ORAS MCP Server
The ORAS MCP Server enables AI assistants to interact with OCI registries and container registries to query and analyze container images, artifacts, and their associated metadata.
List well-known registries: Discover public registries that support catalog functionality
Browse repositories: Enumerate all repositories available in a specific registry
Explore image tags: Retrieve all tags within a repository
Analyze referrers: Identify artifacts that reference a specific container image or OCI artifact (such as signatures or SBOMs)
Fetch manifests: Retrieve detailed manifest information for images and artifacts by tag or digest
Access blob content: Download specific blob data (like image layers or configuration files) referenced by digest
Parse references: Break down container reference strings into their component parts (registry, repository, tag, digest)
This server is particularly useful for understanding container image metadata, platform support, signatures, and artifact relationships across various container registries.
Supports working with CNCF Notary signatures for container images, allowing verification of image authenticity and integrity.
Provides tools for running the ORAS MCP Server inside a Docker container, making deployment and execution straightforward without local installation requirements.
Enables interaction with GitHub Container Registry (ghcr.io) to retrieve and analyze container images and their metadata.
Provides capabilities to analyze Linux-based container images across multiple architectures including amd64, arm64, arm/v7, s390x, and ppc64le.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@ORAS MCP Serverwhat platforms does the image ghcr.io/oras-project/oras support?"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
ORAS MCP Server
Usage
Configure the ORAS MCP Server to run inside VS Code agent mode for registry-aware chats.
The server is implemented with the oras-go library and does not depend on the oras CLI.
Setup with Docker
It is easier to use docker to run the ORAS MCP Server.
Setup for VS Code
Add the following code to .vscode/mcp.json:
{
"servers": {
"oras-mcp-server": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"--rm",
"-i",
"ghcr.io/oras-project/oras-mcp:main",
"serve"
]
}
}
}Mount Docker credentials (Linux only)
Linux users can share docker login credentials by mounting the config file:
{
"servers": {
"oras-mcp-server": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"--rm",
"-i",
"-v",
"${env:HOME}/.docker/config.json:/root/.docker/config.json:ro",
"ghcr.io/oras-project/oras-mcp:main",
"serve"
]
}
}
}Adjust the path if you keep credentials under ${env:DOCKER_CONFIG}. The container understands only inline auths entries; helper-based configs (credsStore, credHelpers) won't work. On macOS/Windows, install the released binary instead.
Setup from Released Binaries
Visit the GitHub releases page and download the archive that matches your operating system and CPU architecture (
oras-mcp_<version>_<os>_<arch>.tar.gzfor Linux or macOS,oras-mcp_<version>_windows_<arch>.zipfor Windows).Extract the archive; the folder contains a single executable named
oras-mcp(ororas-mcp.exeon Windows) and a copy of the project license.Move the binary to a directory on your
PATH(for example,/usr/local/binon Linux/macOS or%LOCALAPPDATA%\Programs\oras-mcpon Windows) or reference it directly from its extracted location.Run
oras-mcp serve --help(ororas-mcp.exe serve --help) to confirm the binary works on your system.To integrate with VS Code agent mode, update
.vscode/mcp.jsonto point at the extracted binary:{ "servers": { "oras-mcp-server": { "type": "stdio", "command": "/absolute/path/to/oras-mcp", "args": [ "serve" ] } } }On Windows, set
"command": "C:/path/to/oras-mcp.exe".
Authentication
oras-mcp reads credentials from the same stores used by the ORAS and Docker CLIs, but you need to expose those stores to the server process:
Released binary – Run
oras login <registry>ordocker login <registry>on the host machine; the binary will pick up the cached credentials automatically.Docker container – On Linux you can mount your Docker config as shown in the credential section; ensure the file contains inline
authsentries. Docker Desktop (macOS/Windows) depends on keychain helpers, so use the released binary there.
Related MCP server: oci-mcp-server
Example Chats
Q: What platform does the image ghcr.io/oras-project/oras support?
A: The image ghcr.io/oras-project/oras supports the following platforms:
Linux (amd64)
Linux (arm64)
Linux (arm, variant v7)
Linux (s390x)
Linux (ppc64le)
Let me know if you need further details!
Q: What's the latest Azure Linux 3.0 image in MCR? Does it have a signature? What's the type of it?
A: The latest Azure Linux 3.0 image in the Microsoft Container Registry (MCR) is tagged as 3.0.20250402. It has a signature, and the type of the signature is application/vnd.cncf.notary.signature.
Release Process
Maintainers can find the full release steps in the release checklist.
Available Tools
7 toolsfetch_blobC
Fetch blob referenced by a digest in a manifest.
| Name | Required | Description | Default |
|---|---|---|---|
| digest | Yes | blob digest | |
| registry | Yes | registry name | |
| repository | Yes | repository name |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It states the action ('fetch') but doesn't describe what 'fetch' entails (e.g., read-only operation, potential for large data transfers, authentication needs, or error handling). This leaves key behavioral traits unspecified for a tool interacting with external resources.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, clear sentence with zero wasted words. It's front-loaded with the core action and resource, making it highly efficient and easy to parse for an AI agent.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity of fetching blobs from a registry (involving external calls, potential authentication, and data handling), the description is incomplete. With no annotations and no output schema, it lacks details on behavioral traits, return values, or error conditions, which are crucial for effective tool use in this context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema fully documents the three parameters (digest, registry, repository). The description adds no additional meaning beyond implying these are used to locate a blob, which is already clear from the schema. This meets the baseline for high schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('fetch') and resource ('blob referenced by a digest in a manifest'), which is specific and understandable. However, it doesn't explicitly differentiate from sibling tools like 'fetch_manifest' or 'parse_reference', which might handle similar registry/repository contexts but different resources.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. It doesn't mention prerequisites (e.g., needing a valid manifest), exclusions, or comparisons to siblings like 'fetch_manifest' for different data types, leaving the agent to infer usage from context alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
fetch_manifestC
Fetch manifest of a container image or an OCI artifact.
| Name | Required | Description | Default |
|---|---|---|---|
| digest | No | manifest digest | |
| registry | Yes | registry name | |
| repository | Yes | repository name | |
| tag | No | tag name |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden for behavioral disclosure. While 'fetch' implies a read operation, it doesn't specify whether this requires authentication, has rate limits, returns structured data, or handles errors. For a tool with no annotation coverage, this leaves significant behavioral gaps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that directly states the tool's purpose without unnecessary words. It's appropriately sized for a straightforward fetch operation and front-loads the essential information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no annotations, no output schema, and 4 parameters, the description is incomplete. It doesn't explain what a manifest contains, the return format, error conditions, or authentication requirements. For a tool that likely returns complex manifest data, this leaves too much unspecified.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all four parameters (digest, registry, repository, tag) with basic descriptions. The description adds no additional parameter semantics beyond what's in the schema, such as format requirements or relationships between parameters (e.g., tag vs digest usage).
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('fetch') and target ('manifest of a container image or an OCI artifact'), providing a specific verb+resource combination. However, it doesn't explicitly distinguish this tool from its siblings like 'fetch_blob' or 'parse_reference', which likely operate on different aspects of container artifacts.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. It doesn't mention prerequisites, typical use cases, or how it differs from sibling tools like 'fetch_blob' (which might retrieve different artifact components) or 'parse_reference' (which might handle reference parsing).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_referrersC
List referrers of a container image or an OCI artifact.
| Name | Required | Description | Default |
|---|---|---|---|
| digest | No | manifest digest | |
| registry | Yes | registry name | |
| repository | Yes | repository name | |
| tag | No | tag name |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It states the action 'List' but does not describe traits like whether this is a read-only operation, if it requires authentication, rate limits, or what the output format might be. This leaves significant gaps in understanding how the tool behaves.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that directly states the tool's purpose without any wasted words. It is appropriately sized and front-loaded, making it easy to grasp quickly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity of listing referrers with 4 parameters and no output schema, the description is incomplete. It lacks details on behavioral traits, usage context, and output expectations, which are crucial for an AI agent to invoke the tool correctly without annotations or output schema support.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all parameters (digest, registry, repository, tag) with descriptions. The description does not add any meaning beyond this, such as explaining relationships between parameters or usage examples, but it doesn't need to compensate for low coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'List' and the resource 'referrers of a container image or an OCI artifact', making the purpose specific and understandable. However, it does not explicitly differentiate from sibling tools like 'list_tags' or 'list_repositories', which might handle similar listing operations but for different resources, so it misses full sibling distinction.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. It does not mention prerequisites, context, or exclusions, such as when to prefer 'list_tags' for tag listings or 'fetch_manifest' for detailed artifact data, leaving usage unclear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_repositoriesC
List repositories of a container registry.
| Name | Required | Description | Default |
|---|---|---|---|
| registry | Yes | registry name |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It states the tool lists repositories but doesn't describe return format, pagination, error conditions, authentication needs, or rate limits. This leaves significant gaps for a tool that likely interacts with external systems.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence with zero waste. It's appropriately sized for a simple tool and front-loads the core purpose without unnecessary elaboration.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no annotations and no output schema, the description is incomplete. It doesn't explain what the tool returns (e.g., list structure, repository details), error handling, or behavioral traits like pagination. For a tool with external dependencies, this leaves the agent under-informed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents the single 'registry' parameter. The description doesn't add any meaning beyond what the schema provides (e.g., format examples, constraints, or context about registry selection). Baseline 3 is appropriate when the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('List') and resource ('repositories of a container registry'), making the tool's purpose immediately understandable. However, it doesn't explicitly differentiate from sibling tools like 'list_tags' or 'list_wellknown_registries', which prevents a perfect score.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided about when to use this tool versus alternatives. The description doesn't mention prerequisites, context, or comparisons with sibling tools like 'list_tags' (which might list tags within a repository) or 'list_wellknown_registries' (which might list registries themselves).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_tagsC
List tags in a repository of a container registry.
| Name | Required | Description | Default |
|---|---|---|---|
| registry | Yes | registry name | |
| repository | Yes | repository name |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It only states the basic action without mentioning any behavioral traits such as pagination, rate limits, authentication requirements, or what the output format might be. This is a significant gap for a tool with no annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that directly states the tool's purpose without any unnecessary words. It is appropriately sized and front-loaded, making it easy to parse quickly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the lack of annotations and output schema, the description is incomplete. It fails to address key contextual aspects like what the output looks like, any limitations (e.g., pagination), or behavioral traits, which are crucial for an agent to use the tool effectively in a real-world scenario.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema description coverage is 100%, with both parameters ('registry' and 'repository') clearly documented in the schema. The description adds no additional meaning beyond what the schema provides, such as examples or constraints, so it meets the baseline of 3 for adequate but minimal value.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('List tags') and the target resource ('in a repository of a container registry'), which is specific and unambiguous. It doesn't explicitly differentiate from sibling tools like 'list_repositories' or 'list_referrers', but the resource scope is clear enough to infer distinction.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives like 'list_repositories' or 'list_referrers'. It states what it does but offers no context on prerequisites, typical use cases, or exclusions, leaving the agent to infer usage from the tool name alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_wellknown_registriesB
List well-known public registries with catalog support.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden for behavioral disclosure. It states what the tool does but doesn't describe behavioral traits like whether this is a read-only operation, what format the output takes, if there are rate limits, or authentication requirements. The description is minimal and lacks operational context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence with zero waste. It's appropriately sized for a simple tool with no parameters and gets straight to the point without unnecessary elaboration.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (no parameters, no annotations, no output schema), the description is complete enough to understand the basic purpose. However, for a list operation in a registry context, it could benefit from more context about what 'well-known public registries' means or what 'catalog support' entails, especially with sibling tools that might overlap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters with 100% schema description coverage, so the schema already fully documents the input (none required). The description doesn't need to compensate for any parameter gaps, and baseline for zero parameters is 4. The description appropriately doesn't discuss parameters since there are none.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('List') and target resource ('well-known public registries with catalog support'), providing a specific verb+resource combination. However, it doesn't explicitly differentiate from sibling tools like 'list_repositories' or 'list_tags', which could have overlapping domains in a registry context.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives like 'list_repositories' or 'list_tags'. There's no mention of context, prerequisites, or exclusions, leaving the agent to infer usage from the tool name alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
parse_referenceB
Parse a reference string into its components of registry, repository, tag, and digest.
| Name | Required | Description | Default |
|---|---|---|---|
| reference | Yes | reference string |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It describes the parsing action but lacks behavioral details such as error handling (e.g., for invalid references), performance characteristics, or output format specifics. This is a significant gap for a tool with no annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that front-loads the purpose and lists key components without waste. Every word contributes to understanding the tool's function, making it appropriately sized and well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's low complexity (one parameter, no output schema, no annotations), the description is minimally adequate. It covers the basic purpose but lacks details on behavior and usage context. Without annotations or output schema, more completeness would be beneficial, but it meets the minimum for a simple parsing tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with the single parameter 'reference' documented as a 'reference string'. The description adds value by specifying what the parsing outputs (registry, repository, tag, digest), but does not provide additional semantic context beyond what the schema implies. Baseline 3 is appropriate given high schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the specific action ('parse') and the resource ('reference string'), and it explicitly lists the output components (registry, repository, tag, digest), which distinguishes it from sibling tools like fetch_blob or list_tags that perform different operations on similar resources.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. It does not mention prerequisites, such as needing a valid reference string, or compare it to sibling tools like fetch_manifest, which might involve parsing. Usage is implied but not explicitly stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
7 tool updates
v1.0.0- First observed
fetch_blob - First observed
fetch_manifest - First observed
list_referrers - First observed
list_repositories - First observed
list_tags - First observed
list_wellknown_registries - First observed
parse_reference
TDQS
Each tool has a clearly distinct purpose with no overlap: fetch_blob retrieves specific blobs, fetch_manifest gets manifests, list_referrers shows referrers, list_repositories lists repositories, list_tags lists tags, list_wellknown_registries lists registries, and parse_reference parses reference strings. The descriptions make it easy to differentiate between these operations.
All tools follow a consistent verb_noun naming pattern (e.g., fetch_blob, list_repositories, parse_reference) using snake_case throughout. This predictability makes it easy for agents to understand and select the right tool based on the action and resource.
With 7 tools, this server is well-scoped for its purpose of interacting with container registries and OCI artifacts. Each tool serves a specific function, such as fetching, listing, or parsing, without redundancy, making the count appropriate and manageable.
The tool set covers core operations for registry interaction, including fetching, listing, and parsing, which supports common workflows. However, there are minor gaps, such as the lack of tools for pushing or deleting artifacts, which might require workarounds for full lifecycle management.
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Deploy, monitor, and manage your OpenClaw AI assistants via natural language.
Query your team's drift, vulnerability, and upgrade data from any AI assistant. OAuth 2.1, 51 tools.
The Cortex MCP server provides read-only access to real-time engineering context from the Cortex developer portal, allowing AI coding assistants to answer natural language questions about your organization's catalog (microservices, libraries, domains, teams, infrastructure), scorecards (engineering standards and best practices), initiatives (goals and deadlines), and Engineering Intelligence metrics. It includes tools for querying documentation, tracking personal entities, and accessing AI-assisted insights across the entire Cortex ecosystem.
Ask data questions in natural language. Get SQL, insights, and charts from your databases.
Related MCP Servers
- AlicenseBqualityDmaintenanceEnables natural language interaction with Docker commands and operations. Supports container management, image operations, system information, and Docker Compose through conversational requests.141861MIT
- AlicenseNot gradedqualityDmaintenanceEnables natural-language access to Oracle Cloud Infrastructure resources, allowing users to query compute instances, OKE clusters, networking, and Object Storage via MCP tools.MIT
- FlicenseNot gradedqualityDmaintenanceEnables AI assistants to manage and analyze containers across Docker and Podman through natural language, providing unified inspection, monitoring, and diagnostics.3-
- AlicenseBqualityDmaintenanceEnables AI assistants to manage Docker containers and Kubernetes resources through natural language, supporting operations like container management, image building, and pod/deployment/service management.9MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/shizhMSFT/oras-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server