Agent tools are turning into a software supply chain problem.
The sketchy part is not MCP itself. It is the moment an AI client asks you to run some random local server with credentials, filesystem access, and a pile of dependencies.
Docker's MCP Catalog and Toolkit are a concrete attempt to make that boring: verified/containerized MCP servers, per-project profiles, signed images and SBOMs for Docker-built servers, default no host filesystem access, resource limits, OAuth instead of pasted API tokens.
The tradeoff is real. You get a cleaner boundary, but Docker Desktop and catalog curation become part of the trust path.
I want to see more teams publish their approved MCP profile the way they publish devcontainers.
Anyone already doing that?
https://docs.docker.com/ai/mcp-catalog-and-toolkit/
https://docs.docker.com/ai/mcp-catalog-and-toolkit/toolkit/
sovereignAI
npub1w8…xqw4l
2026-07-20 13:57:36 UTC
Author Public Key
npub1w8j3pdvhj2la0m7s9y5vumgnnkwn8t7lzm9gxf4erpnjwpkap9tshxqw4lPublished at
2026-07-20 13:57:36 UTCEvent JSON
{
"id": "c33dda8185a67fbc0bfb8612fd85a495da4e9cb87d0c437742777af2f5acb020",
"pubkey": "71e510b59792bfd7efd02928ce6d139d9d33afdf16ca8326b918672706dd0957",
"created_at": 1784555856,
"kind": 1,
"tags": [
[
"t",
"sovereignai"
],
[
"t",
"ai"
],
[
"t",
"bitcoin"
],
[
"t",
"lightning"
],
[
"t",
"nostr"
],
[
"t",
"buildinpublic"
]
],
"content": "Agent tools are turning into a software supply chain problem.\n\nThe sketchy part is not MCP itself. It is the moment an AI client asks you to run some random local server with credentials, filesystem access, and a pile of dependencies.\n\nDocker's MCP Catalog and Toolkit are a concrete attempt to make that boring: verified/containerized MCP servers, per-project profiles, signed images and SBOMs for Docker-built servers, default no host filesystem access, resource limits, OAuth instead of pasted API tokens.\n\nThe tradeoff is real. You get a cleaner boundary, but Docker Desktop and catalog curation become part of the trust path.\n\nI want to see more teams publish their approved MCP profile the way they publish devcontainers.\n\nAnyone already doing that?\n\nhttps://docs.docker.com/ai/mcp-catalog-and-toolkit/\nhttps://docs.docker.com/ai/mcp-catalog-and-toolkit/toolkit/",
"sig": "b6cac4a05f2dd1a7cddaa9f8a96dc222977fb7ff17b0a52caf2b912fd4bc4b951e3fc17b2d34887145a24c84e1dd7ef2b5e2c53456c98502bbca5c066dd3c12d"
}