Oriel

What is Oriel?

Oriel is a fast, local Docker GUI and MCP server that lets users manage Docker and Colima through natural language via any MCP client (Claude, Cursor, a local LLM). It uses the same validated, secret-masked tools as its GUI, integrating with Docker Engine, Colima, OrbStack, Podman, or a remote daemon.

How to use Oriel?

Install via brew install ParadoxInfinite/oriel/oriel (macOS/Linux, ~13 MB Go binary). Add the configuration { "mcpServers": { "oriel": { "command": "oriel", "args": ["mcp"] } } } to your MCP client. For destructive actions, first run oriel ai allow-destructive --for 6h to grant a time-boxed permission; read operations require no grant.

Key features of Oriel

• Manages containers, images, volumes, networks, and Compose.
• Controls Colima VM (start/stop/restart) and engine status.
• Works with Colima, Docker Engine, OrbStack, Podman, or remote daemon.
• Masks secrets; environment values never exposed raw to a model.
• Destructive actions require a time-boxed grant; reads always work.
• Binary does not include an AI model—client brings the model.

Use cases of Oriel

• Manage Docker containers and images via plain English using Claude or Cursor.
• Start, stop, or restart Colima VM through natural language commands.
• Securely inspect volumes and networks without exposing secrets to the AI.

FAQ from Oriel

What Docker engines does Oriel support?

It works with Colima, Docker Engine, OrbStack, Podman, or a remote Docker daemon.

How does Oriel handle secrets?

Secrets stay masked; environment variable values are never handed raw to the model.

Are destructive actions allowed by default?

No, destructive actions require a time-boxed grant using oriel ai allow-destructive; read operations are always allowed.

Does Oriel include its own AI model?

No, Oriel does not include a model in the binary. Your MCP client brings the model.

What are the runtime requirements?

Oriel is a ~13 MB Go binary for macOS and Linux, licensed under Apache-2.0. It requires a Docker engine.