A simple Docker container for running Claude Code MCP server with enhanced security features.

This Docker container provides a pre-configured development environment with:

• Base OS: Ubuntu
• Build Tools: git, curl, wget, etc.
• Security: Network firewall to prevent unauthorized outbound connections

You can customize the Dockerfile to add additional development tools or languages specific to your projects.

docker build -t my-claude-mcp:latest .

Or if you have just installed:

just build

Configure Claude Desktop settings file (~/Library/Application\ Support/Claude/claude_desktop_config.json on macOS for example) as follows:

{
  "mcpServers": {
    "claude-code": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--cap-add=NET_ADMIN",
        "-v", "/Users/username/.claude:/home/claude/.claude",
        "-v", "/Users/username/project-1:/workspace/project-1",
        "-v", "/Users/username/project-2:/workspace/project-2",
        "my-claude-mcp:latest"
      ]
    }
  }
}

This configuration:

• Mounts your Claude settings directory (~/.claude)
• Mounts your project directories for access within the container
• Gives you the flexibility to add as many project directories as needed

Feel free to modify the Dockerfile to add more development tools based on your needs. For example:

• Additional programming languages (Go, Python, etc.)
• Database clients
• Cloud CLIs (AWS, GCP, Azure)
• Container tools (Docker, Kubernetes tools)

After modifying the Dockerfile, rebuild the image with:

docker build -t my-claude-mcp:latest .

Or with just:

just build

The container supports the following environment variables:

This container includes a network firewall that restricts outbound connections to only approved domains:

• GitHub domains (api.github.com, github.com, etc.)
• NPM registry (registry.npmjs.org)
• Anthropic APIs (api.anthropic.com, statsig.anthropic.com)
• Other required services (sentry.io, etc.)

The firewall is automatically enabled when the container is started with the necessary capabilities (--cap-add=NET_ADMIN). These capabilities are required for the container to run - if they are not provided, the container will exit immediately for security reasons.

Key security features:

• Firewall configuration is handled by the root user
• Claude Code MCP runs as a non-root user (claude) without sudo privileges
• Strict firewall rules prevent unauthorized network access
• Automatic verification of firewall configuration during startup

This security feature helps prevent potential data exfiltration attempts through the MCP server.