Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.
npx @getmcp/cli add io.github.IronSecCo/ironclawRequires Docker Engine. Community-contributed server. Review source before installing.
IRONCLAW_CONTROLPLANE_URLBase URL of your running IronClaw control-plane, e.g. http://127.0.0.1:8787. This image is a thin client with no host privilege: it delegates every sandbox_exec run to the control-plane, which owns the hardened gVisor launch. Unset means no backend and the tool fails closed.
IRONCLAW_API_TOKENBearer token for the control-plane API (the value the control-plane was started with).
Config file: ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"io.github.IronSecCo/ironclaw": {
"command": "docker",
"args": [
"IRONCLAW_CONTROLPLANE_URL",
"IRONCLAW_API_TOKEN",
"run",
"-i",
"--rm",
"-e",
"IRONCLAW_CONTROLPLANE_URL",
"-e",
"IRONCLAW_API_TOKEN",
"ghcr.io/ironsecco/ironclaw-mcp:v0.1.499"
],
"env": {
"IRONCLAW_CONTROLPLANE_URL": "",
"IRONCLAW_API_TOKEN": ""
}
}
}
}Remote MCP server for Tandem docs, install guides, SDKs, workflows, and agent setup help.
Ephemeral data sandbox for AI workflows with guardrails and security
MCP server for Anki flashcards: adaptive review, notes, media, and deck management via AnkiConnect.
AI memory layer — one shared, persistent memory across every AI tool you connect.