x=hub

your toolset

    build deployment
    sign in

    docker

    projectother official build verified scanned
    io.github.decionis/docker · v
    deploy just this

    Govern consequential AI agent actions in Docker with deterministic policy, human approval, and signed Decision Dossiers.

    run it

    on your own machines, one way per deploy method
    verified 2026-10-17 · r-20261017T204021Z-b2832e59a734
    # once, as root:
    docker build -t mcp-local/docker:439c8ad3270cc13c15ba31a3bf62a6ca014787c2 https://github.com/decionis/docker.git#439c8ad3270cc13c15ba31a3bf62a6ca014787c2:mcp-server
    
    #!/usr/bin/env bash
    # docker (io.github.decionis/docker), recipe docker (worker, verified 2026-10-17 on v, run r-20261017T204021Z-b2832e59a734).
    # Generated by Hub for toolset "my-agent"; started by mcp-my-agent-docker.service.
    set -euo pipefail
    export HOST=127.0.0.1 PORT=8101
    exec docker run --rm --name mcp-my-agent-docker -p 127.0.0.1:${PORT}:8000 --env-file /etc/mcp/my-agent.env mcp-local/docker:439c8ad3270cc13c15ba31a3bf62a6ca014787c2
    
    [Unit]
    Description=MCP server docker (toolset my-agent), generated by Hub
    After=network-online.target docker.service
    Wants=network-online.target
    
    [Service]
    Type=simple
    User=mcp
    Group=mcp
    SupplementaryGroups=docker
    EnvironmentFile=/etc/mcp/my-agent.env
    Environment=HOME=/var/lib/mcp/docker
    WorkingDirectory=/var/lib/mcp/docker
    ExecStart=/opt/mcp/my-agent/bin/docker.sh
    Restart=on-failure
    RestartSec=5
    NoNewPrivileges=true
    ProtectSystem=strict
    ProtectHome=true
    PrivateTmp=true
    ReadWritePaths=/var/lib/mcp/docker
    
    [Install]
    WantedBy=multi-user.target
    
    verified 2026-10-17 · r-20261017T204021Z-b2832e59a734
    docker build -t docker https://github.com/decionis/docker.git#439c8ad3270cc13c15ba31a3bf62a6ca014787c2:mcp-server
    docker run --rm -p 127.0.0.1:8101:8000 docker
    
    verified 2026-10-17 · r-20261017T204021Z-b2832e59a734
    # Generated by Hub for toolset "my-agent" (2026-10-18T07:20:02+00:00).
    # Each package server runs behind a stdio->HTTP bridge and listens on localhost only.
    #   cp .env.example .env    # fill the ${VAR}s
    #   docker compose up -d && bash smoke.sh
    # Remote servers are not here: clients reach them directly (see clients/).
    name: mcp-my-agent
    services:
      docker:
        build:
          context: https://github.com/decionis/docker.git#439c8ad3270cc13c15ba31a3bf62a6ca014787c2:mcp-server
        ports:
        - 127.0.0.1:8101:8000
        restart: unless-stopped
    volumes:
      npm-cache: {}
      uv-cache: {}
    
    verified 2026-10-17 · r-20261017T204021Z-b2832e59a734
    # Generated by Hub for toolset "my-agent" (2026-10-18T07:20:02+00:00).
    #   kubectl create namespace mcp
    #   kubectl -n mcp create secret generic mcp-credentials --from-env-file=.env
    #   kubectl apply -f kubernetes.yaml
    # Services are cluster-internal: <name>.mcp.svc.cluster.local:8000/mcp. Put an ingress
    # with auth in front before exposing any of them.
    apiVersion: v1
    kind: Namespace
    metadata:
      name: mcp
    ---
    apiVersion: apps/v1
    kind: Deployment
    metadata:
      name: docker
      namespace: mcp
      labels: &id001
        app: docker
    spec:
      replicas: 1
      selector:
        matchLabels: *id001
      template:
        metadata:
          labels: *id001
        spec:
          containers:
          - name: docker
            image: CHANGE_ME
            ports:
            - containerPort: 8000
              name: http
            env: []
    ---
    apiVersion: v1
    kind: Service
    metadata:
      name: docker
      namespace: mcp
    spec:
      selector:
        app: docker
      ports:
      - port: 8000
        targetPort: http
        name: http
    
    verified 2026-10-17 · r-20261017T204021Z-b2832e59a734
    # Generated by Hub for toolset "my-agent" (2026-10-18T07:20:02+00:00).
    # Credentials come from the Secret 'mcp-credentials' (kubectl create secret generic ... --from-env-file=.env).
    # Each server under `servers` is one Deployment + Service; the keys after it configure
    # upstream charts a worker verified.
    servers:
      docker:
        enabled: true
        replicas: 1
        port: 8000
        path: /mcp
        container:
          name: docker
          image: CHANGE_ME
          ports:
          - containerPort: 8000
            name: http
          env: []
    
    # helm install my-agent helm/my-agent -n mcp
    

    Scanned github.com/decionis/docker/mcp-server at 439c8ad3270c with [email protected][email protected] on 2026-10-17 before the build: 3 dependencies, 19 known vulnerabilities (14 high, 5 medium), nothing in the code that looks malicious.

    in the cloud

    one click: the provider's deploy form opens filled in, in your own account
    koyeb

    Koyeb builds the repository's Dockerfile from branch main, not commit 439c8ad3270c, the one the worker scanned and built (it takes branches only); change the branch in the form if the default one has another name.

    Clients connect to the service's https://…koyeb.app address plus /mcp.

    cloud run

    Cloud Shell clones the repository, builds its Dockerfile and deploys it to Cloud Run.

    docker: Cloud Shell clones the default branch, not the commit the worker scanned and built (it takes branches only).

    Cloud Run sends requests to $PORT (8080); the recipe expects :8000, so the server has to read PORT, or set the container port on the service afterwards.

    connect to it

    copy what your client needs
    {
      "mcpServers": {
        "docker": {
          "command": "CHANGE_ME",
          "args": []
        }
      }
    }
    #!/usr/bin/env bash
    # Registers every server with Claude Code (run once; `claude mcp list` to check).
    set -euo pipefail
    set -a; [ -f .env ] && source .env; set +a
    claude mcp add docker -- CHANGE_ME
    
    {
      "mcpServers": {
        "docker": {
          "command": "CHANGE_ME",
          "args": []
        }
      }
    }
    {
      "servers": {
        "docker": {
          "type": "stdio",
          "command": "CHANGE_ME",
          "args": []
        }
      }
    }
    name: my-agent
    target: local
    servers:
    - hub: io.github.decionis/docker
    
    • no tested recipe for target 'local' yet: build it from https://github.com/decionis/docker by hand, or wait for the worker

    tools · 3

    • decionis_evaluatecall failedEvaluate a candidate action against the repo's DECIONIS_POLICY.md through the real Decionis protocol evaluator, entirely locally (no network, no credentials, nothing recorded). Call this BEFORE committing, deploying, migrating, or any risky action, and abide by the verdict: allow → proceed; block → do not proceed; review/escalate → stop and involve a human.

      Evaluate a candidate action against the repo's DECIONIS_POLICY.md through the real Decionis protocol evaluator, entirely locally (no network, no credentials, nothing recorded). Call this BEFORE committing, deploying, migrating, or any risky action, and abide by the verdict: allow → proceed; block → do not proceed; review/escalate → stop and involve a human.

      error 2026-10-17 · 1 ms · arguments from the schema · nothing found for the arguments
      pin 1fb7b0936956c7f6a25ab7dda0f55c5ed08f226658d9412d4691f7e0b15682cb
    • decionis_read_policycall failedRead and compile the repo's DECIONIS_POLICY.md governance policy: path, sha256, and the enforceable rules (name, verdict, priority, domain) or compile errors. Use this to learn what this repository allows, blocks, restrains, or escalates.

      Read and compile the repo's DECIONIS_POLICY.md governance policy: path, sha256, and the enforceable rules (name, verdict, priority, domain) or compile errors. Use this to learn what this repository allows, blocks, restrains, or escalates.

      error 2026-10-17 · 4 ms · arguments from the schema · nothing found for the arguments
      pin 636fbe3dfce696f65642b6d13157d8b4626d84ac257e47802144438b006ab440
    • decionis_verdict_helptestedReference for Decionis verdicts (allow/block/restrain/escalate), the rules-block grammar and operators, and how an agent should behave on each verdict.

      Reference for Decionis verdicts (allow/block/restrain/escalate), the rules-block grammar and operators, and how an agent should behave on each verdict.

      called 2026-10-17 · 1 ms · arguments from the schema
      pin 44c7b077f5e2349340c3c7d7bc3fe3d13c5148193db21ed6429f077d9483147d

    runs · 2

    the latest tests of this entry by the hub and its workers, newest first
    dateworkermethodstatussandboxreason
    2026-10-17 20:40 local-mac-vm dockermcp 2025-11-25 ok3 tools gvisor —
    2026-10-17 19:34 local-mac-vm docker failed gvisor docker: sandbox: docker build: ERROR: failed to build: failed to solve: failed to read dockerfile: open Dockerfile: no such file or directory