Dockerfile Audit MCP Server

io.github.UnbearableDev/dockerfile-audit

What is the Dockerfile Audit MCP server?

Hadolint-grade Dockerfile audit — 19 checks: secrets, privileges, supply chain, hygiene.

Copy-paste configuration for popular MCP clients.

transport: http

Config generated by PluginBench — verify against the source before use.

Environment / auth

Authorization
required
secret
Apify API token. Format: 'Bearer <YOUR_APIFY_TOKEN>'. Get yours at https://console.apify.com/account/integrations

~/.cursor/mcp.json

{
  "mcpServers": {
    "dockerfile-audit": {
      "url": "https://unbearable-dev--dockerfile-audit.apify.actor/mcp"
    }
  }
}

Active

GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.

Python

Active

Hungarian postcode lookup + validation - 3,484 codes, sub-10ms lookups, bulk address endpoint.

Python

Active

Four IaC audits in one call: Compose, Dockerfile, GitHub Actions, Kubernetes. 131 checks.

Python

Active

kube-linter audit for Kubernetes manifests — 63 checks: security, availability, RBAC, network.

Python

Active

Compiler-precise code property graph for C, Python, and TypeScript, navigable over MCP.

Python

AGPL-3.0

Active

AI-native process classification. 2436 processes + 3284 KPIs from APQC, ITIL, SCOR.

Python

MIT