ironclaw for Grok
io.github.ironsecco/ironclaw
Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.
client:Grok
transport:stdio
runtime:oci
Install ironclaw in Grok
.mcp.json (in your project root)
{
"mcpServers": {
"ironclaw": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/ironsecco/ironclaw-mcp:v0.1.530"
],
"env": {
"IRONCLAW_CONTROLPLANE_URL": "<IRONCLAW_CONTROLPLANE_URL>",
"IRONCLAW_API_TOKEN": "<IRONCLAW_API_TOKEN>"
}
}
}
}
Grok Build reads Claude Code's .mcp.json and Claude Desktop's config unchanged, so a server you have already set up there needs nothing new. The Grok web app and X integration do not take custom servers. Grok docs