VS Code 1.112: MCP Server Sandboxing Ships for macOS/Linux — Restricted File System and Network Access via mcp.json Flag

VS Code·medium signal

Visual Studio Code 1.112 (released March 18) ships native MCP server sandboxing on macOS and Linux, isolating locally-run stdio MCP servers with restricted file system and network permissions via a sandboxEnabled flag in mcp.json. VS Code prompts the user when a sandboxed server requests broader access and updates the config accordingly. A new Autopilot permission level also lets Copilot CLI auto-approve all tool calls and self-answer questions until the task completes — Windows sandboxing is not yet supported.