Docker Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Docker Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
基于MCP标准协议的Docker操作工具,支持标准的Docker CLI命令和Docker Compose操作。
此服务器完全符合MCP(Model Context Protocol)标准,包括:
list_containers - 列出所有Docker容器list_images - 列出所有Docker镜像run_container - 运行一个Docker容器,支持多种参数配置stop_container - 停止一个Docker容器remove_container - 移除一个Docker容器pull_image - 拉取一个Docker镜像compose_up - 启动Docker Compose服务compose_down - 停止并移除Docker Compose服务compose_ps - 列出Docker Compose服务compose_logs - 查看Docker Compose服务的日志compose_build - 构建Docker Compose服务特别说明: 支持Docker Compose的新老版本命令,自动在docker compose(新版)和docker-compose(旧版)之间切换。服务器会优先尝试新版命令格式,如失败则自动尝试使用旧版命令,以提供最大兼容性。
inspect_container - 展示容器的详细信息container_logs - 获取容器的日志exec_container - 在运行中的容器中执行命令container_stats - 显示容器资源使用情况统计build_image - 从Dockerfile构建镜像prune_images - 移除未使用的镜像list_networks - 列出所有Docker网络create_network - 创建一个新的Docker网络remove_network - 移除一个Docker网络network_connect - 将容器连接到网络list_volumes - 列出所有Docker卷create_volume - 创建一个Docker卷remove_volume - 移除一个Docker卷system_info - 显示系统级信息system_df - 显示Docker磁盘使用情况security_scan - 扫描Docker镜像中的漏洞(需要安装额外工具如trivy) git clone https://github.com/yourusername/docker-mcp.git
cd docker-mcp
npm install npm run build npm start任何支持MCP协议的客户端都可以与此服务器交互,例如:
initializetools/listtools/call 使用指定的工具名称和参数docker compose (V2, integrated) and docker-compose (V1, standalone) are supportednpm install -g docker-mcp-servercd docker-mcp
npm installnpm run builddocker-mcp-serverOr if installed from source:
npm startYou can use the included installation script to automatically configure the Docker MCP server with Claude:
npm run install-configThis script will:
#### Manual Configuration
If you prefer to configure manually, you need to add the Docker MCP server to your MCP settings configuration file:
##### For Claude Desktop App (macOS)
Edit ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"docker-mcp": {
"command": "node",
"args": ["/path/to/docker-mcp/dist/index.js"],
"disabled": false,
"autoApprove": []
}
}
}##### For Claude in VSCode
Edit ~/.config/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json:
{
"mcpServers": {
"docker-mcp": {
"command": "node",
"args": ["/path/to/docker-mcp/dist/index.js"],
"disabled": false,
"autoApprove": []
}
}
}Note: After configuring the Docker MCP server in VS Code, you may need to restart VS Code for the changes to take effect in Cline. If you encounter issues with the Docker MCP server not being recognized or working properly in Cline, try restarting VS Code.
This server implements the Model Context Protocol (MCP) standard and supports:
tools/list and tools/call methods#### list_containers
List all Docker containers.
Parameters:
all (boolean, optional): Show all containers (default shows just running)#### list_images
List all Docker images.
#### run_container
Run a Docker container.
Parameters:
image (string, required): Docker image to runname (string, optional): Name for the containerdetach (boolean, optional): Run container in backgroundports (array of strings, optional): Port mappings (e.g. ["8080:80"])volumes (array of strings, optional): Volume mappings (e.g. ["/host/path:/container/path"])env (array of strings, optional): Environment variables (e.g. ["KEY=value"])command (string, optional): Command to run in the container#### stop_container
Stop a running Docker container.
Parameters:
container (string, required): Container ID or name#### remove_container
Remove a Docker container.
Parameters:
container (string, required): Container ID or nameforce (boolean, optional): Force removal of running container#### pull_image
Pull a Docker image from a registry.
Parameters:
image (string, required): Image name (e.g. "nginx:latest")All Docker Compose tools support bothdocker compose(V2) anddocker-compose(V1) commands, with automatic fallback from new to legacy format if needed.
#### compose_up
Start Docker Compose services.
Parameters:
file (string, optional): Path to docker-compose.yml fileprojectName (string, optional): Specify project nameservices (array of strings, optional): Services to start (default: all services)detach (boolean, optional): Run in backgroundbuild (boolean, optional): Build images before starting containersremoveOrphans (boolean, optional): Remove containers for services not defined in the Compose file#### compose_down
Stop and remove Docker Compose services.
Parameters:
file (string, optional): Path to docker-compose.yml fileprojectName (string, optional): Specify project namevolumes (boolean, optional): Remove named volumes declared in the volumes sectionremoveOrphans (boolean, optional): Remove containers for services not defined in the Compose file#### compose_ps
List Docker Compose services.
Parameters:
file (string, optional): Path to docker-compose.yml fileprojectName (string, optional): Specify project nameservices (array of strings, optional): Services to show (default: all services)#### compose_logs
View Docker Compose service logs.
Parameters:
file (string, optional): Path to docker-compose.yml fileprojectName (string, optional): Specify project nameservices (array of strings, optional): Services to show logs for (default: all services)follow (boolean, optional): Follow log outputtail (string, optional): Number of lines to show from the end of the logs (e.g. "100")#### compose_build
Build Docker Compose services.
Parameters:
file (string, optional): Path to docker-compose.yml fileprojectName (string, optional): Specify project nameservices (array of strings, optional): Services to build (default: all services)noCache (boolean, optional): Do not use cache when building the imagepull (boolean, optional): Always attempt to pull a newer version of the image#### inspect_container
Show detailed information about a container.
Parameters:
container (string, required): Container ID or nameformat (string, optional): Format the output using a Go template#### container_logs
Fetch the logs of a container.
Parameters:
container (string, required): Container ID or nametail (string, optional): Number of lines to show from the end of the logs (e.g. "100")since (string, optional): Show logs since timestamp (e.g. "2021-01-02T13:23:37") or relative (e.g. "42m" for 42 minutes)until (string, optional): Show logs before timestamp (e.g. "2021-01-02T13:23:37") or relative (e.g. "42m" for 42 minutes)timestamps (boolean, optional): Show timestamps#### exec_container
Execute a command in a running container.
Parameters:
container (string, required): Container ID or namecommand (string, required): Command to executeinteractive (boolean, optional): Keep STDIN open even if not attached#### container_stats
Display a live stream of container resource usage statistics.
Parameters:
container (string, required): Container ID or namenoStream (boolean, optional): Disable streaming stats and only pull the first result#### build_image
Build an image from a Dockerfile.
Parameters:
dockerfile (string, optional): Path to Dockerfiletag (string, required): Name and optionally a tag in the name:tag formatcontext (string, required): Path to the build contextbuildArgs (object, optional): Build-time variablesnoCache (boolean, optional): Do not use cache when building the imagepull (boolean, optional): Always attempt to pull a newer version of the image#### prune_images
Remove unused images.
Parameters:
all (boolean, optional): Remove all unused images, not just dangling onesfilter (string, optional): Provide filter values (e.g. "until=24h")#### list_networks
List all Docker networks.
#### create_network
Create a new Docker network.
Parameters:
name (string, required): Network namedriver (string, optional): Driver to manage the network (default "bridge")subnet (string, optional): Subnet in CIDR format (e.g. "172.30.0.0/16")gateway (string, optional): Gateway for the subnetinternal (boolean, optional): Restrict external access to the network#### remove_network
Remove a Docker network.
Parameters:
name (string, required): Network name or ID#### network_connect
Connect a container to a network.
Parameters:
network (string, required): Network name or IDcontainer (string, required): Container ID or namealias (array of strings, optional): Add network-scoped alias for the container#### list_volumes
List all Docker volumes.
#### create_volume
Create a Docker volume.
Parameters:
name (string, required): Volume namedriver (string, optional): Volume driver name (default "local")labels (object, optional): Labels to set on the volume#### remove_volume
Remove a Docker volume.
Parameters:
name (string, required): Volume name#### system_info
Display system-wide information.
Parameters:
format (string, optional): Format the output using a Go template#### system_df
Show Docker disk usage.
Parameters:
verbose (boolean, optional): Show detailed information on space usage#### security_scan
Scan a Docker image for vulnerabilities.
Parameters:
image (string, required): Image to scan (e.g. "nginx:latest")verbose (boolean, optional): Show detailed vulnerability informationNote: Security scanning requires external tools like trivy to be installed on your system.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.