Dockerfile Security Audit MCP Server: Install & Setup

Install Dockerfile Security Audit in Claude Code

Claude Code

claude mcp add --transport http dockerfile-security-audit https://dockerfile-audit-mcp.mcpize.run/mcp

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "dockerfile-security-audit": {
      "url": "https://dockerfile-audit-mcp.mcpize.run/mcp"
    }
  }
}

Frequently asked questions

What does the Dockerfile Security Audit MCP server do?

Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.

Is the Dockerfile Security Audit MCP server free?

The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.

Does Dockerfile Security Audit run locally or remotely?

Remote. Hosted by the provider. You connect with a URL, nothing to install.

How do I add Dockerfile Security Audit to Claude Code?

Run: claude mcp add --transport http dockerfile-security-audit https://dockerfile-audit-mcp.mcpize.run/mcp

More cloud platforms MCP servers

View all

Kloudle Cloud Security Scanner

io.github.Kloudle/cloud-security-scanner

AWS cloud security scanners for AI agents — S3, IAM, EC2, EKS, RDS, CloudTrail, CloudWatch Logs

RemoteAccount needed

Dockerfile Audit

UnbearableDev/dockerfile-audit

Hadolint-grade Dockerfile audit — 19 checks: secrets, privileges, supply chain, hygiene.

RemoteAccount needed

Kubernetes Manifest Audit

UnbearableDev/k8s-manifest-audit

kube-linter audit for Kubernetes manifests — 63 checks: security, availability, RBAC, network.

RemoteAccount needed

Docker Compose Audit

UnbearableDev/docker-compose-audit

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

RemoteAccount needed

Levelfour API

LevelFourAI/levelfour-api

Cloud cost visibility and savings recommendations grounded in your actual AWS, GCP and Azure bill.

RemoteAccount needed

Devstack

IsaiahDupree/devstack-mcp

Dev-registry data: npm/PyPI/Docker/VS Code packages, dep graphs, vulns, 50+ ecosystems.

RemoteAccount needed