Potencialize seu agente
A URL do próprio publicador. Não é um endpoint do PlugMCP.
Host a copy with our keys and logs.
https://unbearable-dev--docker-compose-audit.apify.actor/mcpO botão do Claude acima abre o Claude com o nome e a URL preenchidos. Você ainda precisa confirmar lá.
claude mcp add --transport http io.github.unbearabledev-docker-compose-audit https://unbearable-dev--docker-compose-audit.apify.actor/mcpRun in a terminal.
{ "mcpServers": { "io.github.unbearabledev-docker-compose-audit": { "command": "npx", "args": [ "-y", "mcp-remote", "https://unbearable-dev--docker-compose-audit.apify.actor/mcp" ] } }}claude_desktop_config.json
URL remota ou um comando na sua máquina? Como as duas instalações diferem
Rodar no PlugMCP
A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.
AbrirDo publicador
MCP server that audits
docker-compose.ymlfiles for security misconfigurations. Trivy-grade check catalog, designed for AI agents — every finding ships with a severity rating, full remediation text, and a YAML fix snippet you can paste.
Built by Unbearable Labs. Pay-per-event pricing — you only pay when an audit runs.
Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.
Newsletter: Unbearable TechTips Weekly · All Actors: github.com/UnbearableDev
Point any MCP-capable client (Claude Desktop, Cursor, n8n, Make, Zapier, custom agents) at this server, hand it the contents of a docker-compose.yml, and get back a structured report with:
All audit-running tools accept the same input:
compose_yaml (string) — paste the YAML content directly, ORcompose_url (string) — public HTTPS URL to fetch (e.g. GitHub raw URL)Provide exactly one. min_severity defaults to low (drops info findings); set to medium or high to filter further.
{
"summary": {
"total_findings": 14,
"by_severity": {"high": 3, "medium": 6, "low": 5, "info": 0},
"by_category": {"privilege": 4, "network": 3, "secrets": 2, "...": 5}
},
"findings": [
{
"id": "DCS-002",
"category": "privilege",
"severity": "high",
"service": "web",
"title": "Privileged mode enabled",
"description": "Service 'web' has `privileged: true`...",
"remediation": "Remove `privileged: true`. If you need specific capabilities...",
"fix_yaml_snippet": " # remove `privileged: true`; if needed, use cap_add or devices selectively",
"references": ["CIS-Docker-5.4", "NIST-800-190"]
},
...
]
}
You pay only when a tool is invoked. No subscription, no monthly minimums.
Use list_checks to get the canonical, up-to-date catalog with IDs, severities, and titles.
Add to your MCP config:
{
"mcpServers": {
"compose-audit": {
"transport": "streamable-http",
"url": "https://YOUR-ACTOR-URL.apify.actor/mcp"
}
}
}
(Replace YOUR-ACTOR-URL with the Standby URL shown on the Apify Store page after you start the Actor.)
Pure static analysis of the compose file only. Out of scope for this version:
The next 29 checks on the v1.x → v2 roadmap include build-context security, additional capability checks, secret-pattern detection in build args, and registry trust verification.
Issues, ideas, or false-positive reports: open an issue on the GitHub repo or email [email protected].
get the weekly newsletter(https://unbearabletechtips.beehiiv.com).
Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.
{ "mcpServers": { "io.github.unbearabledev-docker-compose-audit": { "url": "https://unbearable-dev--docker-compose-audit.apify.actor/mcp", "headers": {} } }}Ferramentas
Ainda não há lista de ferramentas. Servidores remotos recebem uma após a primeira verificação de saúde.
Perguntas frequentes
Copie nesta página a configuração http para Cursor, Claude Desktop, Claude Code ou VS Code. Ela usa a instalação do publicador, não um proxy do PlugMCP.
Este registro não lista nenhuma variável de ambiente obrigatória.
Docker Compose Audit é acessado por HTTP.
Última verificação: 2026-11-09. Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.