Dockerfile Audit MCP Server

by unbearabledev Your server? Claim it

answering

Dockerfile Audit is answering right now. Last checked 10 min ago. Last commit 1 Jun 2026.

Hadolint-grade Dockerfile audit — 19 checks: secrets, privileges, supply chain, hygiene.

Uptime history 47 days of history

47 days agonow

100.0%

Uptime 24h

91 of 91 checks

—

Tools

hidden behind auth

407 ms

Response time

average over 24h

Stars

last commit 1 Jun 2026

Nothing serious here today

Today is the operative word: we check Dockerfile Audit every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 10 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add dockerfile-audit --transport http https://unbearable-dev--dockerfile-audit.apify.actor/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "dockerfile-audit": {
      "url": "https://unbearable-dev--dockerfile-audit.apify.actor/mcp"
    }
  }
}

~/.codex/config.toml

[mcp_servers.dockerfile-audit]
url = "https://unbearable-dev--dockerfile-audit.apify.actor/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "dockerfile-audit": {
      "url": "https://unbearable-dev--dockerfile-audit.apify.actor/mcp"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "dockerfile-audit": {
      "url": "https://unbearable-dev--dockerfile-audit.apify.actor/mcp"
    }
  }
}

This endpoint answered with an authorization challenge. The server is running, but it did not say what kind of credentials it expects.

Endpoints

URL	Transport	State	Latency	Checked
https://unbearable-dev--dockerfile-audit.apify.actor/mcp	streamable-http	needs auth	423 ms	10 min ago

Alternatives to Dockerfile Audit

same job, measured the same way

IAC Audit Pack

by unbearabledev

Four IaC audits in one call: Compose, Dockerfile, GitHub Actions, Kubernetes. 131 checks.

answering

GitHub Actions Audit

by unbearabledev

GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.

answering

Mcpwatch

by lazymac2x

Audit MCP servers from inside Claude Code. 10 OWASP checks, A-F grade, live leaderboard.

30 installs/wk local only

MCP Codeaudit

by infoinlet-marketplace

Security audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.

23 installs/wk local only

Repo Security Scanner — Malicious Code & Supply Chain

by eltociear

Audit GitHub repos for malicious and supply-chain code before you depend on them.

answering

Base Image Eol Lint

by jmshinhwa

Marks every base image in your Dockerfiles, compose files and CI workflows whose security patches ha

315 installs/wk local only

Policyforge

by policyforge

Generate, audit, and maintain legal policies that match what your code actually does.

117 installs/wk answering

Kubernetes Manifest Audit

by unbearabledev

kube-linter audit for Kubernetes manifests — 63 checks: security, availability, RBAC, network.

answering

Dockerfile Audit — questions

Answers built from our own checks of this server.

Why is there no tool list for Dockerfile Audit?

The server answered our handshake with an authorization challenge, so it is running — but it will not describe its tools to an anonymous client. To see them you need to connect with your own credentials. We record it as alive, not as broken: 100.0% of checks in the last 24 hours got a reply.

Is Dockerfile Audit working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 407 ms. The bar chart above shows every period we have measured.

How do I connect Dockerfile Audit?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address. You will need your own credentials: it refuses anonymous clients.

Does Dockerfile Audit need an API key?

Yes. Every time we knock, Dockerfile Audit answers with an authorization challenge instead of its tool list — that is how we know it is running and gated rather than broken. Bring your own credentials and it will talk.

How fast is Dockerfile Audit?

It answers our handshake in 407 ms on average, which is faster than 37% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is Dockerfile Audit open source?

We cannot say either way: written in Python and 0 stars on GitHub, but we could not determine the licence, and without one the code is not open source by default.