.org/packages/02/c3/f859b12763a80540cdf2af0f15b19904cf756a71d7bdd3f82ff3e5b1bbf9/rpds_py-2026.5.1-cp315-cp315t-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl
https://files.pythonhosted.org/packages/03/37/73d005be173aff344af30e9fd2a576575cb2391a7101d9cd3842e1fa8cce/cryptography-50.0.0-cp39-abi3-macosx_11_0_arm64.whl
https://files.pythonhosted.org/packages/03/d5/fd02da45b659668b05923b17ba3a0100a0a3d5541e3bd8fcc4ecb711309e/pydantic_core-2.46.4-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
Linked repositories 2
GitHub repositories it links to or installs from, and whether their names can be taken over.
community-scripts/core
url · not tracked
punkpeye/awesome-mcp-servers
url · no ownership changes