docker-volume

What docker-volume does on Docker MCP Server

AI agents use docker-volume to create or update resources in Docker MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Docker MCP Server environment.

Why docker-volume is rated Medium

Volume management is primarily a Write operation—volumes can be created and modified reversibly. However, volumes can also be deleted (Destructive), and the broad 'Manage' verb suggests the tool likely spans both. Since the description does not explicitly confirm deletion capabilities, Write is assigned with high severity due to the potential to affect persistent data storage that multiple containers may depend on.

From the tool's definition Tool name 'docker-volume' and description 'Manage Docker volumes' indicate creation, modification, and deletion of persistent storage volumes. Docker volume management includes create, remove, and inspect operations.

The rule that runs docker-volume safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Docker MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For docker-volume, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "docker-volume": {
      "limits": [
        {
          "counter": "docker-volume_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about docker-volume