MCP server giving AI assistants full control of a Proxmox homelab, enabling management of VMs, containers, Docker projects, media stack, and monitoring via natural language.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig
process.env. You'll be asked to provide them before it can run.ADGUARD_PASSWORD— ADGUARD_URL, ADGUARD_USER, AdGuard HomeADGUARD_URL— , ADGUARD_USER, ADGUARD_PASSWORD AdGuard HomeADGUARD_USER— ADGUARD_URL, , ADGUARD_PASSWORD AdGuard HomeBAZARR_API_KEY— BAZARR_URL, Bazarr subtitlesBAZARR_URL— , BAZARR_API_KEY Bazarr subtitlesDASHBOARD_DISK_PATHSDEVBOX_HOST— , DEVBOX_USER Devbox SSH accessDEVBOX_KEY_PATH— DEVBOX_PASSWORD or Devbox SSH authDEVBOX_PASSWORD— or DEVBOX_KEY_PATH Devbox SSH authDEVBOX_PORTDEVBOX_PROJECTS_DIRDEVBOX_USER— DEVBOX_HOST, Devbox SSH accessGRAFANA_TOKEN— GRAFANA_URL, Grafana APIGRAFANA_URL— , GRAFANA_TOKEN Grafana APIHTTP_RETRIESLIDARR_API_KEY— LIDARR_URL, Lidarr musicLIDARR_ROOT_FOLDERLIDARR_URL— , LIDARR_API_KEY Lidarr musicMEDIA_CONTAINERSOVERSEERR_API_KEY— OVERSEERR_URL, Overseerr APIOVERSEERR_URL— , OVERSEERR_API_KEY Overseerr APIPBS_NODEPBS_TLS_VERIFY— false Set to true to validate PBS TLS certificatesPBS_TOKEN_ID— PBS_URL, , PBS_TOKEN_SECRET Proxmox Backup ServerPBS_TOKEN_SECRET— PBS_URL, PBS_TOKEN_ID, Proxmox Backup ServerPBS_URL— , PBS_TOKEN_ID, PBS_TOKEN_SECRET Proxmox Backup ServerPLEX_TOKEN— PLEX_URL, PlexPLEX_URL— , PLEX_TOKEN PlexPROMETHEUS_URL— Prometheus APIPROWLARR_API_KEY— PROWLARR_URL, Prowlarr APIPROWLARR_URL— , PROWLARR_API_KEY Prowlarr APIPROXMOX_CT_BRIDGEPROXMOX_CT_STORAGEPROXMOX_CT_TEMPLATEPROXMOX_GATEWAYPROXMOX_HOST— , PROXMOX_PORT, PROXMOX_USER, PROXMOX_NODE Proxmox API accessPROXMOX_KEY_PATH— PROXMOX_PASSWORD or Proxmox authPROXMOX_NODE— PROXMOX_HOST, PROXMOX_PORT, PROXMOX_USER, Proxmox API accessPROXMOX_PASSWORD— or PROXMOX_KEY_PATH Proxmox authPROXMOX_PORT— PROXMOX_HOST, , PROXMOX_USER, PROXMOX_NODE Proxmox API accessPROXMOX_TLS_VERIFY— false Set to true to validate Proxmox TLS certificatesPROXMOX_USER— PROXMOX_HOST, PROXMOX_PORT, , PROXMOX_NODE Proxmox API accessQNAP_DRIVE_DEVICESQNAP_HOST— , QNAP_USER, QNAP_PASSWORD or QNAP_KEY_PATH QNAP NASQNAP_KEY_PATH— QNAP_HOST, QNAP_USER, QNAP_PASSWORD or QNAP NASQNAP_PASSWORD— QNAP_HOST, QNAP_USER, or QNAP_KEY_PATH QNAP NASQNAP_PORTQNAP_STORAGE_SHARESQNAP_USER— QNAP_HOST, , QNAP_PASSWORD or QNAP_KEY_PATH QNAP NASRADARR_API_KEY— RADARR_URL, Radarr APIRADARR_ROOT_FOLDERRADARR_URL— , RADARR_API_KEY Radarr APIREADARR_API_KEY— READARR_URL, Readarr booksREADARR_ROOT_FOLDERREADARR_URL— , READARR_API_KEY Readarr booksSABNZBD_API_KEY— SABNZBD_URL, SABnzbd APISABNZBD_URL— , SABNZBD_API_KEY SABnzbd APISONARR_API_KEY— SONARR_URL, Sonarr APISONARR_ROOT_FOLDERSONARR_URL— , SONARR_API_KEY Sonarr APISSH_STRICT_HOST_KEY— false Set to true to enable known_hosts verificationTAUTULLI_API_KEY— TAUTULLI_URL, Tautulli analyticsTAUTULLI_URL— , TAUTULLI_API_KEY Tautulli analyticsTELEGRAM_BOT_TOKEN— , TELEGRAM_CHAT_ID Telegram notificationsTELEGRAM_CHAT_ID— TELEGRAM_BOT_TOKEN, Telegram notificationsUPTIME_KUMA_PASSWORD— UPTIME_KUMA_URL, UPTIME_KUMA_USER, Uptime KumaUPTIME_KUMA_URL— , UPTIME_KUMA_USER, UPTIME_KUMA_PASSWORD Uptime KumaUPTIME_KUMA_USER— UPTIME_KUMA_URL, , UPTIME_KUMA_PASSWORD Uptime Kuma[](https://m8ven.ai/mcp/nainounen-homelab-mcp-16bwgv)