Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Komodo MCP Server

OCI · GHCR.IO/MP-TOOL/KOMODO-MCP-SERVER:1.5.0 · 2 COMPONENTS

MCP server for Komodo - manage Docker containers, servers, stacks, and deployments via AI

0 this week 67 Trust /100

Last scanned (1 hour ago)

Scores higher than 99% of OCI servers

Category Cloud Infrastructure

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security0
  • No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.Unverified
  • Known CVEs could not be checked: this image's dependency list comes from an SBOM its publisher attached, which nothing verifies, so we will not report it as a clean result. View diagnostics → Unverified
  • Install-script risk not yet assessed.Unverified
  • Dependency health could not be checked: this image's dependency list comes from an SBOM its publisher attached. It names packages and versions but not whether each is deprecated, still maintained or linked to its source, so there is nothing we can fairly grade.Unverified
Provenance & Transparency100
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to MP-Tool/komodo-mcp-server). View diagnostics → Pass
  • Clear OSI-approved license (GPL-3.0).Pass
  • Actively maintained (last published 85 days ago).Pass
  • Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability82
  • AI-judged instruction clarity (excellent).Pass
  • Tool/resource definitions use about 8790 tokens (~99/item across 88 items; 88 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 15 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 88 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 22 Oct 26 +1
    • Stability: 0.97 → pass security
  • 21 Oct 26 −1
    • Stability: pass → 0.97 functional
  • 17 Oct 26 +3
    • Stability: 0.80 → pass security
  • 16 Oct 26 −3
    • Stability: pass → 0.80 functional
  • 15 Oct 26 +1
    • Stability: 0.97 → pass security
  • 13 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.

  • 12 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 83 to 90. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.

  • 10 Oct 26 −2

    No change was recorded against any check on this day. Stability & Change Management went from 93 to 83.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Analysed oci/ghcr.io/mp-tool/komodo-mcp-server:1.5.0

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem oci
Reason Verified
Discovered via GitHub artifact attestations
Source repo MP-Tool/komodo-mcp-server
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/MP-Tool/komodo-mcp-server/.github/workflows/release.yml@refs/heads/main
Rekor log index 2424259861
Predicate type SLSA build provenance https://slsa.dev/provenance/v1
Subject digest sha256:3030d0c3f5edaf2023c46856e3fc20961d3dec2d7ce5a1da0b67913397d22edd

Background: How many MCP packages publish verified provenance →

Vulnerabilities 54 ungraded findings

From the publisher's SBOM, not graded. These advisories match packages listed in the SBOM the publisher attached to this image. A publisher naming a vulnerable package in their own image is credible, so we show them. Nothing verifies that SBOM, though, so the Known CVEs signal does not grade the image from it.

ID CVE Severity Vector Fix available
GHSA-f596-whhp-79r4 CVE-2026-101915 low CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N yes
GHSA-m9gg-hp2v-232j CVE-2026-101916 high CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N yes
GHSA-rmxm-3fg6-px4f CVE-2026-118663 medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N yes
GHSA-22jm-h49p-29qw CVE-2026-111767 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L yes
GHSA-46jr-4wx8-v453 CVE-2026-111768 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H yes
GHSA-6prh-2h8m-c8cw CVE-2026-111769 medium CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N yes
GHSA-6qxp-vccf-f47h CVE-2026-104850 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N yes
GHSA-f897-62hf-6gxq high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H yes
GHSA-rvq5-wwqv-78pq CVE-2026-111771 medium CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N yes
GHSA-jfc7-64v2-mr8c CVE-2026-48758 medium CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L yes
GHSA-27r3-jxmh-p828 CVE-2026-111181 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H yes
GHSA-3jxr-9vmj-r5cp CVE-2026-13149 medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L yes
GHSA-6j4f-fj2g-mc7p CVE-2026-102276 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H yes
GHSA-f886-m6hf-6m8v CVE-2026-33750 medium CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H yes
GHSA-mh99-v99m-4gvg CVE-2026-14257 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H yes
GHSA-q2hr-2g5m-vwhr CVE-2026-102277 medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L yes
GHSA-qhr7-859c-m2p7 CVE-2026-102278 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H yes
GHSA-rgw5-rvv9-x895 CVE-2026-69152 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H yes
GHSA-333x-w4r6-6crp CVE-2026-110725 low CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N yes
GHSA-5jgf-p345-68v8 CVE-2026-75931 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N yes
GHSA-f65p-4m7j-42xc CVE-2026-75975 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N yes
GHSA-fph4-wmhf-6fwf CVE-2026-75899 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N yes
GHSA-hrr3-gc8f-f4qj CVE-2026-86472 medium CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N yes
GHSA-jqff-g426-hqxp CVE-2026-76172 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N yes
GHSA-qw65-cvwx-89v3 CVE-2026-84292 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N yes
GHSA-w74x-v6f9-j3xg CVE-2026-110306 medium CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N yes
GHSA-wjr9-j795-jxcr CVE-2026-110180 medium CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N yes
GHSA-xhq7-xmqj-769h CVE-2026-110095 low CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N yes
GHSA-3g3m-2fjr-6pw4 CVE-2026-118773 medium yes
GHSA-5r4p-p66f-jhc7 CVE-2026-109955 medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N yes
GHSA-crvj-82cr-hjcx CVE-2026-84363 medium CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N yes
GHSA-g6gw-c38x-mqfc CVE-2026-84364 medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L yes
GHSA-gqvv-2mrq-wpjv CVE-2026-84365 medium CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N yes
GHSA-hxh3-vqpv-xpqv CVE-2026-93981 medium CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N yes
GHSA-h3mg-xc3c-68pw CVE-2026-101911 medium yes
GHSA-j6r3-76f7-8jcv CVE-2026-101912 medium yes
GHSA-mwp4-54f8-5fhr CVE-2026-69192 high yes
GHSA-rpw4-54j3-4h4q CVE-2026-101913 medium yes
GHSA-rxp7-6hxx-x8q5 CVE-2026-111997 medium yes
GHSA-v2v4-37r5-5v8g CVE-2026-42338 medium yes
GHSA-2vr4-cq9g-pvrc CVE-2026-101910 medium yes
GHSA-g3hv-75wg-m249 CVE-2026-118764 medium yes
GHSA-w4pp-8pjf-rmxw CVE-2026-9496 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H yes
GHSA-3v7f-55p6-f55p CVE-2026-33672 medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N yes
GHSA-c2c7-rcm5-vvqj CVE-2026-33671 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H yes
GHSA-rj75-hqrm-r3gf CVE-2026-104844 medium CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H yes
GHSA-w9m9-85wc-3x92 CVE-2026-9358 medium CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L yes
GHSA-jqcg-44mw-7w3h CVE-2026-90711 critical CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N yes
GHSA-4mjr-xmp4-gh2g CVE-2026-82417 medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L yes
GHSA-6pq8-jhm2-2vcw CVE-2026-110816 medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L yes

Showing 50 of 54 vulnerabilities.

Background: What a vulnerability scan can and cannot prove →

MCP tools · 88 exposed · ~8,790 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
komodo_action_action ~98

Run a Komodo Action end-to-end (long-running — polls until the underlying Update reaches Complete and returns the run logs). action='run' is currently the only verb.

NameTypeReqDescription
actionstringyesAction to perform.
action_idstringyesAction id or name to run
argsobject–Optional custom arguments merged on top of the Action's default arguments (exposed as `ARGS` in the script)
NameTypeReqDescription
actionstringyesAction name that was executed (start, stop, deploy, prune, ...)
resource_idstringyesTarget resource ID or name
resource_typestringyesTarget resource type (container, deployment, stack, server)
serverstring–Target server, when the action runs against a host
statusstringyesUpdate status reported by Komodo (Complete, InProgress, Queued, ...)
successbooleanyesWhether the action completed successfully
versionstring–Resulting version string, when the action produces one (e.g. deploy)

No examples provided.

komodo_action_apply ~147

Create or update a Komodo Action (PATCH-style). An Action is a scheduled Deno/TypeScript script that runs against the Komodo API. action="create": new Action. Required: name. action="update": existing Action (`action_id` required). Only fields in `config` change.

NameTypeReqDescription
actionstringyes'create' to register a new Action, 'update' to PATCH an existing one
action_idstring–Required when action='update' — existing Action id or name
configobject–Action configuration (PATCH-style)
namestring–Required when action='create' — unique name for the new Action
NameTypeReqDescription
actionstringyesWhich apply action was performed
resourceobject–Full resource returned by Komodo (when available)
resource_idstringyesResource id or name affected
resource_typestringyesTarget resource type

No examples provided.

komodo_action_delete ~39

Unregister an Action from Komodo. Cancels any future scheduled runs.

NameTypeReqDescription
action_idstringyesAction id or name to delete
NameTypeReqDescription
actionstringyesAlways 'remove' for delete tools
resourceobject–Snapshot of the deleted resource (when available)
resource_idstringyesResource id or name that was removed
resource_typestringyesTarget resource type

No examples provided.

komodo_action_info ~81

Get the full Komodo Action resource (script body, schedule, webhook config). The TypeScript script body is offloaded via a session-scoped resource link when available.

NameTypeReqDescription
action_idstringyesAction id or name
inline_fullboolean–If true, return the full payload inline instead of a compact summary. Default: false.
NameTypeReqDescription
info––Full Action resource (only when not offloaded as a resource link)
resourceLinkobject–Reference to a server-exposed resource
summaryobjectyes–

No examples provided.

komodo_action_list ~84

List all Actions registered in Komodo. An Action is a scheduled Deno/TypeScript script that runs against the Komodo API.

NameTypeReqDescription
cursorstring–Opaque pagination cursor returned by a previous list call. Omit for the first page.
page_sizeinteger–Maximum number of items to return (1-100). Default: 25.
NameTypeReqDescription
itemsarrayyesActions registered in Komodo
pageobject–Pagination envelope for list responses

No examples provided.

komodo_alerter_apply ~179

Create or update a Komodo Alerter (PATCH-style). Alerters route monitoring alerts to external sinks (Slack, Discord, custom HTTP, ...). action="create": new alerter. Required: name. Provide `config.endpoint` with discriminated `type` and provider params. action="update": existing alerter (`alerter` required). Only fields in `config` change.

NameTypeReqDescription
actionstringyes'create' to register a new alerter, 'update' to PATCH an existing one
alerterstring–Required when action='update' — existing alerter id or name
configobject–Alerter configuration (PATCH-style)
namestring–Required when action='create' — unique name for the new alerter
NameTypeReqDescription
actionstringyesWhich apply action was performed
resourceobject–Full resource returned by Komodo (when available)
resource_idstringyesResource id or name affected
resource_typestringyesTarget resource type

No examples provided.

komodo_alerter_delete ~50

Unregister an Alerter from Komodo. Future alerts that would have been routed here are dropped.

NameTypeReqDescription
alerterstringyesAlerter id or name to delete
NameTypeReqDescription
actionstringyesAlways 'remove' for delete tools
resourceobject–Snapshot of the deleted resource (when available)
resource_idstringyesResource id or name that was removed
resource_typestringyesTarget resource type

No examples provided.

komodo_alerter_info ~89

Get the full Komodo Alerter resource (endpoint configuration, alert filters, maintenance windows). Sensitive fields like webhook URLs are offloaded via a session-scoped resource link when available.

NameTypeReqDescription
alerterstringyesAlerter id or name
inline_fullboolean–If true, return the full payload inline instead of a compact summary. Default: false.
NameTypeReqDescription
info––Full Alerter resource (only when not offloaded as a resource link)
resourceLinkobject–Reference to a server-exposed resource
summaryobjectyes–

No examples provided.

komodo_alerter_list ~92

List all alerters registered in Komodo. Alerters are sinks (Slack, Discord, Custom HTTP, ...) that receive alerts when monitored resources change state.

NameTypeReqDescription
cursorstring–Opaque pagination cursor returned by a previous list call. Omit for the first page.
page_sizeinteger–Maximum number of items to return (1-100). Default: 25.
NameTypeReqDescription
itemsarrayyesAlerters registered in Komodo
pageobject–Pagination envelope for list responses

No examples provided.

komodo_build_action ~106

Run a lifecycle action on a Komodo Build. action=run: trigger build (long-running; polled to completion). action=cancel: abort in-progress build (fire-and-forget). Returns the resulting Update.

NameTypeReqDescription
actionstringyesBuild lifecycle action: `run` triggers a new build (long-running, polled until Complete), `cancel` aborts an in-progress build (fire-and-forget).
buildstringyesBuild id or name
NameTypeReqDescription
actionstringyesAction name that was executed (start, stop, deploy, prune, ...)
resource_idstringyesTarget resource ID or name
resource_typestringyesTarget resource type (container, deployment, stack, server)
serverstring–Target server, when the action runs against a host
statusstringyesUpdate status reported by Komodo (Complete, InProgress, Queued, ...)
successbooleanyesWhether the action completed successfully
versionstring–Resulting version string, when the action produces one (e.g. deploy)

No examples provided.

komodo_build_apply ~155

Create or update a Komodo Build (PATCH-style). Does not trigger a build — call `komodo_build_action` run afterwards. action="create": new build. Required: name. Provide repo/branch/builder in config. action="update": existing build (`build` required). Only fields in `config` change.

NameTypeReqDescription
actionstringyes'create' to register a new build, 'update' to PATCH an existing one
buildstring–Required when action='update' — existing build id or name
configobject–Build configuration (all fields optional, PATCH-style)
namestring–Required when action='create' — unique name for the new build
NameTypeReqDescription
actionstringyesWhich apply action was performed
resourceobject–Full resource returned by Komodo (when available)
resource_idstringyesResource id or name affected
resource_typestringyesTarget resource type

No examples provided.

komodo_build_delete ~41

Unregister a Build from Komodo. Does not delete previously pushed images from the registry.

NameTypeReqDescription
buildstringyesBuild id or name to delete
NameTypeReqDescription
actionstringyesAlways 'remove' for delete tools
resourceobject–Snapshot of the deleted resource (when available)
resource_idstringyesResource id or name that was removed
resource_typestringyesTarget resource type

No examples provided.

komodo_build_info ~83

Get the full Komodo Build resource for a single build, including its configuration (builder, repo/branch, image, dockerfile, build args, labels) and last-built metadata.

NameTypeReqDescription
buildstringyesBuild id or name
inline_fullboolean–If true, return the full payload inline instead of a compact summary. Default: false.
NameTypeReqDescription
info––Full build resource payload, when returned inline
resourceLinkobject–Reference to a server-exposed resource
summaryobjectyes–

No examples provided.

komodo_build_list ~92

List all builds registered in Komodo. Shows build id, name, current state (Building/Ok/Failed/Unknown), version, attached builder, source repo and branch.

NameTypeReqDescription
cursorstring–Opaque pagination cursor returned by a previous list call. Omit for the first page.
page_sizeinteger–Maximum number of items to return (1-100). Default: 25.
NameTypeReqDescription
itemsarrayyesBuilds registered in Komodo
pageobject–Pagination envelope for list responses

No examples provided.

komodo_build_logs ~80

Fetch per-stage logs from a previous build run. Pass the `update_id` returned by `komodo_build_action`.

NameTypeReqDescription
inline_fullboolean–If true, return the full payload inline instead of a compact summary. Default: false.
update_idstringyesKomodo Update id returned by a previous komodo_build_run call
NameTypeReqDescription
logsarray–Per-stage log entries from the build run
resourceLinkobject–Reference to a server-exposed resource
statusstringyesUpdate status (Complete, InProgress, Queued)
successbooleanyesOverall success of the build run
summaryobjectyes–
update_idstringyesKomodo Update ID providing these logs

No examples provided.

komodo_builder_apply ~197

Create or update a Komodo Builder (PATCH-style). Attach a builder to a Build's `builder_id` before running it. action="create": new builder. Required: name. In `config` set `builder_type` ("Url", "Server", or "Aws") and the fields for that backend (e.g. Server → server_id; Url → address; Aws → region, instance_type). action="update": existing builder (`builder` required). Only the `config` fields you set change.

NameTypeReqDescription
actionstringyes'create' to register a new builder, 'update' to PATCH an existing one
builderstring–Required when action='update' — existing builder id or name
configobject–Builder configuration — set `builder_type` and the fields for that backend
namestring–Required when action='create' — unique name for the new builder
NameTypeReqDescription
actionstringyesWhich apply action was performed
resourceobject–Full resource returned by Komodo (when available)
resource_idstringyesResource id or name affected
resource_typestringyesTarget resource type

No examples provided.

komodo_builder_copy ~61

Create a new Komodo Builder named `name`, copying the configuration of the builder at `id`.

NameTypeReqDescription
idstringyesId or name of the existing builder to copy the configuration from
namestringyesName for the new builder
NameTypeReqDescription
actionstringyesWhich apply action was performed
resourceobject–Full resource returned by Komodo (when available)
resource_idstringyesResource id or name affected
resource_typestringyesTarget resource type

No examples provided.

komodo_builder_delete ~45

Unregister a Builder from Komodo. Builds that reference this builder's id will fail until re-attached.

NameTypeReqDescription
builderstringyesBuilder id or name to delete
NameTypeReqDescription
actionstringyesAlways 'remove' for delete tools
resourceobject–Snapshot of the deleted resource (when available)
resource_idstringyesResource id or name that was removed
resource_typestringyesTarget resource type

No examples provided.

komodo_builder_info ~78

Get the full Komodo Builder resource (type, connection/instance configuration). Offloaded via a session-scoped resource link unless `inline_full` is set.

NameTypeReqDescription
builderstringyesBuilder id or name
inline_fullboolean–If true, return the full payload inline instead of a compact summary. Default: false.
NameTypeReqDescription
info––Full Builder resource (only when not offloaded as a resource link)
resourceLinkobject–Reference to a server-exposed resource
summaryobjectyes–

No examples provided.

komodo_builder_list ~94

List all builders registered in Komodo. Builders are compute targets Komodo uses to run Docker builds (Periphery address, a connected server, or an on-demand AWS EC2 instance).

NameTypeReqDescription
cursorstring–Opaque pagination cursor returned by a previous list call. Omit for the first page.
page_sizeinteger–Maximum number of items to return (1-100). Default: 25.
NameTypeReqDescription
itemsarrayyesBuilders registered in Komodo
pageobject–Pagination envelope for list responses

No examples provided.

komodo_builder_rename ~44

Rename a Komodo Builder.

NameTypeReqDescription
builderstringyesId or name of the builder to rename
namestringyesNew name for the builder
NameTypeReqDescription
actionstringyesAction name that was executed (start, stop, deploy, prune, ...)
resource_idstringyesTarget resource ID or name
resource_typestringyesTarget resource type (container, deployment, stack, server)
serverstring–Target server, when the action runs against a host
statusstringyesUpdate status reported by Komodo (Complete, InProgress, Queued, ...)
successbooleanyesWhether the action completed successfully
versionstring–Resulting version string, when the action produces one (e.g. deploy)

No examples provided.

komodo_container_action ~129

Run a lifecycle action on a Docker container: start, stop, restart, pause, or unpause. The container must exist on the target server. Note: pause/unpause use cgroups freezer; restart is stop+start.

NameTypeReqDescription
actionstringyesLifecycle action: start (run a stopped/paused container), stop (stop a running container), restart (stop+start), pause (freeze processes), unpause (resume).
containerstringyesContainer name or ID to perform the action on
serverstringyesServer ID or name where the container is running
NameTypeReqDescription
actionstringyesAction name that was executed (start, stop, deploy, prune, ...)
resource_idstringyesTarget resource ID or name
resource_typestringyesTarget resource type (container, deployment, stack, server)
serverstring–Target server, when the action runs against a host
statusstringyesUpdate status reported by Komodo (Complete, InProgress, Queued, ...)
successbooleanyesWhether the action completed successfully
versionstring–Resulting version string, when the action produces one (e.g. deploy)

No examples provided.

komodo_container_inspect ~92

Get detailed low-level information about a container. Returns Docker inspect data including configuration, state, network settings, mounts, and process info.

NameTypeReqDescription
containerstringyesContainer name or ID to inspect
inline_fullboolean–If true, return the full payload inline instead of a compact summary. Default: false.
serverstringyesServer ID or name where the container is running
NameTypeReqDescription
inspect––Raw Docker inspect payload, when returned inline
resourceLinkobject–Reference to a server-exposed resource
summaryobjectyes–

No examples provided.

komodo_container_list ~97

List all containers on a server, including running, stopped, and paused containers. Shows container name, state, and image.

NameTypeReqDescription
cursorstring–Opaque pagination cursor returned by a previous list call. Omit for the first page.
page_sizeinteger–Maximum number of items to return (1-100). Default: 25.
serverstringyesServer ID or name to list containers from
NameTypeReqDescription
itemsarrayyesContainers on the target server
pageobject–Pagination envelope for list responses

No examples provided.

komodo_container_logs ~125

Get stdout and stderr logs from a container. Useful for debugging, monitoring application output, and troubleshooting issues.

NameTypeReqDescription
containerstringyesContainer name or ID to get logs from
inline_fullboolean–If true, return the full payload inline instead of a compact summary. Default: false.
serverstringyesServer ID or name where the container is running
tailinteger–Number of lines to show from the end of logs. Default: 100
timestampsboolean–Show timestamps in log output. Default: false
NameTypeReqDescription
resourceLinkobject–Reference to a server-exposed resource
stderrstring–Captured stderr content (may be truncated)
stdoutstring–Captured stdout content (may be truncated)
summaryobjectyes–
truncatedboolean–True when the log output was truncated by the tail limit

No examples provided.

komodo_container_search_logs ~170

Search container logs for specific patterns or keywords. Retrieves logs and filters them client-side. Returns matching lines with a count of matches. Large match sets are offloaded as a session-scoped resource link unless `inline_full` is set.

NameTypeReqDescription
caseSensitiveboolean–Perform case-sensitive search. Default: false
containerstringyesContainer name or ID to search logs from
inline_fullboolean–If true, return the full payload inline instead of a compact summary. Default: false.
querystringyesSearch query or pattern to filter logs (plain text, not regex)
serverstringyesServer ID or name where the container is running
tailinteger–Number of lines to retrieve before filtering. Default: 1000
NameTypeReqDescription
matchesarrayyesMatched log lines
resourceLinkobject–Reference to a server-exposed resource
summaryobjectyes–
truncatedboolean–True when the search window was truncated by the tail limit

No examples provided.

komodo_deployment_action ~123

Lifecycle action on a deployment: deploy (recreate container), pull (image only), start, restart, pause, unpause, stop, destroy (remove container). destroy is destructive; config preserved.

NameTypeReqDescription
actionstringyesLifecycle action: deploy (create or re-deploy the container), pull (pull image without recreating), start (start a stopped container), restart (stop+start), pause/unpause (freeze/resume processes), s…
deploymentstringyesDeployment ID or name
NameTypeReqDescription
actionstringyesAction name that was executed (start, stop, deploy, prune, ...)
resource_idstringyesTarget resource ID or name
resource_typestringyesTarget resource type (container, deployment, stack, server)
serverstring–Target server, when the action runs against a host
statusstringyesUpdate status reported by Komodo (Complete, InProgress, Queued, ...)
successbooleanyesWhether the action completed successfully
versionstring–Resulting version string, when the action produces one (e.g. deploy)

No examples provided.

komodo_deployment_apply ~217

Create or update a Komodo deployment (Docker container, PATCH-style). action="create": new deployment. Required: name. Recommended: server_id, image. action="update": existing deployment (`deployment` required). Only fields in `config` change. Image accepts a string ("nginx:1.25") or { type: "Image"|"Build", params: {…} }.

NameTypeReqDescription
actionstringyes'create' to register a new deployment, 'update' to PATCH an existing one
configobject–Deployment configuration fields to update (partial update)
deploymentstring–Required when action='update' — existing deployment id or name
image––Convenience field for action='create' — Docker image to deploy (mirrors `config.image`)
namestring–Required when action='create' — unique name for the new deployment
server_idstring–Convenience field for action='create' — target server (mirrors `config.server_id`)
NameTypeReqDescription
actionstringyesWhich apply action was performed
resourceobject–Full resource returned by Komodo (when available)
resource_idstringyesResource id or name affected
resource_typestringyesTarget resource type

No examples provided.

komodo_deployment_delete ~40

Delete a Komodo deployment. Removes the deployment configuration and stops/removes the associated container.

NameTypeReqDescription
deploymentstringyesDeployment ID or name
NameTypeReqDescription
actionstringyesAlways 'remove' for delete tools
resourceobject–Snapshot of the deleted resource (when available)
resource_idstringyesResource id or name that was removed
resource_typestringyesTarget resource type

No examples provided.

komodo_deployment_info ~72

Get detailed information about a Komodo-managed deployment, including its configuration, current state, and assigned server.

NameTypeReqDescription
deploymentstringyesDeployment ID or name to get info for
inline_fullboolean–If true, return the full payload inline instead of a compact summary. Default: false.
NameTypeReqDescription
info––Full deployment resource payload, when returned inline
resourceLinkobject–Reference to a server-exposed resource
summaryobjectyes–

No examples provided.

komodo_deployment_list ~86

List all Komodo-managed deployments. Deployments are single-container applications managed by Komodo. Shows deployment name, ID, and current state.

NameTypeReqDescription
cursorstring–Opaque pagination cursor returned by a previous list call. Omit for the first page.
page_sizeinteger–Maximum number of items to return (1-100). Default: 25.
NameTypeReqDescription
itemsarrayyesDeployments visible to the caller
pageobject–Pagination envelope for list responses

No examples provided.

komodo_docker_image_history ~84

Get the layer history of a Docker image (each build step, its size, and the command that produced it).

NameTypeReqDescription
imagestringyesImage name or ID
inline_fullboolean–If true, return the full payload inline instead of a compact summary. Default: false.
serverstringyesServer ID or name (required)
NameTypeReqDescription
itemsarrayyesImage layer history, most recent first
resourceLinkobject–Reference to a server-exposed resource
summaryobjectyes–

No examples provided.

komodo_docker_image_inspect ~84

Get detailed Docker inspect data for an image (config, layers, exposed ports, env, labels).

NameTypeReqDescription
imagestringyesImage name or ID to inspect
inline_fullboolean–If true, return the full payload inline instead of a compact summary. Default: false.
serverstringyesServer ID or name (required)
NameTypeReqDescription
inspect––Raw Docker image inspect payload, when returned inline
resourceLinkobject–Reference to a server-exposed resource
summaryobjectyes–

No examples provided.

komodo_docker_image_list ~88

List Docker images cached locally on a server, with size and in-use status.

NameTypeReqDescription
cursorstring–Opaque pagination cursor returned by a previous list call. Omit for the first page.
page_sizeinteger–Maximum number of items to return (1-100). Default: 25.
serverstringyesServer ID or name (required)
NameTypeReqDescription
itemsarrayyesDocker images cached on the target server
pageobject–Pagination envelope for list responses

No examples provided.

komodo_docker_network_inspect ~83

Get detailed Docker inspect data for a network (subnets, connected containers, IPAM config).

NameTypeReqDescription
inline_fullboolean–If true, return the full payload inline instead of a compact summary. Default: false.
networkstringyesNetwork name or ID to inspect
serverstringyesServer ID or name (required)
NameTypeReqDescription
inspect––Raw Docker network inspect payload, when returned inline
resourceLinkobject–Reference to a server-exposed resource
summaryobjectyes–

No examples provided.

komodo_docker_network_list ~84

List Docker networks on a server, with driver and scope.

NameTypeReqDescription
cursorstring–Opaque pagination cursor returned by a previous list call. Omit for the first page.
page_sizeinteger–Maximum number of items to return (1-100). Default: 25.
serverstringyesServer ID or name (required)
NameTypeReqDescription
itemsarrayyesDocker networks on the target server
pageobject–Pagination envelope for list responses

No examples provided.

komodo_docker_volume_inspect ~78

Get detailed Docker inspect data for a volume (labels, driver options, scope).

NameTypeReqDescription
inline_fullboolean–If true, return the full payload inline instead of a compact summary. Default: false.
serverstringyesServer ID or name (required)
volumestringyesVolume name to inspect
NameTypeReqDescription
inspect––Raw Docker volume inspect payload, when returned inline
resourceLinkobject–Reference to a server-exposed resource
summaryobjectyes–

No examples provided.

komodo_docker_volume_list ~90

List Docker volumes on a server, with driver, mountpoint, and in-use status.

NameTypeReqDescription
cursorstring–Opaque pagination cursor returned by a previous list call. Omit for the first page.
page_sizeinteger–Maximum number of items to return (1-100). Default: 25.
serverstringyesServer ID or name (required)
NameTypeReqDescription
itemsarrayyesDocker volumes on the target server
pageobject–Pagination envelope for list responses

No examples provided.

komodo_exec ~261

Execute a shell command on a Komodo target. `target` selects the context: server (server[, shell, terminal]) | container (server, container[, shell]) | deployment (deployment[, shell]) | stack_service (stack, service[, shell]). Output ≤50 KB; timeout 5 min.

NameTypeReqDescription
commandstringyesThe shell command to execute
containerstring–Required for 'container': container name or id
deploymentstring–Required for 'deployment': deployment id or name
serverstring–Required for 'server' / 'container': Komodo server id or name
servicestring–The service name within the stack to execute the command in
shellstring–The shell to use for execution (e.g. 'sh', 'bash', '/bin/zsh'). For 'server' target: used as the terminal init command. Default: sh
stackstring–Required for 'stack_service': stack id or name
targetstringyesExecution context: server | container | deployment | stack_service
terminalstring–Terminal session name on the server. If it doesn't exist, it will be created. Default: mcp
NameTypeReqDescription
commandstringyesThe shell command that was executed
containerstring–Container, when target = container
deploymentstring–Deployment, when target = deployment
exit_codestring|nullyesExit code reported by Komodo, or null when unknown
outputstringyesCombined stdout/stderr stream as captured (may be truncated)
serverstring–Server context, when the target requires it
servicestring–Service name within the stack, when target = stack_service
stackstring–Stack, when target = stack_service
targetstringyesExecution context that ran
truncatedbooleanyesTrue when the output buffer was truncated by size or timeout

No examples provided.

komodo_health_check ~38

Check the Komodo connection status. Returns health, authentication status, and API version. Works without an active connection (reports unconfigured state).

Input schema present but exposes no named parameters.

NameTypeReqDescription
configuredbooleanyesWhether a Komodo client connection has been configured
errorstring–Error message when the health probe failed
healthybooleanyesWhether the Komodo server responded successfully to a health probe
komodo_versionstring–Komodo Core version reported by the health probe
mcp_server_versionstringyesVersion of this MCP server
serverstring–Komodo Core URL the client is bound to, when configured

No examples provided.

komodo_procedure_action ~68

Procedure action. action='run': run a Komodo Procedure end-to-end (long-running — polls until the underlying Update reaches Complete and returns the per-stage logs).

NameTypeReqDescription
actionstringyesAction to perform on the procedure.
procedurestringyesProcedure id or name
NameTypeReqDescription
actionstringyesAction name that was executed (start, stop, deploy, prune, ...)
resource_idstringyesTarget resource ID or name
resource_typestringyesTarget resource type (container, deployment, stack, server)
serverstring–Target server, when the action runs against a host
statusstringyesUpdate status reported by Komodo (Complete, InProgress, Queued, ...)
successbooleanyesWhether the action completed successfully
versionstring–Resulting version string, when the action produces one (e.g. deploy)

No examples provided.

komodo_procedure_apply ~144

Create or update a Komodo Procedure (PATCH-style). A procedure is a multi-stage workflow run manually or on schedule. action="create": new procedure. Required: name. action="update": existing procedure (`procedure` required). Only fields in `config` change.

NameTypeReqDescription
actionstringyes'create' to register a new procedure, 'update' to PATCH an existing one
configobject–Procedure configuration (all fields optional, PATCH-style)
namestring–Required when action='create' — unique name for the new procedure
procedurestring–Required when action='update' — existing procedure id or name
NameTypeReqDescription
actionstringyesWhich apply action was performed
resourceobject–Full resource returned by Komodo (when available)
resource_idstringyesResource id or name affected
resource_typestringyesTarget resource type

No examples provided.

komodo_procedure_delete ~39

Unregister a Procedure from Komodo. Cancels any future scheduled runs.

NameTypeReqDescription
procedurestringyesProcedure id or name to delete
NameTypeReqDescription
actionstringyesAlways 'remove' for delete tools
resourceobject–Snapshot of the deleted resource (when available)
resource_idstringyesResource id or name that was removed
resource_typestringyesTarget resource type

No examples provided.

komodo_procedure_info ~61

Get the full Komodo Procedure resource (configuration, stages, schedule).

NameTypeReqDescription
inline_fullboolean–If true, return the full payload inline instead of a compact summary. Default: false.
procedurestringyesProcedure id or name
NameTypeReqDescription
info––Full Procedure resource (only when not offloaded as a resource link)
resourceLinkobject–Reference to a server-exposed resource
summaryobjectyes–

No examples provided.

komodo_procedure_list ~83

List all procedures registered in Komodo. A procedure is a multi-stage workflow that can be triggered manually or on a schedule.

NameTypeReqDescription
cursorstring–Opaque pagination cursor returned by a previous list call. Omit for the first page.
page_sizeinteger–Maximum number of items to return (1-100). Default: 25.
NameTypeReqDescription
itemsarrayyesProcedures registered in Komodo
pageobject–Pagination envelope for list responses

No examples provided.

komodo_repo_action ~90

Lifecycle action on a Komodo Repo. clone/pull/build are long-running and polled to completion. cancel_build is fire-and-forget.

NameTypeReqDescription
actionstringyesLifecycle action: clone (initial git clone on attached server), pull (git pull), build (run repo build via builder), cancel_build (cancel an in-progress build).
repostringyesRepo id or name
NameTypeReqDescription
actionstringyesAction name that was executed (start, stop, deploy, prune, ...)
resource_idstringyesTarget resource ID or name
resource_typestringyesTarget resource type (container, deployment, stack, server)
serverstring–Target server, when the action runs against a host
statusstringyesUpdate status reported by Komodo (Complete, InProgress, Queued, ...)
successbooleanyesWhether the action completed successfully
versionstring–Resulting version string, when the action produces one (e.g. deploy)

No examples provided.

komodo_repo_apply ~149

Create or update a Komodo Repo (PATCH-style). Not cloned automatically — call `komodo_repo_action` clone afterwards. action="create": new repo. Required: name. action="update": existing repo (`repo` required). Only fields in `config` change.

NameTypeReqDescription
actionstringyes'create' to register a new repo, 'update' to PATCH an existing one
configobject–Repo configuration fields to update (partial update — only specified fields are changed)
namestring–Required when action='create' — unique name for the new repo
repostring–Required when action='update' — existing repo id or name
NameTypeReqDescription
actionstringyesWhich apply action was performed
resourceobject–Full resource returned by Komodo (when available)
resource_idstringyesResource id or name affected
resource_typestringyesTarget resource type

No examples provided.

komodo_repo_delete ~42

Unregister a Repo from Komodo. Does not affect the cloned working copy on the server.

NameTypeReqDescription
repostringyesRepo id or name to delete
NameTypeReqDescription
actionstringyesAlways 'remove' for delete tools
resourceobject–Snapshot of the deleted resource (when available)
resource_idstringyesResource id or name that was removed
resource_typestringyesTarget resource type

No examples provided.

komodo_repo_info ~61

Get the full Komodo Repo resource (configuration + last clone/build metadata).

NameTypeReqDescription
inline_fullboolean–If true, return the full payload inline instead of a compact summary. Default: false.
repostringyesRepo id or name
NameTypeReqDescription
info––Full repo resource payload, when returned inline
resourceLinkobject–Reference to a server-exposed resource
summaryobjectyes–

No examples provided.

komodo_repo_list ~92

List all repos registered in Komodo. Shows id, name, state, attached server/builder, configured repo+branch, and the cloned/built/latest short commit hashes.

NameTypeReqDescription
cursorstring–Opaque pagination cursor returned by a previous list call. Omit for the first page.
page_sizeinteger–Maximum number of items to return (1-100). Default: 25.
NameTypeReqDescription
itemsarrayyesRepos registered in Komodo
pageobject–Pagination envelope for list responses

No examples provided.

Install

How do I install the Komodo MCP Server server?

Komodo MCP Server runs locally as a container image, launched with docker run --rm -i -e KOMODO_URL -e KOMODO_API_KEY -e KOMODO_API_SECRET -e KOMODO_USERNAME -e KOMODO_PASSWORD ghcr.io/mp-tool/komodo-mcp-server:1.5.0. Ready-made configuration for Claude, Cursor, VS Code, Codex and 3 more is on this page, copied from each client's own documentation.

oci · ghcr.io/mp-tool/komodo-mcp-server:1.5.0

# add to Claude Code
claude mcp add mp-tool-komodo-mcp-server -- docker run --rm -i -e KOMODO_URL -e KOMODO_API_KEY -e KOMODO_API_SECRET -e KOMODO_USERNAME -e KOMODO_PASSWORD ghcr.io/mp-tool/komodo-mcp-server:1.5.0

This image reads KOMODO_URL, KOMODO_API_KEY, KOMODO_API_SECRET, KOMODO_USERNAME and KOMODO_PASSWORD. Set them in your client's env block for this server; docker run -e passes each one through to the container.

Common questions

What is the Komodo MCP Server server?

Komodo MCP Server is listed in the public MCP registry as io.github.MP-Tool/komodo-mcp-server. MCP server for Komodo - manage Docker containers, servers, stacks, and deployments via AI. This page covers its container image (ghcr.io/mp-tool/komodo-mcp-server:1.5.0).

Is the Komodo MCP Server server safe to use?

Komodo MCP Server scores 67 out of 100 on VerifyMCP. The SBOM its publisher attached lists packages with 54 known advisories as of 5 November 2026. We do not grade that SBOM, as nothing verifies it. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Komodo MCP Server server expose?

Komodo MCP Server exposes 88 tools: komodo_health_check, komodo_container_list, komodo_container_inspect, komodo_container_logs, komodo_container_search_logs, and 83 more. Their descriptions and schemas cost roughly 8,790 tokens of context every time the server is loaded.

Is the Komodo MCP Server server still maintained?

Komodo MCP Server is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the Komodo MCP Server server under?

Komodo MCP Server declares the GPL-3.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.