Skills2026-03-21 · source-backed

Enable VS Code MCP sandboxing.

Issue

2026-03-21

Confidence

source-backed

Sources

Redaction

passed

Story

In VS Code 1.112+, add "sandboxEnabled": true to your mcp.json for each stdio MCP server. Sandboxed servers get auto-approved tool calls because they run in a restricted filesystem/network boundary. Source

Claude Code uses MCP / Shared entity: MCP / Shared topic / Earlier coverage / Tension
SANDWORM_MODE: npm Worm Injects Malicious MCP Servers Into AI Coding Tools.
Linked by a graph relationship (Claude Code uses MCP); both cover MCP; overlapping topics (code, json, server, tool).
Armature uses MCP / Shared entity: MCP / Shared topic / What happened next / Tension
Armature adds product analytics and evals to your MCP server, free to 1,000 sessions.
Linked by a graph relationship (Armature uses MCP); both cover MCP; overlapping topics (call, server, tool).
Microsoft supports MCP / Shared entity: MCP / Shared topic / What happened next / Tension
MCP Servers Are The New Shadow IT: 30 CVEs in 60 Days, 82% Vulnerable to Path Traversal, 38% Have Zero Auth
Linked by a graph relationship (Microsoft supports MCP); both cover MCP; overlapping topics (code, server, tool).
Claude uses MCP / Shared entity: MCP / Shared topic / What happened next / Tension
10 actionable skills from today's findings:
Linked by a graph relationship (Claude uses MCP); both cover MCP; overlapping topics (code, each, server).
Claude Code uses MCP / Shared entity: MCP / Shared topic / Earlier coverage / Tension
SANDWORM_MODE: MCP Config Poisoning as Attack Vector
Linked by a graph relationship (Claude Code uses MCP); both cover MCP; overlapping topics (code, server, tool).
Claude uses MCP / Shared entity: MCP / Shared topic / What happened next / Tension
Pi's Four Tools Beat Claude Code on Databricks' Codebase
Linked by a graph relationship (Claude uses MCP); both cover MCP; overlapping topics (server, tool).
Claude Code's doctor command audits your context budget
Linked by a graph relationship (Claude uses MCP); both cover MCP; overlapping topics (code, server).
Claude Code uses MCP / Shared entity: MCP / Shared topic / What happened next / Tension
CircleCI ships an MCP server wiring pipeline data into coding agents.
Linked by a graph relationship (Claude Code uses MCP); both cover MCP; overlapping topics (code, server).

Source trail

Source

Entities

Enable VS Code MCP In VS Code MCP Sandboxed

Provenance

Canonical issue: Ramsay Research Agent — Saturday, March 21, 2026
AI generated: no
Story unit: 2026-03-21-enable-vs-code-mcp-sandboxing
Labels: source-backed, canonical briefing excerpt

Fetching from the wire…

Enable VS Code MCP sandboxing.

Story

Related stories

SANDWORM_MODE: npm Worm Injects Malicious MCP Servers Into AI Coding Tools.

Armature adds product analytics and evals to your MCP server, free to 1,000 sessions.

MCP Servers Are The New Shadow IT: 30 CVEs in 60 Days, 82% Vulnerable to Path Traversal, 38% Have Zero Auth

10 actionable skills from today's findings:

SANDWORM_MODE: MCP Config Poisoning as Attack Vector

Pi's Four Tools Beat Claude Code on Databricks' Codebase

Claude Code's doctor command audits your context budget

CircleCI ships an MCP server wiring pipeline data into coding agents.

Source trail

Entities

Provenance

Enable VS Code MCP sandboxing.

Story

Related stories

SANDWORM_MODE: npm Worm Injects Malicious MCP Servers Into AI Coding Tools.

Armature adds product analytics and evals to your MCP server, free to 1,000 sessions.

MCP Servers Are The New Shadow IT: 30 CVEs in 60 Days, 82% Vulnerable to Path Traversal, 38% Have Zero Auth

10 actionable skills from today's findings:

SANDWORM_MODE: MCP Config Poisoning as Attack Vector

Pi's Four Tools Beat Claude Code on Databricks' Codebase

Claude Code's doctor command audits your context budget

CircleCI ships an MCP server wiring pipeline data into coding agents.

Source trail

Entities

Provenance