Docker MCP server
MCP server for managing Docker in natural language: containers, images, networks and volumes, including remote hosts over SSH
- 749 ★ on the repository
- Last commit
- GPL-3.0
Broad access
Why this level
- Full Docker daemon access, which effectively means host control
- Can remove containers, images and volumes
- Can connect to remote hosts over SSH
Install
- Works in
Manual install
"mcpServers": {
"mcp-server-docker": {
"command": "uvx",
"args": [
"mcp-server-docker"
]
}
}Install from PyPI via uv.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Full Docker daemon access, which effectively means host control
- Can remove containers, images and volumes
- Can connect to remote hosts over SSH
This is third-party code. Review the repository files before installing.
What it does
The server gives the agent tools for Docker containers, images, networks and volumes: create, run, stop, remove, build, pull and push. The docker_compose prompt runs a plan and apply loop: the agent describes which containers it will bring up and acts only after you approve. Container logs and stats are exposed as resources. With an ssh:// DOCKER_HOST the server connects to a remote daemon.
Who it is for. Server admins and developers who want to run and debug containers through an agent.
Good fit when
- You want a multi-container app brought up from a description
- You need logs and stats for a running container
- You want to manage Docker on a remote server without manual SSH
Not a fit when
- Containers need secrets: the authors explicitly advise against passing them to the model
- You need privileged containers or --cap-add: the server does not support them
Example request
Deploy WordPress with a MySQL container and expose WordPress on port 9000MCP
- Transport
- stdio
- Authentication
- not required
Environment variables
DOCKER_HOST- Docker daemon address, for example ssh://user@host
Limitations
Docker is not a secure sandbox, so containers created by the model can affect the host. --privileged, --cap-add and --cap-drop are not supported. Resources are templates and do not enumerate running containers.
How to disable. Remove the mcp-server-docker block from your MCP client config.
FAQ
How do I connect to Docker on another server?
Set DOCKER_HOST like ssh://user@host in the server env.
What if I lose the chat for a project?
Starting docker_compose again with the same project name gives the agent the status of created containers, volumes and networks, which helps with cleanup.
Discussion
No questions or reviews yet.
Related
MCP serversDocker MCP by QuantGeekDev
docker-mcp
Docker MCP: an agent creates containers, deploys Docker Compose stacks from YAML, reads logs and lists containers. Runs through uvx for Claude Desktop
Official Docker MCP server: image search, tags, repositories and Docker Hardened Images on Docker Hub
The docker mcp CLI plugin and gateway: MCP servers from Docker's catalog in isolated containers behind one connection point
compose4mcp: docker compose for 1C MCP
compose4mcp
A set of ready docker-compose configs for running various 1C-ecosystem MCP servers
A self-hosted gateway that merges several MCP servers into one endpoint with auth and tool selection
A secure MCP runtime through which an agent operates local machines, servers and containers
Comparison with similar tools
Entries that share the main search query, and how they differ.
| Entry | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| Docker MCP server (this entry) | no | not required | 749 | |
| emisar | yes | OAuth | 330 | an agent runs servers through a catalog of declared actions |
| HomeButler | no | 312 | a Go CLI that compares a server with its last snapshot |
README in short
Docker MCP server manages Docker in natural language: composing containers, debugging running ones and managing volumes. Installation is described for Claude Desktop via uvx from PyPI or a self-built Docker image with the socket mounted. The README lists tools, resources and the docker_compose prompt. Separate warnings cover secrets and the fact that Docker is not a sandbox.