mcpbeat Sign in

Dockerfile Security Audit MCP Server

by tylerscomic-lab Your server? Claim it
answering

Dockerfile Security Audit is answering right now. Last checked 10 min ago. Last commit 2 Oct 2026.

Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.

Uptime history 15 days of history
15 days agonow
100.0%
Uptime 24h
92 of 92 checks
—
Tools
hidden behind auth
566 ms
Response time
average over 24h
0
Stars
last commit 2 Oct 2026

Nothing serious here today

Today is the operative word: we check Dockerfile Security Audit every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 10 min ago.

run in your terminal
claude mcp add dockerfile-audit-mcp --transport http https://dockerfile-audit-mcp.mcpize.run/mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "dockerfile-audit-mcp": {
      "url": "https://dockerfile-audit-mcp.mcpize.run/mcp"
    }
  }
}
~/.codex/config.toml
[mcp_servers.dockerfile-audit-mcp]
url = "https://dockerfile-audit-mcp.mcpize.run/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "dockerfile-audit-mcp": {
      "url": "https://dockerfile-audit-mcp.mcpize.run/mcp"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "dockerfile-audit-mcp": {
      "url": "https://dockerfile-audit-mcp.mcpize.run/mcp"
    }
  }
}

This endpoint answered with an authorization challenge. The server is running, and it signs you in through your browser: there is no API key to paste.

Endpoints

URLTransportStateLatencyChecked
https://dockerfile-audit-mcp.mcpize.run/mcp streamable-http sign-in 3292 ms 10 min ago

Alternatives to Dockerfile Security Audit

same job, measured the same way
Docker Compose Audit
by unbearabledev

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

answering
Dockerfile Lint
by basitalisandhu

Lint Dockerfiles for root users, latest tags, secrets in ENV or ARG, missing HEALTHCHECK and more.

local only
Base Image Eol Lint
by jmshinhwa

Marks every base image in your Dockerfiles, compose files and CI workflows whose security patches ha

52 installs/wk local only
Sandbox Env MCP
by hs3434

Persistent Docker/SSH sandbox for AI agents: shell exec, file ops, audit log.

104 installs/wk local only
Airlock RLS
by mateuszingano

Scan a deployed site for an exposed Supabase service_role key and audit Row Level Security.

local only
Dockerfile Audit
by unbearabledev

Hadolint-grade Dockerfile audit — 19 checks: secrets, privileges, supply chain, hygiene.

answering
Aegis
by verrysimatupang99

Charter-bound defensive security copilot: secrets, obfuscation, deps, Dockerfile, IaC scans.

94 installs/wk local only
MCP Docker Release Information
by dockersamples

MCP server providing Docker Desktop release notes and security information.

local only

Dockerfile Security Audit — questions

Answers built from our own checks of this server.

Why is there no tool list for Dockerfile Security Audit?
The server answered our handshake with an authorization challenge, so it is running — but it will not describe its tools to an anonymous client. To see them you need to connect with your own credentials. We record it as alive, not as broken: 100.0% of checks in the last 24 hours got a reply.
Is Dockerfile Security Audit working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 566 ms. The bar chart above shows every period we have measured.
How do I connect Dockerfile Security Audit?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address. You sign in through your browser once and the client keeps the session: no key to copy, and it refuses anonymous clients.
How do you sign in to Dockerfile Security Audit?
No API key is involved. Dockerfile Security Audit answers our knock with an OAuth challenge, so you authorise it once in your browser and the client keeps the session. That is also why we see no tool list: it will not describe itself to an anonymous client, and that is the server working as intended, not a fault.
How fast is Dockerfile Security Audit?
It answers our handshake in 566 ms on average, which is faster than 19% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.
Is Dockerfile Security Audit open source?
Yes — it is published under the MIT licence, written in JavaScript and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.