capsulatedev/capsulate

Real computers for AI agents. A capsule is a full KVM virtual machine, Linux headless, Linux desktop, or Windows Server desktop for invited testers, taken from a warm pool in about two seconds. Your agent gets exec, files, screenshots, the OS accessibility tree (AT-SPI on Linux, UIAutomation on Windows), checkpoint and rollback of the whole machine, and session replay.
This repository is the doorway: everything a developer installs to talk to Capsulate. It is MIT licensed. The engine (the control plane and the node agent) runs on our metal in Helsinki and is not in this repository.
| Package | What it is | Install |
|---|---|---|
| @capsulate/sdk | TypeScript client, zero dependencies | npm i @capsulate/sdk |
| @capsulate/cli | The cap command line | npm i -g @capsulate/cli |
| @capsulate/mcp | MCP server for Claude Desktop, Cursor and any MCP client | npx -y @capsulate/mcp |
| @capsulate/ai-tools | Tool packs for the Vercel AI SDK and LangChain | npm i @capsulate/ai-tools |
| run-action | GitHub Action: run a step inside a capsule | uses: capsulatedev/run-action@v1 |
Quickstart
You need an API key from the dashboard (Settings, API and Keys). Capsulate is in a private beta; request access at capsulate.dev.
Or from TypeScript:
More in examples/ and at docs.capsulate.dev.
Sizes and pricing
Machines are metered per second. The beta is free; the published rates are on the pricing page. Limits and known issues are listed honestly at docs.capsulate.dev/limits: one compute node in Helsinki today, about ten to fifteen capsules active at the same time, Windows for invited testers only.
Developing
npm run build builds the SDK first, then the tool packs, the CLI and the MCP server.
Security
Report vulnerabilities to security@capsulate.dev (see SECURITY.md). Never put a real cap_live_ key in an issue.