Which integrations are available for this server?

Provides tools for managing Docker resources such as containers, images, volumes, networks, and Compose stacks in a Dockhand environment. Provides tools for managing git-backed Compose stacks, including listing, syncing, and deploying them.

How do I use dockhand-mcp?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@dockhand-mcp List all containers in the production environment." That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

dockhand-mcp

by craibo

Overview Schema Related Servers Score Discussions

TypeScript

Remote

dockhand-mcp

MCP (Model Context Protocol) sidecar server for Dockhand (GitHub). Exposes Dockhand's container, image, volume, network, and stack management as MCP tools over Streamable HTTP, so MCP clients (Claude Desktop, Claude Code, etc.) can manage Docker resources through Dockhand.

This is a standalone service — it does not modify Dockhand itself, and calls Dockhand's existing REST API using a Dockhand API token.

Configuration

Var	Required	Description
`DOCKHAND_URL`	yes	Base URL of the Dockhand instance, e.g. `http://dockhand:3000`
`DOCKHAND_API_TOKEN`	one of these two	Dockhand API token (create one in Dockhand under Profile → API tokens)
`DOCKHAND_API_TOKEN_FILE`	one of these two	Path to a file/Docker secret containing the token
`MCP_AUTH_TOKEN`	yes	Shared secret required by MCP clients calling this sidecar
`MCP_ALLOWED_HOSTS`	no	Comma-separated list of exact hostnames to allow via DNS-rebinding host-header validation. Unset by default — no host filtering is applied, and MCP_AUTH_TOKEN remains the primary access-control gate.
`DOCKHAND_MCP_READONLY`	no (default `false`)	Set `true` to only register read/list/inspect tools
`DOCKHAND_MCP_ENABLE_BACKUPS`	no (default `false`)	Set `true` to register backup config/snapshot tools
`DOCKHAND_MCP_ENABLE_USERS`	no (default `false`)	Set `true` to register user and role tools
`DOCKHAND_MCP_ENABLE_REGISTRIES`	no (default `false`)	Set `true` to register the registry listing tool
`DOCKHAND_MCP_ENABLE_VULNERABILITIES`	no (default `false`)	Set `true` to register vulnerability listing and scan tools
`DOCKHAND_MCP_ENABLE_GIT`	no (default `false`)	Set `true` to register git-backed stack tools
`DOCKHAND_MCP_ENABLE_SCHEDULES`	no (default `false`)	Set `true` to register schedule tools
`PORT`	no (default `8787`)	Port the MCP endpoint listens on

Related MCP server: rancher-mcp

Running

docker build -t dockhand-mcp .
docker run -p 8787:8787 \
  -e DOCKHAND_URL=http://dockhand:3000 \
  -e DOCKHAND_API_TOKEN=dh_... \
  -e MCP_AUTH_TOKEN=... \
  dockhand-mcp

See docker-compose.example.yaml for running alongside Dockhand itself.

On startup, the sidecar checks connectivity to DOCKHAND_URL by calling GET /api/environments and logs the result, along with the minimum supported Dockhand version. A failed check is logged as an error but does not prevent the server from starting — Dockhand may simply not be ready yet — so tool calls will fail individually with clear errors until Dockhand is reachable. Dockhand does not expose its own app version through a REST endpoint, so the minimum-version notice is informational rather than actively enforced.

MCP endpoint

POST /mcp — Streamable HTTP MCP endpoint. Requires Authorization: Bearer <MCP_AUTH_TOKEN>.

GET /health — unauthenticated liveness check.

Client configuration

Example .mcp.json for Claude Code (or ~/.claude.json for a user-scoped config), pointing at a deployed sidecar:

{
  "mcpServers": {
    "dockhand-mcp": {
      "type": "http",
      "url": "https://dockhand-mcp.example.com/mcp",
      "headers": {
        "Authorization": "Bearer ${MCP_AUTH_TOKEN}"
      }
    }
  }
}

Equivalent CLI command:

claude mcp add dockhand-mcp --transport http https://dockhand-mcp.example.com/mcp --header "Authorization: Bearer ${MCP_AUTH_TOKEN}"

${MCP_AUTH_TOKEN} expands from the environment Claude Code runs in — set it to the same value configured on the sidecar, rather than hardcoding the token in the config file.

Tools

Every tool except list_environments, list_users, get_user, list_roles, list_registries, and list_schedules requires an environmentId (or an id scoped to a specific stored resource) — call list_environments first to discover valid environment IDs.

Mutating tools are also disabled whenever DOCKHAND_MCP_READONLY=true, regardless of the domain toggle below.

Core (always registered — no toggle required)

Tool	Type	Description
`list_environments`	Read-only	List all Dockhand environments (Docker hosts). Call this first to discover valid `environmentId` values for other tools.
`list_containers`	Read-only	List containers in a Dockhand environment.
`get_container`	Read-only	Get full inspect details for a single container.
`get_container_logs`	Read-only	Get recent logs for a container.
`list_images`	Read-only	List images in a Dockhand environment.
`list_volumes`	Read-only	List volumes in a Dockhand environment.
`list_networks`	Read-only	List networks in a Dockhand environment.
`list_stacks`	Read-only	List Compose stacks in a Dockhand environment.
`start_container`	Mutating	Start a stopped container.
`stop_container`	Mutating	Stop a running container.
`restart_container`	Mutating	Restart a container.
`remove_container`	Mutating	Remove (delete) a container.
`pull_image`	Mutating	Pull an image from a registry. Blocks until the pull completes or fails.
`remove_image`	Mutating	Remove (delete) an image.
`remove_volume`	Mutating	Remove (delete) a volume.
`deploy_stack`	Mutating	Deploy (up) a Compose stack. Blocks until the deploy completes or fails.
`stop_stack`	Mutating	Stop (down) a Compose stack. Blocks until it completes or fails.

Extended (each domain off by default — set its toggle to `true` to enable)

Domain	Toggle	Status	Tool	Type	Description
Backups	`DOCKHAND_MCP_ENABLE_BACKUPS`	disabled by default	`list_backup_configs`	Read-only	List configured backups (stack or volume backup jobs) in Dockhand.
Backups	`DOCKHAND_MCP_ENABLE_BACKUPS`	disabled by default	`list_snapshots`	Read-only	List backup snapshots, optionally scoped to a single backup config.
Backups	`DOCKHAND_MCP_ENABLE_BACKUPS`	disabled by default	`run_backup_config`	Mutating	Manually trigger a backup config to run now. Blocks until the backup completes or fails.
Users/Roles	`DOCKHAND_MCP_ENABLE_USERS`	disabled by default	`list_users`	Read-only	List all Dockhand users.
Users/Roles	`DOCKHAND_MCP_ENABLE_USERS`	disabled by default	`get_user`	Read-only	Get details for a single Dockhand user.
Users/Roles	`DOCKHAND_MCP_ENABLE_USERS`	disabled by default	`list_roles`	Read-only	List all Dockhand roles. Requires an Enterprise license (returns an error on free-tier instances with auth enabled).
Registries	`DOCKHAND_MCP_ENABLE_REGISTRIES`	disabled by default	`list_registries`	Read-only	List configured container registries in Dockhand. Credentials are never included — only a `hasCredentials` flag.
Vulnerabilities	`DOCKHAND_MCP_ENABLE_VULNERABILITIES`	disabled by default	`list_vulnerabilities`	Read-only	List aggregated vulnerability findings for an environment, with optional filtering and pagination.
Vulnerabilities	`DOCKHAND_MCP_ENABLE_VULNERABILITIES`	disabled by default	`scan_all_vulnerabilities`	Mutating	Scan every image in an environment for vulnerabilities. Blocks until the batch scan completes.
Git deploy	`DOCKHAND_MCP_ENABLE_GIT`	disabled by default	`list_git_stacks`	Read-only	List git-backed Compose stacks in Dockhand.
Git deploy	`DOCKHAND_MCP_ENABLE_GIT`	disabled by default	`sync_git_stack`	Mutating	Pull the latest commit for a git-backed stack from its remote, without redeploying.
Git deploy	`DOCKHAND_MCP_ENABLE_GIT`	disabled by default	`deploy_git_stack`	Mutating	Sync and redeploy a git-backed stack. Blocks until the deploy completes or fails. Check the `success` field in the result — a failed deploy is reported as a normal result, not a tool error.
Schedules	`DOCKHAND_MCP_ENABLE_SCHEDULES`	disabled by default	`list_schedules`	Read-only	List all active Dockhand schedules (container auto-updates, git stack syncs, backups, and system jobs).
Schedules	`DOCKHAND_MCP_ENABLE_SCHEDULES`	disabled by default	`run_schedule`	Mutating	Manually trigger a schedule to run now.
Schedules	`DOCKHAND_MCP_ENABLE_SCHEDULES`	disabled by default	`toggle_schedule`	Mutating	Enable or disable a schedule. Flips its current enabled state — check the returned `enabled` field to see the new state.

To enable a domain, set its toggle to true in the sidecar's environment (see Configuration), e.g.:

docker run -p 8787:8787 \
  -e DOCKHAND_URL=http://dockhand:3000 \
  -e DOCKHAND_API_TOKEN=dh_... \
  -e MCP_AUTH_TOKEN=... \
  -e DOCKHAND_MCP_ENABLE_BACKUPS=true \
  -e DOCKHAND_MCP_ENABLE_GIT=true \
  dockhand-mcp

These six domains intentionally wrap only a minimal slice of Dockhand's REST surface for each area (no user/role/registry/git-credential CRUD) — full CRUD for these domains is out of scope, consistent with the project's minimal, LLM-friendly tool surface.

Development

npm install
npm run dev     # watch mode
npm test        # run tests
npm run build   # compile to dist/

This server cannot be installed

license - permissive license

quality - not tested

maintenance

How are these scores calculated?

Maintenance

–Maintainers

–Response time

0dRelease cycle

6Releases (12mo)

Commit activity

Resources

GitHub Repository

Need Help?

Related Servers

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

Docker MCP
Virtualization Command Line
Isak-Landin
A
license
-
quality
D
maintenance
Enables remote Docker management over SSH via a local MCP server, providing tools to manage containers, images, Compose, and system resources.
Updated 3 months ago (2026-05-03 02:20 UTC)
1
GPL 3.0
rancher-mcp
Cloud Platforms Developer Tools
Jasonrve
A
license
-
quality
B
maintenance
A standalone MCP server that exposes Rancher-side tools, forwards Authorization headers or uses configured credentials, and supports HTTP and stdio transports.
Updated a month ago (2026-07-06 15:22 UTC)
MIT
hermes-fleet-mcp
Virtualization Command Line
MatsWeckhorst
F
license
-
quality
C
maintenance
MCP server that routes Docker operations across a fleet of Docker hosts via the Scotty API.
Updated a month ago (2026-07-12 12:48 UTC)
rarcane
Virtualization Developer Tools
dinglebear-ai
A
license
-
quality
A
maintenance
MCP server for managing Docker containers, images, networks, volumes, and Compose projects via Arcane, exposing a single 'arcane' tool for read/write operations over stdio or HTTP.
Updated a day ago (2026-08-11 13:38 UTC)
2
AGPL 3.0

View all related MCP servers

Related MCP Connectors

server
An MCP server that let you interact with Cycloid.io Internal Development Portal and Platform
Backtest360
MCP server exposing the Backtest360 engine API as tools for AI agents.
postman-mcp-server
A basic MCP server to operate on the Postman API.

View all MCP Connectors

Latest Blog Posts

Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)
By Om-Shree-0709 on July 25, 2026.
mcp
Agent Identity
OAuth 2.1
Your AI Chatbot Just Exposed Your CEO's Salary to an Intern
By Om-Shree-0709 on July 2, 2026.
Agent Identity
MCP Security
OAuth Delegation
Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)
By Om-Shree-0709 on June 30, 2026.
Agentic Ai
Prompt Injection
WebAssembly

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/craibo/dockhand-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server

dockhand-mcp

Configuration

Running

MCP endpoint

Client configuration

Tools

Core (always registered — no toggle required)

Extended (each domain off by default — set its toggle to true to enable)

Development

Maintenance

Resources

Looking for Admin?

Related MCP Servers

Docker MCP

rancher-mcp

hermes-fleet-mcp

rarcane

Related MCP Connectors

Latest Blog Posts

MCP directory API

Extended (each domain off by default — set its toggle to `true` to enable)