One registration, two gateways, two tool lists
On the host, the MCP store holds m101-deepwiki, registered with sbx mcp add from https://mcp.deepwiki.com/mcp as a remote streamable-http server that needs no OAuth. Each sandbox gets its own gateway at MCP_GATEWAY_URL http://mcp-gateway.docker.internal/mcp. The sandbox m101-mcp was created with --static-mcp m101-deepwiki and lists ask_wiki_question, read_wiki_contents, read_wiki_structure, code-mode, and mcp-exec. The sandbox m101-mcp-dyn started with code-mode, mcp-add, mcp-config-set, mcp-exec, and mcp-find, and sbx mcp load added the three deepwiki tools with a tools/list_changed notice. The remote server runs outside the VM, and no OAuth server was captured.
HOST
SANDBOXES
mcp.deepwiki.com/mcp
remote endpoint, outside the VM
sbx mcp add m101-deepwiki
--url https://mcp.deepwiki.com/mcp
remote · streamable-http
requires_oauth: false · auth status: []
no policy
mcp-gateway-m101-mcp
static · --static-mcp
gateway of m101-mcp-dyn
dynamic · sbx mcp load
fixed at create
load, live
m101-mcp · tools/list
ask_wiki_question read_wiki_contents
read_wiki_structure
code-mode mcp-exec
no mcp-find, mcp-add, mcp-config-set
m101-mcp-dyn · tools/list
before: code-mode mcp-add
mcp-config-set mcp-exec mcp-find
after load: + ask_wiki_question
read_wiki_contents
read_wiki_structure
gateway URL
list_changed
<server>-authorize and sbx mcp auth: no OAuth server in this capture