Unverified50% confidenceFactExact time
The read-only mount flag on the Docker socket only makes the socket file itself read-only and places no restriction whatsoever on API requests sent over that connection, including write operations such as restarting containers.
1
Sources
50%
Confidence
Long-term
Relevance
10/28/2026
First Seen
Sources
Giving AI Agents "Hands": Securely Controlling Docker with MCP
youtubeThe Smart Workshop10/28/2026
Related Entities
Related Claims
UnverifiedLedgerLens's read operations are executed through GRAPH.RO_QUERY, which is enforced read-only on the server side and cannot write or modify the graph structure.69% similarUnverifiedRead-Only Access means the tool obtains only permission to read data via OAuth or API keys, and cannot modify, delete, or initiate payments, in line with the principle of least privilege.63% similarUnverifiedWhen creating an API key on a broker's platform, grant only read and trade permissions, not withdrawal permissions.62% similarUnverifiedThe clipboard access prompt mechanism only targets active cross-app read behaviors and does not prevent clipboard managers that have been actively authorized by the user from silently recording in the background.61% similarUnverifiedClients that read the MCP registry do not actively probe servers, but instead read and trust the records in the registry; if a record does not declare a certain transport, the client behaves as if that transport does not exist.58% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1107582API
curl https://kongchang.com/api/v1/knowledge/claims/1107582MCP
get_claim(id=1107582)