Docker MCP Server
Docker for AI agents — containers, compose stacks, logs and databases, locally or over SSH.
Connector by hypnosis · GitHub account verified by the MCP Registry
Chalk Labs
Need help deploying Docker MCP Server?
Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.
Install
Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.
npx agentmarket install connector/hypnosis-docker-mcp-server
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list, install config and code. Checked Nov 1, 2026.
- Tools
- 5 read · 0 write · 5 delete
- Secrets
- None asked for
- Install scripts
- None found
- Runs as
- Node.js package
Tools by what they do 10
Read from the source code; the running server may list different tools.
Read 5 · Look things up without changing anything.
docker_composedocker_containerdocker_healthdocker_logsdocker_resource
Delete 5 · Delete, drop, revoke or wipe things.
docker_compose_controldocker_container_controldocker_dbdocker_db_admindocker_exec
Secrets and settings it asks for
Other settings (environment variables or headers).
DOCKER_MCP_ALLOW_SSH_FALLBACKDOCKER_MCP_PROFILES_FILEDOCKER_PROFILESLOG_LEVEL
Network hosts it talks to 2
agent-plugins.org· found in codegithub.com· found in code
Files it touches
~/.ssh/id_rsa_prod~/.ssh/id_rsa_staging~/.ssh/known_hosts- Your home directory (~)
- Any path the agent passes to its tools
Tools (10)
Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].
docker_composeRead the compose configurationread-onlyReads what the project declares: config for the resolved compose file, env for the variables with the file each came from. Both read files rather than a running process — a variable here is what was written down, not what the container now holds. What is actually running is docker_container.
docker_compose_controlStart or stop the whole stackcan change or delete dataBrings the stack up or takes it down, and reports the containers standing afterwards as read from the daemon, not as compose described them. A stack that half came up says so instead of passing for a success. Taking volumes down with it destroys their data and is refused without confirm.
docker_containerList containers and measure usageread-onlyLists the containers of a project with their state, health and published ports, or measures with stats what one service consumes right now. A project name no container carries is refused with the names that exist, so an empty list means the host itself runs nothing under compose. Moving a container between states is docker_container_control.
docker_container_controlStart, stop or restart a containercan change or delete dataMoves one service between states — start, stop, restart — and reports where it stood before and where it stands now, with changed saying whether the call did anything at all. A stop that ran out of time comes back killed with its exit code, never as a clean stop. The whole stack at once is docker_compose_control.
docker_dbAsk a databasecan change or delete dataquery runs a statement against a database container, status asks the database about itself — version, size, uptime. PostgreSQL, MySQL/MariaDB, Redis, MongoDB and SQLite are spoken to through the client the image carries. A database that refuses answers with its exit code, not with a failed call. A statement that destroys data needs # CONFIRMED-DESTRUCTIVE.
docker_db_adminDump a database or fill it from a dumpcan change or delete databackup takes a dump of a database container, restore fills the database from one. The answer names the file, its size and whether it was read back: a call that says done without naming a file of known size says nothing. Restore overwrites what is there and is refused without confirm — take a backup here first.
docker_execRun a command in a containercan change or delete dataRuns a command inside a service container and brings back its exit code, with stdout and stderr apart. exit_code null means the command never ran and reason says why; an empty stdout means it ran and said nothing. What destroys data is refused until the command carries # CONFIRMED-DESTRUCTIVE. Reading logs, asking a database and taking dumps have tools of their own.
docker_healthCheck services, this server, and the hosts it knowsread-onlyservices says whether the containers answer their healthchecks, server whether this process is well, profiles which Docker hosts it was given. The word healthy means something different in each branch, so every answer explains its own verdict. A service that declares no healthcheck is said to have none, not counted as sick.
docker_logsRead container logsread-onlyReads what a container printed, line by line: each line carries the stream that wrote it and its own time. An empty list means the window held nothing, not that the read failed, and lines dropped from the middle are counted rather than quietly lost. Narrow the window with since and until instead of raising the count.
docker_resourceList host resources and measure disk usageread-onlyimages, volumes and networks list what a host holds; disk counts what they take, with unused bytes apart from the total. An empty list means asked and found nothing, which is not the same as never asked. What a running container consumes right now is docker_container with stats.
Signals
- Stars
- 0
- Forks
- 0
- Open issues
- 0
- Weekly downloads
- 265
- Last commit
- Aug 24, 2026 (2 months ago)
- Last release
- Aug 24, 2026 (2 months ago)
- Last package publish
- Aug 24, 2026 (2 months ago)
From GitHub (fetched Oct 24, 2026) and the package registry.
Details
- Registry name
io.github.hypnosis/docker-mcp-server- Version
- 2.0.1
- Auth
- No auth
- Packages
- npm @hypnosis/docker-mcp-server
- License
- MIT
- Repository
- github.com/hypnosis/docker-mcp-server
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
More from hypnosis
Done for you
Rather not set it up yourself?
Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.
See how we build AI agents →Read the case studies
Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.
- launches shipped
- 50+
- launches shipped
- media placements
- 500+
- media placements
- founders on every account
- 2
- founders on every account
Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block
Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.
Get Docker MCP Server running in your business
Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.
Cite this page
Docker MCP Server. Agent Mart. https://agentmart.dev/connectors/hypnosis-docker-mcp-server (last updated 2026-10-24)