AI article
Docker just shipped the agent wall I wanted. It's off by default.
Community description: docker-agent comes preinstalled with Docker Desktop 4.63 — declarative YAML agents, MCP toolsets, and a VM sandbox with default-deny egress you have to opt into. A source read.
Dev.to | Oct 9, 2026 | Sam LABBE
Automated excerpt
A toolsets block declares what the agent gets — type: filesystem, type: shell, type: mcp for anything from Docker's MCP catalog ("hundreds of MCP servers," the docs say, attachable with a ref: line). Read the docs' own phrasing: enable it per run (docker agent run --sandbox), bake it into the YAML (runtime: sandbox: true), or attach it to an alias. Did your Docker Desktop ship with docker agent yet?
Selected automatically from source text; not independently written or fact-checked. Read the original for full context.