compose.mcp.owui.yaml

services:
  mcp-owui:
    # openwebui-mcp has no semver release yet; pinned to its latest built commit.
    # Check for a newer sha-<commit> tag at https://github.com/vedmaka/openwebui-mcp/pkgs/container/openwebui-mcp
    image: ghcr.io/vedmaka/openwebui-mcp:sha-6b28eda047b1b978e6b26978d713d3f22422df56
    command: [ "--transport", "streamable-http", "--host", "0.0.0.0", "--port", "8001" ]
    restart: unless-stopped
    environment:
      OPENWEBUI_BASE_URL: "${MCP_OPENWEBUI_BASE_URL:-http://openwebui:8080}"
      OPENWEBUI_API_KEY: "${MCP_OPENWEBUI_API_KEY}"
      OPENWEBUI_DEFAULT_MODEL: "${MCP_OPENWEBUI_DEFAULT_MODEL:-}"
      OPENWEBUI_ENFORCE_DEFAULT_MODEL: "${MCP_OPENWEBUI_ENFORCE_DEFAULT_MODEL:-false}"
      OPENWEBUI_ASK_DESCRIPTION: "${MCP_OPENWEBUI_ASK_DESCRIPTION:-}"
      OPENWEBUI_INSTRUCTIONS: "${MCP_OPENWEBUI_INSTRUCTIONS:-}"
      # unset OPENWEBUI_MCP_TOKEN leaves the bridge open to any listener (per
      # upstream's own docs), so require it explicitly rather than default to that
      OPENWEBUI_MCP_TOKEN: "${MCP_OPENWEBUI_MCP_TOKEN:?Set MCP_OPENWEBUI_MCP_TOKEN in .env — the MCP bridge refuses to start without it}"
      OWUI_TIMEOUT_MS: "${MCP_OWUI_TIMEOUT_MS:-120000}"
      OPENWEBUI_CA_BUNDLE: "${MCP_OPENWEBUI_CA_BUNDLE:-}"
      OPENWEBUI_SSL_VERIFY: "${MCP_OPENWEBUI_SSL_VERIFY:-true}"
    ports:
      - "${MCP_PORT:-8001}:8001"
    extra_hosts:
      - "host.docker.internal:host-gateway"
    depends_on:
      openwebui:
        condition: service_healthy