Is io.github.UnbearableDev/docker-compose-audit safe to use?

io.github.UnbearableDev/docker-compose-audit has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.UnbearableDev/docker-compose-audit?

io.github.UnbearableDev/docker-compose-audit can be installed by cloning its GitHub repository and following the setup instructions in the README.

What AI clients work with io.github.UnbearableDev/docker-compose-audit?

io.github.UnbearableDev/docker-compose-audit is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Is io.github.UnbearableDev/docker-compose-audit actively maintained?

io.github.UnbearableDev/docker-compose-audit is actively maintained — last commit was 9 days ago.

io.github.UnbearableDev/docker-compose-audit

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

GitHub

No known CVEs

No license

Actively maintained

Last commit 9d ago

Works with most clients

Transport:

0 tools

Grade F

Edit this pageView history

Developer Tools Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-unbearabledev-docker-compose-audit": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-unbearabledev-docker-compose-audit)](https://mcppedia.org/s/io-github-unbearabledev-docker-compose-audit)

Read me

What io.github.UnbearableDev/docker-compose-audit does

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

26/100across 5 weighted dimensions

How we score →

0255075100

−74

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.UnbearableDev/docker-compose-audit safe to use?: io.github.UnbearableDev/docker-compose-audit has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.UnbearableDev/docker-compose-audit?: io.github.UnbearableDev/docker-compose-audit can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.UnbearableDev/docker-compose-audit?: io.github.UnbearableDev/docker-compose-audit is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.UnbearableDev/docker-compose-audit actively maintained?: io.github.UnbearableDev/docker-compose-audit is actively maintained — last commit was 9 days ago.

Similar servers

Others in developer-tools / security

View all →

Supabase MCP Server97

Manage Supabase projects — databases, auth, storage, and edge functions

2.7k 4

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

5.9k 1

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

5.9k 2

Mcp_agent_mail96

Asynchronous coordination layer for AI coding agents: identities, inboxes, searchable threads, and advisory file leases over FastMCP + Git + SQLite

2.0k 6

MCP Security Weekly

Get CVE alerts and security updates for io.github.UnbearableDev/docker-compose-audit and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Developer Tools Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-unbearabledev-docker-compose-audit": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-unbearabledev-docker-compose-audit)](https://mcppedia.org/s/io-github-unbearabledev-docker-compose-audit)

Read me

What io.github.UnbearableDev/docker-compose-audit does

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

README

Docker Compose Security Audit

MCP server that audits docker-compose.yml files for security misconfigurations. Trivy-grade check catalog, designed for AI agents — every finding ships with a severity rating, full remediation text, and a YAML fix snippet you can paste.

Built by Unbearable Labs. Pay-per-event pricing — you only pay when an audit runs.

Available on

Apify Actor Store — primary, metered usage (PPE)
MCPize — pending submission
MCP.so — pending submission
PulseMCP — pending submission
Smithery — pending submission
Glama — pending submission

Newsletter: Unbearable TechTips Weekly · All Actors: github.com/UnbearableDev

What it does

Point any MCP-capable client (Claude Desktop, Cursor, n8n, Make, Zapier, custom agents) at this server, hand it the contents of a docker-compose.yml, and get back a structured report with:

Severity — high / medium / low / info
Service — which compose service the finding affects
Description — what's wrong and why it matters
Remediation — what to do about it
Fix snippet — YAML you can paste directly into the file

Tools

Tool	Purpose
`audit_compose(compose_yaml? \| compose_url?, min_severity='low')`	Run all checks, return full report
`check_privilege(...)`	Container privilege & capability issues only
`check_network(...)`	Network exposure issues only
`check_filesystem(...)`	Volume mount & filesystem issues only
`check_secrets(...)`	Secret hygiene issues only
`check_resources(...)`	Resource limit issues only
`check_image_hygiene(...)`	Image tag / registry / pinning issues only
`check_runtime_lifecycle(...)`	Healthcheck / restart / init issues only
`check_logging(...)`	Logging driver / rotation issues only
`check_compose_hygiene(...)`	Deprecated fields / Compose-spec hygiene only
`list_checks(category?)`	Browse the full check catalog

All audit-running tools accept the same input:

compose_yaml (string) — paste the YAML content directly, OR
compose_url (string) — public HTTPS URL to fetch (e.g. GitHub raw URL)

Provide exactly one. min_severity defaults to low (drops info findings); set to medium or high to filter further.

Example response (truncated)

{
  "summary": {
    "total_findings": 14,
    "by_severity": {"high": 3, "medium": 6, "low": 5, "info": 0},
    "by_category": {"privilege": 4, "network": 3, "secrets": 2, "...": 5}
  },
  "findings": [
    {
      "id": "DCS-002",
      "category": "privilege",
      "severity": "high",
      "service": "web",
      "title": "Privileged mode enabled",
      "description": "Service 'web' has `privileged: true`...",
      "remediation": "Remove `privileged: true`. If you need specific capabilities...",
      "fix_yaml_snippet": "    # remove `privileged: true`; if needed, use cap_add or devices selectively",
      "references": ["CIS-Docker-5.4", "NIST-800-190"]
    },
    ...
  ]
}

Pricing

Event	USD
Any audit / check_* tool call	$0.02
`list_checks` discovery call	$0.005

You pay only when a tool is invoked. No subscription, no monthly minimums.

Check catalog (25 live in v1, growing toward 54)

Category	Live checks
Privilege	Root user (DCS-001), privileged mode (DCS-002), dangerous capabilities (DCS-003), `cap_add: ALL` (DCS-004), `cap_drop: ALL` missing (DCS-005), `no-new-privileges` missing (DCS-006)
Network	`network_mode: host` (DCS-010), port bound to 0.0.0.0 (DCS-011), SSH port exposed (DCS-013), DB port exposed (DCS-014)
Filesystem	`/var/run/docker.sock` mount (DCS-018), host root mount (DCS-019), sensitive host paths (DCS-020)
Secrets	Hardcoded se

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

26/100across 5 weighted dimensions

How we score →

0255075100

−74

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.UnbearableDev/docker-compose-audit safe to use?: io.github.UnbearableDev/docker-compose-audit has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.UnbearableDev/docker-compose-audit?: io.github.UnbearableDev/docker-compose-audit can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.UnbearableDev/docker-compose-audit?: io.github.UnbearableDev/docker-compose-audit is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.UnbearableDev/docker-compose-audit actively maintained?: io.github.UnbearableDev/docker-compose-audit is actively maintained — last commit was 9 days ago.