HNHacker News
TopNewBestAskShowJobs

followercode

1 karma · joined December 17, 2025

submissionscomments
followercode··on Docker Sandboxes – Disposable, isolated sandboxes for AI agents
This may help you: https://docs.docker.com/ai/sandboxes/governance/access-contr...
followercode··on Docker Sandboxes – Disposable, isolated sandboxes for AI agents
Hey, I work at Docker and my team works on mcp integration with sbx. A solution I've been trying is this:

1) Enable the xcode mcp server: https://developer.apple.com/documentation/xcode/giving-exter... 2) Add the xcode mcp server to sbx: `sbx mcp add xcode --command xcrun --args mcpbridge` 3) When you create the sandbox, use `--static-mcp xcode`. For example: `sbx create --static-mcp xcode claude .`

Make sure you have at least v0.38.0 of sbx. This makes a bridge from inside the sandbox to the xcode tools on your host, so be aware that it can run whatever tools you give it on the host. But the agent itself is still sandboxed.