Docker MCP Server
Docker for AI agents — containers, compose stacks, logs and databases, locally or over SSH.
Connector by hypnosis · GitHub account verified by the MCP Registry
Install
Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.
npx agentmarket install connector/hypnosis-docker-mcp-server
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 5 read · 0 write · 5 delete
- Secrets
- None asked for
- Install scripts
- Not scanned yet
- Runs as
- Node.js package
Tools by what they do 10
Read from the source code; the running server may list different tools.
Read 5 · Look things up without changing anything.
docker_composedocker_containerdocker_healthdocker_logsdocker_resource
Delete 5 · Delete, drop, revoke or wipe things.
docker_compose_controldocker_container_controldocker_dbdocker_db_admindocker_exec
Secrets and settings it asks for
Other settings (environment variables or headers).
DOCKER_MCP_ALLOW_SSH_FALLBACKDOCKER_MCP_PROFILES_FILEDOCKER_PROFILESLOG_LEVEL
Files it touches
- Any path the agent passes to its tools
Tools (10)
Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].
docker_composeRead the compose configurationread-onlyReads what the project declares: config for the resolved compose file, env for the variables with the file each came from. Both read files rather than a running process — a variable here is what was written down, not what the container now holds. What is actually running is docker_container.
docker_compose_controlStart or stop the whole stackcan change or delete dataBrings the stack up or takes it down, and reports the containers standing afterwards as read from the daemon, not as compose described them. A stack that half came up says so instead of passing for a success. Taking volumes down with it destroys their data and is refused without confirm.
docker_containerList containers and measure usageread-onlyLists the containers of a project with their state, health and published ports, or measures with stats what one service consumes right now. A project name no container carries is refused with the names that exist, so an empty list means the host itself runs nothing under compose. Moving a container between states is docker_container_control.
docker_container_controlStart, stop or restart a containercan change or delete dataMoves one service between states — start, stop, restart — and reports where it stood before and where it stands now, with changed saying whether the call did anything at all. A stop that ran out of time comes back killed with its exit code, never as a clean stop. The whole stack at once is docker_compose_control.
docker_dbAsk a databasecan change or delete dataquery runs a statement against a database container, status asks the database about itself — version, size, uptime. PostgreSQL, MySQL/MariaDB, Redis, MongoDB and SQLite are spoken to through the client the image carries. A database that refuses answers with its exit code, not with a failed call. A statement that destroys data needs # CONFIRMED-DESTRUCTIVE.
docker_db_adminDump a database or fill it from a dumpcan change or delete databackup takes a dump of a database container, restore fills the database from one. The answer names the file, its size and whether it was read back: a call that says done without naming a file of known size says nothing. Restore overwrites what is there and is refused without confirm — take a backup here first.
docker_execRun a command in a containercan change or delete dataRuns a command inside a service container and brings back its exit code, with stdout and stderr apart. exit_code null means the command never ran and reason says why; an empty stdout means it ran and said nothing. What destroys data is refused until the command carries # CONFIRMED-DESTRUCTIVE. Reading logs, asking a database and taking dumps have tools of their own.
docker_healthCheck services, this server, and the hosts it knowsread-onlyservices says whether the containers answer their healthchecks, server whether this process is well, profiles which Docker hosts it was given. The word healthy means something different in each branch, so every answer explains its own verdict. A service that declares no healthcheck is said to have none, not counted as sick.
docker_logsRead container logsread-onlyReads what a container printed, line by line: each line carries the stream that wrote it and its own time. An empty list means the window held nothing, not that the read failed, and lines dropped from the middle are counted rather than quietly lost. Narrow the window with since and until instead of raising the count.
docker_resourceList host resources and measure disk usageread-onlyimages, volumes and networks list what a host holds; disk counts what they take, with unused bytes apart from the total. An empty list means asked and found nothing, which is not the same as never asked. What a running container consumes right now is docker_container with stats.
Signals
- Stars
- 0
- Forks
- 0
- Open issues
- 0
- Weekly downloads
- 265
- Last commit
- Aug 24, 2026 (2 months ago)
- Last release
- Aug 24, 2026 (2 months ago)
- Last package publish
- Aug 24, 2026 (2 months ago)
From GitHub (fetched Oct 24, 2026) and the package registry.
Details
- Registry name
io.github.hypnosis/docker-mcp-server- Version
- 2.0.1
- Auth
- No auth
- Packages
- npm @hypnosis/docker-mcp-server
- License
- MIT
- Repository
- github.com/hypnosis/docker-mcp-server
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
More from hypnosis
Cite this page
Docker MCP Server. Agent Mart. https://agentmart.dev/connectors/hypnosis-docker-mcp-server (last updated 2026-10-24)