io.github.IronSecCo/ironclaw

Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.

这个条目提供什么？

io.github.IronSecCo/ironclaw 是 ChatHome Skills 收录的 MCP 条目，来源为 Official MCP Registry，质量分 78/100。作为 Model Context Protocol 服务器，它向 Claude、Cursor、Copilot 等兼容 MCP 的 LLM 客户端暴露可直接调用的工具，让 agent 的能力超出模型内置范围。该条目由 ChatHome Skills 的每日抓取从官方 registry 和 GitHub 发现查询中收录，每次运行都会重新核验仓库事实、新鲜度信号和安装元数据。质量分综合了官方 registry 收录情况、可用安装命令、许可证完整性、仓库活跃度和 GitHub star 趋势，完整算法说明见来源页。安装命令已列于上方，可直接复制使用。在将 io.github.IronSecCo/ironclaw 加入生产 agent 工作流前，请核对上方的最近更新日期和仓库状态——下方事实快照是最近一次抓取的时点值。

事实快照

来源: Official MCP Registry
质量: 78/100
安装方式: oci
仓库: IronSecCo/ironclaw
仓库更新: 2026年10月22日

安装命令

docker run -i --rm ghcr.io/ironsecco/ironclaw-mcp:v0.1.557

安装方式: oci

运行此命令前，请先核对上游源码。

GitHub 项目主页

质量

仓库 Stars

仓库更新

2026年10月22日

质量分如何计算？

由六个维度加权得出，满分 100。
来源可信度（25）：是否收录于官方或精选 registry。
可安装性（25）：可直接运行的命令 > 已声明传输方式 > 仅源码。
维护活跃度（20）：最近推送时间；已归档条目此项为 0。
采用度（20）：仓库 star 数，按对数曲线计分。
文档完整性（10）与描述质量（10）：是否有已解析的 manifest 或 SKILL.md frontmatter，以及是否为真实描述而非占位文本。
某个来源结构上无法提供的维度（registry 不提供 star 和许可证）不计入该条目的平均分，而不是记为 0 分，因此不同来源的条目仍可横向比较。

MCP manifest

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-10-22T01:21:22.332566Z",
      "publishedAt": "2026-10-22T01:21:22.332566Z",
      "statusChangedAt": "2026-10-22T01:21:22.332566Z"
    }
  },
  "server": {
    "name": "io.github.IronSecCo/ironclaw",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "0.1.557",
    "packages": [
      {
        "transport": {
          "type": "stdio"
        },
        "identifier": "ghcr.io/ironsecco/ironclaw-mcp:v0.1.557",
        "runtimeHint": "docker",
        "registryType": "oci",
        "runtimeArguments": [
          {
            "name": "--rm",
            "type": "named",
            "description": "Remove the container when the MCP session ends (ephemeral by design)."
          },
          {
            "name": "-i",
            "type": "named",
            "description": "Keep stdin open for the MCP stdio transport."
          },
          {
            "name": "-e",
            "type": "named",
            "value": "IRONCLAW_CONTROLPLANE_URL",
            "isRequired": true,
            "description": "Forward the control-plane URL from your own environment into the container; the value never appears in this listing."
          },
          {
            "name": "-e",
            "type": "named",
            "value": "IRONCLAW_API_TOKEN",
            "isRequired": true,
            "description": "Forward the control-plane API token from your own environment into the container; the value never appears in this listing."
          }
        ],
        "environmentVariables": [
          {
            "name": "IRONCLAW_CONTROLPLANE_URL",
            "format": "string",
            "isRequired": true,
            "description": "Base URL of your running IronClaw control-plane, e.g. http://127.0.0.1:8787. This image is a thin client with no host privilege: it delegates every sandbox_exec run to the control-plane, which owns the hardened gVisor launch. Unset means no backend and the tool fails closed.",
            "placeholder": "http://127.0.0.1:8787"
          },
          {
            "name": "IRONCLAW_API_TOKEN",
            "format": "string",
            "isSecret": true,
            "isRequired": true,
            "description": "Bearer token for the control-plane API (the value the control-plane was started with)."
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/IronSecCo/ironclaw",
      "source": "github"
    },
    "websiteUrl": "https://ironclaw.sh",
    "description": "Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container."
  }
}

报告此条目的问题