| PROXMOX_HOST | Yes | Proxmox host IP or hostname. |
| PROXMOX_PORT | No | Proxmox API port. |
| PROXMOX_VERIFY_SSL | No | Verify the TLS certificate. Proxmox self-signs by default. |
| PROXMOX_TIMEOUT | No | Seconds to wait for each Proxmox API request. |
| PROXMOX_USER | No | API user, including the realm. |
| PROXMOX_TOKEN_NAME | No | API token name. Use this plus PROXMOX_TOKEN_VALUE, or PROXMOX_PASSWORD. |
| PROXMOX_TOKEN_VALUE | No | API token secret. Secret. |
| PROXMOX_PASSWORD | No | Password, used only when no API token is set. Secret. |
| PROXMOX_RISK_LEVEL | No | Which tools exist: read-only, plus lifecycle, or everything. |
| PROXMOX_TOOLS_ALLOW | No | Comma-separated tool names to register, intersected with the risk level. Unset = all of them. |
| PROXMOX_REDACT_SECRETS | No | Mask cipassword and sshkeys in every response. |
| PROXMOX_MCP_TRANSPORT | No | stdio (default) or streamable-http. |
| PROXMOX_MCP_HOST | No | HTTP bind address. Anything but loopback also needs PROXMOX_MCP_ALLOWED_HOSTS. |
| PROXMOX_MCP_PORT | No | HTTP port. |
| PROXMOX_MCP_PATH | No | Streamable HTTP endpoint path. |
| PROXMOX_MCP_JSON_RESPONSE | No | Answer with JSON instead of an SSE stream. |
| PROXMOX_MCP_ALLOWED_HOSTS | No | Comma-separated Host headers to accept over HTTP; '*' disables the check. |
| PROXMOX_MCP_ALLOWED_ORIGINS | No | Comma-separated browser origins allowed to call the endpoint. Empty = same-origin only. |
| SENTRY_DSN | No | Optional: report tool traces and errors to Sentry. Unset disables it. Secret. |
| PROXMOX_HOST | Yes | Proxmox host IP or hostname. |
| PROXMOX_PORT | No | Proxmox API port. |
| PROXMOX_VERIFY_SSL | No | Verify the TLS certificate. Proxmox self-signs by default. |
| PROXMOX_TIMEOUT | No | Seconds to wait for each Proxmox API request. |
| PROXMOX_USER | No | API user, including the realm. |
| PROXMOX_TOKEN_NAME | No | API token name. Use this plus PROXMOX_TOKEN_VALUE, or PROXMOX_PASSWORD. |
| PROXMOX_TOKEN_VALUE | No | API token secret. Secret. |
| PROXMOX_PASSWORD | No | Password, used only when no API token is set. Secret. |
| PROXMOX_RISK_LEVEL | No | Which tools exist: read-only, plus lifecycle, or everything. |
| PROXMOX_TOOLS_ALLOW | No | Comma-separated tool names to register, intersected with the risk level. Unset = all of them. |
| PROXMOX_REDACT_SECRETS | No | Mask cipassword and sshkeys in every response. |
| PROXMOX_MCP_TRANSPORT | No | stdio (default) or streamable-http. |
| PROXMOX_MCP_HOST | No | HTTP bind address. Anything but loopback also needs PROXMOX_MCP_ALLOWED_HOSTS. |
| PROXMOX_MCP_PORT | No | HTTP port. |
| PROXMOX_MCP_PATH | No | Streamable HTTP endpoint path. |
| PROXMOX_MCP_JSON_RESPONSE | No | Answer with JSON instead of an SSE stream. |
| PROXMOX_MCP_ALLOWED_HOSTS | No | Comma-separated Host headers to accept over HTTP; '*' disables the check. |
| PROXMOX_MCP_ALLOWED_ORIGINS | No | Comma-separated browser origins allowed to call the endpoint. Empty = same-origin only. |
| SENTRY_DSN | No | Optional: report tool traces and errors to Sentry. Unset disables it. Secret. |