docker-mcp-server

The server implements bearer token authentication and supports workspace isolation via an 'Execution-Id' header, enhancing security. Tool filtering via `ALLOWED_TOOLS` environment variable is a good practice for reducing the attack surface. Direct shell command execution is inherently powerful and relies on the trustworthiness of the client (AI agent) and the container's isolated environment. The default `Access-Control-Allow-Origin: *` setting for CORS is broad and should be restricted in production environments. The authentication token is auto-generated and logged to stdout, requiring careful handling in production to prevent exposure. The `docker-compose.yml` explicitly comments out a dangerous `/var/run/docker.sock` mount, indicating awareness of container escape risks.