--- title: "Docker MCP Gateway: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/mcp-servers/docker-mcp-gateway/ description: "Isolates other MCP servers in containers. It is not the Docker Hub search server already listed." --- # Docker MCP Gateway: review, setup & limitations · Undominated.ai > Isolates other MCP servers in containers. It is not the Docker Hub search server already listed. [← Explore all mcp servers](/mcp-servers/) CONTAINER DISCOVERY / Docker # Docker MCP Gateway Isolates other MCP servers in containers. It is not the Docker Hub search server already listed. [See setup guidance ↓](#setup)[Original source ↗](https://github.com/docker/mcp-gateway) SOURCE REVIEW Reviewed 2026-10-14 Evidence 3 linked sources Publisher Docker Licence [MIT ↗](https://github.com/docker/mcp-gateway/blob/a34df45d4ec0e941a9853ad768c4f6cd818966b3/LICENSE) Revision a34df45d4ec0 [Read what was—and wasn’t—checked ↓](#review) “It can work in Docker Desktop or independently.” [Docker · upstream description ↗](https://github.com/docker/mcp-gateway/blob/a34df45d4ec0e941a9853ad768c4f6cd818966b3/README.md) Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - The README describes per-server containers with minimal host privileges for npx and uvx servers. - Installation is documented as a Docker CLI plugin, including a build-from-source path when Desktop is not current. - The pinned README is the Docker MCP gateway that runs catalog servers in containers and presents one gateway to each client. - It tells operators to keep secrets in Docker Desktop's secret store instead of environment variables. ### A good fit for - Expose a reviewed group of containerized MCP servers through one client connection. - Maintain distinct development profiles with explicit tool selections and service credentials. - Running several catalog MCP servers behind one Docker gateway ### Weigh up before choosing - There is no single npx install line in the inspected installation section. Desktop may already include the plugin. - This review did not build the plugin or run a gateway. - Without --profile the gateway uses default. Client connections can therefore expose a different server/tool set than intended if profile identity is omitted. - Containers and gateway routing do not make underlying tools read-only; mounted files, credentials and service permissions determine effects. - Profile export/push and secret export are separate actions that can disclose configuration or credentials; inspect contents before sharing them. - Docker Cloud runs still need a temporary secret export, which the README says is not yet read from the secret store. - npx and uvx catalog servers get minimal host privileges, not a general host shell. - The file is the gateway CLI, not a guarantee about every catalog server's own behaviour. - A pin does not verify transitive dependencies. - This review did not execute the resource. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - README.md - 2026-10-14 reread of retained pinned setup/configuration evidence for the specific operational details added in this batch. - LICENSE ### Our findings - The README title is Docker MCP Plugin and Docker MCP Gateway. - After installation the documented help command is docker mcp --help. - README documents Desktop4.59+, profile-based server/tool configuration, local database state and explicit gateway startup. No plugin or container was launched. - Catalog servers run as isolated containers, and npx or uvx servers are granted minimal host privileges. Clients talk to one gateway. - The README says to keep secrets out of environment variables and to use Docker Desktop's secret management. OAuth is built in for servers that need a token. - A Docker Cloud run still needs a temporary secret export. The README says that export will not be required once Docker Cloud can read secret stores, so this pin does not do that itself. ### Not established by this review - The plugin was not built. - No authenticated session, installation, permission bypass or package-to-source parity test was performed. - The server was not started and its tools were not called. - A pin does not verify transitive dependencies. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Connect a server deliberately. [Upstream setup instructions ↗](https://github.com/docker/mcp-gateway/blob/a34df45d4ec0e941a9853ad768c4f6cd818966b3/README.md) - Use the documented Docker Desktop MCP Toolkit or standalone plugin installation appropriate to your platform. - Inspect available servers and configure a profile with only the required tools, endpoints, mounts and credentials. - Launch docker mcp gateway run --profile YOUR_PROFILE, replacing the profile placeholder. - Connect the intended client to that profile using the documented client setup. ### Before you start - A supported Docker installation and access to its daemon - Docker MCP CLI plugin/Toolkit - Per-server credentials and prerequisites for the chosen profile ### Documented configuration example Use the client and authentication context described in the setup guidance. Configuration formats vary between hosts. { "mcpServers": { "MCP_DOCKER": { "command": "docker", "args": [ "mcp", "gateway", "run" ] } } } Copy configuration ↗ ### Compatibility Docker Desktop · A locally built docker mcp CLI plugin ### Implementation Go ### Transports stdio · SSE · Streamable HTTP ### Local Docker plugin - Launch catalogued MCP servers in containers on the local Docker daemon ### Cost model MIT plugin. Docker Desktop licensing is separate. 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - [Server documentation ↗](https://github.com/docker/mcp-gateway/blob/a34df45d4ec0e941a9853ad768c4f6cd818966b3/README.md) Checked 2026-10-14 https://github.com/docker/mcp-gateway/blob/a34df45d4ec0e941a9853ad768c4f6cd818966b3/README.md Supports: Install command and stated scope, summary, install, configExample, access, limitations, bestFor, review, compatibility, transports - [Repository licence ↗](https://github.com/docker/mcp-gateway/blob/a34df45d4ec0e941a9853ad768c4f6cd818966b3/LICENSE) Checked 2026-10-07 https://github.com/docker/mcp-gateway/blob/a34df45d4ec0e941a9853ad768c4f6cd818966b3/LICENSE Supports: Redistribution terms - [Server documentation ↗](https://github.com/docker/mcp-gateway/blob/a34df45d4ec0e941a9853ad768c4f6cd818966b3/README.md) Checked 2026-10-07 https://github.com/docker/mcp-gateway/blob/a34df45d4ec0e941a9853ad768c4f6cd818966b3/README.md Supports: Install command and stated scope KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Docker Hub MCP Server ↗ Searches Docker Hub images and can manage repositories when a Docker Hub token is supplied.](/mcp-servers/dockerhub/)[### AWS Labs Amazon Translate ↗ Translates text and manages document translation jobs and custom terminology with AWS Translate.](/mcp-servers/awslabs-translate/)[### AWS Labs Finch ↗ Builds and pushes container images through the local Finch CLI, with additional ECR repository support.](/mcp-servers/awslabs-finch/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/) ## Continue your investigation - [Inspect resource evidence](/tools/) - [Choose a host](/agents/) - [Inspect reusable workflows](/skills/) - [Use Undominated data](/api/)