MCP servers from io.github.IronSecCo
Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.
