"Docker" matching MCP servers:

Enables local LLM agents to inspect Docker containers and optionally perform guarded restarts through MCP, with read-only defaults, credential redaction, canonical ID checks, denylists, and bounded daemon timeouts. It provides secure, zero-trust Docker daemon access for MCP clients.

Audits docker-compose.yml files for security misconfigurations, providing severity ratings, remediation text, and YAML fix snippets for AI agents.

AgentAvow scans any MCP server, package (npm/PyPI/crates/Docker/Hugging Face), or GitHub repo and returns a signed, offline-recomputable 0–100 trust score with a plain safe / needs-review verdict. Authless and read-only, no account.

Guardrail proxy for AI agents on SQL Server. Each statement runs as the caller's own login, a T-SQL parser blocks dangerous statements, and every statement is audited. Local stdio mode or a central Docker service.

Local-first MCP proxy with BM25 tool discovery, quarantine security, Docker isolation, OAuth support, activity logging, and web UI. Routes multiple upstream MCP servers through a single endpoint.

Enables AI assistants to monitor, analyze, and configure OWASP ModSecurity CRS via Docker, with tools for overview, drill-down, and rule/IP management.

Enables AI assistants to execute malware analysis tools on a REMnux system via Docker, SSH, or local connections. It provides automated file-type analysis, structured tool discovery, and security guardrails for streamlined malware investigation.

Enables agents to validate Dockerfiles for build-breaking syntax errors, risky patterns like root users and secrets in ENV/ARG, and cache-order problems, returning every finding with its line and a fix. It also verifies referenced container images against public registries, reporting tag existence, digests to pin, supported platforms, last rebuild time, and end-of-life status with an upgrade tag.

Enables AI assistants to perform vulnerability scanning on Docker/OCI images, check CVE details, analyze licenses, and compare scan results via ScanRook.

The safety gate between AI agents and your servers: 25 typed, policy-checked tools for services, logs, Docker, disk, ports and nginx, with human approval for changes and a hash-chained audit log.

Provides access to 20+ Kali Linux penetration testing tools through isolated Docker containers, enabling network scanning, vulnerability assessment, password cracking, web security testing, and forensics through natural language commands.

Provides a set of MCP tools to clone and analyze arbitrary MCP server repositories, run static and dynamic security probes in isolated Docker containers, and produce vulnerability verdicts with a human-in-the-loop approval step before filing public reports.

Enables users to audit Dockerfiles for container-security anti-patterns, including missing USER, baked-in secrets, curl | sh / wget | bash, unpinned base images, and ADD with remote URLs. It parses Dockerfile structure to return risk levels and actionable fixes.

Enables AI assistants to perform sophisticated static code analysis using Joern's Code Property Graph technology. Supports multi-language analysis, security vulnerability detection, and code quality assessment through isolated Docker environments.

Enables AI assistants to perform advanced database operations against a PocketBase instance, including collection and schema management, record CRUD with filtering, pagination and relationship expansion, user authentication and account creation, and database backups. It connects over stdio with configurable URL and admin credentials, supporting local, VS Code, and Docker deployments.

Enables MCP clients such as Claude Code and Copilot Studio to read, and when permitted write or delete, records across every documented resource of the IT Glue API, while password-related data is always refused and stripped. Runs in Docker or over stdio with configurable read/write/delete policies, per-organisation write allow-lists, restricted-record withholding, and Microsoft Entra ID sign-in.

Enables AI assistants to inspect, audit and operate Docker through Arcane's authenticated HTTPS API using one dedicated, revocable key, with read and change operations separated so each modification can be approved individually. Change operations are validated against a reviewed baseline, and a read-only audit tool produces a ranked security and hygiene report covering privileged containers, socket mounts, unpinned tags and pending updates.

A security-hardened, containerized MCP server framework that provides superior isolation and enterprise-grade security through Docker containers. Enables secure MCP command execution with comprehensive diagnostics, plugin architecture, and production-ready features like SSL/TLS and rate limiting.

Enables MCP clients to manage Tines cases via the Cases v2 API, supporting create, read, update, close, and comment operations. Runs in a container via podman/docker and defaults to read-only for safety.

Self-hosted MCP governance gateway that aggregates 150+ tools behind policy profiles (strict/balanced/dev) with a per-call audit trail. Python 3.12/FastAPI, Docker-deployable, built for regulated environments that need observability over agent tool calls.