Docker Sandboxes governs MCP across coding agents

Docker Sandboxes 0.38 adds 3 dynamic MCP tools for finding, attaching, and configuring registered servers across supported coding agents. The official release notes say its built-in gateway keeps OAuth credentials on the host and lets organizations govern server registration and tool calls with Cedar policies, while each sandbox still runs in an isolated microVM. For teams implementing runtime policy inside the agent harness, the useful signal is that MCP governance is becoming a shared infrastructure layer rather than per-agent configuration.