dockhand-mcp
by tyler-rich
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| DOCKHAND_URL | Yes | Required. e.g. https://dockhand.example.test. Must be absolute; scheme https unless DOCKHAND_ALLOW_HTTP=true. | |
| DOCKHAND_TOKEN | No | dh_ API token of a dedicated DockHand user. Required unless DockHand auth is disabled. | |
| DOCKHAND_MCP_BIND | No | Bind address. | 127.0.0.1 |
| DOCKHAND_MCP_PATH | No | Path. | /mcp |
| DOCKHAND_MCP_PORT | No | Port. | 8080 |
| DOCKHAND_CA_BUNDLE | No | PEM path for private CAs. | |
| DOCKHAND_MCP_TOKEN | No | Required in bearer mode. ≥32 bytes of entropy enforced. | |
| DOCKHAND_ALLOW_HTTP | No | Boolean (true/false, 1/0, yes/no, on/off). When not true, an http:// DOCKHAND_URL fails startup. | false |
| DOCKHAND_TOKEN_FILE | No | Alternative to DOCKHAND_TOKEN: path to a file containing the token. | |
| DOCKHAND_MCP_PROFILE | No | One of read-only, operator, admin. | read-only |
| DOCKHAND_TLS_INSECURE | No | Disables verification. WARN at startup. | false |
| DOCKHAND_MCP_AUTH_MODE | No | bearer, oauth, or none. | bearer |
| DOCKHAND_MCP_LOG_LEVEL | No | Log level. | info |
| DOCKHAND_MCP_TRANSPORT | No | http or stdio. | http |
| DOCKHAND_MCP_GUARDRAILS | No | strict or warn. | strict |
| DOCKHAND_MCP_LOG_FORMAT | No | Log format. | json |
| DOCKHAND_MCP_TOKEN_FILE | No | Alternative to DOCKHAND_MCP_TOKEN: path to a file containing the token. | |
| DOCKHAND_MCP_MAX_TIMEOUT | No | Seconds, for wait=true. | 300 |
| DOCKHAND_MCP_TRUST_PROXY | No | Honour X-Forwarded-For for rate limiting. | false |
| DOCKHAND_MCP_CONFIRM_MODE | No | auto, elicitation, or param. | auto |
| DOCKHAND_MCP_ALLOWED_HOSTS | No | Host-header allow-list (DNS rebinding). Add your public hostname. | localhost,127.0.0.1 |
| DOCKHAND_MCP_CHALLENGE_KEY | No | HMAC key for elicitation challenges. If unset, random 32-byte key generated at startup. | |
| DOCKHAND_MCP_DISABLE_TOOLS | No | Comma list of tool names to remove. | |
| DOCKHAND_MCP_ALLOWED_ORIGINS | No | Origin allow-list. | |
| DOCKHAND_MCP_DEFAULT_TIMEOUT | No | Seconds, for wait=true. | 60 |
| DOCKHAND_DEFAULT_ENVIRONMENT_ID | No | Makes environment_id optional in tools. | |
| DOCKHAND_MCP_CHALLENGE_KEY_FILE | No | Alternative to DOCKHAND_MCP_CHALLENGE_KEY: path to a file containing the key. | |
| DOCKHAND_MCP_RATE_LIMIT_PER_MIN | No | Per client IP. | 120 |
| DOCKHAND_MCP_DESTRUCTIVE_PER_MIN | No | Per-principal destructive-call rate limit. | 10 |
| DOCKHAND_MCP_GUARDRAIL_ALLOW_BIND | No | Comma list of extra bind-mount source prefixes to allow. | |
| DOCKHAND_MCP_ALLOW_UNAUTHENTICATED | No | Required to be true for AUTH_MODE=none over HTTP; additionally bind must be loopback. | false |
| DOCKHAND_MCP_I_UNDERSTAND_ADMIN_OVER_INSECURE_TLS | No | Deliberately ugly escape hatch; see SECURITY §6. | false |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo issues