AgentDock MCP
A secure MCP runtime through which an agent operates local machines, servers and containers
- 1,296 ★ on the repository
- Last commit
- Apache-2.0
Broad access
Why this level
- Runs commands and edits files on real machines and servers
- Exposes network access to the runtime with a token
Install
- Works in
Manual install
{
"mcpServers": {
"agentdock": {
"url": "http://127.0.0.1:8765/mcp",
"headers": {
"Authorization": "Bearer <AGENTDOCK_AUTH_TOKEN>"
}
}
}
}First deploy the runtime via Docker or natively and take the token from its settings.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Runs commands and edits files on real machines and servers
- Exposes network access to the runtime with a token
This is third-party code. Review the repository files before installing.
What it does
AgentDock is a standalone tool runtime for agents: it gives unified, controlled access to files, commands, Git, skills, MCP and a browser on the machines you choose. From one conversation in the agent you can operate several computers and servers: write code, change configuration, run commands and deploy right where the work belongs. File reads and writes are atomic with path boundaries and private-directory protection. It connects over MCP through a local HTTP address with a bearer token, installs via Docker or natively, and ships built-in skills.
Who it is for. For developers and devops who need to give an agent controlled access to machines and servers.
Good fit when
- You want to operate several machines and servers from one agent
- You need controlled agent access to files, commands and Git
- You want to deploy and configure services through the agent
Not a fit when
- You cannot give the agent access to commands and files on machines
- The agent's built-in tools in one project are enough
Example request
Connect to my server and restart the service after updating the configurationMCP
- Transport
- http
- Authentication
- API key
Environment variables
AGENTDOCK_AUTH_TOKENrequired, secret- Access token for the AgentDock runtime
Limitations
The runtime gives the agent access to commands and files on real machines, so access and tokens must be tightly controlled. MCP connection goes over HTTP with a bearer token, and remote work needs careful network setup. It installs via Docker or natively.
How to disable. Remove the agentdock server from the MCP config and stop the runtime or container.
FAQ
Is it an MCP server or a separate service?
It is a standalone tool runtime the agent connects to over MCP via HTTP with a token.
How safe is the access?
It has path boundaries, private-directory protection and atomic writes, but command access on machines needs token control.
Discussion
No questions or reviews yet.
Related
MCP serversmaintenant monitoring MCP server: an agent reads container logs, check history and alerts but never touches the containers
Your machine's terminal, windows and desktop in a browser, plus an MCP server for agents to read and type into other sessions
MCP SSH Agent is an MCP server that reads hosts from ~/.ssh/config, runs commands and copies files through system ssh and scp.
A local agent runtime and MCP gateway with 298 tools: files, Git, processes, Chrome browser, Windows and Office
MCP server for managing Docker in natural language: containers, images, networks and volumes, including remote hosts over SSH
A self-hosted gateway that merges several MCP servers into one endpoint with auth and tool selection
Comparison with similar tools
Cards that share the main search query, and how they differ.
| Tool | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| AgentDock (this card) | no | API key | 1,296 | |
| WebCodex | yes | API key | 2,510 | an MCP server on your machine that lets ChatGPT and Claude edit code |
| HomeButler | no | 356 | a Go CLI that compares a server with its last snapshot |
README in short
The README describes AgentDock as a standalone tool runtime for agents that gives controlled access to files, commands, Git, skills, MCP and a browser across several machines. From one conversation the agent operates computers and servers: writing code, changing configuration, running commands and deploying services. File work is atomic with path boundaries and private-directory protection. MCP connection goes through a local HTTP address with a bearer token, installed via Docker or natively. Apache-2.0 licensed.