Dockerfile

# Only for MCP directory listings (Glama and friends) that need to start the
# server and introspect it. It is NOT how you run this against a real account:
# the server keeps its profile in a 0600 file on your own machine, and putting
# that in a container image or a third party's infrastructure defeats the point
# of "direct client ↔ Sber, secrets never leave your machine".
#
# Starting with no credentials is deliberate and safe: nothing here contacts the
# bank. tools/list works with an empty config, and the default is read-only, so
# an introspecting crawler sees the nine read tools and none of the five that
# could change an account.
FROM python:3.12-slim

WORKDIR /app
COPY . /app

# Both distributions from this tree, so the image matches the commit rather than
# whatever happens to be on PyPI.
RUN pip install --no-cache-dir . ./mcp

# stdio JSON-RPC, so no port and nothing to expose.
RUN useradd --create-home --uid 10001 sber
USER sber
WORKDIR /home/sber

# No --allow-writes: writes stay opt-in here exactly as they are everywhere else.
# Add --demo instead to serve the synthetic portfolio and open no connection.
ENTRYPOINT ["sber-unofficial-mcp"]