Docker MCP Catalog and Toolkit
✓ Text source-checked Oct 24, 2026One secure gateway for all your tools
Source-checked against the vendor's site · rebuilt from the vendor's own pagesProfile updated Link checked Pricing captured How we rate
In short
Docker MCP Enterprise Gateway secures agent access to MCP servers via policy-based authentication, credential management, and isolated containerized execution.
Docker MCP Enterprise Gateway sits between agents and MCP servers. The gateway authenticates users, decides which servers and tools they can reach, applies policy to each call, supplies credentials, and records the result.
Unvetted servers are denied by default. The gateway exposes only the tools a group needs, not the whole catalog a server ships. Policy allows and denies by server, tool, transport, and call, evaluated before anything runs. A structured event per evaluation is tied to the user and agent and streamed to the SIEM.
The vendor says that dynamic MCP allows the agent to discover and invoke tools as needed, so catalog growth does not tax every request. Containerized servers run isolated in their own containers. Credentials are read at call time from the store that already holds them.
The product is available as a managed service in the customer's cloud, operated by Docker inside the customer's account or VPC. The vendor says that an air-gapped appliance option is available as private Kubernetes with no outbound connection. A Docker-managed cloud option is coming soon, described as multi-tenant and operated by Docker.
According to Docker MCP Catalog and Toolkit: Docker MCP Enterprise Gateway sits between agents and MCP servers. Its pages list this strength: Unvetted servers are denied by default.
— The AI Tool Bible editorial team
Pros
- ✅ The vendor says that policy governs every call, credentials stay in the secret store, and every decision is recorded.
- ✅ Unvetted servers are denied by default.
- ✅ Containerized servers run isolated in their own containers.
- ✅ The vendor says that dynamic MCP allows agents to discover and invoke tools as needed, preventing catalog growth from taxing every request.
- ✅ Structured events per evaluation are tied to the user and agent and streamed to the SIEM.
Pricing (captured )
| Tier | Monthly | Annual | Per seat | Key features |
|---|---|---|---|---|
| Docker Personal | $0 | $0 | — |
|
| Docker Pro | $11 per user/month | $9 per user/month | Yes |
|
| Docker Team | $16 per user/month | $15 per user/month | Yes |
|
| Docker Business | $24 per user/month | $24 per user/month | Yes |
|
Prices change; we show the grid as captured on Oct 23, 2026. Check current pricing on the vendor's site →
Facts
- API available
- Yes (not source-checked)
- Free trial
- Yes (not source-checked)
- Open source
- Yes (not source-checked)
- Hacker News
- 130 stories · top 694 points · last Sep 24, 2026 · checked Oct 10, 2026
Where this tool sits
Use cases
Frequently asked
- How does the gateway handle security and access control?
- It authenticates users and applies policy to each call by server, tool, and transport. Unvetted servers are denied by default, and only necessary tools are exposed to specific groups.
- What deployment options are available for this tool?
- It is available as a managed service in your cloud or VPC, operated by Docker. An air-gapped appliance option exists for private Kubernetes, and a Docker-managed cloud option is coming soon.
- How are credentials managed for MCP servers?
- Credentials are read at call time from the store that already holds them. The gateway supplies these credentials securely during the execution of each tool call.
- Does the tool support audit logging and compliance?
- Yes, a structured event per evaluation is tied to the user and agent and streamed to the SIEM. This supports compliance by recording results and policy decisions for every interaction.
- How does it handle dynamic tool discovery?
- Dynamic MCP allows agents to discover and invoke tools as needed. This ensures that catalog growth does not tax every request, improving efficiency for agents accessing various servers.