Generates, audits, and tunes Docker Compose stacks inside Claude Code
Detailed security scan evidence is not public for this MCP yet. Public identity, registry metadata, and independently observed protocol inventory remain available.
Installation and connection instructions are shown only when supported by retained package, repository, or endpoint evidence.
Version 0.1.0 declares 1 executable entrypoint.
npm install --save-exact docker-forge-mcp@0.1.0npx -y -p docker-forge-mcp@0.1.0 docker-forge-mcp{
"mcpServers": {
"docker-forge-mcp": {
"command": "npx",
"args": [
"-y",
"-p",
"docker-forge-mcp@0.1.0",
"docker-forge-mcp"
]
}
}
}| Canonical slug | docker-forge-mcp-166ca73d | Deployment | Local Only |
|---|---|---|---|
| Canonical package | npm:docker-forge-mcp | Repository | fredericsuretat/docker-forge-mcp |
| First published | — | Latest release | — |
| Last security verification | — | Classification confidence | 90% |
| Publication | Draft | Official distribution | Not verified |
| Channel | Identifier | Current version | Versions | Source |
|---|---|---|---|---|
| npm | docker-forge-mcp | 0.1.0 | 1 | Repository |
| Package | Version | Published / observed | Inventory | Security scan |
|---|---|---|---|---|
| npmdocker-forge-mcp | 0.1.0Current | Sep 5, 2026 | 6 toolsSucceeded · 0 resources · 0 prompts | Evidence restricted |
Independently scan the exact version your agents use, receive alerts when its risk changes, and investigate every finding with retained version evidence.
No public current-version evidence is available yet.
| Tool | Category | Annotations | Risk |
|---|---|---|---|
add_traefikGenerate Traefik v3 labels for a Docker service. Produces ready-to-paste labels for docker-compose.yml and a networks section. Supports TLS (Let's Encrypt), HTTP→HTTPS redirect, and optional middleware presets: rate-limit, security-headers, auth-basic, compress.Input schema{
"type": "object",
"properties": {
"service_name": {
"type": "string",
"description": "Name of the Docker service (used as router/service name in Traefik)"
},
"domain": {
"type": "string",
"description": "Public domain, e.g. \"myapp.example.com\""
},
"port": {
"type": "number",
"description": "Internal port the service listens on (e.g. 3000, 8000, 80)"
},
"network": {
"type": "string",
"description": "External Traefik network name (default: \"proxy\")",
"default": "proxy"
},
"tls": {
"type": "boolean",
"description": "Enable TLS with certresolver (default: true)",
"default": true
},
"certresolver": {
"type": "string",
"description": "Traefik certresolver name (default: \"letsencrypt\")",
"default": "letsencrypt"
},
"middlewares": {
"type": "array",
"items": {
"type": "string",
"enum": [
"rate-limit",
"security-headers",
"auth-basic",
"compress",
"redirect-https"
]
},
"description": "Optional middleware presets to enable"
},
"include_http_redirect": {
"type": "boolean",
"description": "Add HTTP→HTTPS redirect router (default: true)",
"default": true
}
},
"required": [
"service_name",
"domain",
"port"
]
} | — | — | |
audit_composeAudit a Docker Compose YAML string for security vulnerabilities and best-practice violations. Checks: privileged mode, root user, docker socket mounts, plaintext secrets, exposed database ports, missing restart policies, missing resource limits, unpinned image tags, missing healthchecks, and depends_on readiness issues. Returns a score (0-100) and categorized issues (critical/warning/info).Input schema{
"type": "object",
"properties": {
"compose_yaml": {
"type": "string",
"description": "The full content of your docker-compose.yml file to audit"
}
},
"required": [
"compose_yaml"
]
} | — | — | |
generate_dockerfile[PRO] Generate an optimized, security-hardened multi-stage Dockerfile. Supports Node.js (including Next.js standalone), Python (FastAPI/Django), and Go. Features: multi-stage builds, non-root user, minimal final image, HEALTHCHECK.Input schema{
"type": "object",
"properties": {
"runtime": {
"type": "string",
"enum": [
"node",
"python",
"go"
],
"description": "Runtime/language for the Dockerfile"
},
"app_type": {
"type": "string",
"description": "App type hint: \"nextjs\" for Next.js standalone, \"express\" for generic Node, etc."
},
"version": {
"type": "string",
"description": "Runtime version (e.g. \"20\" for Node.js, \"3.12\" for Python, \"1.22\" for Go)"
},
"port": {
"type": "number",
"description": "Port the app listens on (default: 3000)",
"default": 3000
},
"package_manager": {
"type": "string",
"enum": [
"npm",
"pnpm",
"yarn"
],
"description": "Package manager for Node.js projects (default: npm)",
"default": "npm"
}
},
"required": [
"runtime"
]
} | — | — | |
generate_env[PRO] Extract all environment variable placeholders (${VAR}) from a Docker Compose YAML and generate a .env template file with categorized comments (database, auth/secrets, app). Includes generation hints for secrets.Input schema{
"type": "object",
"properties": {
"compose_yaml": {
"type": "string",
"description": "The docker-compose.yml content to extract variables from"
}
},
"required": [
"compose_yaml"
]
} | — | — | |
generate_stackGenerate a production-ready Docker Compose stack from a natural language description or stack type. Includes security best practices: resource limits, healthchecks, restart policies, non-root users, named volumes. Optionally adds Traefik v3 labels for reverse proxy + HTTPS.Input schema{
"type": "object",
"properties": {
"description": {
"type": "string",
"description": "Natural language description of what you want to build, e.g. \"Node.js API with PostgreSQL and Redis cache\""
},
"stack_type": {
"type": "string",
"enum": [
"auto",
"node-postgres-redis",
"node-postgres",
"node-redis",
"python-postgres-redis-celery",
"python-postgres",
"wordpress",
"nextjs-postgres",
"monitoring",
"nginx"
],
"description": "Explicit stack type. Use \"auto\" to detect from description.",
"default": "auto"
},
"app_name": {
"type": "string",
"description": "Name for the main application service (used as container name prefix)"
},
"domain": {
"type": "string",
"description": "Public domain for Traefik routing, e.g. \"myapp.example.com\". If provided, Traefik labels are added."
},
"traefik_network": {
"type": "string",
"description": "External Docker network for Traefik (default: \"proxy\")",
"default": "proxy"
},
"node_version": {
"type": "string",
"description": "Node.js version to use in image tags (default: \"20\")",
"default": "20"
},
"python_version": {
"type": "string",
"description": "Python version to use in image tags (default: \"3.12\")",
"default": "3.12"
},
"db_name": {
"type": "string",
"description": "Database name to use (defaults to app_name)"
}
},
"required": []
} | — | — | |
list_stacksList all available Docker Compose stack templates with descriptions and tags.Input schema{
"type": "object",
"properties": {},
"required": []
} | — | — |
| Endpoint | Transport | Authentication | Health | Observed |
|---|---|---|---|---|
| No verified remote endpoint is linked. | ||||
Install the selected package version with: npm install --save-exact docker-forge-mcp@0.1.0
Docker Forge MCP Server exposed 6 tools during independent protocol observation, including add_traefik, audit_compose, generate_dockerfile, generate_env, generate_stack, list_stacks.
The selected current version does not yet have completed public verification. Unknown does not mean clean or vulnerable.
These internal links are derived from strong identity fields such as the implementation name, package, repository, vendor, and listing name—not generic description prose.
Association is based on retained identity fields; it does not by itself prove first-party publication.
Curated product and capability guides containing this catalog record.