Containerization AssistBLOCK
TypeScript MCP server for AI-powered containerization workflows with Docker and Kubernetes support
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://github.com/Azure/containerization-assist/actions/workflows/test-pipeline.yml) [](https://github.com/Azure/containerization-assist/releases) [](https://github.com/modelcontextprotocol/typescript-sdk) [](https://nodejs.org) [](https://www.typescriptlang.org/) [](LICENSE) [](https://azure.github.io/containerization-assist/)
An AI-powered containerization assistant that helps you build, scan, and deploy Docker containers through VS Code and other MCP-compatible tools.
[Full documentation →](https://azure.github.io/containerization-assist/)
Install
[](https://azure.github.io/containerization-assist/vscode-mcp-install-redirect.html) [](https://azure.github.io/containerization-assist/vscode-insiders-mcp-install-redirect.html)
Features
Core Capabilities
- 🐳 *Docker Integration
9dc3fd80a366OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add containerization-assist-mcp -- npx -y [email protected] start
Exposed tools (23)
21 read · 2 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
build-image | read | |
build-image-context | read | Prepare Docker build context with security analysis and optimized build commands. Returns structured guidance for executing builds. |
deploy | write | |
exposes-ports | read | Dockerfile should expose required ports |
file-size | read | Check fixture file size is reasonable |
get-containerization-plan | read | Generate a containerization plan for the application |
has-deployment | read | Should include Deployment manifest |
has-from-instruction | read | Dockerfile must have a FROM instruction |
has-healthcheck | read | Dockerfile should include health check |
has-resource-limits | read | Deployment should specify resource limits |
has-security-context | read | Pods should have security context configured |
has-service | read | Should include Service manifest |
has-services | read | Docker Compose file should define services |
has-version | read | Docker Compose file should specify version |
has-workdir | read | Dockerfile should specify WORKDIR |
json-structure | read | Validate JSON structure and syntax |
metadata-consistency | read | Validate fixture metadata consistency |
required-fields | read | Check for required fields in fixtures |
scan-image | read | |
tool-a | read | Test tool A |
tool-b | read | Test tool B |
uses-healthchecks | read | Services should include health checks |
uses-non-root-user | write | Dockerfile should create and use non-root user |
Trust audit
BLOCKgrade F · trust 37/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | FAIL |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (16 observation(s))
- Network
- declared (5 observation(s))
- Shell
- declared (9 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (25)
parsed = yaml.load(content) as Record<string, unknown>;
return yaml.load(manifestStr) as Record<string, unknown>;
const dirName = new Function(
return new Function(
resolution: 'Check ~/.docker/config.json file permissions and format',
'Run `docker login <registry>` to authenticate, or verify credentials in your Docker config (~/.docker/config.json).',
'Set KUBECONFIG environment variable or ensure ~/.kube/config exists. Run `kubectl config view` to verify.',
'Verify the path in KUBECONFIG is correct, or unset it to use the default ~/.kube/config location.',
hint: 'Neither KUBECONFIG environment variable nor ~/.kube/config exists',
| `block-secrets-in-env` | Any `ENV` or `ARG` line matches `(?i)(PASSWORD\|PASSWD\|SECRET\|TOKEN\|API[_-]?KEY\|PRIVATE[_-]?KEY\|ACCESS[_-]?KEY\|CREDENTIAL\|DATABASE_URL\|CONNECTION_STRING\|REDIS_URL\|
# MIT License
policies.wasm
DATABASE_URL: 'postgresql://postgres:password@postgres:5432/monorepo_db',
DATABASE_URL: postgresql://postgres:password@postgres:5432/monorepo_db
DATABASE_URL: postgresql://postgres:password@postgres:5432/monorepo_db
DATABASE_URL: postgresql://postgres:password@postgres:5432/monorepo_db
DATABASE_URL=postgresql://admin:password123@localhost:5432/secure_app
maven-wrapper.jar
.eslintrc.cjs
.prettierignore
.prettierrc.json
const config = yaml.load(content) as any;
logger.info({ token }, 'Mock: Progress complete');logger.error({ token, error }, 'Mock: Progress error');group: ['../../../*', '../../*'],
Gates applied: no_behavioural_pass.
9dc3fd80a366full audit observations/trust-audit/mcp-server/azure__containerization-assist.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 9dc3fd80a366 | BLOCK | F | 37 | first audit |
Questions
What is the Containerization Assist MCP server?
TypeScript MCP server for AI-powered containerization workflows with Docker and Kubernetes support
What tools does Containerization Assist expose?
23 in total: 21 read-only, 2 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Containerization Assist safe to connect to an agent?
No — not without reading the findings first. The audit graded it F (37/100) and found 11 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does Containerization Assist need?
It reads AZURE_FOUNDRY_API_KEY, AZURE_OPENAI_API_KEY, GH_TOKEN, GITHUB_TOKEN, JWT_SECRET, SECRET_KEY and SNYK_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Containerization Assist run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as express-test-app at 1.0.0.
How current is this page?
The grade is for one exact copy of the source (9dc3fd80a366), read on 2026-10-08. The repository is watched and re-audited when it changes.