ironclaw

Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.

stdioofficialinfra

Package Details

ghcr.io/ironsecco/ironclaw-controlplane:v0.1.216

https://github.com/ironsecco/ironclaw-controlplane/pkgs/container/ironclaw-controlplane

Transportstdio

Runtimedocker

Runtime Arguments

Named

--rm

Remove the container when the MCP session ends (ephemeral by design).

-i

Keep stdin open for the MCP stdio transport.

-vRequired

/var/run/docker.sock:/var/run/docker.sockIronClaw launches each sandbox_exec run as a sibling gVisor container; it needs the host Docker socket to do so. This grants the MCP server control of the host Docker daemon -- review before enabling.

--entrypoint

ironctlOverride the control-plane daemon entrypoint to run the bundled ironctl MCP server instead.

Package Arguments

Positional

Position 0

mcp

Position 1

serve