ironclaw for Cursor
io.github.ironsecco/ironclaw
Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.
client:Cursor
transport:stdio
runtime:oci
Install ironclaw in Cursor
~/.cursor/mcp.json · windows: %USERPROFILE%\.cursor\mcp.json
{
"mcpServers": {
"ironclaw": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/ironsecco/ironclaw-mcp:v0.1.530"
],
"env": {
"IRONCLAW_CONTROLPLANE_URL": "<IRONCLAW_CONTROLPLANE_URL>",
"IRONCLAW_API_TOKEN": "<IRONCLAW_API_TOKEN>"
}
}
}
}
Use .cursor/mcp.json in a project root instead to scope it to that project. Cursor merges both. Cursor docs