Dokploy Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Dokploy Mcp Server (Plugin) and scored it 45/100 (orange). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 1 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A comprehensive Model Context Protocol (MCP) server for Dokploy - the open-source, self-hosted PaaS. Deploy apps, manage containers, databases, domains, and servers through AI assistants like Claude.
The official Dokploy MCP covers only ~5 of 42 API categories. This server provides 14 tools (one per category with action enums) covering the full DevOps lifecycle with minimal token usage.
| Category | Official MCP | This Server |
|---|---|---|
| Projects | 6 tools | 1 tool (6 actions) |
| Applications | 26 tools | 1 tool (22 actions) |
| Compose | - | 1 tool (20 actions) |
| Deployments | - | 1 tool (2 actions) |
| Docker | - | 1 tool (4 actions) |
| Domains | 9 tools | 1 tool (8 actions) |
| Servers | - | 1 tool (8 actions) |
| Settings | - | 1 tool (5 actions) |
| Databases | 26 tools (pg+mysql) | 1 tool (16 actions, all 5 DB) |
| Backups | - | 1 tool (6 actions) |
| Environments | - | 1 tool (6 actions) |
| Infrastructure | - | 1 tool (8 actions) |
| Mounts | - | 1 tool (6 actions) |
| SSH Keys | - | 1 tool (6 actions) |
| Total | 67 tools | 14 tools |
Key advantages:
dbType + action paramsaction enum parameter; other params are optional based on actionAdd to your MCP configuration:
{
"mcpServers": {
"dokploy": {
"command": "npx",
"args": ["-y", "dokploy-mcp-server"],
"env": {
"DOKPLOY_URL": "https://dokploy.example.com",
"DOKPLOY_API_KEY": "your-api-key"
}
}
}
}Add to .cursor/mcp.json:
{
"mcpServers": {
"dokploy": {
"command": "npx",
"args": ["-y", "dokploy-mcp-server"],
"env": {
"DOKPLOY_URL": "https://dokploy.example.com",
"DOKPLOY_API_KEY": "your-api-key"
}
}
}
}docker run -e DOKPLOY_URL=https://dokploy.example.com \
-e DOKPLOY_API_KEY=your-api-key \
-e TRANSPORT_TYPE=httpStream \
-p 3000:3000 \
dokploy-mcp-server| Variable | Required | Default | Description |
|---|---|---|---|
DOKPLOY_URL | Yes | - | Your Dokploy instance URL |
DOKPLOY_API_KEY | Yes | - | API key from Dokploy Settings > API Keys |
TRANSPORT_TYPE | No | stdio | Transport mode: stdio or httpStream |
PORT | No | 3000 | HTTP port (httpStream mode only) |
HOST | No | 0.0.0.0 | HTTP host (httpStream mode only) |
Each tool uses an action enum to select the operation. Parameters are optional and used based on the chosen action.
dokploy_project (6 actions)Actions: list | get | create | update | remove | duplicate
Manage projects. list and get return nested environments with their applications, composes, and databases (with names, IDs, and status), so you can discover service IDs without extra calls. create requires name. update requires projectId + fields. remove requires projectId. duplicate requires sourceEnvironmentId + name.
dokploy_application (22 actions)Actions: create | get | update | move | deploy | start | stop | delete | markRunning | refreshToken | cleanQueues | killBuild | cancelDeployment | reload | saveEnvironment | setEnvVars | getEnvKeys | getEnvValuesUnsafe | saveBuildType | traefikConfig | readMonitoring | readLogs
Full application lifecycle. Most actions require applicationId. create requires name + environmentId. deploy supports redeploy flag. readMonitoring requires appName.
Env handling. get returns a masked env summary (count only) — never the values. Three actions cover the rest:
setEnvVars — granular merge inside the server. Pass set (KEY=VALUE per line, upsert) and/or unset (array of KEY names). The read-modify-write happens server-side; the tool result is a masked confirmation listing only the changed key names. No untouched-key values ever enter the transcript.getEnvKeys — returns KEY names only, sorted. Safe to read.getEnvValuesUnsafe — unsafe escape hatch that returns the full KEY=VALUE blob. Use only when you genuinely need the values; the output is in the tool transcript and any retained agent logs.saveEnvironment — full-replace, kept for explicit blob-set workflows.sourceType:
github → repository + owner + branch (+ githubId for private)git → customGitUrl + customGitBranchdocker → dockerImagebuildType: dockerfile | heroku_buildpacks | paketo_buildpacks | nixpacks | static | railpack.
The underlying API also supports gitlab/bitbucket/gitea/drop sources, but those need provider-specific fields not yet exposed by this tool.
dokploy_compose (20 actions)Actions: create | get | update | delete | deploy | start | stop | move | loadServices | loadMounts | getDefaultCommand | cancelDeployment | cleanQueues | killBuild | refreshToken | saveEnvironment | setEnvVars | getEnvKeys | getEnvValuesUnsafe | readLogs
Docker Compose management. Most actions require composeId. create requires name + environmentId. loadMounts requires serviceName. cancelDeployment/cleanQueues/killBuild/refreshToken require composeId.
Env handling. Same shape as dokploy_application: get returns a masked summary, setEnvVars merges, getEnvKeys lists key names, getEnvValuesUnsafe is the escape hatch, saveEnvironment full-replaces.
sourceType:
github → repository + owner + branch (+ composePath)git → customGitUrl + customGitBranch (+ customGitSSHKeyId for private)raw → composeFile (inline YAML)The underlying API also supports gitlab/bitbucket/gitea sources, but those need provider-specific fields not yet exposed by this tool.
dokploy_database (16 actions)Actions: create | get | update | move | start | stop | deploy | rebuild | remove | reload | changeStatus | saveEnvironment | setEnvVars | getEnvKeys | getEnvValuesUnsafe | saveExternalPort
Unified database management. All actions require dbType (postgres | mysql | mariadb | mongo | redis | libsql); most also require databaseId. create baseline: dbType + name + environmentId + databasePassword.
Env handling. Same shape as dokploy_application: get returns a masked summary, setEnvVars merges (works for every engine), getEnvKeys lists key names, getEnvValuesUnsafe is the escape hatch.
Per-engine extras:
postgres / mysql / mariadb — also require databaseName + databaseUser. mysql/mariadb accept databaseRootPassword.mongo — requires databaseUser (no databaseName).redis — only databasePassword.libsql — requires appName + dockerImage + sqldNode (primary | replica); accepts sqldPrimaryUrl + enableNamespaces.changeStatus uses applicationStatus (idle | running | done | error).
dokploy_domain (8 actions)Actions: create | list | get | update | delete | generate | canGenerateTraefikMe | validate
Domain/DNS management. create requires host + applicationId|composeId (and serviceName for compose domains). Enums: certificateType (letsencrypt | none | custom), domainType (compose | application | preview). validate requires domain.
dokploy_environment (6 actions)Actions: create | get | list | update | remove | duplicate
Project environment management. create requires projectId + name. list requires projectId.
dokploy_server (8 actions)Actions: list | get | create | update | remove | count | publicIp | getMetrics
Server management. create requires name + ipAddress + port + username + sshKeyId + serverType (deploy | build). getMetrics requires url + token.
dokploy_backup (6 actions)Actions: create | get | update | remove | listFiles | manualBackup
Backup scheduling and triggers. create requires schedule + prefix + destinationId + database + databaseType. Provide the one service id matching the engine:
databaseType: postgres → postgresIddatabaseType: mysql → mysqlIddatabaseType: mariadb → mariadbIddatabaseType: mongo → mongoIddatabaseType: libsql → libsqlIddatabaseType: web-server → no service id (backs up the Dokploy server itself)composeId + serviceName + the engine as databaseTypemanualBackup requires backupId + backupType:
postgres | mysql | mariadb | mongo | libsql — individual DB backupscompose — whole-stack backupwebServer — Dokploy server backupdokploy_deployment (2 actions)Actions: list | killProcess
Deployment tracking. list requires applicationId|composeId|serverId|type+id. type enum: application | compose | server | schedule | previewDeployment | backup | volumeBackup (database deployments are listed via the database resource itself, not this endpoint). killProcess requires deploymentId.
dokploy_docker (4 actions)Actions: getContainers | restartContainer | getConfig | findContainers
Container management. findContainers requires appName + method (match | label | stack | service). For method=match, appType accepts stack | docker-compose. For method=label, type is required and accepts standalone | swarm (the API rejects without it).
dokploy_infrastructure (8 actions)Actions: createPort | deletePort | createAuth | deleteAuth | listCerts | getCert | createCert | removeCert
Ports, basic auth, and SSL certificates.
dokploy_ssh_key (6 actions)Actions: create | list | get | update | remove | generate
SSH key management for git-based deployments. create requires name + privateKey + publicKey + organizationId. get requires sshKeyId. update requires sshKeyId, optional name, description, lastUsedAt. remove requires sshKeyId. generate uses type (rsa|ed25519).
dokploy_settings (5 actions)Actions: health | version | ip | clean | reload
System settings. clean uses cleanType — server-scoped: all | images | volumes | stoppedContainers | dockerBuilder | dockerPrune (honor serverId); global: monitoring | redis | deploymentQueue | sshPrivateKey. reload uses reloadTarget (server | traefik | redis); serverId is honored for traefik.
"Deploy my web app" → dokploy_application { action: "deploy", applicationId: "app-123" }"Start the postgres database" → dokploy_database { action: "start", dbType: "postgres", databaseId: "db-456" }"Is Dokploy healthy?" → dokploy_settings { action: "health" }"What containers are running?" → dokploy_docker { action: "getContainers" }pnpm install
pnpm dev # Development mode with watch
pnpm validate # Format + lint + test + build
pnpm inspect # Open MCP InspectorMIT
Sponsored by <a href="https://sapientsai.com/"><img src="https://sapientsai.com/images/logo.svg" alt="SapientsAI" width="20" style="vertical-align: middle;"> SapientsAI</a> — Building agentic AI for businesses
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.