Lint a Dockerfile for security and size issues

$0.003 per call · failed calls are never charged · no account or API key needed

Check a Dockerfile (up to 8,000 characters) for common security and image-size problems: unpinned or :latest base images, running as root, piping downloads into a shell, sensitive values baked into ENV or ARG, ADD from URLs, apt and pip cache left in layers, sudo, chmod 777 and an exposed SSH port. Returns each finding with its line, a severity and a fix, plus a score. Use before building or shipping an image.

Run it free (25 free calls) Buy credits by card (from $5) Example result (JSON)

Inputs

Name	Type	Description
`dockerfile` (required)	string	Dockerfile contents (up to 8,000 characters)

Request

Over HTTP, with a card key from /credits:

curl -H "Authorization: Bearer adt_…" "https://agent-data-tools.revmesh2074.workers.dev/dockerfile/lint?dockerfile=FROM%20node%3Alatest%0ACOPY%20.%20%2Fapp%0ACMD%20node%20%2Fapp%2Fserver.js"

Or one of your 25 free calls, no key:

curl "https://agent-data-tools.revmesh2074.workers.dev/dockerfile/lint?dockerfile=FROM%20node%3Alatest%0ACOPY%20.%20%2Fapp%0ACMD%20node%20%2Fapp%2Fserver.js&trial=1"

Without a key, the same URL answers 402 Payment Required with x402 and MPP terms, so an agent with a wallet pays per call in USDC (Base, Polygon, Arbitrum, Monad, World Chain or Tempo) and retries.

Example result

{
  "score": 72,
  "findings": [
    {
      "line": 1,
      "rule": "latest-tag",
      "severity": "medium",
      "message": "base image node:latest uses :latest; pin a version"
    }
  ],
  "counts": {
    "high": 0,
    "medium": 2,
    "low": 1
  }
}

From an AI agent (MCP)

Add the MCP server to Claude, Cursor or any MCP client. This tool is dockerfile_lint, and the first 25 successful calls are free:

https://agent-data-tools.revmesh2074.workers.dev/mcp

Lint a Dockerfile for security and size issues

Inputs

Request

Example result

From an AI agent (MCP)

Related tools