Docker Hub

Developer Tools

Docker, Inc. · Developer tools & code hosting

Best for: Distributing container images and OCI artifacts to the broadest possible audience.

Overview

Docker Hub is the world's largest registry of container images and the default distribution point referenced by docker pull. Rather than plugins inside a tool, its listings are container images — base OS images, databases, language runtimes, CI tooling, and increasingly AI/ML and MCP server images — that engineers pull into the software they build and ship. Authentication for pushing and higher rate limits uses personal access tokens via docker login, with organization SSO/OIDC on top.

Docker curates several trusted tiers: Docker Official Images (maintained and reviewed by Docker and upstreams), Docker-Sponsored Open Source, and the Verified Publisher program for commercial vendors. These tiers carry review/vetting and are exempt from the pull-rate limits that constrain anonymous and free-tier users. Verified Publisher is a paid partner program, so monetization is oriented around program membership and subscriptions rather than per-image transactions. Rate limiting is a defining operational characteristic: anonymous pulls are capped on a rolling six-hour basis, while authenticated and paid accounts get substantially higher allowances.

How to build & ship

  1. 1Create a Docker Hub account and a repository (public or private)
  2. 2Write a Dockerfile and build the image with docker build (or buildx for multi-arch)
  3. 3Tag the image with your namespace and version (docker tag)
  4. 4Authenticate with docker login, then docker push to publish
  5. 5Add a repository description/overview and configure automated builds if desired
  6. 6Optionally apply for Verified Publisher or Docker-Sponsored OSS status for trust badges

Key APIs & SDKs

Docker CLI (build, tag, push) and BuildKit/buildx
OCI image and distribution specifications
Docker Registry HTTP API v2
Docker Hub API (repos, tags, webhooks)
Docker Scout (image analysis)

Integration types

Authentication & security

  • Primary auth: PAT
  • Also supports: OAuth 2.0
  • Security review: Required
  • Docker Official Images and Verified Publisher listings undergo Docker review; anonymous public image pushes are not individually reviewed.
  • Ordinary image pushes require no review and publish immediately; curated tiers (Docker Official Images, Verified Publisher, Docker-Sponsored OSS) involve an application and Docker vetting to earn their trust badges.
  • Anonymous pulls are capped (roughly 200 per 6-hour window); paid tiers and curated content get unlimited pulls.

Monetization

Onboarding
Verified Publisher is a paid partner program (fees vary)
Commission
No per-image sales; paid content is via program membership/subscription
Merchant of Record
Docker (for subscription and program billing)

Pros & cons for builders

Pros

  • The default, ubiquitous registry with massive reach and CDN-backed pulls
  • Standards-based (OCI) images that run on any compliant runtime
  • Instant self-service publishing via familiar docker push
  • Trusted-content programs add credibility for commercial/OSS publishers

Cons

  • Anonymous/free pulls are rate-limited, affecting high-volume consumers
  • No upstream review means impostor and malicious images exist
  • Storage/retention and org features increasingly gated behind paid plans