docs/dockroot-space.html

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>dockroot-mcp — Virtual Docker Root for AI Agents</title>
<style>
  body { font-family: -apple-system, "Segoe UI", Roboto, sans-serif; margin: 0; background: #0f172a; color: #e2e8f0; line-height: 1.6; }
  .wrap { max-width: 860px; margin: 0 auto; padding: 32px 20px 60px; }
  h1 { font-size: clamp(1.7rem, 4vw, 2.2em); margin: 0.2em 0; background: linear-gradient(90deg,#818cf8,#22d3ee); -webkit-background-clip: text; background-clip: text; color: transparent; }
  h2 { margin-top: 2em; border-bottom: 1px solid #334155; padding-bottom: .3em; color: #a5b4fc; font-size: 1.15rem; }
  h3 { color: #c7d2fe; margin: 1.2em 0 .4em; }
  code, pre { background: #1e293b; border-radius: 6px; }
  code { padding: 2px 6px; }
  pre { padding: 14px; overflow-x: auto; }
  table { border-collapse: collapse; width: 100%; margin: 1em 0; font-size: .88rem; }
  th, td { border: 1px solid #334155; padding: 8px 12px; text-align: left; }
  th { background: #1e293b; }
  .badge { display: inline-block; background: #312e81; border: 1px solid #6366f1; border-radius: 20px; padding: 2px 12px; font-size: .8em; margin: 0 6px 8px 0; color:#c7d2fe; }
  .sec { background: #111c33; border-left: 3px solid #22d3ee; padding: 14px 18px; border-radius: 0 8px 8px 0; margin: 1.2em 0; }
  .warn { border-left-color: #f59e0b; }
  a { color: #22d3ee; }
  ul, ol { padding-left: 1.25em; }
  .muted { opacity:.75; font-size:.85em; margin-top:3em; }
</style>
</head>
<body>
<div class="wrap">
  <p><span class="badge">v2.0</span><span class="badge">MCP</span><span class="badge">read-only</span><span class="badge">Tabby Tavern companion</span></p>
  <h1>dockroot-mcp</h1>
  <p><strong>Virtual Docker Root for AI Agents.</strong> Read-only power over the compose stack — without host root. Companion to <a href="https://huggingface.co/jpanasuk/tabby-tavern-stack">Tabby Tavern v2.0.0</a>.</p>
  <div class="sec">
    <strong>docker_ps · docker_logs · docker_inspect · docker_stats · docker_networks</strong><br>
    plus the tavern connectivity toolkit (status, self_check, wire, rediscover, models, chat).
  </div>

  <h2>Why this exists</h2>
  <p>Agents get asked “why is Open WebUI broken?” Without docker access they invent commands. With dockroot they:</p>
  <ol>
    <li><strong>List</strong> containers (<code>docker_ps</code>)</li>
    <li><strong>Read logs</strong> (<code>docker_logs</code>)</li>
    <li><strong>Inspect</strong> env / mounts / health (<code>docker_inspect</code>)</li>
    <li><strong>Watch</strong> CPU / memory (<code>docker_stats</code>)</li>
    <li><strong>See</strong> networks (<code>docker_networks</code>)</li>
  </ol>
  <p>Then they answer from evidence. The fixer sees the box.</p>

  <h2>Security model</h2>
  <div class="sec warn">
    <strong>Read-only by design.</strong> No start/stop/rm/exec. Diagnose, never destroy.<br>
    <strong>Opt-in.</strong> No socket mount, no docker access — the server reports that honestly.<br>
    <strong>Internal only.</strong> Socket access is still powerful. Do not publish this port.
  </div>

  <h2>Quick start</h2>
  <pre>services:
  dockroot:
    image: jpanasuk/dockroot-mcp:latest
    container_name: dockroot
    restart: unless-stopped
    networks: [ai-network]
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock</pre>

  <h3>Hermes</h3>
  <pre># ~/.hermes/config.yaml
mcp_servers:
  dockroot:
    command: python3
    args: ["/opt/dockroot/tavern_mcp.py"]</pre>

  <h3>MCPO (Open WebUI / Tabby Tavern)</h3>
  <pre>{
  "mcpServers": {
    "dockroot": { "command": "python3", "args": ["/opt/dockroot/tavern_mcp.py"] }
  }
}</pre>
  <p>Tabby Tavern v2.0.0 already runs MCPO at <code>:8001</code> with the FastMCP stack tools. Dockroot is the optional “see the Docker daemon” add-on.</p>

  <h2>Links</h2>
  <p>
    <a href="https://huggingface.co/jpanasuk/tabby-tavern-stack">Tabby Tavern stack</a> ·
    <a href="https://huggingface.co/spaces/jpanasuk/tabby-tavern-sell-sheet">Sell sheet</a> ·
    <a href="https://huggingface.co/spaces/jpanasuk/local-ai-stack-connectivity">Connectivity skill</a> ·
    <a href="https://huggingface.co/jpanasuk/dockroot-mcp-source">Source</a> ·
    <a href="https://hub.docker.com/r/jpanasuk/dockroot-mcp">Docker Hub</a>
  </p>
  <p class="muted">Jeremy Panasuk. Read-only docker vision for local AI labs. Hermes Agent by Nous Research under the hood.</p>
</div>
</body>
</html>