AgentIndex icon
AgentIndex
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompareGuides
Submit Tool
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompare
Home/
Security & Safety/
ironcurtain
ironcurtain logo

ironcurtain

Active·★ 614·Apache-2.0·Updated 2026-10-21

IronCurtain provides a secure runtime for autonomous AI agents, enforcing security policies derived from human-readable constitutions to prevent issues like prompt injection. It ensures agents operate within defined boundaries through mechanisms like V8 isolates and a policy engine that mediates all tool calls.

ironcurtain sits in the Security & Safety category, so it is usually better judged by workflow fit, deployment style, and team needs than by isolated features alone. Based on the available metadata, it leans most clearly toward Constitution-driven Security Policy: Define security intent in plain English, which is then compiled into deterministic and enforceable rules.. A representative use case is Securely Automating Development Tasks: Allowing AI agents to manage files and execute Git operations like cloning and pushing changes within defined security boundaries.. The listed license is Apache-2.0. GitHub stars are currently 614. Relevant tags include AI Agents, Security.

© 2026 AgentIndex.app|Built by a 10-year iOS Developer.
Best by use caseAboutContactAdvertisePrivacy PolicyTerms of UseQYSGitHubBuy me a coffee ☕

Browse by Category

MCP ServersCode AssistantWorkflow AutomationRAG / Knowledge BaseMulti-AgentBrowser AutomationLLM InfraDev ToolingObservability

Not affiliated with Anthropic, OpenAI or Microsoft.

Guides

This write-up is based on the project's README and public repository data. We have not hand-tested the tool.

#AI Agents#Security#Runtime#Policy Engine#LLM#Sandboxing#Prompt Injection#Docker
$ Install
$ npm install -g @provos/ironcurtain
↗ Visit site★ GitHub
01

Features

01Constitution-driven Security Policy: Define security intent in plain English, which is then compiled into deterministic and enforceable rules.
02Semantic Interposition & Runtime Enforcement: All agent interactions and tool calls are routed through a policy engine that allows, denies, or escalates based on policy.
03Untrusted Agent Model: Assumes the LLM may be compromised (e.g., by prompt injection or drift), enforcing security at the boundary regardless of the model's behavior.
04Multi-mode Operation: Supports both an internal LLM agent running in a V8 sandbox (Code Mode) and external agents running in Docker containers (Docker Agent Mode).
05Built-in Capabilities: Ships with pre-configured MCP servers for filesystem, Git, web fetching, and GitHub operations, all governed by policy.
02

Why choose it

+Constitution-driven Security Policy: Define security intent in plain English, which is then compiled into deterministic and enforceable rules.
+Semantic Interposition & Runtime Enforcement: All agent interactions and tool calls are routed through a policy engine that allows, denies, or escalates based on policy.
+Securely Automating Development Tasks: Allowing AI agents to manage files and execute Git operations like cloning and pushing changes within defined security boundaries.
+Supports 5 platforms or runtime environments.
03

Trade-offs

!The final decision should still be made through side-by-side comparison with similar tools.
04

Compatibility

Node.js
Runtime
Verified via docs
Docker
Containerization
Verified via docs
Anthropic API
LLM Provider
Verified via docs
Google Generative AI API
LLM Provider
Verified via docs
OpenAI API
LLM Provider
Verified via docs
05

Quick start

1
$ npm install -g @provos/ironcurtain
06

Use cases

↳Securely Automating Development Tasks: Allowing AI agents to manage files and execute Git operations like cloning and pushing changes within defined security boundaries.
↳Autonomous Code Management and Bug Fixing: Utilizing agents to fix failing tests or perform code modifications in a project workspace with robust policy enforcement.
↳Controlled API Interactions: Enabling agents to interact with web services (e.g., web search, GitHub APIs) with granular policy control over each specific API call.
↳Managing AI Agent Security in Complex Environments: Running external AI agents (e.g., Claude Code, Goose) securely within a Docker container, with IronCurtain mediating every tool call through its policy engine.
↳Remote Agent Control and Escalation Handling: Interacting with and approving agent actions via end-to-end encrypted messaging platforms like Signal.
07

Alternatives

⚡Top VS:
VSwirken★192→VSokta-mcp-server★38→VSWAIaaS★0→VS

Comments

Log in to leave a comment

No comments yet. Be the first!

On this page
01Features02Why choose it03Trade-offs04Compatibility05Quick start06Use cases
platform
★15
→
wirken logo
wirken★ 192
The enterprise gateway for autonomous agents. Identity management, per-channel isolation, credential vault, per-session tamper-evident audit log.
VSCompare→
okta-mcp-server logo
okta-mcp-server★ 38
The Okta MCP Server is a groundbreaking tool built by the team at Fctr that enables AI models to interact directly with your Okta environment using the Model Context Protocol (MCP). Built specifically for IAM engineers, security teams, and Okta administrators, it implements the MCP specification to help work with Okta enitities
VSCompare→
WAIaaS logo
WAIaaS★ 0
Wallet-as-a-Service for all AI agents in the world
VSCompare→
platform logo
platform★ 15
The approval and accountability layer for agentic AI. Identity → Policy → Approval → Trace. Try: npx sidclaw-mcp-guard demo
VSCompare→
hyper-mcp logo
hyper-mcp★ 882
📦️ A fast, secure MCP server that extends its capabilities through WebAssembly plugins.
VSCompare→
sonarqube-mcp-server logo
sonarqube-mcp-server★ 669
SonarQube MCP Server
VSCompare→
mcpproxy-go logo
mcpproxy-go★ 398
Supercharge AI Agents, Safely
VSCompare→
iam-policy-autopilot logo
iam-policy-autopilot★ 496
IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies that you can refine as your application evolves. This tool is available as a command-line utility and MCP server for use within AI coding assistants for quickly building IAM policies.
VSCompare→
See all alternatives →
07
Alternatives
provos /
ironcurtain
↗

A secure* runtime for autonomous AI agents. Policy from plain-English constitutions. (*https://ironcurtain.dev)

614Apache-2.0
Last commit2d ago
StatusActive
CategorySecurity & Safety
Links
Documentation↗Discussion↗Issues↗Releases↗
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit