pbs-mcp-server
MCP server for Proxmox Backup Server — manage datastores, snapshots, verification, prune jobs, sync jobs, garbage collection, and more via any MCP-compatible AI client.
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
szoran53
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
pbs_list_datastoresList all configured datastores on the PBS server with their paths, comments, and retention settings. Returns: Array of datastores with name, path, comment, GC schedule, prune schedule, and keep-* retention counts.
pbs_get_datastore_usageGet usage statistics for all datastores: total/used/available space, GC status, and deduplication factor. Returns: For each datastore: name, total, used, available, percent used, GC last-run time, dedup factor, removed/pending bytes/chunks.
pbs_list_groupsList all backup groups in a datastore. Groups are organized by backup type (vm, ct, host) and ID. Args: - store (string): Datastore name - ns (string, optional): Namespace path (e.g. "ns1/ns2") Returns: Array of backup groups with type, ID, last backup time, backup count, and owner.
pbs_list_snapshotsList snapshots in a datastore, optionally filtered by backup type and ID. Args: - store (string): Datastore name - backup_type (string, optional): Filter by type — "vm", "ct", or "host" - backup_id (string, optional): Filter by backup ID (e.g. "100") - ns (string, optional): Namespace path …
pbs_run_garbage_collectionStart a garbage collection job on a datastore. Returns the task UPID which can be tracked with pbs_get_task_status. Args: - store (string): Datastore name Returns: Task UPID for the started GC job.
pbs_run_verifyStart a verification job on a datastore to check backup integrity. Returns a task UPID. Args: - store (string): Datastore name - backup_type (string, optional): Only verify this backup type - backup_id (string, optional): Only verify this backup ID - ignore_verified (boolean, optional): Ski…
pbs_prune_datastoreRun a prune operation on a backup group to remove old snapshots per retention policy. Supports dry-run mode. Args: - store (string): Datastore name - backup_type (string): Backup type — "vm", "ct", or "host" - backup_id (string): Backup ID (e.g. "100") - dry_run (boolean, optional): If true…
pbs_list_namespacesList backup namespaces in a datastore. Args: - store (string): Datastore name - parent (string, optional): Parent namespace to list children of Returns: Array of namespace paths and their comments.
pbs_protect_snapshotSet or remove protection on a backup snapshot. Protected snapshots cannot be pruned or deleted. Args: - store (string): Datastore name - backup_type (string): "vm", "ct", or "host" - backup_id (string): Backup ID - backup_time (string): Backup timestamp in ISO format (e.g. "2025-03-22T04:00…
pbs_list_verification_jobsList all scheduled verification jobs configured on the PBS server. Returns: Array of verification jobs with ID, store, schedule, ignore-verified flag, outdated-after, namespace, and comment.
pbs_run_verification_jobManually trigger a configured verification job by ID. Args: - id (string): Verification job ID Returns: Task UPID for the started job.
pbs_list_sync_jobsList all configured sync jobs that replicate data between PBS servers. Returns: Array of sync jobs with ID, local store, remote name, remote store, schedule, remove-vanished flag, namespace settings, and comments.
pbs_run_sync_jobManually trigger a configured sync job by ID. Args: - id (string): Sync job ID Returns: Task UPID for the started job.
pbs_list_prune_jobsList all configured scheduled prune jobs. Returns: Array of prune jobs with ID, store, schedule, retention settings, namespace, and disabled status.
pbs_list_remotesList all configured remote PBS servers used for sync jobs. Returns: Array of remotes with name, host, port, auth-id, fingerprint, and comment.
pbs_get_versionReturns the Proxmox Backup Server version, release, and repository ID. Use this to confirm connectivity and check which PBS version is running.
pbs_get_node_statusReturns detailed status of the PBS node: CPU usage, memory, disk, swap, load averages, uptime, and kernel version. Returns: - CPU model, core count, and current usage percentage - Memory: free / total / used - Root filesystem: available / total / used - Swap: free / total / used - Uptime …
pbs_list_tasksList recent tasks on the PBS node. Returns task UPID, type, user, start/end times, and status. Args: - limit (number): Max tasks to return (default 30, max 200) - running (boolean): If true, only show currently running tasks - typefilter (string): Filter by task type, e.g. "garbage_collection…
pbs_get_task_statusGet the status and log output of a specific task by its UPID. Args: - upid (string): The task UPID Returns: Task status and log lines.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
PBS_HOSTYes PBS IP or hostname (no port, no trailing slash)PBS_PASSWORDYes Password for ticket authPBS_PORTNo API port, default 8007PBS_TOKEN_IDYes API token ID, e.g. user@pbs!mytokenPBS_TOKEN_SECRETYes API token secretPBS_USERNAMEYes Username for ticket auth (alternative to token)PBS_VERIFY_SSLNo Set to false for self-signed certs (default: true)TRANSPORTNo stdio (default) or httpPORTTool inputs are validated
11/19 tool handlers declare input schemas (58%)
Declare an inputSchema with zod/joi/yup on every tool definition.
License file
No license file
Add a LICENSE file (MIT, Apache-2.0, etc.).
Tests exist
No test files found
Add tests that exercise each declared tool.
Production dependencies are patched
0 critical, 3 high severity in production deps — @modelcontextprotocol/sdk@1.12.1 (high), @modelcontextprotocol/sdk@1.12.1 (high)
Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/szoran53/pbs-mcp-server)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check