SBX 101: Hands-on with Docker Sandboxes

Modern AI agents are useful because they take real actions in the real world and on your machine: read files, run commands, hit the web, build containers, write and publish code. That capability is also where the risk lives. This hands-on workshop walks through the Docker AI primitives (sandboxes, network policy, MCP, hardened images, sbx kits, and multi-agent orchestration with Docker Agent) that make it practical to give an agent real capability without giving it unbounded reach. You’ll spin up your first Docker Sandbox, prove its isolation guarantees with hands-on tests, govern its outbound network, attach real tools via MCP, harden the containers it ships, package the whole setup as a reusable kit, and finally compose a small multi-agent team where per-role tool scoping is enforced at the runtime. You’ll leave with a working mental model of scoped autonomy and a running sandbox stack on your machine that you can keep experimenting with.