Tweet by KentonVarda

September 26, 2025

In fact, the sandboxing lets you turn off internet access entirely, while defining custom RPC bindings to give to the sandboxed Worker. So you can use capability-based security to give it access only to the resources it is supposed to access. E.g. an MCP server, in code-mode.

Author
KentonVarda
Date
September 26, 2025