container-manager-mcp
by Knuckles-Team
Overview
Provides a universal API and AI agent interface for managing Docker and Podman containers, networks, volumes, and Docker Swarm services remotely.
Installation
docker run -d --name container-manager-mcp -p 8004:8004 -e HOST=0.0.0.0 -e PORT=8004 -e TRANSPORT=streamable-http -e AUTH_TYPE=none -e EUNOMIA_TYPE=none knucklessg1/container-manager:latestEnvironment Variables
- HOST
- PORT
- TRANSPORT
- CONTAINER_MANAGER_TYPE
- AUTH_TYPE
- OIDC_CONFIG_URL
- OIDC_CLIENT_ID
- OIDC_CLIENT_SECRET
- OIDC_BASE_URL
- FASTMCP_SERVER_AUTH_JWT_JWKS_URI
- FASTMCP_SERVER_AUTH_JWT_ISSUER
- FASTMCP_SERVER_AUTH_JWT_AUDIENCE
- FASTMCP_SERVER_AUTH_JWT_ALGORITHM
- FASTMCP_SERVER_AUTH_JWT_PUBLIC_KEY
- FASTMCP_SERVER_AUTH_JWT_REQUIRED_SCOPES
- ENABLE_DELEGATION
- AUDIENCE
- DELEGATED_SCOPES
- EUNOMIA_TYPE
- EUNOMIA_POLICY_FILE
Security Notes
The server binds to '0.0.0.0' by default, and 'AUTH_TYPE=none' is the default authentication, making it publicly accessible and highly vulnerable if deployed without proper configuration. Direct access to Docker/Podman daemon sockets ('/var/run/docker.sock') grants root-level control over the host's container runtime. While various authentication methods (JWT, OAuth, OIDC) are available, they require careful configuration. The 'static' auth type contains hardcoded test tokens that should never be used in production. OIDC token delegation, if misconfigured, could lead to privilege escalation. The 'container-manager-agent' communicates with the MCP server via HTTP, which is unencrypted unless an external proxy is used.
Similar Servers
klavis
Develop and deploy AI agents that interact with a wide array of web services (e.g., Gmail, YouTube, LinkedIn, Supabase, Salesforce, Kubernetes) through a standardized Model Context Protocol (MCP), often orchestrated by an intelligent routing layer like Strata.
mcpstore
Orchestrate Microservice Context Protocol (MCP) services and adapt them for integration with various AI frameworks like LangChain, managing tools and their lifecycle.
AgentChat
An AI Agent platform for building, deploying, and managing AI assistants that integrate various tools, Large Language Models (LLMs), knowledge bases (RAG), and Model Context Protocol (MCP) servers.
podman-mcp-server
A Model Context Protocol (MCP) server that enables AI assistants to interact with container runtimes like Podman and Docker for container management tasks.