Back to Browse

Podman MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

MCP server for Podman container management via the Podman REST API

About

MCP server for Podman container management via the Podman REST API

Security Report

4.2
Use Caution4.2High Risk

A well-structured Podman MCP server with proper authentication via Unix socket access control and D-Bus validation. Code quality is good with strong input validation and appropriate error handling. Permissions align with the server's purpose (container management). Minor findings related to subprocess invocation and broad exception handling do not materially impact security given the constrained operational context. Supply chain analysis found 6 known vulnerabilities in dependencies (1 critical, 3 high severity). Package verification found 1 issue.

7 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

system_info

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

process_spawn

Check that this permission is expected for this type of plugin.

dbus

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

NoOptional

Environment variable: PODMAN_SOCKET

NoOptional

Environment variable: PODMAN_SOCKET_FILE

NoOptional

Environment variable: PODMAN_TIMEOUT

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-crunchtools-podman": {
      "env": {
        "PODMAN_SOCKET": "your-podman-socket-here",
        "PODMAN_TIMEOUT": "your-podman-timeout-here",
        "PODMAN_SOCKET_FILE": "your-podman-socket-file-here"
      },
      "args": [
        "mcp-podman-crunchtools"
      ],
      "command": "uvx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

mcp-podman-crunchtools

MCP server for Podman container management via the Podman REST API. Manages containers, images, pods, networks, volumes, and system info. Supports both rootful and rootless Podman.

Installation

# uvx (zero-install)
uvx mcp-podman-crunchtools

# pip
pip install mcp-podman-crunchtools

# Container
podman run -v /run/podman/podman.sock:/run/podman/podman.sock:z \
  --security-opt label=type:container_runtime_t \
  quay.io/crunchtools/mcp-podman

Configuration

VariableRequiredDefaultDescription
PODMAN_SOCKETNoAuto-detectUnix socket path
PODMAN_SOCKET_FILENoFile containing socket path
PODMAN_TIMEOUTNo30Request timeout in seconds

Socket auto-detection order:

  1. $XDG_RUNTIME_DIR/podman/podman.sock (rootless)
  2. /run/user/$UID/podman/podman.sock (rootless fallback)
  3. /run/podman/podman.sock (rootful)

Claude Code Integration

claude mcp add mcp-podman-crunchtools \
  --env PODMAN_SOCKET=/run/podman/podman.sock \
  -- uvx mcp-podman-crunchtools

Tools (30)

Containers (12)

ToolDescription
container_listList containers
container_inspectGet container details
container_startStart a container
container_stopStop a container
container_restartRestart a container
container_killSend signal to container
container_rmRemove a container
container_logsGet container logs
container_topList processes
container_statsResource usage
container_createCreate a container
container_pruneRemove stopped containers

Images (5)

ToolDescription
image_listList images
image_inspectGet image details
image_pullPull from registry
image_rmRemove an image
image_pruneRemove unused images

Pods (7)

ToolDescription
pod_listList pods
pod_inspectGet pod details
pod_startStart a pod
pod_stopStop a pod
pod_restartRestart a pod
pod_rmRemove a pod
pod_createCreate a pod

Networks (2)

ToolDescription
network_listList networks
network_inspectGet network details

Volumes (2)

ToolDescription
volume_listList volumes
volume_inspectGet volume details

System (2)

ToolDescription
system_infoPodman system info
system_dfDisk usage

License

AGPL-3.0-or-later

Reviews

No reviews yet

Be the first to review this server!