Add option to sandboxing MCPs with docker

[niechen]

Would be amazing for mcpm.sh to wrap individual mcp's in containers like https://github.com/openintegrations/sane-local-mcp does.

Anyone considering things like this?

Originally posted by @lox in #148

[github-actions]

At the moment MCPM executes MCPs directly on the host machine; the only Docker–related material in the repo is for building the FRP helper images under dockerfiles/ and for running the documentation site.
There is no code path in src/mcpm/** (or elsewhere) that starts a Docker container or isolates an MCP execution environment. The project instead leans on Nix flakes for reproducible builds.

So the request to “wrap individual MCPs in containers” is not yet covered by the current implementation and would indeed be a new feature.

---

View workflow run

[chazmaniandinkle]

I was working on my own docker-based MCP hub when I found out about mcpm, so I figured I'd work on integrating some of that upstream instead of just using external wrapper scripts. Let me know what you think.
#204

[niechen]

@chazmaniandinkle thanks for the PR. could you elaborate your use case a little bit more to help us understand the right functionality to build towards?