Power your agent
URL ของผู้เผยแพร่เอง ไม่ใช่เอนด์พอยต์ของ PlugMCP
Host a copy with our keys and logs.
https://unbearable-dev--docker-compose-audit.apify.actor/mcpปุ่ม Claude ด้านบนจะเปิด Claude พร้อมกรอกชื่อและ URL ให้แล้ว คุณยังต้องยืนยันที่นั่นเอง
claude mcp add --transport http io.github.unbearabledev-docker-compose-audit https://unbearable-dev--docker-compose-audit.apify.actor/mcpRun in a terminal.
{ "mcpServers": { "io.github.unbearabledev-docker-compose-audit": { "command": "npx", "args": [ "-y", "mcp-remote", "https://unbearable-dev--docker-compose-audit.apify.actor/mcp" ] } }}claude_desktop_config.json
URL แบบรีโมตหรือคำสั่งบนเครื่องของคุณ? การติดตั้งสองแบบต่างกันอย่างไร
รันบน PlugMCP
A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.
เปิดจากผู้เผยแพร่
MCP server that audits
docker-compose.ymlfiles for security misconfigurations. Trivy-grade check catalog, designed for AI agents — every finding ships with a severity rating, full remediation text, and a YAML fix snippet you can paste.
Built by Unbearable Labs. Pay-per-event pricing — you only pay when an audit runs.
Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.
Newsletter: Unbearable TechTips Weekly · All Actors: github.com/UnbearableDev
Point any MCP-capable client (Claude Desktop, Cursor, n8n, Make, Zapier, custom agents) at this server, hand it the contents of a docker-compose.yml, and get back a structured report with:
All audit-running tools accept the same input:
compose_yaml (string) — paste the YAML content directly, ORcompose_url (string) — public HTTPS URL to fetch (e.g. GitHub raw URL)Provide exactly one. min_severity defaults to low (drops info findings); set to medium or high to filter further.
{
"summary": {
"total_findings": 14,
"by_severity": {"high": 3, "medium": 6, "low": 5, "info": 0},
"by_category": {"privilege": 4, "network": 3, "secrets": 2, "...": 5}
},
"findings": [
{
"id": "DCS-002",
"category": "privilege",
"severity": "high",
"service": "web",
"title": "Privileged mode enabled",
"description": "Service 'web' has `privileged: true`...",
"remediation": "Remove `privileged: true`. If you need specific capabilities...",
"fix_yaml_snippet": " # remove `privileged: true`; if needed, use cap_add or devices selectively",
"references": ["CIS-Docker-5.4", "NIST-800-190"]
},
...
]
}
You pay only when a tool is invoked. No subscription, no monthly minimums.
Use list_checks to get the canonical, up-to-date catalog with IDs, severities, and titles.
Add to your MCP config:
{
"mcpServers": {
"compose-audit": {
"transport": "streamable-http",
"url": "https://YOUR-ACTOR-URL.apify.actor/mcp"
}
}
}
(Replace YOUR-ACTOR-URL with the Standby URL shown on the Apify Store page after you start the Actor.)
Pure static analysis of the compose file only. Out of scope for this version:
The next 29 checks on the v1.x → v2 roadmap include build-context security, additional capability checks, secret-pattern detection in build args, and registry trust verification.
Issues, ideas, or false-positive reports: open an issue on the GitHub repo or email [email protected].
get the weekly newsletter(https://unbearabletechtips.beehiiv.com).
Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.
{ "mcpServers": { "io.github.unbearabledev-docker-compose-audit": { "url": "https://unbearable-dev--docker-compose-audit.apify.actor/mcp", "headers": {} } }}เครื่องมือ
ยังไม่มีรายการเครื่องมือ เซิร์ฟเวอร์แบบรีโมตจะได้รายการหลังการตรวจสอบสถานะครั้งแรก
FAQ
คัดลอกคอนฟิก http สำหรับ Cursor, Claude Desktop, Claude Code หรือ VS Code ได้ในหน้านี้ คอนฟิกนี้ใช้การติดตั้งของผู้เผยแพร่ ไม่ใช่พร็อกซีของ PlugMCP
ระเบียนนี้ไม่ได้ระบุตัวแปรสภาพแวดล้อมที่จำเป็น
Docker Compose Audit เข้าถึงได้ผ่าน HTTP
ตรวจสอบล่าสุดเมื่อ 2026-11-09 Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.