OCI Registry MCP Server

What is OCI Registry MCP Server?

A Server-Sent Events (SSE) based MCP server that provides tools for querying OCI registries and image references, allowing LLM-powered applications to retrieve information about container images, list tags, and access manifests and configs.

How to use OCI Registry MCP Server?

The easiest way is to run it using ToolHive with thv run oci-registry, or directly with the binary. Authentication is handled via HTTP Authorization header, environment variables (OCI_TOKEN, OCI_USERNAME, OCI_PASSWORD), or Docker config. The server port can be set with the MCP_PORT environment variable or the -port flag.

Key features of OCI Registry MCP Server

• Get detailed information about OCI images.
• List tags for a given repository.
• Retrieve image manifests and configs.
• Supports bearer token, username/password, and Docker config authentication.
• SSE-based transport for MCP clients.

Use cases of OCI Registry MCP Server

• Querying container image metadata (digest, size, architecture, OS).
• Listing all available tags for a repository.
• Fetching image manifests and configuration for analysis.
• Automating container image discovery and inspection in CI/CD pipelines.

FAQ from OCI Registry MCP Server

What exactly does this server do?

It exposes MCP tools (get_image_info, list_tags, get_image_manifest, get_image_config) to let LLM applications query OCI-compliant registries (like Docker Hub) for image information.

How can I authenticate to private registries?

The server supports four methods, in order of priority: HTTP Authorization header (bearer token), OCI_TOKEN environment variable, OCI_USERNAME/OCI_PASSWORD environment variables, and the default Docker keychain (~/.docker/config.json).

What are the runtime requirements?

Go 1.21 or later and network access to OCI registries. No other specific runtime dependencies are listed.

How do I change the listening port?

Set the MCP_PORT environment variable (integer 0–65535) or pass the -port flag when running the binary. If not set or invalid, it defaults to port 8080.