There is a network request configuration in MCP with the sandbox_mode set to "danger-full-access", but it still fails to access the network.

What version of Codex is running?

codex-cli 0.42.0

Which model were you using?

gpt-5-codex

What platform is your computer?

Window 11

What steps can reproduce the bug?

There is a network request configuration in MCP with the sandbox_mode set to "danger-full-access", but it still fails to access the network.
Below is my configuration:

model = "gpt-5-codex"
model_reasoning_effort = "high"
disable_response_storage = true
sandbox_mode="danger-full-access" 

[mcp_servers.agent]
command = "cmd"
args = ["/c", "D:\\mcp\\MakingMcp-win-x64\\MakingMcp.exe"]
env = { "OPENAI_API_KEY" = "", "TAVILY_API_KEY" = "", "OPENAI_ENDPOINT" = "https://api.openai.com/v1", "TASK_MODEL" = "gpt-5" }
startup_timeout_sec = 20
tool_timeout_sec = 600

I implemented an MCP. The Tasks within the MCP are similar to those of Claude Code. It requests the AI to handle the issues. However, after the configuration lacks permissions, my MCP is unable to make network requests.

必须使用task帮我计算1+1=

• Called agent.Task({"description":"Compute 1+1","prompt":"You are a calculator agent. Compute 1 + 1 and return the numerical result."})
└ ERROR: Agent execution failed: 无法加载或初始化请求的服务提供程序。 (127.0.0.1:10808)

• I'm noticing the task tool can't run due to a service provider loading error, likely from environment or network restrictions. Since the user specifically wants the task tool
for calculating 1+1, I'll try once more but prepare to explain the limitation clearly and ask for alternative options if it keeps failing.

Status

• Task Tool: Attempted as requested; environment cannot load required service provider (127.0.0.1:10808).
• Result: Unable to execute the Task agent, so 1 + 1 could not be computed through that mechanism.

Let me know if you’d like me to try a different approach or if you can adjust the requirement.
Token usage: total=10,599 input=10,084 (+ 9,728 cached) output=515 (reasoning 384)
To continue this session, run codex resume 01999487-15d5-7193-ad4b-2a2a707810b3.

What is the expected behavior?

_No response_

What do you see instead?

_No response_

Additional information

_No response_