第4話Chapter 4

The admin that answers to one

A custom MCP server that lets an AI assistant inspect and restart containers on a personal server, behind single sign-on.
  • Python
  • FastMCP
  • Docker
  • OIDC
  • CrowdSec

2026

A headless server. A dozen services. SSH for every little check.
What if I could just ask?
Logs, restarts and threat checks, on demand.

But giving an assistant a shell is a bad idea.

So: a small server with a short list of tools.
Narrow on purpose.
The toolbox:
List containers, read logs, restart from an allowlist.
CrowdSec metrics, active decisions and top attackers.
Config in a file, secrets in the environment.
Python FastMCP over Streamable HTTP, behind Nginx Proxy Manager and Authelia OIDC.
Ask, don’t SSH!
An assistant that can look and nudge, and nothing else.
Least privilege.

Docker runs rootless, and the server stays containerised to keep its boundary.

End of chapter 4

Next chapter

第5話 The server with one door