MCP serverOfficial registry

Ironclaw

Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.

by io.github.IronSecCov0.1.544GitHub Website

Power your agent

Add this server

The publisher's own command. Not a PlugMCP endpoint.

Local command

docker run -i --rm ghcr.io/ironsecco/ironclaw-mcp:v0.1.544

Credentials from the publisher

IRONCLAW_CONTROLPLANE_URL — Base URL of your running IronClaw control-plane, e.g. http://127.0.0.1:8787. This image is a thin client with no host privilege: it delegates every sandbox_exec run to the control-plane, which owns the hardened gVisor launch. Unset means no backend and the tool fails closed.
IRONCLAW_API_TOKEN — Bearer token for the control-plane API (the value the control-plane was started with).

Provider

Claude Code

IRONCLAW_CONTROLPLANE_URL=<value> IRONCLAW_API_TOKEN=<secret> claude mcp add io.github.ironsecco-ironclaw -- docker run -i --rm ghcr.io/ironsecco/ironclaw-mcp:v0.1.544

Run in a terminal.

Claude Desktop

{
  "mcpServers": {
    "io.github.ironsecco-ironclaw": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/ironsecco/ironclaw-mcp:v0.1.544"
      ],
      "env": {
        "IRONCLAW_CONTROLPLANE_URL": "<value>",
        "IRONCLAW_API_TOKEN": "<secret>"
      }
    }
  }
}

claude_desktop_config.json

Step-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Related MCP

Ironclaw

Add this server

Host a copy with our keys and logs.

More like this

Firecrawl

Notion

Context7