proximo (john-broadway/proximo) is an MCP server listed on the M8ven Trust Index. It scores 74 out of 100, grade C. It declares 911 tools. No publisher has claimed this listing.

Back to MCP Trust IndexM8ven
C
Emerging
74/100
9 days ago

proximo

The Proxmox MCP you can hand the keys. All four products: PVE, PBS, PMG, PDM.

→ john-broadway/proximo· listed on glama

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

john-broadway

Source: Glama · also listed on github_topic

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

GlamaGitHub

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 1 credential: SMOKE_CRUD_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configPROXIMO_RECEIPT_DENYLIST
configPROXIMO_MCP_HTTP_STATELESS
configPROXIMO_MCP_HTTP_JSON
configPROXIMO_SMOKE_VERSION
configPROXIMO_SMOKE_MCP_MAJOR
configSMOKE_VMID
configSMOKE_KIND
configSMOKE_CRUD_USER
configSMOKE_CRUD_ROLE
🔐 secretSMOKE_CRUD_TOKEN
configPROXIMO_ACL_PATH
configPROXIMO_ACL_TARGET
configPROXIMO_ACL_ROLES
configSMOKE_STORE
configPROXIMO_STORAGE
configSMOKE_SRC_VMID
configSMOKE_NEW_VMID
configSMOKE_POOL
configSMOKE_SLOT
configSMOKE_SIZE
configPROXIMO_SMOKE_TEST_VMIDS
configSMOKE_MOVE_STORE
configSMOKE_BRIDGE
configSMOKE_BOOT_VOLID
configSMOKE_TEMPLATE
configSMOKE_ENVELOPE_RATE_MAX
configSMOKE_ENVELOPE_RATE_EXTRA
configSMOKE_ENVELOPE_RATE_WINDOW
configPROXIMO_FORBID
configPROXIMO_API_BASE_URL
configPROXIMO_RATE_MAX
configPROXIMO_RATE_WINDOW
configPROXIMO_FW_ACTION
configPROXIMO_FW_DIRECTION
configPROXIMO_FW_SCOPE
configPROXIMO_FW_SOURCE
configPROXIMO_FW_DPORT
configPROXIMO_NODE
configSMOKE_ALIAS
configSMOKE_IPSET
configSMOKE_SG
configSMOKE_HA_RULE
configSMOKE_NFS_SERVER
configSMOKE_NFS_EXPORT
configSMOKE_TARGET
configSMOKE_KEEP
configSMOKE_PVE_TARGETS
configSMOKE_PBS_TARGETS
configSMOKE_PBS_KIND_TARGET
configSMOKE_FW_COMMENT
configSMOKE_POOL_ID
configSMOKE_PBS_NS
configSMOKE_PBS_STORE
configPROXIMO_PBS_CA_BUNDLE
configSMOKE_REMOTE
configSMOKE_TARGET_NODE
configSMOKE_TARGET_REMOTE
configSMOKE_TARGET_BRIDGE
configSMOKE_TARGET_STORAGE
configSMOKE_TARGET_VMID
configSMOKE_ONLINE
configSMOKE_DELETE
configSMOKE_SDN_ZONE
configSMOKE_SDN_VNET
configSMOKE_SDN_CIDR
configSMOKE_STORAGE_NAME
configSMOKE_STORAGE_PATH
configSMOKE_TPL_VMID
configPROXIMO_AUDIT_LOG
configPROXIMO_ENV_FILE
configPROXIMO_TOKEN_PATH
configPROXIMO_SSH_TARGET
configPROXIMO_ARM_SOURCE
configPROXIMO_READONLY_SOURCE
configPROXIMO_CT_ALLOWLIST
configPROXIMO_AGENT_ALLOWLIST
configPROXIMO_VERIFY_TLS
configPROXIMO_CA_BUNDLE
configPROXIMO_FINGERPRINT
configPROXIMO_ENABLE_EXECopt-in (PROXIMO_ENABLE_EXEC=1), fail-closed allowlist
configPROXIMO_ENABLE_AGENT
configPROXIMO_ENABLE_NODE_SHELL
configPROXIMO_AUDIT_KEY_PATH
configPROXIMO_AUDIT_KEYED
configPROXIMO_LEDGER_REDACT
configPROXIMO_AUDIT_EXPECTED_HEAD
configPROXIMO_AUDIT_ANCHOR_SINK
configPROXIMO_AUDIT_ANCHOR_FILE_PATH
configPROXIMO_AUDIT_ANCHOR_URL
configPROXIMO_AUDIT_ANCHOR_TOKEN_PATH
configPROXIMO_AUDIT_ANCHOR_CA_BUNDLE
configPROXIMO_AUDIT_ANCHOR_SYSLOG_ADDRESS
configPROXIMO_AUDIT_ANCHOR_JOURNAL_SOCKET
configPROXIMO_CONSENT_DIRIndependent, out-of-band approval per plan: an agent (compromised, confused, or steered by injected text) cannot confirm its own mutation. Grants live in a directory only you write (PROXIMO_CONSENT_DIR), expire on a TTL, and never clear a taint.
configPROXIMO_CALLER_KEYS_DIR
configPROXIMO_TOOLS
configPROXIMO_TOOLSETS
configPROXIMO_SURFACES
configPROXIMO_AUTOSCOPE
configPROXIMO_LEXICAL
configPROXIMO_MEMORY
configPROXIMO_MEMORY_PATH
configPROXIMO_PBS_BASE_URL
configPROXIMO_PBS_TOKEN_PATH
configPROXIMO_PBS_VERIFY_TLS
configPROXIMO_PBS_FINGERPRINT
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

912/912 tools missing one or more hints — ct_exec (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); ct_psql (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); audit_entries (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +909 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/john-broadway/proximo)](https://m8ven.ai/mcp/john-broadway/proximo)
Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.
commit: 8bff68d4b3643e196c7e7f990d2d0e4ed3d68b21
code hash: e972cf2a214a86b95685549c664c762fd81248f1b21dfd0cc71a52e6b3670a39
verified: 9/1/2026, 9:47:33 PM
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client