{"id":2195,"date":"2025-07-01T13:14:35","date_gmt":"2025-07-01T13:14:35","guid":{"rendered":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/2025\/07\/01\/the-docker-mcp-catalog-the-secure-way-to-discover-and-run-mcp-servers\/"},"modified":"2025-07-01T13:14:35","modified_gmt":"2025-07-01T13:14:35","slug":"the-docker-mcp-catalog-the-secure-way-to-discover-and-run-mcp-servers","status":"publish","type":"post","link":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/2025\/07\/01\/the-docker-mcp-catalog-the-secure-way-to-discover-and-run-mcp-servers\/","title":{"rendered":"The Docker MCP Catalog: the Secure Way to Discover and Run MCP Servers"},"content":{"rendered":"

The Model Context Protocol (MCP) ecosystem is exploding. In just weeks, our Docker MCP Catalog has surpassed 1 million pulls<\/strong>, validating that developers are hungry for a secure way to run MCP servers<\/a>. Today, we\u2019re excited to share major updates to the Docker MCP Catalog, including enhanced discovery features and our new open submission process. With hundreds of developers already requesting to publish their MCP servers through Docker, we\u2019re accelerating our mission to make containerized MCP servers<\/a> the standard for secure AI tool distribution.<\/p>\n

The rapid adoption of MCP servers also highlights a critical problem \u2014 the current practice of running them via npx or uvx commands exposes systems to unverified code with full host access, not to mention dependency management friction. In this post, we\u2019ll explain why Docker is investing in the MCP ecosystem, showcase the new catalog capabilities, and share how you can contribute to building a more secure foundation for AI applications.<\/p>\n

\n<\/div>\n

Figure 1: The new Docker MCP Catalog, built for easier discovery.<\/strong><\/p>\n\n

Why Docker is building the MCP Catalog<\/h2>\n

The security issues in MCP distribution<\/h3>\n

Every time a developer runs npx -y @untrusted\/mcp-server or uvx some-mcp-tool, they\u2019re making a dangerous trade-off: convenience over security. These commands execute arbitrary code directly on the host system with full access to:<\/p>\n

The entire file system<\/p>\n

Network connections<\/p>\n

Environment variables and secrets<\/p>\n

System resources<\/p>\n

Some MCP clients limit environment variable access, but even that is not a universal practice. This isn\u2019t sustainable. As MCP moves from experimentation to production, we need a fundamentally different approach.<\/p>\n\n

Docker\u2019s unique position<\/h3>\n

Docker has spent over a decade solving exactly these problems for cloud-native applications. We\u2019ve built the infrastructure, tools, and trust that developers rely on to run billions of containers in production. Now, we\u2019re applying these same principles to the MCP ecosystem.<\/p>\n

When you run an MCP server from our Catalog, you get:<\/p>\n

Cryptographic signatures<\/strong> verifying the image hasn\u2019t been tampered with<\/p>\n

Software Bill of Materials (SBOMs)<\/strong> documenting every component<\/p>\n

Complete isolation<\/strong> from your host system<\/p>\n

Controlled access<\/strong> to only what the server actually needs<\/p>\n

This isn\u2019t about making life harder for developers\u2014it\u2019s about making security the path of least resistance.<\/p>\n\n

Introducing the enhanced MCP Catalog<\/h2>\n

Built for MCP discovery<\/h3>\n

We\u2019ve reimagined the MCP Catalog to make it more accessible and easier to navigate. You can still access the MCP Catalog from Docker Hub and the MCP Toolkit in Docker Desktop just like before, or go straight to the MCP catalog<\/a>. We\u2019ve gone beyond generic container image listings by building features that help you quickly find the right MCP servers for your AI applications.\u00a0\u00a0<\/p>\n\n

Browse by Use Case<\/strong>: MCP servers are organized by what they actually do:<\/p>\n

Data Integration (databases, APIs, file systems)<\/p>\n

Development Tools (IDEs, code analysis, testing)<\/p>\n

Communication (email, Slack, messaging platforms)<\/p>\n

Productivity (task management, calendars, note-taking)<\/p>\n

Analytics (data processing, visualization, reporting)<\/p>\n

Enhanced Search<\/strong>: Find servers by capability, tools, GitHub tags, and categories \u2014 not just by name.<\/p>\n\n

Security Transparency<\/strong>: Every catalog entry clearly shows whether it\u2019s Docker-built (with transparent build signing and verification) or community-built (containerized and maintained by the publisher).<\/p>\n\n

\n<\/div>\n

Figure 2: Discover MCP servers by use cases.<\/strong><\/p>\n\n

How we classify MCP Servers: Built by Docker vs. community-built<\/h3>\n

Docker-Built Servers<\/strong>: When you see \u201cBuilt by Docker,\u201d you\u2019re getting our complete security treatment. We control the entire build pipeline, providing cryptographic signatures, SBOMs, provenance attestations, and continuous vulnerability scanning.<\/p>\n

Community-Built Servers<\/strong>: These servers are packaged as Docker images by their developers. While we don\u2019t control their build process, they still benefit from container isolation, which is a massive security improvement over direct execution.<\/p>\n

Tiers serve important roles<\/strong>: Docker-built servers demonstrate the gold standard for security, while community-built servers ensure we can scale rapidly to meet developer demand. Developers can change their mind after submitting a community-built server and opt to resubmit it as a Docker-built server.<\/p>\n\n

\n<\/div>\n

Figure 3: An example of Built by Docker MCP Server.<\/strong><\/p>\n\n

Open for MCP server submission: Join the secure MCP movement<\/h2>\n

Starting today, we\u2019re opening our submission process to the community. Whether you\u2019re an individual developer or an enterprise team, you can feature your MCP servers on the Docker MCP Catalog. By publishing through our catalog, you\u2019re not just distributing your MCP server \u2014 you\u2019re helping establish a new security standard for the entire ecosystem while getting your MCP tools available to millions of developers already using Docker via Docker Hub and Docker Desktop. Your containerized server becomes part of the solution, demonstrating that production-ready AI tools don\u2019t require compromising on security.\u00a0<\/p>\n

<\/a><\/h3>\n\n

How to submit your MCP server<\/h3>\n

Containerize your server<\/strong> \u2013 Package your MCP server as a Docker image<\/p>\n

Submit via GitHub<\/strong> \u2013 Create a pull request at github.com\/docker\/mcp-registry<\/a><\/p>\n

Choose your tier<\/strong> \u2013 Opt for Docker-built (we handle the build) or community-built (you build and maintain it)<\/p>\n

We\u2019re committed to a fast, transparent review process. Quality MCP servers that follow our security guidelines will be published quickly, helping you reach Docker\u2019s 20+ million developer community.<\/p>\n\n

ClickHouse is one of the first companies to take advantage of Docker\u2019s MCP Catalog, and they opted for the Docker-built tier to ensure maximum security. Here\u2019s why they chose to partner with Docker:<\/p>\n

\u201cAt <\/em>ClickHouse<\/em><\/a>, we deliver the fastest analytics database \u2013 open-source, and designed for real-time data processing and analytics at scale. As agentic AI becomes more embedded in modern applications, developers are using the ClickHouse MCP server to support intelligent, data-driven workflows that demand low latency, high concurrency, and cost efficiency.<\/em>
To make it easier for developers to deploy these workloads, we\u2019re featuring <\/em>ClickHouse MCP Server<\/em><\/a> on Docker\u2019s MCP Catalog, which provides <\/em>a powerful way to reach 20M+ developers<\/em><\/strong> and makes it easier for Docker users to discover and use our solution. <\/em>We opted for \u201cBuilt by Docker\u201d with the highest security standard<\/em><\/strong>, including cryptographic signatures, SBOMs, provenance attestations, and continuous vulnerability scanning. Together with Docker, developers can run ClickHouse MCP Server with confidence, knowing it\u2019s secured, verified, and ready for their agentic applications.\u201d \u2013 <\/em>Tanya Bragin, VP of Product and Marketing Clickhouse.<\/em><\/p>\n

What\u2019s coming next<\/h2>\n

Remote MCP servers<\/h3>\n

We\u2019re preparing for the future of cloud-native AI applications. Remote MCP servers will enable:<\/p>\n

Managed MCP services that scale automatically<\/p>\n

Shared capabilities across teams without distributing code<\/p>\n

Stricter security boundaries for sensitive operations<\/p>\n

Integration with the official MCP registry<\/h3>\n

We\u2019re actively collaborating with the MCP community on the upcoming official registry. Our vision is complementary:<\/p>\n

The official registry provides centralized discovery \u2013 the \u201cyellow pages\u201d of available MCP servers<\/p>\n

Docker provides the secure runtime and distribution for those listings<\/p>\n

Together, we create a complete ecosystem where discovery and security work hand-in-hand<\/p>\n

The path forward<\/h2>\n

The explosive growth of our MCP Catalog, 1 million pulls and hundreds of publisher requests, tells us developers are ready for change. They want the power of MCP, but they need it delivered securely.<\/p>\n

By establishing containers as the standard for MCP server distribution, we\u2019re not trying to own the ecosystem \u2014 we\u2019re trying to secure it. Every MCP server that moves from npx execution to containerized deployment is a win for the entire community.<\/p>\n\n

Start today<\/h2>\n

Explore the enhanced MCP Catalog<\/strong>: Visit the MCP Catalog<\/a> <\/a>to discover MCP servers that solve your specific needs securely.<\/p>\n

Use and test hundreds of MCP Servers<\/strong>: Download Docker Desktop<\/a> <\/a>to download and use any MCP server in our catalog with your favorite clients: Gordon, Claude, Cursor, VSCode, etc<\/p>\n

Submit your server<\/strong>: Join the movement toward secure AI tool distribution. Check our submission guidelines<\/a> for more.<\/p>\n

Follow our progress<\/strong>: Star our repository and watch for updates on the MCP Gateway release and remote server capabilities.<\/p>\n

Together, we\u2019re building more than a catalog \u2014 we\u2019re establishing the secure foundation that the MCP ecosystem needs to grow from experimental tool to production-ready platform. Because when it comes to AI applications, security isn\u2019t optional. It\u2019s fundamental.<\/p>\n\n

Learn more<\/strong><\/h3>\n

Check out our announcement blog<\/a><\/p>\n

Find documentation forDocker MCP Catalog and Toolkit<\/a>.<\/p>\n

Subscribe to the Docker Navigator Newsletter<\/a>.<\/p>\n

New to Docker? Create an account<\/a>.\u00a0<\/p>\n

Have questions? The Docker community is here to help<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"

The Model Context Protocol (MCP) ecosystem is exploding. In just weeks, our Docker MCP Catalog has surpassed 1 million pulls, […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[4],"tags":[],"class_list":["post-2195","post","type-post","status-publish","format-standard","hentry","category-docker"],"_links":{"self":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/posts\/2195","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/comments?post=2195"}],"version-history":[{"count":0,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/posts\/2195\/revisions"}],"wp:attachment":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/media?parent=2195"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/categories?post=2195"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/tags?post=2195"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}