MCP100 IndexMCP Server
WatchlistCommunity implementation

Docker MCP Server

by ckreiling

Reviewed October 5, 2026

MCP ServerSoftware & Technology

Watchlist tracking

Reviewed for relevance and future tracking value.

MCP100 Assessment

Watchlist / Tracking

Why we’re tracking it

Follow Docker API and compose-tool changes because container actions are high impact

Reviewed · Documentation review; complete setup workflow not independently tested

Best fit

Managing Docker containers, volumes and remote daemons with natural language

What we know

Community Docker MCP for composing, inspecting/debugging containers and managing persistent volumes.

Maintenance / activity evidence

  • Observed (UTC)Migrate to MCP Python SDK v2 ( 56)

Tracking evidence observed Oct 5, 2026. These dated signals do not establish current maintenance. Reviewed enrichment confidence: high.

Activity source · commits ↗Activity source · releases ↗

Verification gaps / watch-outs

  • Installation and comprehensive security have not been independently audited.
  • Authority of configured Docker daemon/user. Writes: Create/stop/remove containers; Manage volumes; Potential host impact through Docker.
  • Docker/SSH environment auth.
  • Sensitive access: Docker socket, Container data
  • Docker daemon access is effectively privileged infrastructure access even with some dangerous flags disabled.
Security source · repository notice ↗

Full authority, access and evidence limits are available in Review context and Access & risk.

Popularity

744 repository stars

Stars observed Sep 25, 2026.

Preserve any already-reviewed adoption metrics in MCP100. Batch 4 did not refresh package downloads because the package-stats provider had insufficient credits.

Preserve any already-reviewed adoption metrics in MCP100. Batch 4 did not refresh package downloads because the package-stats provider had insufficient credits.

All limitations / Review context

Which container operations and approval or scope controls are documented?

The bounded assessment reviewed the official README, repository notices, security policy path, and security page for known material public-tracking blockers. No such blocker was identified. This is a public-tracking assessment, not an installation safety certification.

  • Docker daemon access is effectively privileged infrastructure access even with some dangerous flags disabled.
  • Authority of configured Docker daemon/user.
  • Docker/SSH environment auth.
  • Container metadata, logs and volume context are exposed to the client.
  • Reviewed write actions: Create/stop/remove containers; Manage volumes; Potential host impact through Docker
  • Sensitive access: Docker socket, Container data
  • Installation, client compatibility and comprehensive security have not been independently audited. Authentication and access depend on the configured services.
  • A project-specific SECURITY.md policy was not available at the fetched official path; the review remains limited to published repository notices.
  • No installation, runtime, client matrix, or complete tool-contract audit was performed in this review.
  • The fetched official SECURITY.md path returned HTTP 404; it was not treated as positive evidence.
  • Docker is not a secure sandbox.
  • Project blocks some sensitive options such as --privileged and cap-add/cap-drop.

Original activity observations

  • 2026-08-07T06:45:50Z: Migrate to MCP Python SDK v2 ( 56)
Technical identity
github.com/ckreiling/mcp-server-docker
Reviewed resource type
MCP Server
Repository identity
ckreiling/mcp-server-docker
Package identity
pypi:mcp-server-docker

Evidence & Sources

Evidence basis
Recorded source evidence
Setup runtime verification
Not independently runtime-tested by MCP100 for this setup workflow.

Reviewed · Latest source observation