AgentDock MCP Server: Let Your Assistant Work on Your Computer or Server

• Runs a shell command

  Runs a command on the machine AgentDock is installed on. It waits a few seconds for the result and otherwise returns a running session. You can set a working folder, environment values, a timeout and standard input.

  Try: “Run the test suite in ~/AgentDock/myapp and show me the failures.”

  Delete · exec_command

• Reads a text file

  Returns a slice of a UTF-8 text file by line range, from any path the host allows. Relative paths start in the AgentDock working folder.

  Try: “Show me lines 1 to 80 of ~/AgentDock/myapp/config.yml.”

  Files · read_file

• Lists a folder

  Lists folder entries with a depth limit, glob filters and a choice of files or directories only. Hidden and ignored paths are left out unless you ask.

  Try: “List the folders two levels deep under ~/AgentDock.”

  Files · list_dir

• Searches files for text

  Looks through text files for a word or regular expression and returns the matches. Relative paths search the AgentDock working folder.

  Try: “Find every file that mentions DATABASE_URL.”

  Files · search_text

• Edits, adds, moves or deletes files

  Changes files through one entry point with five actions: replace text, apply a patch, add a file, delete a file, or move a file.

  Try: “Add a retry to the fetch call in client.py and show me the diff.”

  Delete · file_edit

• Checks running commands

  Lists the command sessions that exec_command started, or shows one session's status and recent output.

  Try: “Is the build I started still running?”

  Read · session_observe

• Sends input to or stops a command

  Writes text into a running command session, stops one session, or stops all of them.

  Try: “Stop the dev server I started earlier.”

  Runs code · session_act

• Shows what AgentDock can do here

  Returns the setup the assistant works in: available capabilities, connected integrations, rules and high-priority context.

  Try: “What can AgentDock do on this machine?”

  Read · agentdock_context

• Reads project rules

  Reads the AGENTS.md rules that apply to a project folder and the project's local skill index, so the assistant follows them before it works there.

  Try: “Read the project rules for ~/AgentDock/myapp.”

  Files · workspace_context

• Starts a saved task

  Creates a task record with goals and steps before a long piece of work. Progress is saved so the work can continue after an interruption.

  Try: “Create a task to migrate the database and track each step.”

  Write · task_create

• Tracks and resumes tasks

  Lists, opens and updates saved tasks. Actions include checkpointing progress, blocking, resuming, final review and completing a task.

  Try: “Resume the migration task where it stopped.”

  Write · task_manage

• Looks at an image

  Loads an image from a saved artifact, a path on the machine, or a web address and passes it to the assistant as an image.

  Try: “Look at ~/AgentDock/screenshots/error.png and tell me what failed.”

  Files · view_image

• Packages a file for download

  Copies a file or folder into a unchangeable snapshot under ~/.agentdock/public-artifacts. It returns an artifact ID and a temporary signed download link when the server has a reachable address. Folders are packed as tar.gz.

  Try: “Publish the build folder so I can download it.”

  Write · file_publish

• Installs or removes skills

  Installs or updates a managed skill, removes it, and sets or lists values in the skill's private environment without showing secret values.

  Try: “Install the deploy skill from this folder.”

  Delete · skill_manage

• Installs or removes plugins

  Checks local plugin folders or ZIP files and installs, updates, enables, disables or removes plugins. Remote sources must be downloaded first. A plugin's skills and MCP servers are added directly.

  Try: “Validate and install the plugin in ~/Downloads/my-plugin.zip.”

  Delete · plugin_manage

• Adds other MCP servers

  Adds, lists, enables, disables, refreshes and removes extra MCP servers that AgentDock then relays. A server can be a web address or a local command that AgentDock starts. It also manages their private environment values and sign-in.

  Try: “Add the Linear MCP server at this URL.”

  Delete · mcp_manage

• Finds tools on added servers

  Searches short summaries of tools on the extra MCP servers you added, so the assistant can find the right one.

  Try: “Which of my added servers can create a ticket?”

  Network · mcp_tool_search

• Shows one added tool's inputs

  Returns the full input schema for one tool on an added server, named as server:tool.

  Try: “Show how the linear:create_issue tool is called.”

  Network · mcp_tool_inspect

• Calls a tool on an added server

  Runs one tool from an added MCP server, named as server:tool, after checking the arguments against the tool's schema. The tool's own effects apply.

  Try: “Create an issue with linear:create_issue titled Fix login.”

  Delete · mcp_tool_call

• Opens or attaches a browser (opt-in)

  Starts a Chromium-family browser owned by AgentDock, or attaches to one that is already running, and later closes the session. Off until browser tools are turned on.

  Try: “Open a browser session for the staging site.”

  Runs code · browser_session

• Clicks and types in the browser (opt-in)

  Runs validated actions on the page, such as clicks and typing, and returns a snapshot and a screenshot. Off until browser tools are turned on.

  Try: “Log in to the staging site and open the orders page.”

  Write · browser_act

• Captures the current page (opt-in)

  Captures the page text, viewport, focus, visible interactive elements, diagnostics and a PNG screenshot. Off until browser tools are turned on.

  Try: “Take a snapshot of the page and tell me what errors show.”

  Write · browser_snapshot

• Manages coding-agent sessions (opt-in)

  Creates, lists, inspects, opens, updates, closes and deletes sessions with a connected coding agent that speaks the Agent Client Protocol. Off until ACP is enabled.

  Try: “List my open coding-agent sessions.”

  Delete · acp_session

• Sends work to a coding agent (opt-in)

  Starts a prompt with a connected coding agent, reads its progress events, or cancels it. Off until ACP is enabled.

  Try: “Ask the coding agent to fix the failing test.”

  Runs code · acp_prompt

• Answers a coding agent's questions (opt-in)

  Lists or answers permission questions raised by a connected coding agent, within the options the agent offers and the local policy. Off until ACP is enabled.

  Try: “Approve the pending permission request.”

  Runs code · acp_interaction

Watch out for

• It can run any command on the machine

  The command tool runs whatever the assistant asks as the user that runs AgentDock. Run it in the Docker container if you can, and read each command before approving it. github.com

• It can overwrite and delete files

  The file edit tool can replace, add, move and delete files at any path the host allows, including absolute and ~/ paths. Keep backups and work in a project folder under version control. github.com

• Without a token, anything local can call it

  On the loopback address the code lets the server start with no token. Always set a token, because any program or page that can reach the port could otherwise run commands. github.com

• A public address hands over the machine

  The docs describe a Cloudflare tunnel for remote access. Anyone with the address and token can run commands, so keep authentication on and never share the token. docs.nexusdock.co

• The assistant can add more servers and code

  The add-server tool can register a local command as a new MCP server, and the skill and plugin tools install code that adds tools. Review what the assistant installs. github.com

• Opt-in browser tools can use your logins

  The README says the browser tools can reuse login sessions. Leave browser tools off, or point them at a separate browser profile. github.com

• Binds to this machine unless you change it

  The default host is 127.0.0.1, and a non-loopback host will not start without a token or OAuth. The Docker image listens on all addresses inside the container, and the compose file publishes it on 127.0.0.1 by default. github.com

• Tool text steers the assistant

  Some descriptions tell the assistant to call the context tools first and to create a task before big jobs. This changes how it behaves, so expect extra tool calls. github.com

Security advisories