Install Ironclaw in Claude Code
claude mcp add ironclaw -e IRONCLAW_CONTROLPLANE_URL=... -e IRONCLAW_API_TOKEN=... -- docker run -i --rm -e IRONCLAW_CONTROLPLANE_URL -e IRONCLAW_API_TOKEN ghcr.io/ironsecco/ironclaw-mcp:v0.1.557{
"mcpServers": {
"ironclaw": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"IRONCLAW_CONTROLPLANE_URL",
"-e",
"IRONCLAW_API_TOKEN",
"ghcr.io/ironsecco/ironclaw-mcp:v0.1.557"
],
"env": {
"IRONCLAW_CONTROLPLANE_URL": "...",
"IRONCLAW_API_TOKEN": "..."
}
}
}
}Replace each ... with your own value.
Frequently asked questions
What does the Ironclaw MCP server do?
Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.
Is the Ironclaw MCP server free?
The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.
Does Ironclaw run locally or remotely?
Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.
How do I add Ironclaw to Claude Code?
Run: claude mcp add ironclaw -e IRONCLAW_CONTROLPLANE_URL=... -e IRONCLAW_API_TOKEN=... -- docker run -i --rm -e IRONCLAW_CONTROLPLANE_URL -e IRONCLAW_API_TOKEN ghcr.io/ironsecco/ironclaw-mcp:v0.1.557
More ai agents & coding agents MCP servers
View allKairon
zyvorai/zyvor-kairon
Inspect Kairon VMs, network policy and VM-edge flows from an agent. Read-only by default.
honesty
lkopietz3-byte/honesty-mcp
MCP server exposing 11 honesty-SDK kits (grounding, trust, audit, corroboration) as agent tools.
Mac Use
antbotlab/mac-use-mcp
Zero-dependency macOS desktop automation for AI agents. 18 tools via MCP. macOS 13+.
Fitbit
davidmosiah/fitbit-mcp
Privacy-first, unofficial Fitbit MCP server for AI health, sleep, activity and heart-rate agents.
Pic2Vector
pic2vector/pic2vector-mcp
MCP server: convert PNG/JPG to SVG from Claude, Cursor & any MCP client. By Pic2Vector.
DOS
anthony-chaudhary/dos-kernel
Verify what agents actually shipped, arbitrate file collisions, refuse with structured reasons.