Is io.github.UnbearableDev/docker-compose-audit safe to use?

io.github.UnbearableDev/docker-compose-audit has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.UnbearableDev/docker-compose-audit?

io.github.UnbearableDev/docker-compose-audit can be installed by cloning its GitHub repository and following the setup instructions in the README.

What can io.github.UnbearableDev/docker-compose-audit do?

io.github.UnbearableDev/docker-compose-audit provides 3 tools: Tools, Pricing, Limits. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.UnbearableDev/docker-compose-audit?

io.github.UnbearableDev/docker-compose-audit is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Is io.github.UnbearableDev/docker-compose-audit actively maintained?

io.github.UnbearableDev/docker-compose-audit is recently maintained — last commit was 85 days ago.

io.github.UnbearableDev/docker-compose-audit

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

3 tools GitHub

No known CVEs

No license

Maintained

Last commit 85d ago

Works with most clients

Transport:

3 tools · ~67 tok

Grade A · 0.0% of 200K ctx

MCPpedia last refreshed this data 5h ago

Edit this pageView history

io.github.UnbearableDev/docker-compose-audit is an MCP server that security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images. Its tool list has not been published yet, requires no API key, and scores 60/100 on MCPpedia's security, maintenance and efficiency rubric.

Developer Tools Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-unbearabledev-docker-compose-audit": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-unbearabledev-docker-compose-audit)](https://mcppedia.org/s/io-github-unbearabledev-docker-compose-audit)

Read me

What io.github.UnbearableDev/docker-compose-audit does

MCP server that audits docker-compose.yml files for security misconfigurations. Trivy-grade check catalog, designed for AI agents — every finding ships with a severity rating, full remediation text, and a YAML fix snippet you can paste.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

60/100across 5 weighted dimensions

How we score →

0255075100

−40

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (3)

Click any tool to inspect its schema.

~67 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.UnbearableDev/docker-compose-audit safe to use?: io.github.UnbearableDev/docker-compose-audit has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.UnbearableDev/docker-compose-audit?: io.github.UnbearableDev/docker-compose-audit can be installed by cloning its GitHub repository and following the setup instructions in the README.
What can io.github.UnbearableDev/docker-compose-audit do?: io.github.UnbearableDev/docker-compose-audit provides 3 tools: Tools, Pricing, Limits. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.UnbearableDev/docker-compose-audit?: io.github.UnbearableDev/docker-compose-audit is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.UnbearableDev/docker-compose-audit actively maintained?: io.github.UnbearableDev/docker-compose-audit is recently maintained — last commit was 85 days ago.

Similar servers

Others in developer-tools / security

View all →

Context797

Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors

61.2k 2

Chrome Devtools Mcp96

Chrome DevTools for coding agents

49.7k 10

Browser Tools Mcp96

Monitor browser logs directly from Cursor and other MCP compatible IDEs.

7.3k 7

Supabase MCP Server96

Manage Supabase projects — databases, auth, storage, and edge functions

2.9k 4

MCP Security Weekly

Get CVE alerts and security updates for io.github.UnbearableDev/docker-compose-audit and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Developer Tools Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-unbearabledev-docker-compose-audit": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-unbearabledev-docker-compose-audit)](https://mcppedia.org/s/io-github-unbearabledev-docker-compose-audit)

Read me

What io.github.UnbearableDev/docker-compose-audit does

MCP server that audits docker-compose.yml files for security misconfigurations. Trivy-grade check catalog, designed for AI agents — every finding ships with a severity rating, full remediation text, and a YAML fix snippet you can paste.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

README

Docker Compose Security Audit

MCP server that audits docker-compose.yml files for security misconfigurations. Trivy-grade check catalog, designed for AI agents — every finding ships with a severity rating, full remediation text, and a YAML fix snippet you can paste.

Built by Unbearable Labs. Pay-per-event pricing — you only pay when an audit runs.

Available on

Apify Actor Store — primary, metered usage (PPE)
MCPize — pending submission
MCP.so — pending submission
PulseMCP — pending submission
Smithery — pending submission
Glama — pending submission

Newsletter: Unbearable TechTips Weekly · All Actors: github.com/UnbearableDev

What it does

Point any MCP-capable client (Claude Desktop, Cursor, n8n, Make, Zapier, custom agents) at this server, hand it the contents of a docker-compose.yml, and get back a structured report with:

Severity — high / medium / low / info
Service — which compose service the finding affects
Description — what's wrong and why it matters
Remediation — what to do about it
Fix snippet — YAML you can paste directly into the file

Tools

Tool	Purpose
`audit_compose(compose_yaml? \| compose_url?, min_severity='low')`	Run all checks, return full report
`check_privilege(...)`	Container privilege & capability issues only
`check_network(...)`	Network exposure issues only
`check_filesystem(...)`	Volume mount & filesystem issues only
`check_secrets(...)`	Secret hygiene issues only
`check_resources(...)`	Resource limit issues only
`check_image_hygiene(...)`	Image tag / registry / pinning issues only
`check_runtime_lifecycle(...)`	Healthcheck / restart / init issues only
`check_logging(...)`	Logging driver / rotation issues only
`check_compose_hygiene(...)`	Deprecated fields / Compose-spec hygiene only
`list_checks(category?)`	Browse the full check catalog

All audit-running tools accept the same input:

compose_yaml (string) — paste the YAML content directly, OR
compose_url (string) — public HTTPS URL to fetch (e.g. GitHub raw URL)

Provide exactly one. min_severity defaults to low (drops info findings); set to medium or high to filter further.

Example response (truncated)

{
  "summary": {
    "total_findings": 14,
    "by_severity": {"high": 3, "medium": 6, "low": 5, "info": 0},
    "by_category": {"privilege": 4, "network": 3, "secrets": 2, "...": 5}
  },
  "findings": [
    {
      "id": "DCS-002",
      "category": "privilege",
      "severity": "high",
      "service": "web",
      "title": "Privileged mode enabled",
      "description": "Service 'web' has `privileged: true`...",
      "remediation": "Remove `privileged: true`. If you need specific capabilities...",
      "fix_yaml_snippet": "    # remove `privileged: true`; if needed, use cap_add or devices selectively",
      "references": ["CIS-Docker-5.4", "NIST-800-190"]
    },
    ...
  ]
}

Pricing

Event	USD
Any audit / check_* tool call	$0.02
`list_checks` discovery call	$0.005

You pay only when a tool is invoked. No subscription, no monthly minimums.

Check catalog (25 live in v1, growing toward 54)

Category	Live checks
Privilege	Root user (DCS-001), privileged mode (DCS-002), dangerous capabilities (DCS-003), `cap_add: ALL` (DCS-004), `cap_drop: ALL` missing (DCS-005), `no-new-privileges` missing (DCS-006)
Network	`network_mode: host` (DCS-010), port bound to 0.0.0.0 (DCS-011), SSH port exposed (DCS-013), DB port exposed (DCS-014)
Filesystem	`/var/run/docker.sock` mount (DCS-018), host root mount (DCS-019), sensitive host paths (DCS-020)
Secrets	Hardcoded se

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

60/100across 5 weighted dimensions

How we score →

0255075100

−40

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (3)

Click any tool to inspect its schema.

~67 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.UnbearableDev/docker-compose-audit safe to use?: io.github.UnbearableDev/docker-compose-audit has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.UnbearableDev/docker-compose-audit?: io.github.UnbearableDev/docker-compose-audit can be installed by cloning its GitHub repository and following the setup instructions in the README.
What can io.github.UnbearableDev/docker-compose-audit do?: io.github.UnbearableDev/docker-compose-audit provides 3 tools: Tools, Pricing, Limits. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.UnbearableDev/docker-compose-audit?: io.github.UnbearableDev/docker-compose-audit is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.UnbearableDev/docker-compose-audit actively maintained?: io.github.UnbearableDev/docker-compose-audit is recently maintained — last commit was 85 days ago.