MCP Security Kit by Agent Trust Cloud

high

MCP server container runs --privileged

The server runs in Docker with --privileged.

Why it matters

A privileged container can reach the host's devices and kernel features, which defeats the point of containing the server.

How to fix it

Remove --privileged and add only the specific capability the server needs, if any.

Before

{
  "mcpServers": {
    "tools": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--privileged",
        "acme/mcp-tools:1.4.0"
      ]
    }
  }
}

After

{
  "mcpServers": {
    "tools": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "acme/mcp-tools:1.4.0"
      ]
    }
  }
}

Illustrative configs. The checker flags the “before” version with this finding and not the “after” version.

Check your own config

Other checks