Skip to main content
Glama

20 Best Docker MCP Servers, Compared (November 2026)

Updated 20 of 1,663 Docker servers in the Glama registryRebuilt weekly

The short answer

If you want an agent to compose, introspect and debug containers from chat, reach for Docker MCP Server (ckreiling/mcp-server-docker): it ships a docker_compose prompt plus container log and stats resources, and its PyPI package records 2,492 downloads in a typical week. Know what you are taking on: it is labelled Abandoned but popular, with 0 commits on its default branch in the last 12 weeks and a last commit 91 days ago, so expect no fixes. If you want the same work done by something still being changed, Maintenant exposes 51 MCP tools covering containers, logs, resources, alerts and security findings, with a commit 2 days ago, and it only sees local Docker and Kubernetes. If the agent must be unable to change anything until you say so, Docker MCP Guardian keeps read-only defaults and refuses safe_restart_container unless GUARDIAN_ALLOW_WRITE is true.

Whichever you choose, give it the narrowest access that still works (a read-only credential, a replica, a scratch account), and widen it only once you have watched what your agent actually asks for.

Glama operates the MCP registry these numbers are measured from, and sells MCP hosting and a gateway. No position on this page is paid for. How the registry is built.

Quick picks

  • 1Docker MCP Server : Composing and debugging containers from chat: it ships a docker_compose prompt that plans and applies container stacks, plus container log and stats resources.
  • 2REMnux MCP Server : Docker-hosted REMnux users needing an AI assistant to run malware analysis: it exposes 12 tools for file info, auto-analysis, IOC extraction, and tool discovery.
  • 3mcpproxy-go : Running several MCP servers behind one endpoint with Docker isolation and quarantining new servers until their tools are reviewed.
  • 4Docker Hub MCP Server : Teams that need LLM-driven Docker Hub repository management with a Docker PAT: it documents authenticated operations plus public image search and discovery.
  • 5Docker MCP Guardian : Giving a local LLM agent guarded Docker restarts: the safe_restart_container tool refuses calls unless GUARDIAN_ALLOW_WRITE is set to true.

Which one, for your situation

Your situationWhat to use
I want an agent to plan and apply container stacksDocker MCP Server (ckreiling/mcp-server-docker) is the one with a docker_compose prompt and log and stats resources, though it has 0 commits in the last 12 weeks.
I run several MCP servers and want one endpointmcpproxy-go routes multiple upstream servers through a single endpoint, with Docker isolation and quarantine for new servers, and it had a commit 0 days ago.
I need image search and repo management on Docker HubDocker Hub MCP Server supports public image search plus authenticated repository and tag operations with a Docker Personal Access Token.
I want an agent that cannot restart things by defaultDocker MCP Guardian defaults to read-only, redacts credentials and refuses safe_restart_container unless GUARDIAN_ALLOW_WRITE is set to true.
I want a homelab dashboard that also speaks MCPHomeLab Monitor is a single self-hosted dashboard with a built-in read-only MCP server over GPU, Docker, systemd and host health, and it gained 17 stars per 30 days.
I need to federate MCP servers with REST and gRPCContextForge MCP Gateway consolidates MCP, A2A, REST and gRPC services behind one governed endpoint, and its PyPI package records 7,235 downloads in a typical week.

Top MCP servers for Docker

Profile
1Abandoned but popular752+82.5K91 days ago70.0
2Community favourite139+161.1K7 days ago64.1
3Community favourite407+24–today62.9
4Steady171+2–22 days ago62.6
5Emerging109+109–3 days ago62.3
6Community favourite315+22–5 days ago60.5
7Steady97+8–today59.7
8Emerging231+17–13 days ago59.0
9Community favourite177+1638512 days ago58.6
10Community favourite29,162+3,337–today57.5
11Community favourite8,950+373–today56.4
12Community favourite4,756+1677.2Ktoday55.4
13Community favourite532––2 days ago53.9
14Community favourite3,367+412Ktoday53.3
15Community favourite12,131+49–15 days ago51.5
16Community favourite2,868+44–3 days ago51.4
17Community favourite1,237+50–today50.9
18Emerging150+16–11 days ago48.9
19Community favourite290+21–today47.9
20Community favourite917+18–today47.8

The ranking, with the evidence

  • Best for: Composing and debugging containers from chat: it ships a docker_compose prompt that plans and applies container stacks, plus container log and stats resources.

    Docker MCP Server exposes tools for containers, images, networks and volumes (list, create, run, start, stop, remove) alongside a docker_compose prompt that runs a plan-and-apply loop and resource templates for container logs and stats read by container ID or name. It requires a Docker daemon reachable through the Python Docker SDK's from_env (a mounted socket locally, or a DOCKER_HOST SSH URL), and it deliberately omits privileged and cap-add/cap-drop options.

    Score 70.0: show every number behind it
    • Adoption77 / 100 · weight 40%
      • GitHub stars72
      • PyPI downloads36
        PyPI downloads show no weekday rhythm; halved
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance57 / 100 · weight 24%
      • Last commit touching this server88
      • Repository maintenance grade30
      • Commit cadence5
    • Momentum54 / 100 · weight 14%
      • Stars gained, relative to size39
      • Stars gained, absolute39
      • PyPI download trend100
    • Tool quality≈68 / 100 · weight 13%
      • Tool description quality≈68
        tool descriptions not yet scored
      • Built and inspected by Glamanot measured
        never built and inspected by Glama
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    70.0
    × relevance: the keyword is dedicated here
    1.00
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    70.0
  • Best for: Docker-hosted REMnux users needing an AI assistant to run malware analysis: it exposes 12 tools for file info, auto-analysis, IOC extraction, and tool discovery.

    REMnux MCP Server exposes 12 tools that let an AI assistant run REMnux commands, identify file types and hashes, extract archives, analyze files with matching tools, extract IOCs, and retrieve tool help or availability, with Docker exec, SSH, local, and HTTP transport modes documented. It assumes a REMnux system and Node.js 20 or newer, plus Docker or SSH access when the MCP server runs off the REMnux host.

    Score 64.1: show every number behind it
    • Adoption72 / 100 · weight 40%
      • GitHub stars54
      • npm downloads64
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum70 / 100 · weight 14%
      • Stars gained, relative to size97
      • Stars gained, absolute49
      • npm download trend45
    • Tool quality81 / 100 · weight 13%
      • Tool description quality73
      • Built and inspected by Glama100
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integrates100
    Weighted mean of the five
    82.2
    × relevance: the keyword is declared here
    0.78
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    64.1
  • Best for: Running several MCP servers behind one endpoint with Docker isolation and quarantining new servers until their tools are reviewed.

    The mcpproxy-go server exposes nine tools for discovering tools across upstream servers, calling them at read, write, and destructive levels, managing upstream servers with Docker isolation, and reviewing quarantined servers and tools. It routes multiple upstream MCP servers through a single endpoint, and new servers are quarantined until approved, so their tools are withheld from agents until that review happens.

    Score 62.9: show every number behind it
    • Adoption65 / 100 · weight 40%
      • GitHub stars65
      • npm downloadsnot measured
        no npm package
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum75 / 100 · weight 14%
      • Stars gained, relative to size87
      • Stars gained, absolute57
      • npm download trendnot measured
        no download history for the selected registry
    • Tool quality85 / 100 · weight 13%
      • Tool description quality77
      • Built and inspected by Glama100
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    80.6
    × relevance: the keyword is declared here
    0.78
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    62.9
  • Best for: Teams that need LLM-driven Docker Hub repository management with a Docker PAT: it documents authenticated operations plus public image search and discovery.

    The Docker Hub MCP Server documents stdio and HTTP MCP transports that call Docker Hub APIs, giving LLMs public image discovery by default and PAT-authenticated repository management when HUB_PAT_TOKEN is set. Before choosing it, note that no npm package is published, so setup requires Node.js 22+, Docker, and building from source with npm install and npm run build.

    Score 62.6: show every number behind it
    • Adoption56 / 100 · weight 40%
      • GitHub stars56
      • npm downloadsnot measured
        no npm package
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance77 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade55
      • Commit cadence40
    • Momentum29 / 100 · weight 14%
      • Stars gained, relative to size34
      • Stars gained, absolute21
      • npm download trendnot measured
        no download history for the selected registry
    • Tool quality≈68 / 100 · weight 13%
      • Tool description quality≈68
        tool descriptions not yet scored
      • Built and inspected by Glamanot measured
        never built and inspected by Glama
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integrates100
    Weighted mean of the five
    62.6
    × relevance: the keyword is dedicated here
    1.00
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    62.6
  • Best for: Giving a local LLM agent guarded Docker restarts: the safe_restart_container tool refuses calls unless GUARDIAN_ALLOW_WRITE is set to true.

    It is a Python FastMCP server that speaks JSON-RPC over stdio and exposes inspect_container, which returns environment variable keys with values stripped, plus safe_restart_container, which checks a canonical-name regex denylist before touching the Docker socket. It assumes a resolvable Docker endpoint (rootless socket, or a DOCKER_HOST the client sets literally because most clients do not expand variables) and ships no npm or PyPI package, so installation is a git clone into a virtualenv.

    Score 62.3: show every number behind it
    • Adoption51 / 100 · weight 40%
      • GitHub stars51
      • npm downloadsnot measured
        no npm package
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance92 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade80
      • Commit cadence85
    • Momentum93 / 100 · weight 14%
      • Stars gained, relative to size100
      • Stars gained, absolute82
      • npm download trendnot measured
        no download history for the selected registry
    • Tool quality≈68 / 100 · weight 13%
      • Tool description quality≈68
        tool descriptions not yet scored
      • Built and inspected by Glamanot measured
        never built and inspected by Glama
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    73.3
    × relevance: the keyword is dedicated here
    1.00
    × continuity: actively changing
    1.00
    × evidence: modest but real audience
    0.85
    Composite score
    62.3
  • Best for: Homelab operators who need Docker monitoring, volume backup and restore, Wake-on-LAN, network scanning, and Proxmox guest control: 44 tools cover these tasks.

    Homebutler exposes 44 tools for Docker container inspection, logs, stats, restart, and stop; volume backup, listing, drill, and restore; Wake-on-LAN; network scanning; Proxmox guest management; and health reporting. Before choosing it, note that backup_restore overwrites the data the app is running on and install_purge deletes containers, config, and volumes without taking a backup first, so the operator must confirm destructive restores and take a backup before purging.

    Score 60.5: show every number behind it
    • Adoption62 / 100 · weight 40%
      • GitHub stars62
      • npm downloadsnot measured
        no npm package
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum77 / 100 · weight 14%
      • Stars gained, relative to size91
      • Stars gained, absolute55
      • npm download trendnot measured
        no download history for the selected registry
    • Tool quality68 / 100 · weight 13%
      • Tool description quality60
      • Built and inspected by Glama100
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    77.6
    × relevance: the keyword is declared here
    0.78
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    60.5
  • Best for: Browser automation where an AI agent needs a stealth browser in Docker: it provides an MCP endpoint with common-action tools and run_script.

    The README documents a JSON HTTP API on port 8080 and a Streamable HTTP MCP endpoint at /mcp/, with dedicated tools for common actions plus browser_action and run_script for the complete API. It assumes a running Docker container and a client integration pointed at http://localhost:8080/mcp/, with STEALTHY_AUTO_BROWSE_URL and AUTH_TOKEN set where required.

    Score 59.7: show every number behind it
    • Adoption50 / 100 · weight 40%
      • GitHub stars50
      • npm downloadsnot measured
        no npm package
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum61 / 100 · weight 14%
      • Stars gained, relative to size75
      • Stars gained, absolute39
      • npm download trendnot measured
        no download history for the selected registry
    • Tool quality≈68 / 100 · weight 13%
      • Tool description quality≈68
        tool descriptions not yet scored
      • Built and inspected by Glamanot measured
        never built and inspected by Glama
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    70.2
    × relevance: the keyword is dedicated here
    1.00
    × continuity: actively changing
    1.00
    × evidence: modest but real audience
    0.85
    Composite score
    59.7
  • Best for: Homelab operators wanting a single self-hosted dashboard with a built-in read-only MCP server for AI agents to inspect GPU, Docker, systemd, and host health.

    HomeLab Monitor is a homelab dashboard packaged as a Docker container and includes a built-in read-only MCP server for AI agents to explore its monitoring data. It reaches monitored machines over SSH, so those hosts need to be reachable that way.

    Score 59.0: show every number behind it
    • Adoption59 / 100 · weight 40%
      • GitHub stars59
      • npm downloadsnot measured
        no npm package
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum73 / 100 · weight 14%
      • Stars gained, relative to size88
      • Stars gained, absolute51
      • npm download trendnot measured
        no download history for the selected registry
    • Tool quality≈68 / 100 · weight 13%
      • Tool description quality≈68
        tool descriptions not yet scored
      • Built and inspected by Glamanot measured
        never built and inspected by Glama
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    75.6
    × relevance: the keyword is declared here
    0.78
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    59.0
  • Best for: Docker-hosted browser automation for AI agents: it forwards the upstream Playwright MCP tool surface and supports multi-session Streamable HTTP transport.

    CloakBrowser MCP exposes 25 browser tools, largely the upstream Playwright MCP surface (navigation, snapshots, clicks, typing, tabs, network inspection), plus two CloakBrowser introspection tools, and serves them over stdio or Streamable HTTP, including in Docker. One caveat: browser_run_code_unsafe executes arbitrary JavaScript in the Playwright server process and is described as RCE-equivalent.

    Score 58.6: show every number behind it
    • Adoption60 / 100 · weight 40%
      • GitHub stars56
      • npm downloads28
        downloads show none of the weekday rhythm human traffic has; halved
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum75 / 100 · weight 14%
      • Stars gained, relative to size93
      • Stars gained, absolute50
      • npm download trend71
    • Tool quality58 / 100 · weight 13%
      • Tool description quality50
      • Built and inspected by Glama100
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    75.1
    × relevance: the keyword is declared here
    0.78
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    58.6
  • 10

    dbx

    Community favourite
    t8y2/dbx ↗

    Best for: Existing DBX users: the MCP server ships alongside the desktop, Docker and CLI interfaces, letting agents query databases already configured in that manager.

    DBX is a universal database manager whose README documents a bundled MCP server alongside its desktop, Docker, CLI and AI assistant interfaces, described as enabling natural language queries and database management through MCP. Its exposed tools have never been inspected and it is distributed through the npm package dbx, so the actual command surface has to be confirmed against a running instance before it is relied on.

    Score 57.5: show every number behind it
    • Adoption100 / 100 · weight 40%
      • GitHub stars100
      • npm downloadsnot measured
        npm publishes dbx from samt/node-dbx
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum100 / 100 · weight 14%
      • Stars gained, relative to size100
      • Stars gained, absolute100
      • npm download trendnot measured
        no download history for the selected registry
    • Tool quality≈68 / 100 · weight 13%
      • Tool description quality≈68
        tool descriptions not yet scored
      • Built and inspected by Glamanot measured
        never built and inspected by Glama
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    95.8
    × relevance: the keyword is tagged here
    0.60
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    57.5
  • Best for: Running untrusted workloads such as AI agents, user code, or CI jobs locally: it uses microVMs for hardware isolation and runs standard OCI images.

    Its README documents a microVM runtime with an msb CLI for sandboxes, snapshots, images, and volumes, SDKs for TypeScript, Rust, Python, and Go, and an MCP server for agents to create sandboxes; the exposed MCP tool list is unknown. Before choosing it, note that it requires macOS on Apple Silicon, Linux with KVM, or Windows with WHP, and the project labels itself beta software.

    Score 56.4: show every number behind it
    • Adoption99 / 100 · weight 40%
      • GitHub stars99
      • npm downloadsnot measured
        no npm package
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum90 / 100 · weight 14%
      • Stars gained, relative to size84
      • Stars gained, absolute100
      • npm download trendnot measured
        no download history for the selected registry
    • Tool quality≈68 / 100 · weight 13%
      • Tool description quality≈68
        tool descriptions not yet scored
      • Built and inspected by Glamanot measured
        never built and inspected by Glama
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    94.0
    × relevance: the keyword is tagged here
    0.60
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    56.4
  • Best for: Consolidating MCP servers and REST or gRPC APIs behind one governed endpoint: it federates MCP, A2A, REST, and gRPC services into a single MCP-compliant gateway.

    ContextForge is an MCP-compliant registry and proxy that federates MCP, A2A, and REST/gRPC services into one endpoint, with transport over HTTP, JSON-RPC, WebSocket, SSE, and Streamable HTTP. The optional Web UI runs in a separate container, so Docker installations that want it need to deploy that component alongside the gateway.

    Score 55.4: show every number behind it
    • Adoption98 / 100 · weight 40%
      • GitHub stars92
      • PyPI downloads41
        PyPI downloads show no weekday rhythm; halved
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum81 / 100 · weight 14%
      • Stars gained, relative to size76
      • Stars gained, absolute90
      • PyPI download trend77
    • Tool quality≈68 / 100 · weight 13%
      • Tool description quality≈68
        tool descriptions not yet scored
      • Built and inspected by Glamanot measured
        never built and inspected by Glama
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integrates100
    Weighted mean of the five
    92.3
    × relevance: the keyword is tagged here
    0.60
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    55.4
  • Best for: Local Docker and Kubernetes monitoring: it exposes 51 MCP tools for containers, logs, resources, alerts, and security findings.

    Maintenant exposes 51 MCP tools for monitoring Docker containers, Kubernetes resources, endpoints, TLS certificates, heartbeats, alerts, notification channels, escalation policies, and CVE and risk findings. It is a local server, so it cannot see online deployments.

    Score 53.9: show every number behind it
    • Adoption68 / 100 · weight 40%
      • GitHub stars68
      • npm downloadsnot measured
        no npm package
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum≈0 / 100 · weight 14%
      • Stars gained, relative to sizenot measured
        no snapshot history yet
      • Stars gained, absolutenot measured
        no snapshot history yet
      • npm download trendnot measured
        no download history for the selected registry
    • Tool quality68 / 100 · weight 13%
      • Tool description quality60
      • Built and inspected by Glama100
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    69.1
    × relevance: the keyword is declared here
    0.78
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    53.9
  • Best for: Large local codebases needing private semantic search and change-impact analysis: it exposes indexing, graph, impact, symbol, and context-artifact tools, with Docker-managed local infrastructure.

    SocratiCode exposes 26 tools for indexing and searching a codebase, building and querying a code dependency graph, analyzing symbols and change impact, and indexing context artifacts such as schemas and API specs. Before choosing it, note that its health tool checks for local Docker, a Qdrant container, Ollama, and an embedding model.

    Score 53.3: show every number behind it
    • Adoption99 / 100 · weight 40%
      • GitHub stars88
      • npm downloads70
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum47 / 100 · weight 14%
      • Stars gained, relative to size44
      • Stars gained, absolute66
      • npm download trend27
    • Tool quality76 / 100 · weight 13%
      • Tool description quality68
      • Built and inspected by Glama100
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    88.8
    × relevance: the keyword is tagged here
    0.60
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    53.3
  • Best for: Investigating Kubernetes network incidents with an AI agent: it exposes cluster-wide traffic queries over MCP, including decrypted TLS and Kubernetes context.

    Kubeshark runs an MCP server, started with kubeshark mcp, that gives AI agents query access to cluster-wide network traffic, API calls, and Kubernetes context, including decrypted TLS traffic. Before choosing it, note that the documented setup requires a Kubernetes cluster with Kubeshark deployed and the kubeshark CLI installed locally.

    Score 51.5: show every number behind it
    • Adoption100 / 100 · weight 40%
      • GitHub stars100
      • npm downloadsnot measured
        no npm package
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance92 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade80
      • Commit cadence85
    • Momentum43 / 100 · weight 14%
      • Stars gained, relative to size26
      • Stars gained, absolute68
      • npm download trendnot measured
        no download history for the selected registry
    • Tool quality≈68 / 100 · weight 13%
      • Tool description quality≈68
        tool descriptions not yet scored
      • Built and inspected by Glamanot measured
        never built and inspected by Glama
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integrates100
    Weighted mean of the five
    85.8
    × relevance: the keyword is tagged here
    0.60
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    51.5
  • Best for: Self-hosted markdown vaults needing AI note search, editing, and templating: a built-in stdio MCP server exposes those tools against the web UI's vault.

    NoteDiscovery MCP Server is the built-in stdio MCP server for the NoteDiscovery self-hosted markdown notes app, exposing 19 tools that cover note search, listing, reading, creation, editing, appending, moving, deletion, folders, tags, links, graph data, recent notes, templates, health, and config. Before choosing it, note that it assumes a running NoteDiscovery instance and an MCP client configured through NOTEDISCOVERY_URL, as the README's Docker setup shows.

    Score 51.4: show every number behind it
    • Adoption86 / 100 · weight 40%
      • GitHub stars86
      • npm downloadsnot measured
        no npm package
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum56 / 100 · weight 14%
      • Stars gained, relative to size49
      • Stars gained, absolute67
      • npm download trendnot measured
        no download history for the selected registry
    • Tool quality78 / 100 · weight 13%
      • Tool description quality70
      • Built and inspected by Glama100
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    85.7
    × relevance: the keyword is tagged here
    0.60
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    51.4
  • Best for: Teams operating an ArcadeDB instance that need MCP access to inspect schemas, run read-only queries, execute writes, and profile query performance.

    ArcadeDB Multi-Model DBMS exposes 10 MCP tools for listing databases, reading schemas, running read-only queries and write commands, checking server status, profiling queries, and getting or setting server settings. It assumes access to an ArcadeDB server and an authenticated user, and changes made through set_server_setting may not persist across restarts.

    Score 50.9: show every number behind it
    • Adoption77 / 100 · weight 40%
      • GitHub stars77
      • npm downloadsnot measured
        no npm package
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum75 / 100 · weight 14%
      • Stars gained, relative to size79
      • Stars gained, absolute69
      • npm download trendnot measured
        no download history for the selected registry
    • Tool quality81 / 100 · weight 13%
      • Tool description quality73
      • Built and inspected by Glama100
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integrates100
    Weighted mean of the five
    84.8
    × relevance: the keyword is tagged here
    0.60
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    50.9
  • Best for: Unraid administrators needing read-only AI assistant access to system information, Docker containers, VMs, and storage: it uses the official Unraid GraphQL API.

    The Python unraid-mcp server connects to an Unraid server through the official GraphQL API and provides read-only access to system information, Docker containers, VMs, and storage. It assumes an Unraid GraphQL endpoint and API key supplied through UNRAID_API_URL and UNRAID_API_KEY.

    Score 48.9: show every number behind it
    • Adoption54 / 100 · weight 40%
      • GitHub stars54
      • npm downloadsnot measured
        no npm package
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance97 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence85
    • Momentum78 / 100 · weight 14%
      • Stars gained, relative to size97
      • Stars gained, absolute50
      • npm download trendnot measured
        no download history for the selected registry
    • Tool quality≈68 / 100 · weight 13%
      • Tool description quality≈68
        tool descriptions not yet scored
      • Built and inspected by Glamanot measured
        never built and inspected by Glama
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    73.8
    × relevance: the keyword is declared here
    0.78
    × continuity: actively changing
    1.00
    × evidence: modest but real audience
    0.85
    Composite score
    48.9
  • Best for: Read-only exploration of a self-hosted GeoLens spatial catalog: it exposes dataset search, schema, bounded GeoJSON features, saved maps, and sandboxed SQL over PostGIS.

    GeoLens MCP exposes six read-only tools for searching datasets, retrieving schemas and bounded GeoJSON features, listing and summarizing saved maps, and running a sandboxed read-only SQL SELECT against accessible PostGIS tables. It assumes an existing self-hosted GeoLens catalog with accessible datasets, and its query tool is limited to read-only SELECT access over data tables in a SQL sandbox.

    Score 47.9: show every number behind it
    • Adoption62 / 100 · weight 40%
      • GitHub stars62
      • npm downloadsnot measured
        no npm package
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum77 / 100 · weight 14%
      • Stars gained, relative to size92
      • Stars gained, absolute54
      • npm download trendnot measured
        no download history for the selected registry
    • Tool quality88 / 100 · weight 13%
      • Tool description quality80
      • Built and inspected by Glama100
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integrates100
    Weighted mean of the five
    79.8
    × relevance: the keyword is tagged here
    0.60
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    47.9
  • Best for: Operator-assisted browser work on brittle sites: it exposes session, takeover, and auth-profile tools so a human can step into a live Playwright session.

    Auto Browser exposes 20 MCP tools, over HTTP with a bundled stdio bridge, for creating browser sessions, observing pages, executing actions, managing tabs and downloads, saving auth profiles, and requesting human takeover through noVNC. Every API and MCP request must carry the bearer token the controller writes to data/api-token on first start, and running with API_ALLOW_TOKENLESS_LOOPBACK=true lets any container on the compose network drive the browser.

    Score 47.8: show every number behind it
    • Adoption74 / 100 · weight 40%
      • GitHub stars74
      • npm downloadsnot measured
        no npm package
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum52 / 100 · weight 14%
      • Stars gained, relative to size53
      • Stars gained, absolute51
      • npm download trendnot measured
        no download history for the selected registry
    • Tool quality76 / 100 · weight 13%
      • Tool description quality68
      • Built and inspected by Glama100
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    79.7
    × relevance: the keyword is tagged here
    0.60
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    47.8

Questions people ask

Docker MCP Server or Maintenant for watching containers?

Docker MCP Server (ckreiling/mcp-server-docker) gives an agent a docker_compose prompt and container log and stats resources, and its PyPI package records 2,492 downloads in a typical week. Maintenant exposes 51 MCP tools for containers, logs, resources, alerts and security findings and had a commit 2 days ago. The trade is breadth and activity against a compose workflow: choose Maintenant if you want more tools on a project with recent commits, and note it only sees local Docker and Kubernetes deployments.

What does Docker MCP Guardian need before it will restart a container?

The safe_restart_container tool refuses calls unless GUARDIAN_ALLOW_WRITE is set to true, so restarts are blocked until you opt in. Until then the server works with read-only defaults, credential redaction, canonical ID checks, denylists and bounded daemon timeouts. It gained 109 stars per 30 days and had a commit 3 days ago.

Does Docker Hub MCP Server work without a token?

Public content access is described for image search and discovery, while repository and tag management requires authentication with a Docker Personal Access Token. It had 4 commits on its default branch in the last 12 weeks and a last commit 22 days ago, so expect a slower pace than the busiest projects here. The number of tools it exposes was not measured, so judge it on the described capabilities rather than a tool count.

What should I watch for when pointing an agent at mcpproxy-go?

It exposes 9 tools, and it quarantines new upstream servers until their tools are reviewed, which is the guardrail to keep switched on rather than bypass. It also adds Docker isolation and activity logging in front of whatever it routes, and it had 599 commits on its default branch in the last 12 weeks with a last commit 0 days ago. Because it sits in front of several servers, review what each one adds before you release it from quarantine.

Which of these handles Kubernetes as well as Docker?

Maintenant covers local Docker and Kubernetes monitoring through 51 MCP tools, and its own description states that online deployments cannot be seen. For network-level investigation inside a cluster, kubeshark exposes cluster-wide traffic queries including decrypted TLS and Kubernetes context, with 12,131 stars. Neither replaces a general container management server for composing stacks.

Is there a Docker option aimed at homelab operators?

homebutler exposes 44 tools for Docker monitoring, volume backup and restore with compose and env files, Wake-on-LAN, network scanning, Proxmox guest control and multi-server SSH, and had 241 commits on its default branch in the last 12 weeks. Its tool descriptions were graded B, so expect more ambiguity in what a tool does than in the A graded servers. HomeLab Monitor is the lighter alternative if you mainly want a dashboard with read-only MCP access.

Other comparisons