
Read-only MCP server for one Docker host: containers, inspect, logs, stats, events. No exec.
Public tool metadata for what this MCP can expose to an agent.
docker_infoDocker version, OS, CPUs, memory, number of containers and imagesDocker version, OS, CPUs, memory, number of containers and images
No parameter schema in public metadata yet.
list_containersName, image, state, uptime, ports, compose projectName, image, state, uptime, ports, compose project
No parameter schema in public metadata yet.
inspect_containerState, exit code, OOM kill, restarts, health check, limits, log driver, mounts, networks — never environment variables or command argumentsState, exit code, OOM kill, restarts, health check, limits, log driver, mounts, networks — never environment variables or command arguments
No parameter schema in public metadata yet.
container_logsLast lines, a time window (since / until: 15m, 6h, 2d or an ISO time), stdout or stderr only, text or regex search; at most 500 lines per callLast lines, a time window (since / until: 15m, 6h, 2d or an ISO time), stdout or stderr only, text or regex search; at most 500 lines per call
No parameter schema in public metadata yet.
container_statsCPU, memory, network, processes right nowCPU, memory, network, processes right now
No parameter schema in public metadata yet.
recent_eventsstart, stop, die (with exit code), kill, OOM, restart, health status — up to 7 daysstart, stop, die (with exit code), kill, OOM, restart, health status — up to 7 days
No parameter schema in public metadata yet.
Sponsors
XENMCP_AGENT_KEY*secretKey callers must send as Authorization: Bearer (at least 32 characters)
XENMCP_ALLOW_IPSAddresses or CIDRs allowed to call the agent, comma-separated (default: XenMCP's address)
A small, read-only MCP server for the containers on one Docker host. Run it next to your containers, put it behind your reverse proxy, and connect it to Claude, Cursor or VS Code through XenMCP: every person signs in on their own (OAuth), access can be revoked at any time, and every call is in the journal.
It can see, never change:
| Tool | What it does |
|---|---|
docker_info | Docker version, OS, CPUs, memory, number of containers and images |
list_containers | Name, image, state, uptime, ports, compose project |
inspect_container | State, exit code, OOM kill, restarts, health check, limits, log driver, mounts, networks — never environment variables or command arguments |
container_logs | Last lines, a time window (since / until: 15m, 6h, 2d or an ISO time), stdout or stderr only, text or regex search; at most 500 lines per call |
container_stats | CPU, memory, network, processes right now |
recent_events | start, stop, die (with exit code), kill, OOM, restart, health status — up to 7 days |
ghcr.io/xenmcp/docker-agent:1.0.1