Docker MCP Gateway

Docker MCP Gateway is Docker’s open-source gateway for Model Context Protocol servers. Distributed as a Docker CLI plugin, it runs MCP servers in isolated containers and exposes them to AI clients through a single, controlled endpoint, adding the security, observability and configuration management that raw MCP connections lack. It is an open-source project on GitHub with around 1,600 stars, actively maintained with updates in 2026.

Overview

MCP lets language models call external tools, but pointing a client at dozens of independently run servers is hard to secure and audit. The MCP Gateway sits in the middle: it pulls server images from the Docker MCP Catalog, starts them with restricted privileges and secrets injected safely, and routes tool calls from clients such as Claude, Cursor and VS Code through one gateway. Administrators can enable or disable servers and tools centrally, log tool calls, and block calls that violate policy, bringing MCP usage in teams under the same governance as other infrastructure.

Key Features

• Runs MCP servers in sandboxed Docker containers with restricted privileges
• Single gateway endpoint for all MCP clients and servers
• Central configuration: enable servers and individual tools per profile
• Secure secret handling without exposing keys to clients or servers
• Call logging and optional interception for auditing and policy
• Works with the Docker MCP Catalog and Toolkit ecosystem

💳 Pricing

Docker MCP Gateway is free and open source under the MIT license. It runs anywhere Docker runs.

Who Is It For

Developers and platform teams adopting MCP who want container isolation, secrets management and auditability for the tools they give AI agents.