v2.0MCPread-onlyTabby Tavern companion

dockroot-mcp

Virtual Docker Root for AI Agents. Read-only power over the compose stack — without host root. Companion to Tabby Tavern v2.0.0.

docker_ps · docker_logs · docker_inspect · docker_stats · docker_networks
plus the tavern connectivity toolkit (status, self_check, wire, rediscover, models, chat).

Why this exists

Agents get asked “why is Open WebUI broken?” Without docker access they invent commands. With dockroot they:

  1. List containers (docker_ps)
  2. Read logs (docker_logs)
  3. Inspect env / mounts / health (docker_inspect)
  4. Watch CPU / memory (docker_stats)
  5. See networks (docker_networks)

Then they answer from evidence. The fixer sees the box.

Security model

Read-only by design. No start/stop/rm/exec. Diagnose, never destroy.
Opt-in. No socket mount, no docker access — the server reports that honestly.
Internal only. Socket access is still powerful. Do not publish this port.

Quick start

services:
  dockroot:
    image: jpanasuk/dockroot-mcp:latest
    container_name: dockroot
    restart: unless-stopped
    networks: [ai-network]
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock

Hermes

# ~/.hermes/config.yaml
mcp_servers:
  dockroot:
    command: python3
    args: ["/opt/dockroot/tavern_mcp.py"]

MCPO (Open WebUI / Tabby Tavern)

{
  "mcpServers": {
    "dockroot": { "command": "python3", "args": ["/opt/dockroot/tavern_mcp.py"] }
  }
}

Tabby Tavern v2.0.0 already runs MCPO at :8001 with the FastMCP stack tools. Dockroot is the optional “see the Docker daemon” add-on.

Links

Tabby Tavern stack · Sell sheet · Connectivity skill · Source · Docker Hub

Jeremy Panasuk. Read-only docker vision for local AI labs. Hermes Agent by Nous Research under the hood.