services:
  mcp-sandbox:
    build: .
    command:
      - --transport
      - http
      - --host
      - 0.0.0.0
      - --port
      - "8080"
      - --backend
      - docker
      - --allow-unauthenticated-http
    ports:
      - "127.0.0.1:8080:8080"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    restart: unless-stopped