Docker

MCP servers run with your full user permissions by default. Here's what that means, what can go wrong, and how container isolation bounds the damage.