
XenMCP Docker agent
Read-only MCP server for one Docker host: containers, inspect, logs, stats, events. No exec.
- GitHub stars
- 4
- tools
- 6
- auth
- Secret needed
- transport
- HTTP
- env vars
- 2
- last updated
- Nov 9, 2026
Tools
6 toolsPublic tool metadata for what this MCP can expose to an agent.
docker_infoDocker version, OS, CPUs, memory, number of containers and images
Docker version, OS, CPUs, memory, number of containers and images
No parameter schema in public metadata yet.
list_containersName, image, state, uptime, ports, compose project
Name, image, state, uptime, ports, compose project
No parameter schema in public metadata yet.
inspect_containerState, exit code, OOM kill, restarts, health check, limits, log driver, mounts, networks — never environment variables or command arguments
State, exit code, OOM kill, restarts, health check, limits, log driver, mounts, networks — never environment variables or command arguments
No parameter schema in public metadata yet.
container_logsLast lines, a time window (since / until: 15m, 6h, 2d or an ISO time), stdout or stderr only, text or regex search; at most 500 lines per call
Last lines, a time window (since / until: 15m, 6h, 2d or an ISO time), stdout or stderr only, text or regex search; at most 500 lines per call
No parameter schema in public metadata yet.
container_statsCPU, memory, network, processes right now
CPU, memory, network, processes right now
No parameter schema in public metadata yet.
recent_eventsstart, stop, die (with exit code), kill, OOM, restart, health status — up to 7 days
start, stop, die (with exit code), kill, OOM, restart, health status — up to 7 days
No parameter schema in public metadata yet.
Sponsors
Configuration
XENMCP_AGENT_KEY*secretKey callers must send as Authorization: Bearer (at least 32 characters)
XENMCP_ALLOW_IPSAddresses or CIDRs allowed to call the agent, comma-separated (default: XenMCP's address)
Readme
XenMCP Docker agent
A small, read-only MCP server for the containers on one Docker host. Run it next to your containers, put it behind your reverse proxy, and connect it to Claude, Cursor or VS Code through XenMCP: every person signs in on their own (OAuth), access can be revoked at any time, and every call is in the journal.
It can see, never change:
| Tool | What it does |
|---|---|
docker_info | Docker version, OS, CPUs, memory, number of containers and images |
list_containers | Name, image, state, uptime, ports, compose project |
inspect_container | State, exit code, OOM kill, restarts, health check, limits, log driver, mounts, networks — never environment variables or command arguments |
container_logs | Last lines, a time window (since / until: 15m, 6h, 2d or an ISO time), stdout or stderr only, text or regex search; at most 500 lines per call |
container_stats | CPU, memory, network, processes right now |
recent_events | start, stop, die (with exit code), kill, OOM, restart, health status — up to 7 days |
Details
- Repository
- github.com/xenmcp/docker-agent
- Website
- xenmcp.com/catalog/docker
- Categories
- AI & LLM Tools, Cloud & Infrastructure
- Package
ghcr.io/xenmcp/docker-agent:1.0.1- Transport
- HTTP
- Auth
- Required
- Registry
- MCP registry, active