Running MCP servers locally can pose security risks as they have the same permissions as the user running VS Code, which enables them to access files or network resources they shouldn't need for their functionality.
 
To reduce this risk, you can now run locally configured stdio MCP servers in a sandboxed environment on macOS and Linux. Sandboxed servers have restricted file system and network access. To enable sandboxing, set "sandboxEnabled": true for a server in your mcp.json file.

#ai #sandbox #mcp #vscode

Visual Studio Code is a lightweight and powerful code editor developed by Microsoft, offering built-in support for multiple programming languages, debugging, and extensions. From this resource developers can learn about VSCode's features, extensions, and customization options to enhance their coding productivity and workflow.

Visual Studio Code

Local MCP servers can have excessive access to your file system and network. VS Code lets you sandbox them by setting 'sandbox: enabled' to true in your MCP.json config file. Once enabled, VS Code will prompt you to approve or decline any extra file or network access requests each time the server runs.

Sandbox your local MCP Server #mcpserver #sandbox #vscode #ai