VS Code 1.112 sandboxEnabled: Restrict Local MCP Servers to Declared Filesystem + Network Paths

VS Code 1.112 Release Notes·high signal

VS Code 1.112 (released March 18) adds opt-in sandboxing for stdio MCP servers on macOS and Linux via a single flag in mcp.json: set "sandboxEnabled": true and the server runs with restricted filesystem and network access. When a sandboxed server requests an undeclared path or domain, VS Code prompts for permission and updates the config. Tool calls from sandboxed servers are auto-approved because they execute in the controlled boundary.