Ironclaw

Overview

Ironclaw is a Model Context Protocol (MCP) server: Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container. Because it speaks the Model Context Protocol, AI assistants can use Ironclaw as a set of callable tools instead of you copy-pasting between apps.

It runs locally: the Docker image ghcr.io/ironsecco/ironclaw-mcp:v0.1.511 speaks MCP over stdio on your machine. Configuration happens through environment variables — you'll need IRONCLAW_CONTROLPLANE_URL, IRONCLAW_API_TOKEN. The current release is v0.1.511, published under the AGPL-3.0 license, with source at IronSecCo/ironclaw on GitHub, where it has earned 19 stars.

On mcp.site, Ironclaw sits in the AI & Agents category. Any MCP client can use it — Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, Zed among them — via the install snippets below. If you maintain Ironclaw for IronSecCo, claim this listing to verify ownership, earn the Verified badge, and keep the details current.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "ironclaw": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/ironsecco/ironclaw-mcp:v0.1.511"
      ],
      "env": {
        "IRONCLAW_CONTROLPLANE_URL": "<ironclaw-controlplane-url>",
        "IRONCLAW_API_TOKEN": "<ironclaw-api-token>"
      }
    }
  }
}

Requires IRONCLAW_CONTROLPLANE_URL, IRONCLAW_API_TOKEN