Dockerfile Audit
Hadolint-inspired Dockerfile linting that runs inside your MCP client. Six specialized tools let you audit an entire Dockerfile or target specific categories: base image hygiene, instruction safety, security posture, build efficiency, and secret leaks. Every finding reports severity, line number, remediation steps, and a copy-paste fix snippet. Supports both inline content and HTTPS URLs. The catalog covers 18 checks spanning untagged images, root users, chmod 777, curl pipe bash, hardcoded secrets in ENV, and apt/pip cache bloat. Hosted on Apify with pay-per-call metering at two cents per audit. If you review Dockerfiles in Claude Desktop or build container pipelines in n8n, this gives you structured, actionable feedback without leaving the chat.
- tools
- 7
- auth
- Secret needed
- transport
- HTTP
- last updated
- Jun 2, 2026
Tools
7 toolsPublic tool metadata for what this MCP can expose to an agent.
audit_dockerfileRun all checks
Run all checks
No parameter schema in public metadata yet.
check_base_imageFROM/tag/digest/registry checks only
FROM/tag/digest/registry checks only
No parameter schema in public metadata yet.
check_instructionsCMD form, ADD vs COPY, MAINTAINER, etc.
CMD form, ADD vs COPY, MAINTAINER, etc.
No parameter schema in public metadata yet.
check_securityUSER, sudo, chmod 777, curl|bash, hardcoded secrets, HEALTHCHECK
USER, sudo, chmod 777, curl|bash, hardcoded secrets, HEALTHCHECK
No parameter schema in public metadata yet.
check_efficiencyapt cache hygiene, pip caching
apt cache hygiene, pip caching
No parameter schema in public metadata yet.
check_secretsARG with secret-pattern names
ARG with secret-pattern names
No parameter schema in public metadata yet.
list_checksBrowse the full check catalog
Browse the full check catalog
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
Dockerfile Security & Quality Audit
Hadolint-grade Dockerfile audit as an MCP server. 18+ checks across 5 categories, every finding ships with severity, line number, remediation text, and a copy-paste Dockerfile snippet.
Built by Unbearable Labs. Pay-per-event pricing — only billed when a tool is actually called.
Available on
- Apify Actor Store — primary, metered usage (PPE)
- MCPize — pending submission
- MCP.so — pending submission
- PulseMCP — pending submission
- Smithery — pending submission
- Glama — pending submission
Newsletter: Unbearable TechTips Weekly · All Actors: github.com/UnbearableDev
What it does
Point any MCP-capable client (Claude Desktop, Cursor, n8n, Make, Zapier, custom agents) at this server, hand it a Dockerfile, get back a structured report:
Details
- Repository
- github.com/unbearabledev/dockerfile-audit
- Transport
- HTTP
- Auth
- Required
- Registry
- MCP registry, active