Ironclaw MCP Server

Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.

Local serverstdio

What is the Ironclaw MCP Server?

Ironclaw is an MCP integration. Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.

Packages and local setup

The published oci package is ghcr.io/ironsecco/ironclaw-mcp:v0.1.547. Its declared MCP transport is stdio.

The package declares IRONCLAW_CONTROLPLANE_URL (required): Base URL of your running IronClaw control-plane, e.g. http://127.0.0.1:8787. This image is a thin client with no host privilege: it delegates every sandbox_exec run to the control-plane, which owns the hardened gVisor launch. Unset means no backend and the tool fails closed.; IRONCLAW_API_TOKEN (required): Bearer token for the control-plane API (the value the control-plane was started with)..

This package has launch arguments in its registry record. Use the maintainer’s configuration for those arguments rather than launching it with only the package name.

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry · Project repository · Project website. This profile uses version 0.1.547 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related developer tools MCP servers for tools that cover the same kind of work.

Configuration

VariableDescriptionRequired
IRONCLAW_CONTROLPLANE_URLBase URL of your running IronClaw control-plane, e.g. http://127.0.0.1:8787. This image is a thin client with no host privilege: it delegates every sandbox_exec run to the control-plane, which owns the hardened gVisor launch. Unset means no backend and the tool fails closed.Yes
IRONCLAW_API_TOKENBearer token for the control-plane API (the value the control-plane was started with).Yes