List containers as JSON. Pass all: true to include stopped containers.

Fetch the most recent log lines from a container (default: last 100). The tail is applied server-side via the CLI -n flag.

Run a container inside its own lightweight VM. By default runs detached and returns the container ID. Pass wait: true to run to completion and return the container's output (10 minute limit). Mount sources must be inside the allowed host paths. Default CPU/memory limits are applied unless overridden.

Stop a running container.

Delete a container. Pass force: true to delete a running container.

Run a command inside a running container and return its output.

Snapshot CPU, memory, and I/O usage for a container as JSON.

Full container details (configuration, mounts, labels, network, status) as JSON.

Copy files between host and container. Container paths use ':'. Host paths must be inside the allowed roots.

List local container images as JSON.

Pull an OCI image from a registry, e.g. 'alpine:latest'.

Build an image from a Dockerfile. The build context must be inside an allowed host path.

Delete a local image by reference. Pass force: true to remove even if in use.

Remove dangling images to reclaim disk. Pass all: true to remove all unused images.

Check whether the Apple container system service is running. Pass start: true to start it if it is stopped.