docker-inspect

What docker-inspect does on Docker MCP Server

AI agents call docker-inspect to retrieve information from Docker MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why docker-inspect is rated Low

The docker-inspect tool retrieves and queries information about Docker objects (images, containers, networks, volumes). This is a read-only operation with no side effects—it does not create, modify, delete, execute code, or move resources. Even though Docker can expose sensitive information (like environment variables), the operation itself is purely informational.

From the tool's definition Tool name is 'docker-inspect' and description states it 'Inspect Docker objects (images, containers, networks, volumes)' — inspection/introspection operations that retrieve metadata and configuration without modifying state.

The rule that runs docker-inspect safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Docker MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For docker-inspect, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "docker-inspect": {}
  }
}

Questions about docker-inspect