
How to add Docker MCP Server to Windsurf
Community server to manage Docker containers, images, volumes, and Compose stacks via agents. Paste the config into ~/.codeium/windsurf/mcp_config.json and restart Windsurf.
Last updated June 15, 2026 · 720★ · stdio · no auth
Windsurf config for Docker MCP Server
uvx mcp-server-docker{
"mcpServers": {
"docker-mcp-server": {
"command": "uvx",
"args": [
"mcp-server-docker"
]
}
}
}Requires `uv` (the Python package runner). Install it from https://docs.astral.sh/uv/ if `uvx` is not found.
Setup steps
- 1Open Windsurf → Cascade → the hammer/MCP icon → Configure (or edit ~/.codeium/windsurf/mcp_config.json).
- 2Paste the Docker MCP Server config below.
- 3Fill in placeholder secrets, then save.
- 4Click Refresh in the MCP panel.
- 5Docker MCP Server's tools become available to Cascade.
Before you start
- A running Docker daemon (local via the Docker socket, or a remote daemon reachable over SSH)
- Python with the `uv`/`uvx` package manager (or Docker, to run the server itself as a container)
- No API key required — it uses your local Docker engine permissions
- An MCP-capable client such as Claude Desktop
What Docker MCP Server can do in Windsurf
list_containersList Docker containers, including stopped ones.
create_containerCreate a container from an image without starting it.
run_containerCreate and start a container in one step.
recreate_containerStop, remove, and re-create a container (used by the compose flow).
start_containerStart an existing stopped container.
stop_containerStop a running container.
remove_containerRemove a container.
fetch_container_logsRetrieve logs from a container.
Security
Full access to the Docker daemon is effectively root-equivalent on the host, so only connect it to a Docker context you trust the agent to control. When containerized it requires mounting the Docker socket, which grants broad host privileges.
Docker MCP Server + Windsurf FAQ
Where is the Windsurf config file?
Windsurf reads MCP servers from ~/.codeium/windsurf/mcp_config.json. Paste the Docker MCP Server config there under the "mcpServers" key and restart the client.
Is Docker MCP Server safe to use with Windsurf?
Full access to the Docker daemon is effectively root-equivalent on the host, so only connect it to a Docker context you trust the agent to control. When containerized it requires mounting the Docker socket, which grants broad host privileges.
Does it need an API key?
No. It talks directly to your local Docker daemon and inherits your Docker permissions. There is no token to configure.
Can it manage a remote Docker host?
Yes. It supports connecting to a remote Docker daemon over SSH, so you can drive a remote host from a local agent.
Can it run privileged containers?
No. The server intentionally does not support privileged options like --privileged or --cap-add/--cap-drop, and it warns against storing sensitive data in container configurations.