Docker Hub MCP Server
Official Docker MCP server: image search, tags, repositories and Docker Hardened Images on Docker Hub
- 171 ★ on the repository
- Last commit
- Apache-2.0
Extended access
Why this level
- With a token it can create and modify repositories
- Calls the Docker Hub API over the network
Install
- Works in
Manual install
git clone https://github.com/docker/hub-mcp.git
cd hub-mcp
npm install
npm run buildBuild before adding it to a client.
Access and checks
How we reviewExtended accessThe tool runs code or makes network calls and only reads external data.
- With a token it can create and modify repositories
- Calls the Docker Hub API over the network
This is third-party code. Review the repository files before installing.
What it does
The server connects the agent to the Docker Hub API. The agent searches images with architecture, OS and category filters, reads tags and checks whether a version exists. With a personal access token it can create repositories, update their info and list namespaces. A separate tool lists Docker Hardened Images mirrored in a namespace.
Who it is for. For developers and DevOps engineers who pick base images and maintain Docker Hub repositories.
Good fit when
- You need a small or official base image
- You need to check whether a tag exists for an architecture
- You want to review your own Docker Hub repositories
Not a fit when
- Your images live in a private registry, not Docker Hub
- You need to manage local containers rather than the registry
Example request
Find a minimal Node.js image and check whether it has an arm64 tagMCP
- Transport
- stdio, http
- Authentication
- key is optional
Environment variables
HUB_PAT_TOKENsecret- Docker Hub personal access token for your own repositories
MCP_AUTH_TOKENsecret- Bearer token for incoming requests, required in http mode
Limitations
No npm package: you clone and build the repository, Node.js 22+ is required. Without a token only public content is available. In http mode the server refuses to start without MCP_AUTH_TOKEN, since any network client would otherwise act as you. Docker Hub access from Russia is unreliable, so it may not work without a VPN.
How to disable. Remove the docker-hub block from the MCP config, restart the client and revoke the token in Docker Hub settings if needed.
FAQ
Do I need a token?
Not for searching public images. For your own repositories set a Docker Hub personal access token in HUB_PAT_TOKEN.
Does it work with Ask Gordon?
Yes, the README includes a gordon-mcp.yml example for the Docker Desktop assistant.
Discussion
No questions or reviews yet.
Related
MCP serversMCP server for managing Docker in natural language: containers, images, networks and volumes, including remote hosts over SSH
The docker mcp CLI plugin and gateway: MCP servers from Docker's catalog in isolated containers behind one connection point
Docker MCP by QuantGeekDev
docker-mcp
Docker MCP: an agent creates containers, deploys Docker Compose stacks from YAML, reads logs and lists containers. Runs through uvx for Claude Desktop
A self-hosted gateway that merges several MCP servers into one endpoint with auth and tool selection
GitHub's official MCP server: code, issues, pull requests, Actions and security alerts straight from the agent
A Node.js manager for MCP servers: it starts local servers, connects remote ones and gives a client one address, with a REST API for control
README in short
The README covers building from source, running over stdio or http and hardening http mode: loopback binding, a required bearer token and host allow-lists. It gives configs for Claude Desktop, VS Code and Ask Gordon, sample tasks and the full tool list. Apache 2.0 licensed.