docker_status

What docker_status does on Truenas

AI agents call docker_status to retrieve information from Truenas without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why docker_status is rated Low

This tool retrieves status information about the Docker service without creating, modifying, deleting, or executing any operations. It is a non-destructive read operation that queries the current state of a system service. The blast radius of misuse is minimal—an attacker could only gain visibility into whether the Docker service is running, which poses no direct risk to data or system integrity.

From the tool's definition Tool name 'docker_status' and description 'Get the current status of the Docker/container runtime service' indicate a query/retrieval operation with no modification of state.

The rule that runs docker_status safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Truenas, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For docker_status, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "docker_status": {}
  }
}

Questions about docker_status