docker mcp gateway run
Description | Run the gateway |
---|---|
Usage | docker mcp gateway run |
Description
Run the gateway
Options
Option | Default | Description |
---|---|---|
--additional-catalog | Additional catalog paths to append to the default catalogs | |
--additional-config | Additional config paths to merge with the default config.yaml | |
--additional-registry | Additional registry paths to merge with the default registry.yaml | |
--block-network | Block tools from accessing forbidden network resources | |
--block-secrets | true | Block secrets from being/received sent to/from tools |
--catalog | [docker-mcp.yaml] | Paths to docker catalogs (absolute or relative to ~/.docker/mcp/catalogs/) |
--config | [config.yaml] | Paths to the config files (absolute or relative to ~/.docker/mcp/) |
--cpus | 1 | CPUs allocated to each MCP Server (default is 1) |
--debug-dns | Debug DNS resolution | |
--dry-run | Start the gateway but do not listen for connections (useful for testing the configuration) | |
--interceptor | List of interceptors to use (format: when:type:path, e.g. 'before:exec:/bin/path') | |
--log-calls | true | Log calls to the tools |
--long-lived | Containers are long-lived and will not be removed until the gateway is stopped, useful for stateful servers | |
--memory | 2Gb | Memory allocated to each MCP Server (default is 2Gb) |
--port | TCP port to listen on (default is to listen on stdio) | |
--registry | [registry.yaml] | Paths to the registry files (absolute or relative to ~/.docker/mcp/) |
--secrets | docker-desktop | Colon separated paths to search for secrets. Can be docker-desktop or a path to a .env file (default to using Docker Desktop's secrets API) |
--servers | Names of the servers to enable (if non empty, ignore --registry flag) | |
--static | Enable static mode (aka pre-started servers) | |
--tools | List of tools to enable | |
--transport | stdio | stdio, sse or streaming (default is stdio) |
--verbose | Verbose output | |
--verify-signatures | Verify signatures of the server images | |
--watch | true | Watch for changes and reconfigure the gateway |