ironclaw

Package (oci)

docker run -i --rm -e IRONCLAW_CONTROLPLANE_URL=<YOUR_VALUE> -e IRONCLAW_API_TOKEN=<YOUR_VALUE> ghcr.io/ironsecco/ironclaw-mcp:v0.1.569

Or add to your MCP client config:

{
  "mcpServers": {
    "ironclaw": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "IRONCLAW_CONTROLPLANE_URL=<YOUR_VALUE>",
        "-e",
        "IRONCLAW_API_TOKEN=<YOUR_VALUE>",
        "ghcr.io/ironsecco/ironclaw-mcp:v0.1.569"
      ]
    }
  }
}

• IRONCLAW_CONTROLPLANE_URL required — Base URL of your running IronClaw control-plane, e.g. http://127.0.0.1:8787. This image is a thin client with no host privilege: it delegates every sandbox_exec run to the control-plane, which owns the hardened gVisor launch. Unset means no backend and the tool fails closed.
• IRONCLAW_API_TOKEN required secret — Bearer token for the control-plane API (the value the control-plane was started with).

This server takes extra arguments — see its repository.