Robinson AI Systems Dokploy MCP — Credential Privacy

This is an independently hosted connection service, not an official Dokploy service. Its purpose is to let users authorize ChatGPT to operate their own Dokploy instance.

What you provide

You enter your own public HTTPS Dokploy instance URL and Dokploy API token into the secure authorization form on dokploy.robinsonaisystems.com. The service validates that token against your Dokploy API. No other user's token, including the host operator's token, should be substituted.

How the token is protected

API tokens are encrypted server-side with authenticated encryption and stored in an isolated Neon PostgreSQL database. OAuth access and refresh tokens are stored only as hashes. The service must decrypt your API token temporarily to make requests to your Dokploy instance. Robinson AI Systems, as the operator, controls the encryption process and may technically be capable of accessing tokens. This is not zero-knowledge hosting.

What access is granted

ChatGPT receives an OAuth token for this connection, not your plaintext Dokploy API key. Actions may include creating, editing and deleting resources to the extent allowed by your own Dokploy token. Review management actions before approving them.

Retention and deletion

You can use the dokploy_disconnect tool, with confirmation, to delete this connection's stored API token and associated OAuth sessions. Expired connections without active sessions are automatically cleaned up. You can also revoke the key in your own Dokploy instance, which immediately stops that token from working upstream.

Important safeguards

Only connect a Dokploy instance and credentials that you are authorized to manage. Your Dokploy server must be reachable by the gateway through public HTTPS; internal-only instance URLs are rejected to reduce security risks. Do not share your token in ChatGPT conversation messages or public issue trackers.

Last updated October 26, 2026. The service may remain in testing until security validation is complete.