Docker Hub + Memtro

Only when you ask, and only what it has been granted: create a repository (public or private, as asked); set a repository's immutable tag rules; give an organization group read, write or admin access to a repository; change an organization member's role; remove a member from an organization; create an organization group; rename a group, change its description or its role; delete an organization group; add a member to a group; remove a member from a group; invite people to an organization by email or Docker ID; resend a pending invitation; cancel a pending invitation. Every other tool reads, searches or lists. The Connections page labels the tools that act, an administrator grants each one by name to the teams that may use it, and a personal connection acts only after its owner allows it.

A personal connection serves only your own requests. A shared connection serves the organisation: everyone, or only the teams an admin chooses. Admins can always add shared connections; other members need the permission.

Credentials are encrypted at rest. Tool results are cached briefly so agent loops do not repeat identical calls, and the facts the model extracts are saved to your organisation's memory with provenance (system, record and link) so they can be checked and superseded.

Docker ID or organization name, access token and namespace. In Docker, open Account settings → Personal access tokens and generate a token, Read-only or Read & Write as you need. An organization owner can instead make a scoped organization access token.