Docker ships docker agent command, but sandbox is off by default

Docker Desktop 4.63 and later ships a preinstalled docker agent command for building and running AI agents from a declarative YAML config, supporting OpenAI, Anthropic, Gemini, Bedrock, Mistral and xAI. The --sandbox isolation mode with read-only mounts and a default-deny egress proxy is opt-in and disabled by default.

• docker agent is preinstalled in Docker Desktop 4.63+ with no setup
• Supports OpenAI, Anthropic, Gemini, Bedrock, Mistral, xAI and MCP servers
• sandbox with default-deny egress and read-only mounts is off by default
• Project is Apache-2.0 licensed with over 10,000 commits