io.github.IronSecCo/ironclaw MCP Server

Name: io.github.IronSecCo/ironclaw MCP Server
Author: io.github.IronSecCo

io.github.IronSecCo/ironclaw

Repository Registry

What is the io.github.IronSecCo/ironclaw MCP server?

Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.

How to install io.github.IronSecCo/ironclaw

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

IRONCLAW_CONTROLPLANE_URL
required
Base URL of your running IronClaw control-plane, e.g. http://127.0.0.1:8787. This image is a thin client with no host privilege: it delegates every sandbox_exec run to the control-plane, which owns the hardened gVisor launch. Unset means no backend and the tool fails closed.
IRONCLAW_API_TOKEN
required
secret
Bearer token for the control-plane API (the value the control-plane was started with).

Claude Desktop

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "ironclaw": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/ironsecco/ironclaw-mcp:v0.1.499",
        "--rm",
        "-i",
        "-e",
        "IRONCLAW_CONTROLPLANE_URL",
        "-e",
        "IRONCLAW_API_TOKEN"
      ],
      "env": {
        "IRONCLAW_CONTROLPLANE_URL": "<YOUR_IRONCLAW_CONTROLPLANE_URL>",
        "IRONCLAW_API_TOKEN": "<YOUR_IRONCLAW_API_TOKEN>"
      }
    }
  }
}

Cursor

~/.cursor/mcp.json

{
  "mcpServers": {
    "ironclaw": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/ironsecco/ironclaw-mcp:v0.1.499",
        "--rm",
        "-i",
        "-e",
        "IRONCLAW_CONTROLPLANE_URL",
        "-e",
        "IRONCLAW_API_TOKEN"
      ],
      "env": {
        "IRONCLAW_CONTROLPLANE_URL": "<YOUR_IRONCLAW_CONTROLPLANE_URL>",
        "IRONCLAW_API_TOKEN": "<YOUR_IRONCLAW_API_TOKEN>"
      }
    }
  }
}

Windsurf

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "ironclaw": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/ironsecco/ironclaw-mcp:v0.1.499",
        "--rm",
        "-i",
        "-e",
        "IRONCLAW_CONTROLPLANE_URL",
        "-e",
        "IRONCLAW_API_TOKEN"
      ],
      "env": {
        "IRONCLAW_CONTROLPLANE_URL": "<YOUR_IRONCLAW_CONTROLPLANE_URL>",
        "IRONCLAW_API_TOKEN": "<YOUR_IRONCLAW_API_TOKEN>"
      }
    }
  }
}

VS Code

.vscode/mcp.json

{
  "servers": {
    "ironclaw": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/ironsecco/ironclaw-mcp:v0.1.499",
        "--rm",
        "-i",
        "-e",
        "IRONCLAW_CONTROLPLANE_URL",
        "-e",
        "IRONCLAW_API_TOKEN"
      ],
      "env": {
        "IRONCLAW_CONTROLPLANE_URL": "<YOUR_IRONCLAW_CONTROLPLANE_URL>",
        "IRONCLAW_API_TOKEN": "<YOUR_IRONCLAW_API_TOKEN>"
      }
    }
  }
}

Claude Code

claude mcp add ironclaw --env IRONCLAW_CONTROLPLANE_URL=<YOUR_IRONCLAW_CONTROLPLANE_URL> --env IRONCLAW_API_TOKEN=<YOUR_IRONCLAW_API_TOKEN> -- docker run -i --rm ghcr.io/ironsecco/ironclaw-mcp:v0.1.499 --rm -i -e IRONCLAW_CONTROLPLANE_URL -e IRONCLAW_API_TOKEN