ORAS MCP Server

Name: ORAS MCP Server
Author: shizhMSFT

@shizhMSFT

代码仓库主页

关于 ORAS MCP Server

ORAS MCP Server

#docker #registry #storage #oci #artifact

基本信息

分类

其他

许可证

Apache-2.0

运行时

传输方式

stdio

发布者

shizhMSFT

配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "oras-mcp-server": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/oras-project/oras-mcp:main",
        "serve"
      ]
    }
  }
}

工具

未检测到工具

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is ORAS MCP Server?

ORAS MCP Server is an MCP server that enables registry-aware chat interactions within VS Code agent mode. It uses the oras-go library to query OCI-compliant registries and does not depend on the oras CLI. It is designed for developers who want to ask questions about container images and their metadata during coding sessions.

How to use ORAS MCP Server?

Configure the server in .vscode/mcp.json either by running the Docker image (ghcr.io/oras-project/oras-mcp:main serve) or by downloading a released binary and pointing the command to oras-mcp serve. Authentication uses credentials from Docker or ORAS login; on Linux the Docker config can be mounted for container use, while macOS/Windows require the binary.

Key features of ORAS MCP Server

Integrates with VS Code agent mode for registry-aware chats.
Uses oras-go library; no dependency on the ORAS CLI.
Supports querying image platforms, signatures, and metadata.
Two deployment options: Docker container or standalone binary.
Reads credentials from existing Docker and ORAS credential stores.

Use cases of ORAS MCP Server

Ask “What platforms does image ghcr.io/oras-project/oras support?” and get a list.
Find the latest tag of an image in a registry and whether it has a signature.
Determine the signature type (e.g., Notary v2) of a container image.
Explore registry content without leaving the VS Code coding environment.

FAQ from ORAS MCP Server

How do I authenticate to a registry?

Run oras login or docker login on the host machine. The released binary picks up cached credentials automatically. For the Docker container on Linux, mount the Docker config file with inline auths entries; helper-based configs (credsStore, credHelpers) will not work.