Docker is optional, isolation is not
Many MCP servers can run as a local process over standard input and output. Install the runtime they require, pin dependencies, and configure the client with the exact executable and arguments. The absence of a container means filesystem and environment permissions deserve more attention.
Build a minimal local contract
Run the server as a dedicated user or with the narrowest directory access practical. Pass only required environment variables, keep logs away from protocol output, and verify the server by listing its tools or resources before granting write-capable access.
- Pin the package version.
- Use absolute executable paths.
- Keep secrets out of committed config.
- Review every write-capable tool description.
Use application confirmation for staged changes
CmdBrief’s MCP server mode can expose MCP actions for workspace and workflow configuration. Those actions are staged and require in-app confirmation, while ordinary terminal or agent operations retain their own approval boundaries.
Questions
Is Docker required by MCP?
No. MCP defines communication patterns; many servers run directly as local processes.
Still unsure? Write to [email protected] or use the contact form. Contact CmdBrief →
Primary sources
Provider terms and product behavior can change. Confirm plan, pricing, model, and permission details in the current official documentation.