This product was not featured by Product Hunt yet. It will not be visible on their landing page and won't be ranked (cannot win product of the day regardless of upvotes).
DMCPS
Secure Docker sandbox for AI agent filesystem & shell access
DMCPS (Docker Model Context Protocol Secured) gives AI coding agents isolated terminal and filesystem execution without risking the host machine. Key features: • Non-root Alpine execution with dropped Linux capabilities (cap_drop: ALL) • Web dashboard to whitelist allowed project folders in real time • Mathematical blocking of directory traversal attacks (../) • Native SSE endpoint for Claude Desktop, Cursor & custom agents • 1-click deploys for Render, Railway & Docker
Hey Product Hunt! 👋
As autonomous coding agents become part of daily development, granting them direct terminal and filesystem access creates serious risks: buggy scripts, hallucinations, or prompt injections can overwrite source trees, leak root credentials, or escape local workspaces.
I built DMCPS (Docker Model Context Protocol Secured) to solve this out of the box with zero host compromise.
How it works:
• Hardened Isolation: Runs completely non-root in Alpine, drops all Linux kernel capabilities, enforces no-new-privileges, and mounts the container root as read-only.
• Dynamic Whitelisting: Agents can only read, write, or run commands in paths explicitly approved via the dashboard. Directory traversal tricks (../) are mathematically blocked and verified via Jest test suites.
• Plug-and-Play MCP: Exposes an SSE endpoint ready for Cursor, Claude Desktop, or your own autonomous pipelines.
• Fast Deployment: Pre-configured for Docker Compose, Render, and Railway.
DMCPS is 100% open-source under the MIT license. Looking forward to your thoughts, feedback, and security test cases!
⚡ Massive Milestone Update: "Cursor on your Phone" is live! 📱🚀
When I launched DMCPS 3 days ago, the goal was rock-solid host defense for desktop AI agents.
Tonight, we took it to the next level: we successfully bridged DMCPS directly into the official Gemini mobile app.
🛠️ What's new in v1.1:
• Custom Streamable HTTP Transport Adapter: Reverse-engineered Google's MCP protocol layer and bypassed aggressive cloud caching so Gemini can execute tool calls smoothly over standard HTTPS.
• Turn Your Phone into a Cloud Coding Rig: Connect the Gemini app directly to your remote Render or Docker container via the dedicated /gemini endpoint. You can now prompt Gemini on Android or iOS to inspect source files, refactor logic, and run shell commands directly in your isolated sandbox.
• Zero-Friction Handshake: Bypasses complex enterprise identity brokering—you can connect your instance right away without getting trapped in OAuth setup loops.
• Same Uncompromising Security: The Alpine sandbox remains locked down. Non-root execution, dropped Linux kernel capabilities, and mathematical path whitelisting still protect your host environment.
The updated setup guide and 97%+ TypeScript codebase are live in the repo: github.com/RMAAPK/dmcps
Drop a comment or test the deployment—would love to know what workflows you want to run from you
r pocket! 🐺💻
About DMCPS on Product Hunt
“Secure Docker sandbox for AI agent filesystem & shell access”
DMCPS was submitted on Product Hunt and earned 3 upvotes and 2 comments, placing #89 on the daily leaderboard. DMCPS (Docker Model Context Protocol Secured) gives AI coding agents isolated terminal and filesystem execution without risking the host machine. Key features: • Non-root Alpine execution with dropped Linux capabilities (cap_drop: ALL) • Web dashboard to whitelist allowed project folders in real time • Mathematical blocking of directory traversal attacks (../) • Native SSE endpoint for Claude Desktop, Cursor & custom agents • 1-click deploys for Render, Railway & Docker
DMCPS was featured in Open Source (69k followers), Developer Tools (521.5k followers), Artificial Intelligence (481.6k followers) and GitHub (41.4k followers) on Product Hunt. Together, these topics include over 269.4k products, making this a competitive space to launch in.
Who hunted DMCPS?
DMCPS was hunted by Muhammad Ali. A “hunter” on Product Hunt is the community member who submits a product to the platform — uploading the images, the link, and tagging the makers behind it. Hunters typically write the first comment explaining why a product is worth attention, and their followers are notified the moment they post. Around 79% of featured launches on Product Hunt are self-hunted by their makers, but a well-known hunter still acts as a signal of quality to the rest of the community. See the full all-time top hunters leaderboard to discover who is shaping the Product Hunt ecosystem.
Want to see how DMCPS stacked up against nearby launches in real time? Check out the live launch dashboard for upvote speed charts, proximity comparisons, and more analytics.
Muhammad Ali