Disposable sandboxes speaking MCP
MCP is just a tool protocol — the interesting part is where those tools are allowed to run.
Disposable sandboxes speaking MCP
MCP (Model Context Protocol) is how some agent stacks expose tools. The protocol is not the security boundary. Where the tool runs is.
What to steal from the pattern
- Instant, idle-cheap machines with durable filesystems make “one sandbox per task” affordable.
- Exposing that environment over a standard tool protocol lowers glue code — and raises the cost of a misconfigured allowlist.
- Treat MCP servers like any other privileged sidecar: least privilege, short-lived creds, no host mount by default.
Takeaway
Protocol fashion changes. Isolation economics do not. Prefer disposable execution hosts over “the agent promised to be careful.”
Context: Unfortunately, Sprites Now Speak MCP.