Ironclaw

MCP server · by IronSecCo

Developer Tools Docker v0.1.557

Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.

View source ↗ Website ↗ Generate config for multiple servers More servers

Install

Pin version unavailable — the image reference already carries a tag

Docker
docker run -i --rm ghcr.io/ironsecco/ironclaw-mcp:v0.1.557

Setup by client

Pick your client — the config below is generated for this server (local stdio). Copy respects the “Pin version” switch above.

claude_desktop_config.json

{
  "mcpServers": {
    "ironclaw": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/ironsecco/ironclaw-mcp:v0.1.557"
      ],
      "env": {
        "IRONCLAW_CONTROLPLANE_URL": "<YOUR_IRONCLAW_CONTROLPLANE_URL>",
        "IRONCLAW_API_TOKEN": "<YOUR_IRONCLAW_API_TOKEN>"
      }
    }
  }
}

Format verified against the official Claude Desktop docs ↗.

terminal

claude mcp add --env IRONCLAW_CONTROLPLANE_URL=<YOUR_IRONCLAW_CONTROLPLANE_URL> --env IRONCLAW_API_TOKEN=<YOUR_IRONCLAW_API_TOKEN> ironclaw -- docker run -i --rm ghcr.io/ironsecco/ironclaw-mcp:v0.1.557

Format verified against the official Claude Code docs ↗.

.cursor/mcp.json

{
  "mcpServers": {
    "ironclaw": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/ironsecco/ironclaw-mcp:v0.1.557"
      ],
      "env": {
        "IRONCLAW_CONTROLPLANE_URL": "<YOUR_IRONCLAW_CONTROLPLANE_URL>",
        "IRONCLAW_API_TOKEN": "<YOUR_IRONCLAW_API_TOKEN>"
      }
    }
  }
}

Format verified against the official Cursor docs ↗.

.vscode/mcp.json

{
  "servers": {
    "ironclaw": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/ironsecco/ironclaw-mcp:v0.1.557"
      ],
      "env": {
        "IRONCLAW_CONTROLPLANE_URL": "<YOUR_IRONCLAW_CONTROLPLANE_URL>",
        "IRONCLAW_API_TOKEN": "<YOUR_IRONCLAW_API_TOKEN>"
      }
    }
  }
}

Format verified against the official VS Code docs ↗.

mcp_config.json

{
  "mcpServers": {
    "ironclaw": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/ironsecco/ironclaw-mcp:v0.1.557"
      ],
      "env": {
        "IRONCLAW_CONTROLPLANE_URL": "<YOUR_IRONCLAW_CONTROLPLANE_URL>",
        "IRONCLAW_API_TOKEN": "<YOUR_IRONCLAW_API_TOKEN>"
      }
    }
  }
}

Format verified against the official Windsurf docs ↗.

Environment variables

Defined in the server's official registry manifest. Required secrets are shown as <YOUR_…> placeholders in the configs above.

IRONCLAW_CONTROLPLANE_URL required — Base URL of your running IronClaw control-plane, e.g. http://127.0.0.1:8787. This image is a thin client with no host privilege: it delegates every sandbox_exec run to the control-plane, which owns the hardened gVisor la
IRONCLAW_API_TOKEN required secret — Bearer token for the control-plane API (the value the control-plane was started with).

GitHub

⭐ 19 stars · 最近更新于 16 天前 · AGPL-3.0 license

About this server

Self hosted AI agents you do not have to trust. Each one runs sealed in a sandbox that provably cannot phone home, read your host, or rewrite its own rules.…

Summary from the project README — github.com/IronSecCo/ironclaw

Distributed as Docker, listed under Developer Tools. Review our MCP security guide before granting access to real data.

Frequently asked questions

What does the Ironclaw MCP server do?

Self hosted AI agents you do not have to trust. Each one runs sealed in a sandbox that provably cannot phone home, read your host, or rewrite its own rules.

How do I install Ironclaw?

Run the install command shown above, then paste the config for your client (Claude Desktop, Claude Code, Cursor, VS Code or Windsurf) into its MCP settings and restart the client.

Is Ironclaw free to use?

The MCP server itself is free to install. The source is public on https://github.com/IronSecCo/ironclaw. Any third-party service it calls may require its own API key and account.

Which clients support Ironclaw?

Any MCP-compatible client can use it, including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf and custom agents.

Add this badge

Publish this server? Link back with a badge on your README or site — copy either snippet.

Markdown

[![Listed on MCPNav](https://mcpnav.net/badge/ironclaw.svg)](https://mcpnav.net/server/ironclaw/)

HTML

<a href="https://mcpnav.net/server/ironclaw/"><img src="https://mcpnav.net/badge/ironclaw.svg" alt="Listed on MCPNav" height="20"></a>