ESXi MCP
Manages VMware ESXi and vCenter for VM lifecycle and real-time performance monitoring via REST and SSE.
Delv Safety Grade: C
Score 58/100 · assessed 2026-04-28
ESXi MCP grants Claude direct control over VMware virtualisation infrastructure, including the ability to power VMs on and off, modify configurations, and query performance metrics. The solo maintainer (bright8192) has minimal GitHub presence and the repository shows limited activity. Most concerning is the combination of powerful hypervisor access with no packaged distribution—you must manually install dependencies and configure credentials for ESXi or vCenter. The permissions model is extremely broad: full VM lifecycle management means potential for service disruption across entire virtualisation clusters. While the code is open source and uses VMware's official pyvmomi library, the lack of scoped permissions or sandbox constraints makes this suitable only for isolated homelabs where accidental VM shutdowns won't cause production impact. No authentication scoping is evident in the documentation.
Lethal Trifecta (prompt-injection exposure)
ONE OF THREEHypervisor management, local network.
Green flags
- Open source with visible code for security review
- Uses VMware's official pyvmomi library rather than custom API wrapper
- Clear documentation of required dependencies and setup steps
- SSE support for real-time monitoring without polling overhead
Red flags
- Solo maintainer with minimal GitHub history and sparse commit activity
- Full VM lifecycle control including power off and deletion capabilities
- No packaged distribution; manual dependency installation required
- Direct hypervisor access with no apparent permission scoping or sandboxing
- Credentials for production vCenter could enable cluster-wide disruption
Permissions requested
Install
pip install pyvmomi pyyaml uvicorn mcp-core
Review
Install this if you run ESXi or vCenter at home and want conversational VM control without writing custom scripts. Skip it if you're on other hypervisors, need production-grade reliability, or don't fancy manual setup. It's a niche tool for a specific audience, and that audience will find it useful.
Good at
- Direct VMware API access means you can manage VMs, snapshots, and resource allocation without leaving Claude.
- SSE support for real-time performance streaming is genuinely useful for capacity planning and debugging.
- Works with both standalone ESXi and vCenter, covering most homelab setups.
- Lightweight alternative to opening vSphere Client for quick ops tasks.
Watch out
- No PyPI package means manual cloning and updates from GitHub.
- Setup requires VMware API knowledge and manual credential wrangling.
- Community project with rough documentation; expect to read source code.
- Useless if you're not already running VMware infrastructure.
- Production use is risky without proper error handling and audit trails.
Use cases
- VM lifecycle ops
- virtualisation monitoring
- homelab management
- capacity planning
Getting started
Works with
Similar MCPs
- TerraformHashiCorp's official Terraform MCP. Connects agents to the Terraform Registry for module discovery and infrastructure-as-code automation.
- HerokuHeroku's official MCP. Manage apps, databases, dynos, and pipelines through the platform CLI from inside an agent.
- AWS LabsAWS Labs ships a growing family of MCPs for S3, Lambda, EKS, CDK, etc. Modular install — pick the services you actually use.
- LocalStackLocalStack's official MCP. Drive a local AWS environment from chat: create stacks, set quotas, inspect emulated services.