Docker MCP server
MCP server for managing Docker containers, images, networks, volumes, and registries
2 stars119 downloads/wk
Reviews
Write oneNobody has reviewed Docker yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Docker tools (56, 14 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
docker_compose_buildBuild Docker Compose services
docker_compose_configParse and validate docker-compose.yml file
docker_compose_downStop and remove Docker Compose services
docker_compose_logsView output from Docker Compose services
docker_compose_psList Docker Compose services
docker_compose_restartRestart Docker Compose services
docker_compose_startStart Docker Compose services
docker_compose_stopStop Docker Compose services
docker_compose_upStart Docker Compose services
docker_connect_containerConnect a container to a network
docker_container_health_checkCheck the health status of a container. Returns health check status (healthy, unhealthy, starting, none), health check configuration, failure streak, and health check log history.
docker_container_logsGet logs from a container
docker_container_statsGet real-time statistics from a container
docker_create_containerwrite actionCreate a new Docker container from an image
docker_create_networkwrite actionCreate a Docker network
docker_create_volumewrite actionCreate a Docker volume
docker_disconnect_containerDisconnect a container from a network
docker_execwrite actionExecute a command in a running container
docker_image_historyGet the history of an image
docker_inspect_containerGet detailed information about a container
docker_inspect_execGet information about an exec instance
docker_inspect_imageGet detailed information about an image
docker_inspect_networkGet detailed information about a network
docker_inspect_volumeGet detailed information about a volume
docker_kill_containerwrite actionKill a running container. Requires confirmation for safety. First call without confirm to see container details, then call again with confirm=true to proceed.
docker_list_containersList Docker containers. Returns all containers including stopped ones if all=true.
docker_list_imagesList Docker images
docker_list_networksList Docker networks
docker_list_volumesList Docker volumes
docker_pause_containerPause a running container
docker_prune_containerswrite actionRemove stopped containers. Requires confirmation for safety. First call without confirm to see what will be removed, then call again with confirm=true to proceed.
docker_prune_imageswrite actionRemove unused images. Requires confirmation for safety. First call without confirm to see what will be removed, then call again with confirm=true to proceed.
docker_prune_networkswrite actionRemove unused networks. Requires confirmation for safety. First call without confirm to see what will be removed, then call again with confirm=true to proceed.
docker_prune_systemwrite actionRemove unused data (containers, networks, images, build cache). Requires confirmation for safety. First call without confirm to see what will be removed, then call again with confirm=true to proceed.
docker_prune_volumeswrite actionRemove unused volumes. Requires confirmation for safety. First call without confirm to see what will be removed, then call again with confirm=true to proceed.
docker_pull_imagePull an image from a registry
docker_push_imagePush an image to a registry
docker_remove_containerwrite actionRemove a container. Requires confirmation for safety. First call without confirm to see container details, then call again with confirm=true to proceed.
docker_remove_imagewrite actionRemove an image. Requires confirmation for safety. First call without confirm to see image details, then call again with confirm=true to proceed.
docker_remove_networkwrite actionRemove a Docker network. Requires confirmation for safety. First call without confirm to see network details, then call again with confirm=true to proceed.
docker_remove_volumewrite actionRemove a Docker volume. Requires confirmation for safety. First call without confirm to see volume details, then call again with confirm=true to proceed. Alternatively, uses MCP Elicitation API if client supports it.
docker_restart_containerRestart a container
docker_start_containerStart a stopped container
docker_stop_containerStop a running container
docker_system_infoGet Docker system information
docker_tag_imageTag an image
docker_unpause_containerUnpause a paused container
docker_versionGet Docker version information
dockerhub_authenticateAuthenticate with Docker Hub
dockerhub_get_tagsGet tags for a Docker Hub repository
dockerhub_pullPull an image from Docker Hub
dockerhub_pushPush an image to Docker Hub
dockerhub_searchSearch Docker Hub for images
ghcr_authenticateAuthenticate with GitHub Container Registry
ghcr_pullPull an image from GitHub Container Registry
ghcr_pushPush an image to GitHub Container Registry
Public scan report
scanner v0.1.10 · 2026-09-28 · same rubric, same numbers if you re-run it
- Code scan42 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 244 days ago4/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Docker compares
Against every graded Developer tools MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 75/100
- higher than 40% of 1,119 Developer tools servers
- Tools
- 56
- the typical Developer tools server has 7
- Tools that change things
- 25%
- typical: 5%. Fewer write tools means less an agent can break
- GitHub stars
- 2
- more than 65% of 855 Developer tools servers
- Downloads a week
- 119
- more than 62% of 436 Developer tools servers with a package
What its tools let an agent do: 42 read · 14 change
Install Docker in Claude Code, Cursor or VS Code
Runs npx -y @alisaitteke/docker-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add docker-mcp -- npx -y @alisaitteke/docker-mcp
What the publisher says
From the Docker repository's README, as published. We do not edit it. Read it on GitHub
Docker MCP Server
Powerful Docker management for AI assistants
A comprehensive Model Context Protocol (MCP) server that empowers AI assistants like Cursor, Claude Desktop, and other MCP-compatible clients to seamlessly manage Docker containers, images, networks, volumes, and registries through natural language interactions.
Why Docker MCP Server?
- Zero Configuration - Works out of the box with npx, no installation needed
- Safety First - Two-step confirmation for destructive operations
- Cross-Platform - Works on Windows, Linux, and macOS with automatic Docker socket detection
- Comprehensive - Full Docker API coverage including Compose, registries, and system operations
- AI-Native - Designed specifically for AI assistants with clear, structured responses
Features
Container Management
- Full lifecycle control: Create, start, stop, restart, kill, and remove containers
- Monitoring: Real-time logs, statistics, and container inspection
- Advanced operations: Pause/unpause, exec commands, and resource management
Image Management
- Registry operations: Pull, push, tag, and remove images
- Build support: Build images from Dockerfiles with full configuration
- Inspection: Detailed image history, layers, and metadata
Network Management
- Network operations: Create, remove, and inspect Docker networks
- Container connectivity: Connect/disconnect containers from networks
- Network discovery: List and filter networks with advanced options
Volume Management
- Volume operations: Create, remove, and inspect volumes
- Data persistence: Manage persistent storage for containers
- Volume inspection: Detailed volume information and mount points
System Operations
- System information: Docker daemon info, version, and capabilities
- Resource cleanup: Prune unused images, containers, volumes, and networks
- Event monitoring: Real-time Docker event stream
Container Execution
- Command execution: Run commands in running containers
- Interactive sessions: Create and manage exec instances
- Output streaming: Real-time command output and logs
Registry Integration
- Docker Hub: Search repositories, list tags, authenticate, pull/push images
- GitHub Container Registry (GHCR): Full authentication and image management
- Multi-registry support: Seamlessly work with multiple registries
Docker Compose Support
- Multi-container management: Start, stop, restart compose services
- Service monitoring: View logs and status of compose services
- Build operations: Build compose services with dependency management
- Configuration validation: Parse and validate docker-compose.yml files
Safety Features
- Two-step confirmation for all destructive operations
- Resource preview: See what will be deleted before confirmation
- Dual confirmation methods:
- Confirm parameter (default): Works everywhere, simple and reliable
- MCP Elicitation API (advanced): Interactive form-based confirmation for better UX
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Docker: common questions
- Is Docker MCP server safe?
- Mostly: it is graded B (75/100). Read the Docker safety report
- How do I install Docker?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Docker need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Docker maintained?
- The last commit was 280 days ago (2026-01-27). The latest release is v0.2.4.
- What can I use instead of Docker?
- Servers from other publishers that do the same job: maintenant MCP server, Komodo MCP Server and Podman MCP server.
- How does Docker compare with other Developer tools MCP servers?
- safety score 75/100 (higher than 40% of 1,119 Developer tools servers); tools 56 (the typical Developer tools server has 7); tools that change things 25% (typical: 5%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Docker
Same job from other publishers: the closest match first, then the best rated.
- maintenantDocker monitoring for AI agents: logs, history, alerts. Can ack alerts; never touches containers.not reviewedEstablishedC
- Komodo MCP ServerMCP server for Komodo - manage Docker containers, servers, stacks, and deployments via AInot reviewedEstablishedB
- PodmanA Model Context Protocol (MCP) server for container runtimes (Podman and Docker)not reviewedGrowingA
- Pare DockerPare Docker ג€” Structured Docker operations (ps, images, logs, build, compose) as typed JSON.not reviewedGrowingA
- HomebutlerTells an agent what changed on a server since it last looked - status, Docker, backups, Proxmox.not reviewedEstablishedC