check_scopesLABSCO SUMMARY
The tool is missing, not just refused.
Most guardrails let the model call a dangerous tool and then say no. Here, leaving containers:delete off the key means delete_container never appears in the tool list, and the WAGMIOS API would reject it even if it did. That plus the per-key audit trail is the whole reason to add a hop between your agent and the Docker daemon.
What it is
A Go MCP server that sits between an AI client and WAGMIOS, a self-hosted Docker management platform. It reads the scopes on your API key at startup and registers only the tools that key permits, so an agent cannot call what it was not granted — the enforcement lives in the key, not in the prompt.
What you get
- Always available:
check_scopesshows the key's label, prefix and granted scopes - Read tools behind
containers:readandsystem:read—list_containers,container_logs,container_config,system_info,system_metrics - Lifecycle behind
containers:write—start_container,stop_container,restart_container,create_container - Deletion behind its own
containers:deletescope —delete_container - Images —
list_imageson read,pull_imageanddelete_imageon write - A self-hosted app marketplace —
browse_marketplace,get_marketplace_app,list_installed_apps, theninstall_appandstart_appon write - Multi-machine mode: one server, several WAGMIOS instances, a
hostparameter on every tool and alist_hoststool, each host keeping its own scopes
Requirements
A running WAGMIOS instance — the documented setup brings it up with Docker Compose, serving its API on port 5179 and its UI on 5174 — and a scoped API key created in its Agent Permissions screen. Install the server with go install, or run the published Docker image. Pass the URL and key as launch flags or as WAGMIOS_API_URL and WAGMIOS_API_KEY. stdio for local clients; SSE if you need to reach it remotely. MIT licensed.
Setup effort
One command plus a key — go install github.com/mentholmike/clawmachine/cmd/clawmachine@latest, then supply credentials
USE CASES
01
Letting an assistant run your homelab without root
Grant read and write scopes but not delete; it can restart and create containers and never remove one.
02
Installing self-hosted apps by asking
Browse the marketplace, read an app's compose details, then install and start it in one exchange.
03
Managing several machines from one client
Run in multi-instance mode; each host carries its own key and scopes, so the NAS can allow deletion while the VPS does not.
20 tools
Listed in project docs. Your client may show a different list.
system_infosystem_metricslist_containerscontainer_logscontainer_configstart_containerstop_containerrestart_containercreate_containerdelete_containerlist_imagespull_imagedelete_imagebrowse_marketplaceget_marketplace_applist_installed_appsinstall_appstart_applist_hostsBEFORE YOU INSTALL
What to know first
Tools you get
20 tools named in the project's documentation.
Requires
- Go, for go install (or Docker, for the published itzmizzle/clawmachine image)
- A running WAGMIOS instance — the README brings it up with docker compose, API on port 5179
- A scoped WAGMIOS API key, passed with -api-key (or WAGMIOS_API_KEY)
Where it runs
All 3 documented clients run the server on your machine.
INSTALLATION
Connect your client
Server setup
TERMINAL
go install github.com/mentholmike/clawmachine/cmd/clawmachine@latestMCP Clients
Claude Code, Cursor
JSON
{
"mcpServers": {
"clawmachine": {
"command": "clawmachine",
"args": [
"-api-url",
"http://localhost:5179",
"-api-key",
"<YOUR_API_KEY>"
]
}
}
}<YOUR_API_KEY> is the README's example key; yours is the scoped API key you created in WAGMIOS (Settings → Agent Permissions). http://localhost:5179 is where the README's WAGMIOS setup serves its API.
Docker MCP Toolkit
DOCKER MCP TOOLKIT · JSON
{
"servers": {
"clawmachine": {
"command": "docker",
"args": [
"run",
"-i",
"itzmizzle/clawmachine",
"-api-url",
"http://host.docker.internal:5179",
"-api-key",
"<YOUR_API_KEY>"
],
"type": "stdio"
}
}
}<YOUR_API_KEY> is the README's example key; yours is the scoped API key you created in WAGMIOS (Settings → Agent Permissions). host.docker.internal:5179 reaches the WAGMIOS API on your machine from inside the container.
