Docker MCP Gateway: Open Source MCP Server Orchestration with Container Isolation, Provenance Verification, and Secret Blocking

Docker Blog·medium signalXBlueskyLinkedInCopy link

Docker's MCP Gateway provides centralized orchestration for MCP servers with built-in container isolation: each server runs with restricted privileges, network access, and resource usage. Version 2026.04 adds automatic provenance verification during image pulls and runtime secret isolation. Built-in call-tracing logs every agent-to-tool interaction for audit trails. The gateway also blocks credential leakage and enforces zero-trust networking between MCP servers and the host. Pairs with Docker Offload for scaling from prototype to production.