Drive Docker and Colima from an AI. A safety-gated MCP server for containers, images, volumes, networks, and Compose, with secret masking and a destructive-action grant.
Overview
Oriel is a fast, local Docker GUI that's also an MCP server. Point any MCP client (Claude, Cursor, a local LLM) at it and manage Docker and Colima in plain English, through the same validated, secret-masked tools the GUI uses.
What it does
- Containers, images, volumes, networks, and Compose
- Colima VM control (start / stop / restart) and engine status
- Works with any Docker engine: Colima, Docker Engine, OrbStack, Podman, or a remote daemon
Safety
- Secrets stay masked. Env values are never handed raw to a model.
- Destructive actions are locked behind a time-boxed grant (
oriel ai allow-destructive --for 6h); reads always work. - No model in the binary. Your client brings the model.
Install
brew install ParadoxInfinite/oriel/oriel, then add to your MCP client:
{ "mcpServers": { "oriel": { "command": "oriel", "args": ["mcp"] } } }
One ~13 MB Go binary, macOS and Linux, Apache-2.0. Repo: https://github.com/ParadoxInfinite/oriel
Server Config
{
"mcpServers": {
"oriel": {
"command": "oriel",
"args": [
"mcp"
]
}
}
}