# fetch_container_logs

Fetch logs for a Docker container

Agent View of the PolicyLayer registry record for `fetch_container_logs`. HTML page: https://policylayer.com/tools/docker/fetch-container-logs

## Facts

- Tool: `fetch_container_logs`
- Server: Docker (`@ckreiling/mcp-server-docker`) — https://policylayer.com/tools/docker.md
- Install: `npx -y @ckreiling/mcp-server-docker`
- Homepage: https://github.com/ckreiling/mcp-server-docker
- Risk category: Read (Low risk)
- Registry record: grade F, identity verified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Allowed

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "fetch_container_logs",
    "arguments": {}
  }
}
```

## Why fetch_container_logs is rated Low

This tool retrieves container logs, which is a read-only query operation with no side effects. The logs are already generated and the tool merely accesses them. Severity is low because log access has minimal blast radius unless logs contain sensitive credentials (which would be a data exposure issue, not an inherent property of the tool itself).

From the tool's own definition: "Tool name 'fetch_container_logs' and description 'Fetch logs for a Docker container' indicate retrieval of existing log data without modification or deletion."

## Use case

AI agents call fetch_container_logs to retrieve information from Docker without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

## Recommended policy (PolicyLayer)

Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Docker:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "fetch_container_logs": {}
  }
}
```

## Other tools on Docker (18)

- `recreate_container` — Destructive — https://policylayer.com/tools/docker/recreate-container.md
- `remove_container` — Destructive — https://policylayer.com/tools/docker/remove-container.md
- `remove_image` — Destructive — https://policylayer.com/tools/docker/remove-image.md
- `remove_network` — Destructive — https://policylayer.com/tools/docker/remove-network.md
- `remove_volume` — Destructive — https://policylayer.com/tools/docker/remove-volume.md
- `build_image` — Execute — https://policylayer.com/tools/docker/build-image.md
- `create_container` — Execute — https://policylayer.com/tools/docker/create-container.md
- `pull_image` — Execute — https://policylayer.com/tools/docker/pull-image.md
- `run_container` — Execute — https://policylayer.com/tools/docker/run-container.md
- `start_container` — Execute — https://policylayer.com/tools/docker/start-container.md
- `stop_container` — Execute — https://policylayer.com/tools/docker/stop-container.md
- `list_containers` — Read — https://policylayer.com/tools/docker/list-containers.md
- `list_images` — Read — https://policylayer.com/tools/docker/list-images.md
- `list_networks` — Read — https://policylayer.com/tools/docker/list-networks.md
- `list_volumes` — Read — https://policylayer.com/tools/docker/list-volumes.md
- `create_network` — Write — https://policylayer.com/tools/docker/create-network.md
- `create_volume` — Write — https://policylayer.com/tools/docker/create-volume.md
- `push_image` — Write — https://policylayer.com/tools/docker/push-image.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=docker · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/docker