docker
projectother official build verified scannedGovern consequential AI agent actions in Docker with deterministic policy, human approval, and signed Decision Dossiers.
run it
on your own machines, one way per deploy method# once, as root:
docker build -t mcp-local/docker:439c8ad3270cc13c15ba31a3bf62a6ca014787c2 https://github.com/decionis/docker.git#439c8ad3270cc13c15ba31a3bf62a6ca014787c2:mcp-server
#!/usr/bin/env bash
# docker (io.github.decionis/docker), recipe docker (worker, verified 2026-10-17 on v, run r-20261017T204021Z-b2832e59a734).
# Generated by Hub for toolset "my-agent"; started by mcp-my-agent-docker.service.
set -euo pipefail
export HOST=127.0.0.1 PORT=8101
exec docker run --rm --name mcp-my-agent-docker -p 127.0.0.1:${PORT}:8000 --env-file /etc/mcp/my-agent.env mcp-local/docker:439c8ad3270cc13c15ba31a3bf62a6ca014787c2
[Unit]
Description=MCP server docker (toolset my-agent), generated by Hub
After=network-online.target docker.service
Wants=network-online.target
[Service]
Type=simple
User=mcp
Group=mcp
SupplementaryGroups=docker
EnvironmentFile=/etc/mcp/my-agent.env
Environment=HOME=/var/lib/mcp/docker
WorkingDirectory=/var/lib/mcp/docker
ExecStart=/opt/mcp/my-agent/bin/docker.sh
Restart=on-failure
RestartSec=5
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
ReadWritePaths=/var/lib/mcp/docker
[Install]
WantedBy=multi-user.target
docker build -t docker https://github.com/decionis/docker.git#439c8ad3270cc13c15ba31a3bf62a6ca014787c2:mcp-server docker run --rm -p 127.0.0.1:8101:8000 docker
# Generated by Hub for toolset "my-agent" (2026-10-18T07:20:02+00:00).
# Each package server runs behind a stdio->HTTP bridge and listens on localhost only.
# cp .env.example .env # fill the ${VAR}s
# docker compose up -d && bash smoke.sh
# Remote servers are not here: clients reach them directly (see clients/).
name: mcp-my-agent
services:
docker:
build:
context: https://github.com/decionis/docker.git#439c8ad3270cc13c15ba31a3bf62a6ca014787c2:mcp-server
ports:
- 127.0.0.1:8101:8000
restart: unless-stopped
volumes:
npm-cache: {}
uv-cache: {}
# Generated by Hub for toolset "my-agent" (2026-10-18T07:20:02+00:00).
# kubectl create namespace mcp
# kubectl -n mcp create secret generic mcp-credentials --from-env-file=.env
# kubectl apply -f kubernetes.yaml
# Services are cluster-internal: <name>.mcp.svc.cluster.local:8000/mcp. Put an ingress
# with auth in front before exposing any of them.
apiVersion: v1
kind: Namespace
metadata:
name: mcp
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: docker
namespace: mcp
labels: &id001
app: docker
spec:
replicas: 1
selector:
matchLabels: *id001
template:
metadata:
labels: *id001
spec:
containers:
- name: docker
image: CHANGE_ME
ports:
- containerPort: 8000
name: http
env: []
---
apiVersion: v1
kind: Service
metadata:
name: docker
namespace: mcp
spec:
selector:
app: docker
ports:
- port: 8000
targetPort: http
name: http
# Generated by Hub for toolset "my-agent" (2026-10-18T07:20:02+00:00).
# Credentials come from the Secret 'mcp-credentials' (kubectl create secret generic ... --from-env-file=.env).
# Each server under `servers` is one Deployment + Service; the keys after it configure
# upstream charts a worker verified.
servers:
docker:
enabled: true
replicas: 1
port: 8000
path: /mcp
container:
name: docker
image: CHANGE_ME
ports:
- containerPort: 8000
name: http
env: []
# helm install my-agent helm/my-agent -n mcp
Scanned github.com/decionis/docker/mcp-server at 439c8ad3270c with [email protected][email protected] on 2026-10-17 before the build: 3 dependencies, 19 known vulnerabilities (14 high, 5 medium), nothing in the code that looks malicious.
in the cloud
one click: the provider's deploy form opens filled in, in your own account- koyeb
-
Koyeb builds the repository's Dockerfile from branch main, not commit 439c8ad3270c, the one the worker scanned and built (it takes branches only); change the branch in the form if the default one has another name.
Clients connect to the service's https://…koyeb.app address plus /mcp.
- cloud run
-
Cloud Shell clones the repository, builds its Dockerfile and deploys it to Cloud Run.
docker: Cloud Shell clones the default branch, not the commit the worker scanned and built (it takes branches only).
Cloud Run sends requests to $PORT (8080); the recipe expects :8000, so the server has to read PORT, or set the container port on the service afterwards.
connect to it
copy what your client needs{
"mcpServers": {
"docker": {
"command": "CHANGE_ME",
"args": []
}
}
}
#!/usr/bin/env bash # Registers every server with Claude Code (run once; `claude mcp list` to check). set -euo pipefail set -a; [ -f .env ] && source .env; set +a claude mcp add docker -- CHANGE_ME
{
"mcpServers": {
"docker": {
"command": "CHANGE_ME",
"args": []
}
}
}
{
"servers": {
"docker": {
"type": "stdio",
"command": "CHANGE_ME",
"args": []
}
}
}
name: my-agent target: local servers: - hub: io.github.decionis/docker
- no tested recipe for target 'local' yet: build it from https://github.com/decionis/docker by hand, or wait for the worker
tools · 3
decionis_evaluatecall failedEvaluate a candidate action against the repo's DECIONIS_POLICY.md through the real Decionis protocol evaluator, entirely locally (no network, no credentials, nothing recorded). Call this BEFORE committing, deploying, migrating, or any risky action, and abide by the verdict: allow → proceed; block → do not proceed; review/escalate → stop and involve a human.Evaluate a candidate action against the repo's DECIONIS_POLICY.md through the real Decionis protocol evaluator, entirely locally (no network, no credentials, nothing recorded). Call this BEFORE committing, deploying, migrating, or any risky action, and abide by the verdict: allow → proceed; block → do not proceed; review/escalate → stop and involve a human.
error 2026-10-17 · 1 ms · arguments from the schema · nothing found for the argumentspin 1fb7b0936956c7f6a25ab7dda0f55c5ed08f226658d9412d4691f7e0b15682cbdecionis_read_policycall failedRead and compile the repo's DECIONIS_POLICY.md governance policy: path, sha256, and the enforceable rules (name, verdict, priority, domain) or compile errors. Use this to learn what this repository allows, blocks, restrains, or escalates.Read and compile the repo's DECIONIS_POLICY.md governance policy: path, sha256, and the enforceable rules (name, verdict, priority, domain) or compile errors. Use this to learn what this repository allows, blocks, restrains, or escalates.
error 2026-10-17 · 4 ms · arguments from the schema · nothing found for the argumentspin 636fbe3dfce696f65642b6d13157d8b4626d84ac257e47802144438b006ab440decionis_verdict_helptestedReference for Decionis verdicts (allow/block/restrain/escalate), the rules-block grammar and operators, and how an agent should behave on each verdict.Reference for Decionis verdicts (allow/block/restrain/escalate), the rules-block grammar and operators, and how an agent should behave on each verdict.
called 2026-10-17 · 1 ms · arguments from the schemapin 44c7b077f5e2349340c3c7d7bc3fe3d13c5148193db21ed6429f077d9483147d
runs · 2
the latest tests of this entry by the hub and its workers, newest first| date | worker | method | status | sandbox | reason |
|---|---|---|---|---|---|
| 2026-10-17 20:40 | local-mac-vm | dockermcp 2025-11-25 | ok3 tools | gvisor | — |
| 2026-10-17 19:34 | local-mac-vm | docker | failed | gvisor | docker: sandbox: docker build: ERROR: failed to build: failed to solve: failed to read dockerfile: open Dockerfile: no such file or directory |