docs: clarify sandbox MCP policy scope

[dvdksn]

Summary

Clarify that MCP access policies govern server registration and requests through the Docker Sandboxes MCP gateway, while direct MCP connections remain subject to network policy.

@netlify /ai/sandboxes/governance/access-controls/mcp/

Preview

• MCP access policies
• Network access policies

Generated by Codex

[netlify]

✅ Deploy Preview for docsdocker ready!

Name	Link
🔨 Latest commit	bf83e83
🔍 Latest deploy log	https://app.netlify.com/projects/docsdocker/deploys/6a7c2f6a05c3c10008b6e5bb
😎 Deploy Preview	https://deploy-preview-25805--docsdocker.netlify.app/ai/sandboxes/governance/access-controls/mcp/
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[docker-agent]

Assessment: 🟢 APPROVE

The changes correctly clarify the scope of MCP access policies (governing server registration and requests through the Docker Sandboxes MCP gateway) versus direct MCP connections (governed by network policy). The additions are concise, accurate, and consistent with the existing document tone and structure. No style violations, missing redirects, AI-isms, or content accuracy issues found.

[docker-agent]

Assessment: 🟢 APPROVE

This is a clean, well-scoped clarification. The new prose correctly distinguishes MCP gateway access policies from direct MCP connections subject to network policy. No vendored files, no redirects needed, no style violations, no broken Markdown.

[docker-agent]

Assessment: 🟢 APPROVE

This PR makes a focused, well-scoped clarification. The two changed files correctly explain that MCP access policies govern server registration and requests through the Docker Sandboxes MCP gateway, while direct MCP connections are subject to network access policy. The changes are accurate, consistent with each other, and match the existing documents' style and length. No issues found.