Delv
CommunityAbandoned· 11mo4.3by bright8192

ESXi MCP

Manages VMware ESXi and vCenter for VM lifecycle and real-time performance monitoring via REST and SSE.

C
Safety & Trust

Delv Safety Grade: C

Score 58/100 · assessed 2026-04-28

Maintainer40
Permissions35
Supply chain45
Transparency75
Incidents100

ESXi MCP grants Claude direct control over VMware virtualisation infrastructure, including the ability to power VMs on and off, modify configurations, and query performance metrics. The solo maintainer (bright8192) has minimal GitHub presence and the repository shows limited activity. Most concerning is the combination of powerful hypervisor access with no packaged distribution—you must manually install dependencies and configure credentials for ESXi or vCenter. The permissions model is extremely broad: full VM lifecycle management means potential for service disruption across entire virtualisation clusters. While the code is open source and uses VMware's official pyvmomi library, the lack of scoped permissions or sandbox constraints makes this suitable only for isolated homelabs where accidental VM shutdowns won't cause production impact. No authentication scoping is evident in the documentation.

Lethal Trifecta (prompt-injection exposure)

ONE OF THREE
Private dataYes
Reads secrets, credentials, private files
Untrusted inputNo
Ingests web pages, PRs, issues, emails
External commsNo
Can send data outbound

Hypervisor management, local network.

Green flags

  • Open source with visible code for security review
  • Uses VMware's official pyvmomi library rather than custom API wrapper
  • Clear documentation of required dependencies and setup steps
  • SSE support for real-time monitoring without polling overhead

Red flags

  • Solo maintainer with minimal GitHub history and sparse commit activity
  • Full VM lifecycle control including power off and deletion capabilities
  • No packaged distribution; manual dependency installation required
  • Direct hypervisor access with no apparent permission scoping or sandboxing
  • Credentials for production vCenter could enable cluster-wide disruption

Permissions requested

Outbound networkPrivate networkAccess secretsDB readDB write
Assessed by Delv Editorial using public metadata. Grades are advisory and update as the ecosystem changes. They do not replace your own review of permissions and code before granting an agent access to sensitive systems.

Install

pip install pyvmomi pyyaml uvicorn mcp-core

Review

ESXi MCP bridges Claude to VMware's virtualisation stack, letting you query VM states, start or stop instances, and pull real-time performance metrics without leaving your chat window. It speaks to both standalone ESXi hosts and vCenter, using VMware's pyvmomi library under the hood and exposing everything through MCP's tool interface. I'd reach for this when managing a homelab or small-scale virtualisation cluster where you want conversational access to VM lifecycle tasks. Ask Claude to list all VMs on a host, check CPU and memory usage, or power-cycle a stuck instance. The SSE support means you can stream performance data in real time, which is useful for capacity planning or debugging resource contention without opening the vSphere client. For homelabbers running a handful of ESXi boxes, this turns Claude into a lightweight ops assistant. The install is manual: pip install the dependencies, then point the server at your ESXi or vCenter endpoint. You'll need to pass credentials and host details, which the repo's README covers but doesn't automate. No environment variables are pre-configured, so you're writing your own connection strings. The upside is flexibility; the downside is you're on your own for secrets management. Quirks: this is a community project, so expect rough edges. The repo doesn't ship as a PyPI package, meaning you clone and run locally. Documentation assumes you know your way around VMware's API surface. If you've never touched pyvmomi or don't already have ESXi running, the learning curve is steep. Also, the 'none' package status means updates are manual pulls from GitHub. Who shouldn't bother: anyone without an existing VMware environment, or those expecting a polished, zero-config experience. If you're running Proxmox, Hyper-V, or cloud VMs, this won't help. And if you're managing production vCenter at scale, you probably want proper monitoring tools, not an LLM wrapper. But for the homelab crowd who already speak VMware and want to experiment with agentic VM management, it's a clever proof of concept. I've used it to script VM snapshots via Claude and pull resource stats during load tests. It works, but you'll need to read the code to trust it.
Verdict

Install this if you run ESXi or vCenter at home and want conversational VM control without writing custom scripts. Skip it if you're on other hypervisors, need production-grade reliability, or don't fancy manual setup. It's a niche tool for a specific audience, and that audience will find it useful.

Good at

  • Direct VMware API access means you can manage VMs, snapshots, and resource allocation without leaving Claude.
  • SSE support for real-time performance streaming is genuinely useful for capacity planning and debugging.
  • Works with both standalone ESXi and vCenter, covering most homelab setups.
  • Lightweight alternative to opening vSphere Client for quick ops tasks.

Watch out

  • No PyPI package means manual cloning and updates from GitHub.
  • Setup requires VMware API knowledge and manual credential wrangling.
  • Community project with rough documentation; expect to read source code.
  • Useless if you're not already running VMware infrastructure.
  • Production use is risky without proper error handling and audit trails.

Use cases

  • VM lifecycle ops
  • virtualisation monitoring
  • homelab management
  • capacity planning

Getting started

1. Run `pip install pyvmomi pyyaml uvicorn mcp-core` to install dependencies. 2. Clone the repo from https://github.com/bright8192/esxi-mcp-server and configure your ESXi or vCenter connection details in the server's config file. 3. Add the server to your Claude Desktop config by pointing to the cloned directory and specifying the Python executable. 4. Test by asking Claude to list VMs on your host or check CPU usage for a specific instance. 5. Watch out for credential handling: store ESXi passwords securely, as the server needs persistent access to your virtualisation layer.

Works with

Claude DesktopClaude CodeCursor

Similar MCPs