ironclaw for Cline
io.github.ironsecco/ironclaw
Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.
client:Cline
transport:stdio
runtime:oci
Install ironclaw in Cline
~/Library/Application Support/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json · windows: %APPDATA%\Code\User\globalStorage\saoudrizwan.claude-dev\settings\cline_mcp_settings.json
{
"mcpServers": {
"ironclaw": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/ironsecco/ironclaw-mcp:v0.1.530"
],
"env": {
"IRONCLAW_CONTROLPLANE_URL": "<IRONCLAW_CONTROLPLANE_URL>",
"IRONCLAW_API_TOKEN": "<IRONCLAW_API_TOKEN>"
}
}
}
}
Cline's MCP Servers pane edits this file for you if you would rather not find it. Cline docs