Ironclaw

io.github.IronSecCo/ironclaw · v0.1.569

Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.

Website Source code Set it up

Connect Runs on your machine

Terminal

claude mcp add ironclaw -e IRONCLAW_CONTROLPLANE_URL=<IRONCLAW_CONTROLPLANE_URL> -e IRONCLAW_API_TOKEN=<IRONCLAW_API_TOKEN> -- docker run -i --rm ghcr.io/ironsecco/ironclaw-mcp:v0.1.569

claude_desktop_config.json

{
  "mcpServers": {
    "ironclaw": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/ironsecco/ironclaw-mcp:v0.1.569"
      ],
      "env": {
        "IRONCLAW_CONTROLPLANE_URL": "<IRONCLAW_CONTROLPLANE_URL>",
        "IRONCLAW_API_TOKEN": "<IRONCLAW_API_TOKEN>"
      }
    }
  }
}

~/.cursor/mcp.json

{
  "mcpServers": {
    "ironclaw": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/ironsecco/ironclaw-mcp:v0.1.569"
      ],
      "env": {
        "IRONCLAW_CONTROLPLANE_URL": "<IRONCLAW_CONTROLPLANE_URL>",
        "IRONCLAW_API_TOKEN": "<IRONCLAW_API_TOKEN>"
      }
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "ironclaw": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/ironsecco/ironclaw-mcp:v0.1.569"
      ],
      "env": {
        "IRONCLAW_CONTROLPLANE_URL": "<IRONCLAW_CONTROLPLANE_URL>",
        "IRONCLAW_API_TOKEN": "<IRONCLAW_API_TOKEN>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

Name	Description
`IRONCLAW_CONTROLPLANE_URL` Required	Base URL of your running IronClaw control-plane, e.g. http://127.0.0.1:8787. This image is a thin client with no host privilege: it delegates every sandbox_exec run to the control-plane, which owns the hardened gVisor launch. Unset means no backend and the tool fails closed.
`IRONCLAW_API_TOKEN` Required, secret	Bearer token for the control-plane API (the value the control-plane was started with).

Details

Package	`ghcr.io/ironsecco/ironclaw-mcp:v0.1.569` (OCI, stdio)
First published	2 Nov 2026
Last updated	2 Nov 2026
Registry name	`io.github.IronSecCo/ironclaw`

More developer tools servers See all

Live status

Local install

Installed and run on your own machine, so there is no public endpoint to check.

Pair it with live search

Agents that use Ironclaw often also need current facts. NestDaddy MCP gives your AI today's internet: web search, real-time breaking news and full page reading in one connector.

See NestDaddy MCP

For maintainers

[![NestDaddy MCP](https://nestdaddy.com/mcp/servers/io-github-ironsecco-ironclaw/badge.svg)](https://nestdaddy.com/mcp/servers/io-github-ironsecco-ironclaw)

Add the badge to your README. It turns green while your server passes our daily check. Listing details come from the official MCP registry; update them there.

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.