Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.
npx @getmcp/cli add io.github.IronSecCo/ironclawRequires Docker Engine. Community-contributed server. Review source before installing.
IRONCLAW_CONTROLPLANE_URLBase URL of your running IronClaw control-plane, e.g. http://127.0.0.1:8787. This image is a thin client with no host privilege: it delegates every sandbox_exec run to the control-plane, which owns the hardened gVisor launch. Unset means no backend and the tool fails closed.
IRONCLAW_API_TOKENBearer token for the control-plane API (the value the control-plane was started with).
Config file: ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"io.github.IronSecCo/ironclaw": {
"command": "docker",
"args": [
"IRONCLAW_CONTROLPLANE_URL",
"IRONCLAW_API_TOKEN",
"run",
"-i",
"--rm",
"-e",
"IRONCLAW_CONTROLPLANE_URL",
"-e",
"IRONCLAW_API_TOKEN",
"ghcr.io/ironsecco/ironclaw-mcp:v0.1.544"
],
"env": {
"IRONCLAW_CONTROLPLANE_URL": "",
"IRONCLAW_API_TOKEN": ""
}
}
}
}Remote MCP server for Tandem docs, install guides, SDKs, workflows, and agent setup help.
Query and update your Odoo ERP in plain language, under your own Odoo access rules.
Ephemeral data sandbox for AI workflows with guardrails and security
MCP server for Anki flashcards: adaptive review, notes, media, and deck management via AnkiConnect.