Ironclaw MCP server

Self-hosted AI agents you do not have to trust.

Each one runs sealed in a sandbox that provably cannot phone home, read your host, or rewrite its own rules.

<!-- Security & supply-chain trust cluster — lead with what makes this project different -->

IronClaw runs autonomous AI agents on infrastructure you control, reached through the chat apps you already use. Each agent can read, write, schedule, and reply like any assistant, but it lives inside a sealed sandbox with network=none: it reaches the model only through a host proxy, and it cannot change its own configuration. It is for anyone who wants what agents can do without handing an autonomous program the keys to their machine.

Now on the GitHub Marketplace. The ironctl scan containment grader ships as a

GitHub Action: drop one

line into a workflow and every pull request gets a 0 to 100 sandbox isolation scorecard as

a sticky comment. Local, read-only, credential-free.

yaml

# .github/workflows/scan.yml

- uses: IronSecCo/ironclaw@v1

with:

target: my-container # a container, compose service, or k8s manifest

Report-only by default; set min-score: 90 to gate merges. See scan in CI.

Shortened. The full README is on GitHub.