← Back to search

MCP Podman

crunchtools Scanned 19d ago

MCP server for Podman container management via the Podman REST API

C
67.5 / 100

Versions

0.1.1latest
first seen Jun 30, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 36

container_list_tool
annotations: none low

List containers. Args: all_containers: Show all containers (default shows only running) filters: Filter by key/value pairs (e.g. {"name": ["myapp"]}) limit: Maximum number of containers to return Returns: List of containers with count

limit string filters string all_containers bool
container_inspect_tool
annotations: none low

Get detailed information about a container. Args: name: Container name or ID Returns: Container details including config, state, and network settings

name str
container_start_tool
annotations: none low

Start a stopped container. Args: name: Container name or ID Returns: Start result

name str
container_stop_tool
annotations: none low

Stop a running container. Args: name: Container name or ID timeout: Seconds to wait before killing (default: 10) Returns: Stop result

name str timeout int
container_restart_tool
annotations: none low

Restart a container. Args: name: Container name or ID timeout: Seconds to wait before killing (default: 10) Returns: Restart result

name str timeout int
container_kill_tool
annotations: none low

Send a signal to a container. Args: name: Container name or ID signal: Signal to send (default: SIGTERM) Returns: Kill result

name str signal str
container_rm_tool
annotations: none low

Remove a container. Args: name: Container name or ID force: Force removal of running container volumes: Remove associated anonymous volumes Returns: Removal result

name str force bool volumes bool
container_logs_tool
annotations: none low

Get container logs. Args: name: Container name or ID tail: Number of lines from the end of the logs since: Show logs since timestamp (e.g. "2024-01-01T00:00:00Z") timestamps: Add timestamps to each log line Returns: Container log output

name str tail string since string timestamps bool
container_top_tool
annotations: none low

List processes running inside a container. Args: name: Container name or ID ps_args: Arguments to pass to ps (e.g. "aux") Returns: Process list with titles and entries

name str ps_args string
container_stats_tool
annotations: none low

Get container resource usage statistics. Args: name: Container name or ID Returns: CPU, memory, network, and block I/O statistics

name str
container_create_tool
annotations: none low

Create a new container. Args: image: Container image (e.g. "registry.access.redhat.com/ubi9/ubi:latest") name: Container name command: Command to run env: Environment variables labels: Container labels volumes: Volume mounts (format: "host_path:container_path[:options]") Returns: Created container ID and warnings

env string name string image str labels string command string volumes string
container_prune_tool
annotations: none low

Remove all stopped containers. Returns: List of removed container IDs and reclaimed space

image_list_tool
annotations: none low

List images. Args: filters: Filter by key/value pairs (e.g. {"reference": ["ubi9"]}) Returns: List of images with count

filters string
image_inspect_tool
annotations: none low

Get detailed information about an image. Args: name: Image name, tag, or ID Returns: Image details including layers, config, and history

name str
image_pull_tool
annotations: none low

Pull an image from a registry. Args: reference: Image reference (e.g. "quay.io/crunchtools/rotv:latest") Returns: Pull result with image ID

reference str
image_rm_tool
annotations: none low

Remove an image. Args: name: Image name, tag, or ID force: Force removal even if in use Returns: Removal result

name str force bool
image_prune_tool
annotations: none low

Remove unused images. Returns: List of removed image IDs and reclaimed space

pod_list_tool
annotations: none low

List pods. Args: filters: Filter by key/value pairs (e.g. {"name": ["mypod"]}) Returns: List of pods with count

filters string
pod_inspect_tool
annotations: none low

Get detailed information about a pod. Args: name: Pod name or ID Returns: Pod details including containers and state

name str
pod_start_tool
annotations: none low

Start a pod and all its containers. Args: name: Pod name or ID Returns: Start result

name str
pod_stop_tool
annotations: none low

Stop a pod and all its containers. Args: name: Pod name or ID timeout: Seconds to wait before killing (default: 10) Returns: Stop result

name str timeout int
pod_restart_tool
annotations: none low

Restart a pod and all its containers. Args: name: Pod name or ID Returns: Restart result

name str
pod_rm_tool
annotations: none low

Remove a pod and all its containers. Args: name: Pod name or ID force: Force removal of running pod Returns: Removal result

name str force bool
pod_create_tool
annotations: none low

Create a new pod. Args: name: Pod name labels: Pod labels infra: Create an infra container (default: True) share: Namespaces to share (ipc, net, uts, pid) Returns: Created pod ID

name str infra bool share string labels string
network_list_tool
annotations: none low

List networks. Args: filters: Filter by key/value pairs Returns: List of networks with count

filters string
network_inspect_tool
annotations: none low

Get detailed information about a network. Args: name: Network name or ID Returns: Network details including subnets and connected containers

name str
volume_list_tool
annotations: none low

List volumes. Args: filters: Filter by key/value pairs Returns: List of volumes with count

filters string
volume_inspect_tool
annotations: none low

Get detailed information about a volume. Args: name: Volume name Returns: Volume details including mount point and driver

name str
service_list_tool
annotations: none low

List systemd units that manage Podman containers. Only shows units whose ExecStart contains /usr/bin/podman. Non-container services (sshd, firewalld, etc.) are excluded. Returns: List of Podman container service units with status

service_status_tool
annotations: none low

Get the status of a Podman container systemd unit. Args: unit_name: Systemd unit name (e.g. "acquacotta.crunchtools.com.service") Returns: Unit properties including ActiveState, MainPID, memory, CPU usage

unit_name str
service_restart_tool
annotations: none low

Restart a Podman container systemd unit. This is the correct way to bounce containers on systems where containers are managed by systemd. Using podman restart directly would conflict with systemd's process management. Args: unit_name: Systemd unit name (e.g. "acquacotta.crunchtools.com.service") Returns: Restart confirmation

unit_name str
service_start_tool
annotations: none low

Start a Podman container systemd unit. Args: unit_name: Systemd unit name (e.g. "acquacotta.crunchtools.com.service") Returns: Start confirmation

unit_name str
service_stop_tool
annotations: none low

Stop a Podman container systemd unit. Args: unit_name: Systemd unit name (e.g. "acquacotta.crunchtools.com.service") Returns: Stop confirmation

unit_name str
service_logs_tool
annotations: none low

Get journal logs for a Podman container systemd unit. Args: unit_name: Systemd unit name (e.g. "acquacotta.crunchtools.com.service") lines: Number of log lines to return (default: 50) since: Show logs since timestamp (e.g. "1 hour ago", "2024-01-01") Returns: Journal log output for the unit

lines int since string unit_name str
system_info_tool
annotations: none low

Get Podman system information. Returns: System details including version, storage, registries, and runtime

system_df_tool
annotations: none low

Get Podman disk usage. Returns: Disk usage by images, containers, and volumes

Permissions 3

network medium
Server uses network capabilities via: httpx
filesystem low
Server uses filesystem capabilities via: os, pathlib
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 99

info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Tool 'container_list_tool' has no annotations annotation_checker · 100%
low
Tool 'container_inspect_tool' has no annotations annotation_checker · 100%
low
Tool 'container_start_tool' has no annotations annotation_checker · 100%
low
Tool 'container_stop_tool' has no annotations annotation_checker · 100%
low
Tool 'container_restart_tool' has no annotations annotation_checker · 100%
low
Tool 'container_kill_tool' has no annotations annotation_checker · 100%
low
Tool 'container_rm_tool' has no annotations annotation_checker · 100%
low
Tool 'container_logs_tool' has no annotations annotation_checker · 100%
low
Tool 'container_top_tool' has no annotations annotation_checker · 100%
low
Tool 'container_stats_tool' has no annotations annotation_checker · 100%
low
Tool 'container_create_tool' has no annotations annotation_checker · 100%
low
Tool 'container_prune_tool' has no annotations annotation_checker · 100%
low
Tool 'image_list_tool' has no annotations annotation_checker · 100%
low
Tool 'image_inspect_tool' has no annotations annotation_checker · 100%
low
Tool 'image_pull_tool' has no annotations annotation_checker · 100%
low
Tool 'image_rm_tool' has no annotations annotation_checker · 100%
low
Tool 'image_prune_tool' has no annotations annotation_checker · 100%
low
Tool 'pod_list_tool' has no annotations annotation_checker · 100%
low
Tool 'pod_inspect_tool' has no annotations annotation_checker · 100%
low
Tool 'pod_start_tool' has no annotations annotation_checker · 100%
low
Tool 'pod_stop_tool' has no annotations annotation_checker · 100%
low
Tool 'pod_restart_tool' has no annotations annotation_checker · 100%
low
Tool 'pod_rm_tool' has no annotations annotation_checker · 100%
low
Tool 'pod_create_tool' has no annotations annotation_checker · 100%
low
Tool 'network_list_tool' has no annotations annotation_checker · 100%
low
Tool 'network_inspect_tool' has no annotations annotation_checker · 100%
low
Tool 'volume_list_tool' has no annotations annotation_checker · 100%
low
Tool 'volume_inspect_tool' has no annotations annotation_checker · 100%
low
Tool 'service_list_tool' has no annotations annotation_checker · 100%
low
Tool 'service_status_tool' has no annotations annotation_checker · 100%
low
Tool 'service_restart_tool' has no annotations annotation_checker · 100%
low
Tool 'service_start_tool' has no annotations annotation_checker · 100%
low
Tool 'service_stop_tool' has no annotations annotation_checker · 100%
low
Tool 'service_logs_tool' has no annotations annotation_checker · 100%
low
Tool 'system_info_tool' has no annotations annotation_checker · 100%
low
Tool 'system_df_tool' has no annotations annotation_checker · 100%
high
Remote transport without authentication auth_checker · 70%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: fastmcp@2.0 (GHSA-5h2m-4q8j-pqpj) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0 (GHSA-c2jp-c369-7pvx) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0 (GHSA-m8x7-r2rg-vh5g) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0 (GHSA-mxxr-jv3v-6pgc) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0 (GHSA-rcfx-77hg-w2wv) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0 (GHSA-rj5c-58rq-j5g5) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0 (GHSA-rww4-4w9c-7733) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0 (GHSA-vv7q-7jx5-f767) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0 (PYSEC-2026-1364) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0 (PYSEC-2026-1365) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0 (PYSEC-2026-2474) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0 (PYSEC-2026-2475) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0 (PYSEC-2026-2476) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0 (PYSEC-2026-338) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0 (PYSEC-2026-1812) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: container_list_tool manifest_parser · 90%
info
Tool: container_inspect_tool manifest_parser · 90%
info
Tool: container_start_tool manifest_parser · 90%
info
Tool: container_stop_tool manifest_parser · 90%
info
Tool: container_restart_tool manifest_parser · 90%
info
Tool: container_kill_tool manifest_parser · 90%
info
Tool: container_rm_tool manifest_parser · 90%
info
Tool: container_logs_tool manifest_parser · 90%
info
Tool: container_top_tool manifest_parser · 90%
info
Tool: container_stats_tool manifest_parser · 90%
info
Tool: container_create_tool manifest_parser · 90%
info
Tool: container_prune_tool manifest_parser · 90%
info
Tool: image_list_tool manifest_parser · 90%
info
Tool: image_inspect_tool manifest_parser · 90%
info
Tool: image_pull_tool manifest_parser · 90%
info
Tool: image_rm_tool manifest_parser · 90%
info
Tool: image_prune_tool manifest_parser · 90%
info
Tool: pod_list_tool manifest_parser · 90%
info
Tool: pod_inspect_tool manifest_parser · 90%
info
Tool: pod_start_tool manifest_parser · 90%
info
Tool: pod_stop_tool manifest_parser · 90%
info
Tool: pod_restart_tool manifest_parser · 90%
info
Tool: pod_rm_tool manifest_parser · 90%
medium
Permission: network access detected permission_analyzer · 90%
info
Tool: pod_create_tool manifest_parser · 90%
info
Tool: network_list_tool manifest_parser · 90%
info
Tool: network_inspect_tool manifest_parser · 90%
info
Tool: volume_list_tool manifest_parser · 90%
info
Tool: volume_inspect_tool manifest_parser · 90%
info
Tool: service_list_tool manifest_parser · 90%
info
Tool: service_status_tool manifest_parser · 90%
info
Tool: service_restart_tool manifest_parser · 90%
info
Tool: service_start_tool manifest_parser · 90%
info
Tool: service_stop_tool manifest_parser · 90%
info
Tool: service_logs_tool manifest_parser · 90%
info
Tool: system_info_tool manifest_parser · 90%
info
Tool: system_df_tool manifest_parser · 90%
low
Permission: filesystem access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%