1. Show HN: mcpvessel run untrusted MCP servers caged, egress denied by default (github.com)
Cage untrusted MCP servers in containers, compose them into agents, and share them over any OCI registry. Signed, sandboxed, no Docker required. - okedeji/mcpvessel