Docker MCP Gateway is Docker's open-source orchestration layer for Model Context Protocol servers. Instead of configuring every server separately in each AI application, teams connect clients to one gateway that centralizes server configuration, routing, credentials, and access controls. Docker Desktop starts the gateway automatically when MCP Toolkit is enabled, while the same docker mcp CLI can be used directly for advanced Docker Engine and non-Desktop setups.
For local catalog servers, the gateway launches each MCP server on demand in an isolated Docker container. Docker's documentation describes restricted privileges, network access, and resource usage, plus credential injection, built-in logging, and call tracing. When a client requests a tool, the gateway identifies the responsible server, starts it if necessary, applies the configured restrictions, forwards the request, and returns the result through the same connection.
Catalogs and profiles provide the distribution model around the runtime. Docker's public catalog currently advertises 300+ verified servers packaged as container images with versioning, provenance, and security updates; custom catalogs can limit teams to approved servers. Profiles group containerized or remote servers for a project, support tool allowlists, and can be reused across clients such as Claude Code, Cursor, VS Code, and other MCP-compatible applications instead of duplicating configuration.
The strongest fit is a Docker-based team that wants repeatable MCP server packaging, a shared gateway endpoint, and tighter runtime isolation than launching community packages directly on a workstation. It still requires a Docker runtime and profile/catalog maintenance, and the MCP Catalog and Toolkit are documented as beta. Docker also distinguishes this MIT-licensed open-source gateway from the MCP Gateway capabilities sold as part of Docker AI Governance, which the official documentation labels invite-only; buyers should not treat those enterprise governance features as part of the free OSS runtime.
