mcp/root pulls statistics

Root.io Vulnerability Remediation MCP MCP Server

MCP server that provides container image vulnerability scanning and remediation capabilities through Root.io.

What is an MCP Server?

Characteristics

Attribute|Details| |-|-| Docker Image|mcp/root Author|rootio-avr Repository|https://github.com/rootio-avr/mcp-proxy Dockerfile|https://github.com/rootio-avr/mcp-proxy/blob/main/Dockerfile Docker Image built by|Docker Inc. Docker Scout Health Score| Verify Signature|COSIGN_REPOSITORY=mcp/signatures cosign verify mcp/root --key https://raw.githubusercontent.com/docker/keyring/refs/heads/main/public/mcp/latest.pub Licence|MIT License

Available Tools (11)

Tools provided by this Server|Short Description -|- create_registry_integration|Creates a registry integration within root system.| get_image_remediation|Retrieves image remediation for a given image_remediation_id (imgrmd_...).| get_remediation_continuity_summary|Get remediation continuity summary for a specific FQIN showing aggregated fixes and vulnerability trends over time.| get_remediation_details_by_scan_id|Gets the remediation details for a given scan ID focusing mainly on the packages that were upgraded / patched by root and the resulted image name to perform docker pull.| get_remediation_status|Get detailed status and results of an image remediation process.| get_user_info|Get current user information including organization details.| list_remediation_continuity_summaries|List all remediation continuity summaries for an organization showing aggregated fixes and vulnerability trends for all FQINs.| list_unique_fqins|List all unique FQINs (fully qualified image names) for an organization.| ping|Health check endpoint that returns server status and timestamp| registries_credentials_list|List all private registry credentials for an organization.| trigger_remediation|Trigger an asynchronous image remediation process for a container image.|

Tools Details

Tool: create_registry_integration

Creates a registry integration within root system. The integration will be used to pull images for remediating and push the resulted image with a new tag. Use this tool if the user wants to remediate an image from a registry they haven't integrated before. This tool uses a wizard approach to guide users through the setup process. Suggest using this tool if the user requests to remediate a private image with no registry integration for it. Parameters|Type|Description -|-|- display_name|string|A convenient informative name for this registry integration (e.g., 'backend_dockerhub_prod') organization_id|string|The organization ID to create the registry integration for registry|string|The registry type to integrate with. Options: dockerhub, ghcr, gitlab, ecr, gar, sonatype_nexus, quay, acr test_image|string|An image to test connection with the registry (should exist in the registry but won't be remediated) access_key_id|string *optional*|AWS Access Key ID for ECR registry account_service_key_file|string *optional*|Google Cloud Service Account Key File (JSON string) for GAR registry client_id|string *optional*|Azure Client ID for ACR registry client_secret|string *optional*|Azure Client Secret for ACR registry personal_access_token|string *optional*|Personal Access Token for registries that use PAT authentication (DockerHub, GHCR, GitLab, Sonatype Nexus, Quay) region|string *optional*|AWS Region for ECR registry role_arn|string *optional*|AWS Role ARN for ECR registry using assumed role secret_key|string *optional*|AWS Secret Key for ECR registry username|string *optional*|Username for registries that use Personal Access Token authentication (DockerHub, GHCR, GitLab, Sonatype Nexus, Quay)

*This tool may perform destructive updates.*

*This tool interacts with external entities.*

Tool: get_image_remediation

Retrieves image remediation for a given image_remediation_id (imgrmd_...). Provides detailed information about the remediation step including the list of packages that were upgraded, the FQIN of the resulted remediated image, or alternatively the decision of patching which might be not to patch with the reason. IMPORTANT NOTE: image remediation should ALWAYS be fetched together with get_remediation_continuity_summary to provide a report at the end of every remediation process. Parameters|Type|Description -|-|- image_remediation_id|string|The image remediation ID to retrieve details for organization_id|string|The organization ID that owns the image remediation. Get this from 'get_user_info' tool.

*This tool may perform destructive updates.*

*This tool interacts with external entities.*

Tool: get_remediation_continuity_summary

Get remediation continuity summary for a specific FQIN showing aggregated fixes and vulnerability trends over time. This includes the number of root patches and upstream upgrades applied, as well as vulnerability counts by severity from the first tag ever remediated to the last tag remediated of this image. NOTE: This tool should be called after using the list_unique_fqins tool to get the exact FQIN. Parameters|Type|Description -|-|- organization_id|string|The organization ID that owns the images. Get this from 'get_user_info' tool. untagged_fqin|string|The fully qualified image name without tag (e.g., 'docker.io/library/ubuntu')

*This tool may perform destructive updates.*

*This tool interacts with external entities.*

Tool: get_remediation_details_by_scan_id

Gets the remediation details for a given scan ID focusing mainly on the packages that were upgraded / patched by root and the resulted image name to perform docker pull. IMPORTANT NOTE: image remediation should ALWAYS be fetched together with get_remediation_continuity_summary to provide a report at the end of every remediation process. Parameters|Type|Description -|-|- organization_id|string|The organization ID that owns the image remediations. Get this from 'get_user_info' tool. scan_id|string|Required scan ID to get remediation details for a specific scan…

Description from the Docker Hub listing.