Docker Sandboxes – Disposable, isolated sandboxes for AI agents

Docker Sandboxes provide disposable, isolated environments for AI agents to run within. These sandboxes allow developers to spin up containers, install packages, and run services without impacting the host system. Supported AI agents include Claude Code, Gemini CLI, Copilot CLI, Codex, OpenCode, and Kiro. Additionally, agents can be given elevated permissions in "YOLO mode" to operate autonomously, though this is risky without proper guardrails.

The isolated nature of Sandboxes is achieved through the use of microVMs, which provide a high level of isolation compared to full virtual machines. This allows agents to perform tasks that require elevated permissions, such as running additional Docker containers, while maintaining a safe environment. Docker AI Governance offers centralized controls for defining and enforcing these policies across a team, including network policies, filesystem rules, and MCP governance.