Uploaded April 2026 | Updated September 2026, 3 weeks ago

---

Running MCP servers locally can pose security risks as they have the same permissions as the user running VS Code, which enables them to access files or network resources they shouldn't need for their functionality.

To reduce this risk, you can now run locally configured stdio MCP servers in a sandboxed environment on macOS and Linux. Sandboxed servers have restricted file system and network access. To enable sandboxing, set "sandboxEnabled": true for a server in your mcp.json file.

#ai #sandbox #mcp #vscode