Home › Other › ironclaw

ironclaw

Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.

★ 19 stars Last pushed 2026-09-23 License: AGPL-3.0

View repository → Website →

Connect

Review any command before running it. Package names and URLs come from the server's own registry entry.

Package (oci)

docker run -i --rm ghcr.io/ironsecco/ironclaw-mcp:v0.1.530

Or add to your MCP client config:

{
  "mcpServers": {
    "ironclaw": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/ironsecco/ironclaw-mcp:v0.1.530"
      ],
      "env": {
        "IRONCLAW_CONTROLPLANE_URL": "<YOUR_VALUE>",
        "IRONCLAW_API_TOKEN": "<YOUR_VALUE>"
      }
    }
  }
}

IRONCLAW_CONTROLPLANE_URL required — Base URL of your running IronClaw control-plane, e.g. http://127.0.0.1:8787. This image is a thin client with no host privilege: it delegates every sandbox_exec run to the control-plane, which owns the hardened gVisor launch. Unset means no backend and the tool fails closed.
IRONCLAW_API_TOKEN required secret — Bearer token for the control-plane API (the value the control-plane was started with).

This server takes extra arguments — see its repository.