diff --git a/.changeset/uvxdocker1.md b/.changeset/uvxdocker1.md
index 32e2d9b8..b4c74474 100644
--- a/.changeset/uvxdocker1.md
+++ b/.changeset/uvxdocker1.md
@@ -3,3 +3,5 @@
 ---
 
 Install `uv` and `uvx` in the Compose server image and the agent image, so MCP servers launched with `uvx` (such as the Nginx Proxy Manager MCP) can be enabled by Codex instead of failing with `uvx` not found. The server image also carries `pnpm` for `dsh plugin`.
+
+Both images also install `libsecret-1-0`, the native library the `keytar` dependency of the Azure DevOps MCP (`@azure-devops/mcp`) needs; without it the server crashes before answering the MCP initialize handshake.
diff --git a/docker/agent.Dockerfile b/docker/agent.Dockerfile
index 1082ee71..fa7dfdd9 100644
--- a/docker/agent.Dockerfile
+++ b/docker/agent.Dockerfile
@@ -17,6 +17,7 @@ FROM node:22-bookworm-slim
 RUN apt-get update \
  && apt-get install -y --no-install-recommends \
       git \
+      libsecret-1-0 \
       tmux \
       ripgrep \
       curl \
diff --git a/docker/server.Dockerfile b/docker/server.Dockerfile
index 939cf3fa..99142abc 100644
--- a/docker/server.Dockerfile
+++ b/docker/server.Dockerfile
@@ -39,6 +39,7 @@ RUN apt-get update \
       curl \
       g++ \
       git \
+      libsecret-1-0 \
       make \
       openssh-client \
       procps \