Proxmox Read-Only Integration

Proxmox Read-Only Integration
Last verified: 2026-09-12 UTC.
Connection
Proxmox hostname: 
pve.stargrid.com.au
Resolves internally to 
192.168.1.115.
API endpoint: 
https://pve.stargrid.com.au:8006/api2/json
The certificate is issued to 
pve.stargrid.com.au by the Proxmox cluster CA and is not publicly trusted.
Current clients must disable TLS verification or trust the Proxmox CA; do not record or distribute the private key.
API token
Token identity: 
oc@pve!oc
Permission: 
PVEAuditor at path 
/.
The token secret is stored in OpenClaw protected secret storage as 
PROXMOX_API_TOKEN.
Never put the token secret in BookStack, chat, scripts, or committed configuration.
Verification
A direct read-only request to 
/api2/json/nodes returned valid node JSON using the token. This confirms the token identity, secret, endpoint, and 
PVEAuditor permission are working.
read -rsp "Proxmox token secret: " TOKEN
echo
curl -k -H 'Authorization: PVEAPIToken=oc@pve!oc='"$TOKEN" \\
  https://pve.stargrid.com.au:8006/api2/json/nodes
unset TOKEN
OpenClaw status
A local read-only skill was created at 
skills/proxmox-readonly.
It is restricted to version, node, guest inventory, storage, and health GET requests.
The OpenClaw protected egress path currently returns HTTP 502 for this private-LAN destination; this is separate from Proxmox authentication and should be resolved before relying on gateway-side automated checks.
Safety boundary
This integration is read-only. Do not start, stop, restart, delete, create, modify, or snapshot Proxmox guests through it.