Docker MCP Server

Manage Docker containers, volumes, and orchestration using natural language commands.

Data last scanned today · Reviewed today

10 6 dangerous tools19 tools★ 742PythonGPL-3.0

Overview

This Python-based MCP server allows AI assistants to interact directly with the Docker daemon. It supports automated container composition via a plan-and-apply workflow, enabling users to deploy complex multi-container setups like WordPress and MySQL through simple natural language prompts.

Our verdict

With a security score of 40/100, this server is classified as high-risk. Key concerns include that the authentication method and read-only mode support have not yet been editorially reviewed, meaning the server's control over the Docker daemon may lack granular permission boundaries. It is best suited for experienced administrators and developers working in isolated, non-production environments where the risks of automated container management are fully understood.

Supports natural language container composition and deployment
Zero direct dependencies reduces supply chain attack surface
Includes documented support for managing persistent Docker volumes
Active development with 742 GitHub stars

Authentication methods have not yet been editorially reviewed
Read-only operation mode has not been verified
Community-maintained without official vendor support
No external security audit performed

Tools

Tool	Description	Risk
list_containers	Lists Docker containers.	low
create_container	Creates a new Docker container.	medium
run_container	Runs a Docker container.	high
recreate_container	Recreates an existing Docker container.	high
start_container	Starts a stopped Docker container.	medium
fetch_container_logs	Fetches logs from a Docker container.	low
stop_container	Stops a running Docker container.	medium
remove_container	Removes a Docker container.	high
list_images	Lists Docker images.	low
pull_image	Pulls a Docker image from a registry.	medium

Compatibility

Client	Local	Docker	Remote	Read-only
Claude Desktop
Cursor
VS Code
Windsurf
ChatGPT

Frequently asked questions

›Can I connect this server to a remote Docker engine?

Yes, you can connect to a remote Docker daemon by setting the DOCKER_HOST environment variable to an ssh:// URL in your MCP server configuration.

›Does this server support sensitive data or secrets management?

No. The project documentation explicitly warns against configuring containers with sensitive data like API keys or database passwords, as they may be compromised when shared with an LLM.

›Does this server support Docker's privileged mode or capability modifications?

For safety reasons, this MCP server does not support sensitive Docker options such as --privileged or --cap-add/--cap-drop.

›How do I monitor logs or stats for a running container?

You can access logs and stats using the resource templates docker://containers/{container_id}/logs and docker://containers/{container_id}/stats respectively.

›What is the recommended way to run this server using Docker?

You can run it in a container by mounting /var/run/docker.sock as a volume to ensure the MCP server can connect to and control your local Docker daemon.