More than just a fully featured MCP server that lets AI agents manage Docker — containers, images, networks, volumes, swarm services, secrets, configs, nodes, plugins, etc., it helps you create workflows to easily manage your Docker environments.
↗L337-org/docker-mcpExternal link; availability not verifiedLicenseMIT LicenseLocal-only
The Ghost
This server runs locally on your machine. We can't scan it remotely; review the source code before installing.
Time indexed (2mo)
0toolsLocal/ STDIO2moindexed
Checked Sep 11, 2026
The scanner shows
This server runs locally. We can't scan it remotely; review the source code before installing.
First indexed Aug 1, 2026
Server Profile
⚙
Tools catalogued
0
No tools reported by this server.
☁
Hosting
Local / STDIO
Runs on your machine. Has access to your filesystem, SSH keys, and environment variables.
✓
Registry presence
Verified
Listed on the Official MCP Registry under Linux Foundation governance.
●
Liveness
—
No liveness checks recorded yet.
Publisher Verification
✓ Listed on the Official MCP Registry under Linux Foundation governance.
The Docker daemon endpoint (e.g., tcp://remote-host:2375, ssh://user@remote-host). If unset, uses the active Docker context or default socket.
DOCKER_CERT_PATHstringOPTIONAL
Path to the directory containing TLS certificates (ca.pem, cert.pem, key.pem) when using TLS.
DOCKER_TLS_VERIFYstringOPTIONAL
Set to '1' to enable TLS verification when using DOCKER_HOST with TCP.
DOCKER_MCP_SERVER_HOSTSstringOPTIONAL
Comma-separated list of name=endpoint pairs for managing multiple daemons. Endpoints: auto, local, or URLs (unix://, tcp://, ssh://, npipe://). Append (ro) for read-only, (tls=<dir>) for TLS. Overrides DOCKER_HOST.
DOCKER_MCP_SERVER_DISABLEstringOPTIONAL
Comma-separated list of domains to disable (e.g., swarm,scout,buildx). Names are case-insensitive.
Show all 11 environment variables
DOCKER_MCP_SERVER_READONLYstringOPTIONAL
Set to '1', 'true', 'yes', or 'on' to register only read-only tools (no modifications).
DOCKER_MCP_SERVER_NO_LABELSstringOPTIONAL
Set to '1' to disable provenance labels on created Docker objects.
DOCKER_MCP_SERVER_NO_DESTRUCTIVEstringOPTIONAL
Set to '1', 'true', 'yes', or 'on' to exclude destructive tools (remove, prune, kill, etc.).
DOCKER_MCP_SERVER_REGISTRY_PASSWORDstringOPTIONAL
Password or token for private registry authentication (used by registry_* tools when no explicit credentials given).
DOCKER_MCP_SERVER_REGISTRY_USERNAMEstringOPTIONAL
Username for private registry authentication (used by registry_* tools when no explicit credentials given).