Launch and drive isolated Linux and Windows desktop VMs for AI agents to perform file operations, command execution, and computer use.
Also known as capsulatedev/capsulate, @capsulate/mcp
- Stars
- 0
- Tools
- 28
- Downloads, 30 days
- 349
- Latest version
- 0.7.1
- Last commit
- Oct 12, 2026
- License
- MIT
What is Capsulate MCP?
Capsulate is an MCP server. Launch and drive isolated Linux and Windows desktop VMs for AI agents to perform file operations, command execution, and computer use. It exposes 28 tools, such as capsulate_launch, capsulate_destroy, capsulate_exec.
Summary generated from the project's README
About Capsulate MCP server
Capsulate provides a way for AI agents to interact with isolated cloud computers known as capsules. These environments include both Linux and Windows desktops, allowing an agent to perform file operations, execute commands, and manage desktop interfaces. Users can connect this server to MCP clients like Claude Desktop, Cursor, or Claude Code by providing a CAPSULATE_API_KEY. For those using local configuration files, the CAPSULATE_API_KEY_FILE environment variable can be used instead.
This server is unique because it allows for human-in-the-loop collaboration. A person can watch the AI drive a desktop live through a browser and take control of the screen at any time. The system includes specialized tools for computer use, such as clicking, typing, and reading accessibility trees. It also features a browser fast path for interacting with Chrome at page speed and a skills system that lets users teach a job on a capsule to be replayed later.
What you can do with it
- 1Execute automated test suitesAn AI agent can launch a headless Linux environment to run specific software tests and report the results.
- 2Collaborative web researchThe agent can launch a desktop, navigate to a website, and hand control to a human if a login is required.
- 3Automate repetitive desktop tasksUsers can record a person performing a task on a shared screen to create a repeatable skill for the AI.
- 4Direct computer interface controlAn AI can interact with desktop applications by finding specific UI elements by name or role.
Written from the project's README. Every use case is checked against a quote from it.
How to install Capsulate MCP
Formats verified 10 Nov 2026Install Capsulate MCP in Claude Code
$ claude mcp add --env CAPSULATE_API_KEY=<YOUR_CAPSULATE_API_KEY> capsulate -- npx -y @capsulate/mcpInstall Capsulate MCP in Cursor
~/.cursor/mcp.json
{
"mcpServers": {
"capsulate": {
"command": "npx",
"args": [
"-y",
"@capsulate/mcp"
],
"env": {
"CAPSULATE_API_KEY": "<YOUR_CAPSULATE_API_KEY>"
}
}
}
}Install Capsulate MCP in VS Code
.vscode/mcp.json
{
"servers": {
"capsulate": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@capsulate/mcp"
],
"env": {
"CAPSULATE_API_KEY": "<YOUR_CAPSULATE_API_KEY>"
}
}
}
}Install Capsulate MCP in Claude Desktop
claude_desktop_config.json
{
"mcpServers": {
"capsulate": {
"command": "npx",
"args": [
"-y",
"@capsulate/mcp"
],
"env": {
"CAPSULATE_API_KEY": "<YOUR_CAPSULATE_API_KEY>"
}
}
}
}Install Capsulate MCP in Codex
~/.codex/config.toml
[mcp_servers.capsulate] command = "npx" args = ["-y", "@capsulate/mcp"] [mcp_servers.capsulate.env] CAPSULATE_API_KEY = "<YOUR_CAPSULATE_API_KEY>"
Install Capsulate MCP in Gemini CLI
~/.gemini/settings.json
{
"mcpServers": {
"capsulate": {
"command": "npx",
"args": [
"-y",
"@capsulate/mcp"
],
"env": {
"CAPSULATE_API_KEY": "<YOUR_CAPSULATE_API_KEY>"
}
}
}
}Capsulate MCP tools 28
Detected from the READMEcapsulate_launchcapsulate_destroycapsulate_execcapsulate_run_codecapsulate_set_envcapsulate_snapshotcapsulate_catalogcapsulate_screenshotcapsulate_screen_infocapsulate_ui_treecapsulate_click_elementcapsulate_clipboard
| capsulate_launch | — | |
| capsulate_destroy | — | |
| capsulate_exec | — | |
| capsulate_run_code | — | |
| capsulate_set_env | — | |
| capsulate_snapshot | — | |
| capsulate_catalog | — | |
| capsulate_screenshot | — | |
| capsulate_screen_info | — | |
| capsulate_ui_tree | — | |
| capsulate_click_element | — | |
| capsulate_clipboard | — |
Show all 28 toolsShow fewer tools
capsulate_elementcapsulate_windowscapsulate_windowcapsulate_opencapsulate_wait_forcapsulate_ocrcapsulate_run_actionscapsulate_console_linkcapsulate_saycapsulate_controlcapsulate_handoffcapsulate_wait_for_handbackcapsulate_lessoncapsulate_skillscapsulate_skill_runcapsulate_inbox
| capsulate_element | — | |
| capsulate_windows | — | |
| capsulate_window | — | |
| capsulate_open | — | |
| capsulate_wait_for | — | |
| capsulate_ocr | — | |
| capsulate_run_actions | — | |
| capsulate_console_link | — | |
| capsulate_say | — | |
| capsulate_control | — | |
| capsulate_handoff | — | |
| capsulate_wait_for_handback | — | |
| capsulate_lesson | — | |
| capsulate_skills | — | |
| capsulate_skill_run | — | |
| capsulate_inbox | — |
Configuration
CAPSULATE_API_KEYRequiredSecretA cap_live_ API key from the dashboard (Settings → API & Keys).
CAPSULATE_BASE_URLAPI base URL. Defaults to https://api.capsulate.dev.
CAPSULATE_TEAM_IDTeam to bill. Defaults to the API key's team.
| Name | Description | |
|---|---|---|
| CAPSULATE_API_KEY | A cap_live_ API key from the dashboard (Settings → API & Keys). | RequiredSecret |
| CAPSULATE_BASE_URL | API base URL. Defaults to https://api.capsulate.dev. | |
| CAPSULATE_TEAM_ID | Team to bill. Defaults to the API key's team. |
Automated checks
Ran Nov 14, 2026Full report →Passed our automated checks. That is not a security audit: read the code and give the server the narrowest access it needs. How checks work
- Source repository linked and reachablecapsulatedev/capsulate is public and reachablegithub.com/capsulatedev/capsulate ↗Pass
- Package names this repository as its source@capsulate/mcp names capsulatedev/capsulate as sourcenpmjs.com/package/@capsulate/mcp ↗Pass
- Build provenance (Sigstore attestation)No build attestation published for this releaseNot checked
- Open source license (OSI)MITspdx.org/licenses/MIT.html ↗Pass
- Commit or release in the last yearLast commit or release 2026-10-12github.com/capsulatedev/capsulate ↗Pass
- OpenSSF ScorecardNot checked
- Package name not close to a popular packageNo popular package one edit away from @capsulate/mcpPass
- No critical advisory in the package or its dependencies100 resolved dependencies checked; no critical advisoryosv.dev ↗Pass
- No hidden instructions to the model28 tool descriptions and the README read; no override phrases, credential paths or hidden charactersPass
- Destructive tools are labelledNo tool named like delete, drop or execPass
- Remote endpoint answers the MCP handshakeNot checked
README
View on GitHub@capsulate/mcp
The Capsulate Model Context Protocol server. Give Claude Code, Claude Desktop, Cursor, Windsurf, Antigravity, any MCP client, the ability to launch and drive isolated cloud computers ("capsules"), including real Linux and Windows desktops that a person can watch live and take over.
Setup
- Create an API key in the Capsulate dashboard: Settings → API & Keys.
- Add the server to your MCP client config.
Claude Code
claude mcp add capsulate -e CAPSULATE_API_KEY=cap_live_... -- npx -y @capsulate/mcp
Claude Desktop / Cursor
{
"mcpServers": {
"capsulate": {
"command": "npx",
"args": ["-y", "@capsulate/mcp"],
"env": {
"CAPSULATE_API_KEY": "cap_live_…"
}
}
}
}
To keep the key out of the config file, put it in a file and point at it with
CAPSULATE_API_KEY_FILE instead. The file holds either the bare key or a
CAPSULATE_API_KEY=cap_live_... line.
For a self-hosted or non-default deployment, also set
"CAPSULATE_BASE_URL": "https://api.your-domain".
Tools
| Tool | What it does |
|---|---|
capsulate_launch |
Launch a capsule and wait until ready |
capsulate_list / capsulate_get |
Inspect capsules |
capsulate_destroy |
Tear a capsule down |
capsulate_exec |
Run a command (argv array) |
capsulate_run_code |
Run a python/node/bash snippet |
capsulate_write_file / capsulate_read_file |
File I/O |
capsulate_set_env |
Set environment variables |
capsulate_snapshot |
Snapshot a capsule |
capsulate_catalog |
Discover launchable templates & bundles |
Desktop computer use
| Tool | What it does |
|---|---|
capsulate_screenshot |
See the screen (returns an image; format: "jpeg", a scale or a region make it smaller) |
capsulate_screen_info |
The screen's size, the pointer and the active window |
capsulate_click / capsulate_move / capsulate_drag / capsulate_scroll |
Pointer |
capsulate_type / capsulate_key |
Keyboard |
capsulate_ui_tree |
Read the accessibility tree (AT-SPI on Linux, UI Automation on Windows) with clickable centers |
capsulate_find_element / capsulate_wait_element |
Find or wait for an element by role, name or text |
capsulate_click_element |
Find an element and click it: the reliable way to press a named button |
capsulate_clipboard |
Read or set the clipboard (paste long text instead of typing it) |
capsulate_element |
Act on an element without coordinates: set its value, clear, toggle, expand or collapse, invoke, select an option by name, focus, scroll it into view |
capsulate_windows |
List windows or bring one to the front |
capsulate_window |
Minimize, maximize, restore, close, move or resize a window |
capsulate_open |
Open a URL, a file or an app by name, and wait for its window |
capsulate_wait_for |
Wait for an element to appear, go away, be enabled or show a text, for a window, or for the screen to settle |
capsulate_ocr |
Read the text on screen when the UI tree has no labels |
capsulate_run_actions |
Several steps in one call, back to back, stopping at the first that fails, with a look at the end |
The input verbs accept screenshot: true (and screenshotDelayMs) to return the frame after the action.
Every tool works the same on Linux and Windows desktops; a multi-line editor is a document on Windows
and a text on Linux.
Browser fast path
The capsule's own Chrome, driven through the page's structure at page speed, on the same screen the
person watches: capsulate_browser_open, _navigate, _tabs, _snapshot (an outline with refs),
_click, _fill (the value is never echoed), _select, _press, _scroll, _wait, _text,
_eval and _screenshot.
Live: a person watches, takes over, hands back
A desktop capsule has one shared screen. The AI drives it through the tools above while a person watches the same screen in a browser, sees the AI's pointer, clicks and keys drawn over it, reads its narration, and can take the screen at any time.
| Tool | What it does |
|---|---|
capsulate_console_link |
A signed, expiring URL that opens the live screen in any browser with no login (control or view) |
capsulate_say |
Show one line of narration on the live console |
capsulate_control |
Who is driving: free, agent (the AI) or human; take or release the screen; set the pace (natural or presentation) for a person watching |
capsulate_handoff |
Hand the screen to the person with a note ("Please sign in"), wait until they hand it back, get their note |
capsulate_wait_for_handback |
Keep waiting for the person to hand the screen back |
While a person holds the screen, the AI's input verbs answer human_in_control and nothing reaches
the capsule; the tool result says to wait with capsulate_wait_for_handback. Reading the screen
(screenshot, UI tree, OCR) keeps working. Each AI input holds the screen for 45 seconds; the
console is view-only for everyone else during that time and turns interactive again when the AI
goes quiet or releases.
Skills: learn once, replay in minutes
| Tool | What it does |
|---|---|
capsulate_lesson |
Learn a job on a capsule: a person teaches on the shared screen (clicks, keys and typing with the elements they hit, passwords masked, optionally video and voice) or the AI teaches itself toward a goal; get reads the digest |
capsulate_skills |
The team's skills: save one from a lesson's digest, versions, approve, save an environment, rehearse, weekly rehearsals |
capsulate_skill_run |
Run a skill's procedure in the background; it asks you where the skill leaves a decision open |
capsulate_inbox |
Runs that wait, versions to approve, failed rehearsals and skills whose software changed |
The server's instructions carry the learning protocol: explore with a goal, note what you learn, finish, read the digest, save the skill; next time launch its environment and run its procedure.
Try it
"Spin up an
ubuntu-22.04-headlesscapsule, run my test suite, and show me the output."
The model calls capsulate_launch, then capsulate_exec, and reports back.
"Launch an
ubuntu-22.04-desktopcapsule, give me a live link, and find the latest Firefox release notes. If anything needs a login, hand it to me."
The model launches the desktop, calls capsulate_console_link and gives you the URL, narrates with
capsulate_say as it works, and calls capsulate_handoff when it needs you. You press
Done, hand back in the live console when you finish, and it carries on.
Develop
npm run build # from the repo root: sdk, ai-tools, cli, mcp
node apps/mcp/scripts/smoke-live.mjs # live tools end to end against a fake API
Capsulate MCP questions
How do I add Capsulate MCP to Claude Code?
Run claude mcp add --env CAPSULATE_API_KEY=<YOUR_CAPSULATE_API_KEY> capsulate -- npx -y @capsulate/mcp in your terminal. Add --scope user to make it available in every project.
How do I add Capsulate MCP to Cursor?
Open ~/.cursor/mcp.json and add the server under mcpServers, using the Cursor config shown in the install section above.
What tools does Capsulate MCP provide?
It exposes 28 tools, including capsulate_launch, capsulate_destroy, capsulate_exec, capsulate_run_code, capsulate_set_env.
What operating systems can I run in a capsule?
You can launch real Linux and Windows desktops.
Can a human interact with the AI while it is using a capsule?
Yes, a person can watch the live screen in a browser and take control of the desktop at any time.
Can the AI handle tasks that require a login?
Yes, the AI can use the handoff tool to give control to a human when a login or manual intervention is needed.