Portainer MCP
Official Portainer MCP for managing environments, users, stacks, and running Docker or Kubernetes commands via AI.
Delv Safety Grade: B
Score 72/100 · assessed 2026-04-28
Portainer MCP is the official integration from Portainer.io, a well-established container management platform. The maintainer legitimacy is strong given Portainer's commercial backing and active development community. However, the permissions surface is extremely broad: it grants full Docker and Kubernetes orchestration capabilities, including stack deployment, container execution, user management, and arbitrary command execution across environments. The supply chain is weaker than ideal—installation requires manually downloading a tarball from GitHub releases rather than using a standard package registry, and there's no npm/PyPI distribution with version pinning. The tool is fully open source with reasonable documentation. No known security incidents. This is appropriate for teams already trusting Portainer with their infrastructure, but represents significant privilege escalation if the AI or credentials are compromised.
Lethal Trifecta (prompt-injection exposure)
ONE OF THREEUI on top of Docker. Same risk.
Green flags
- Official vendor integration from established Portainer team
- Open source with visible development on GitHub
- Maps directly to documented Portainer API surface
- No known security incidents or CVEs
- Active commercial backing and maintenance
Red flags
- Full container orchestration access including arbitrary command execution
- Manual tarball install from GitHub releases, no package registry
- Requires API token with broad Portainer permissions
- Can deploy stacks and modify production Kubernetes/Docker environments
- User management capabilities could alter access controls
Permissions requested
Install
curl -Lo portainer-mcp.tar.gz https://github.com/portainer/portainer-mcp/releases/latest
PORTAINER_URLPORTAINER_TOKENReview
Install this if you're a Portainer user who manages multiple environments or stacks regularly. The natural language interface saves real time on repetitive admin work. Skip it if you're not already invested in Portainer or only touch containers occasionally.
Good at
- Official integration means it tracks Portainer's API properly and won't break on version updates.
- Natural language stack deployment beats clicking through the web UI for repetitive tasks.
- Handles multi-environment setups well - you can switch contexts in conversation without manual navigation.
- Token-based auth keeps credentials out of prompts and logs.
Watch out
- Binary distribution instead of npm means manual installation and updates.
- Documentation is sparse on permission scoping and error handling.
- Only useful if you already run Portainer - it's not a general Docker MCP.
- No built-in safeguards for destructive operations - Claude will delete stacks if you ask it to.
Use cases
- container platform admin
- team environment management
- stack deployment
- homelab orchestration
Getting started
Works with
Similar MCPs
- ESXi MCPManages VMware ESXi and vCenter for VM lifecycle and real-time performance monitoring via REST and SSE.
- TerraformHashiCorp's official Terraform MCP. Connects agents to the Terraform Registry for module discovery and infrastructure-as-code automation.
- HerokuHeroku's official MCP. Manage apps, databases, dynos, and pipelines through the platform CLI from inside an agent.
- AWS LabsAWS Labs ships a growing family of MCPs for S3, Lambda, EKS, CDK, etc. Modular install — pick the services you actually use.