Install
$ agentstack add mcp-williajm-mcp-docker ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
MCP Docker Server
| Category | Status | | --- | --- | | Build & CI | [](https://github.com/williajm/mcpdocker/actions/workflows/ci.yml) [](https://github.com/williajm/mcpdocker/actions/workflows/codeql.yml) [](https://github.com/williajm/mcpdocker/actions/workflows/pre-commit.yml) [](https://github.com/williajm/mcpdocker/actions/workflows/docs.yml) [](https://codecov.io/gh/williajm/mcpdocker) | | Security | [](https://scorecard.dev/viewer/?uri=github.com/williajm/mcpdocker) [](https://github.com/williajm/mcpdocker/actions/workflows/bandit.yml) [](https://github.com/williajm/mcpdocker/security/dependabot) | | Package | [](https://github.com/williajm/mcp_docker/releases) [](https://pypi.org/project/mcp-docker/) | | Technology | [](https://www.python.org/downloads/) [](https://www.docker.com/) [](https://opensource.org/licenses/MIT) [](https://github.com/astral-sh/ruff) |
A local Model Context Protocol server for Docker visibility and light lifecycle control.
12 tools | stdio transport only | no destructive Docker operations
Quick Start
Claude Code:
claude mcp add --transport stdio docker uvx mcp-docker@latest
Codex:
codex mcp add docker -- uvx mcp-docker@latest
Claude Desktop — add to claude_desktop_config.json:
{
"mcpServers": {
"docker": {
"command": "uvx",
"args": ["mcp-docker"]
}
}
}
The Docker socket is auto-detected for your OS. This package intentionally runs over stdio only; it is not a network-exposed Docker administration service.
Tools
Container
| Tool | Description | Safety | | ---- | ----------- | ------ | | docker_list_containers | List containers with filters | Safe | | docker_inspect_container | Detailed container info | Safe | | docker_container_logs | Get container logs | Safe | | docker_container_stats | Resource usage stats | Safe | | docker_start_container | Start container | Moderate | | docker_stop_container | Stop container gracefully | Moderate | | docker_restart_container | Restart container | Moderate |
Image
| Tool | Description | Safety | | ---- | ----------- | ------ | | docker_list_images | List images | Safe | | docker_inspect_image | Image details | Safe |
Network
| Tool | Description | Safety | | ---- | ----------- | ------ | | docker_list_networks | List networks | Safe |
Volume
| Tool | Description | Safety | | ---- | ----------- | ------ | | docker_list_volumes | List volumes | Safe |
System
| Tool | Description | Safety | | ---- | ----------- | ------ | | docker_version | Docker version info | Safe |
Safety
Safe tools are read-only and always allowed. Moderate tools are reversible lifecycle operations and are allowed by default.
# Read-only mode: list, inspect, logs, stats, version only
SAFETY_ALLOW_MODERATE_OPERATIONS=false
The package does not expose destructive tools such as remove, prune, build, push, or exec.
Configuration
| Variable | Default | Description | | -------- | ------- | ----------- | | DOCKER_BASE_URL | Auto-detected | Docker daemon socket URL | | DOCKER_TIMEOUT | 60 | Docker operation timeout in seconds | | SAFETY_ALLOW_MODERATE_OPERATIONS | true | Allow reversible start/stop/restart tools | | SAFETY_DEFAULT_TOOL_TIMEOUT | 30 | Tool timeout in seconds, 0 disables | | SAFETY_MAX_RESPONSE_BYTES | 1048576 | Maximum tool response size, 0 disables | | MCP_LOG_LEVEL | INFO | Logging level | | MCP_JSON_LOGGING | false | Emit JSON logs | | MCP_DEBUG_MODE | false | Show unsanitized errors for local debugging |
Development
uv sync --group dev
uv run pytest tests/unit/ -v
uv run ruff check src/ tests/
uv run ruff format --check src/ tests/
uv run mypy src/mcp_docker/
Requirements
- Python 3.11+
- Docker 20.10+
- Key dependencies:
fastmcp,docker,pydantic,pydantic-settings,loguru
License
MIT — see [LICENSE](LICENSE).
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: williajm
- Source: williajm/mcp_docker
- License: MIT
- Homepage: https://williajm.github.io/mcp_docker/
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.