Docker Sandboxes is a new
primitive in the Docker’s ecosystem that allows you to run AI
agents or any other workloads in isolated micro VMs.It provides
strong isolation, convenient developer experience and a strong
security boundary with a network proxy configurable to deny agents
connecting to arbitrary internet hosts.The network proxy will also
conveniently inject the API keys, like your
ANTHROPIC_API_KEY, or OPENAI_API_KEY in
the network proxy so the agent doesn’t have access to them at all
and cannot leak them.