Capsulate

io.github.capsulatedevPublished by GitHub account capsulatedevv0.7.0Updated Oct 24, 2026

Real Linux and Windows desktop VMs for AI agents: exec, files, computer-use and snapshots via MCP.

VerifiedSTDIODesktop onlyCloud & InfrastructureBrowser AutomationDeveloper Tools

Overview

AI-generated overview

Capsulate lets an AI assistant launch and drive isolated cloud Linux and Windows desktops: run commands, edit files, use the GUI, browse, and snapshot.

What you can do
Launch, list, inspect, snapshot and destroy cloud capsules, and discover launchable templates and bundles via the catalog tool. Run shell commands, python/node/bash snippets, read and write files, and set environment variables. Control the desktop: screenshots, pointer and keyboard input, accessibility tree, element finding and clicking, windows, clipboard, OCR and batched action sequences. Drive the capsule's own Chrome through page structure for navigation, tabs, clicks, filling, evaluation and screenshots. Share the live screen with a person through signed console links, narration, control handoff and handback. Learn, save, approve, rehearse and run team skills, and check an inbox of runs
When to use it
Useful when an assistant needs a real, disposable machine rather than local tooling: running test suites or builds in a clean environment, automating desktop applications, or doing browser work that a person may need to watch and take over.
Requirements
Runs locally over stdio, typically via npx with Node.js. Requires a Capsulate account and a cap_live_ API key supplied as CAPSULATE_API_KEY (or via a key file). CAPSULATE_BASE_URL and CAPSULATE_TEAM_ID are optional. Network access to the Capsulate API is required.
Before you install
The API key is a billable credential: keep it out of shared config files where possible. Capsules are cloud machines that cost money while running, and the team billed can be set with CAPSULATE_TEAM_ID. Tools execute commands, write files, control desktops and browsers, and destroy capsules, so actions change remote state. Console links are signed but open the live screen without login until they expire.

Installation

In SourceWeft

  1. Open Capsulate in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@capsulate/mcp

The Capsulate Model Context Protocol server. Give Claude Code, Claude Desktop, Cursor, Windsurf, Antigravity, any MCP client, the ability to launch and drive isolated cloud computers ("capsules"), including real Linux and Windows desktops that a person can watch live and take over.

Setup

  1. Create an API key in the Capsulate dashboard: Settings → API & Keys.
  2. Add the server to your MCP client config.

Claude Code

bash
claude mcp add capsulate -e CAPSULATE_API_KEY=cap_live_... -- npx -y @capsulate/mcp

Claude Desktop / Cursor

json
{  "mcpServers": {    "capsulate": {      "command": "npx",      "args": ["-y", "@capsulate/mcp"],      "env": {        "CAPSULATE_API_KEY": "cap_live_…"      }    }  }}

To keep the key out of the config file, put it in a file and point at it with CAPSULATE_API_KEY_FILE instead. The file holds either the bare key or a CAPSULATE_API_KEY=cap_live_... line.

For a self-hosted or non-default deployment, also set "CAPSULATE_BASE_URL": "https://api.your-domain".

Tools

ToolWhat it does
capsulate_launchLaunch a capsule and wait until ready
capsulate_list / capsulate_getInspect capsules
capsulate_destroyTear a capsule down
capsulate_execRun a command (argv array)
capsulate_run_codeRun a python/node/bash snippet
capsulate_write_file / capsulate_read_fileFile I/O
capsulate_set_envSet environment variables
capsulate_snapshotSnapshot a capsule
capsulate_catalogDiscover launchable templates & bundles

Desktop computer use

ToolWhat it does
capsulate_screenshotSee the screen (returns an image; format: "jpeg", a scale or a region make it smaller)
capsulate_screen_infoThe screen's size, the pointer and the active window
capsulate_click / capsulate_move / capsulate_drag / capsulate_scrollPointer
capsulate_type / capsulate_keyKeyboard
capsulate_ui_treeRead the accessibility tree (AT-SPI on Linux, UI Automation on Windows) with clickable centers
capsulate_find_element / capsulate_wait_elementFind or wait for an element by role, name or text
capsulate_click_elementFind an element and click it: the reliable way to press a named button
capsulate_clipboardRead or set the clipboard (paste long text instead of typing it)
capsulate_elementAct on an element without coordinates: set its value, clear, toggle, expand or collapse, invoke, select an option by name, focus, scroll it into view
capsulate_windowsList windows or bring one to the front
capsulate_windowMinimize, maximize, restore, close, move or resize a window
capsulate_openOpen a URL, a file or an app by name, and wait for its window
capsulate_wait_forWait for an element to appear, go away, be enabled or show a text, for a window, or for the screen to settle
capsulate_ocrRead the text on screen when the UI tree has no labels
capsulate_run_actionsSeveral steps in one call, back to back, stopping at the first that fails, with a look at the end

The input verbs accept screenshot: true (and screenshotDelayMs) to return the frame after the action. Every tool works the same on Linux and Windows desktops; a multi-line editor is a document on Windows and a text on Linux.

Browser fast path

The capsule's own Chrome, driven through the page's structure at page speed, on the same screen the person watches: capsulate_browser_open, _navigate, _tabs, _snapshot (an outline with refs), _click, _fill (the value is never echoed), _select, _press, _scroll, _wait, _text, _eval and _screenshot.

Live: a person watches, takes over, hands back

A desktop capsule has one shared screen. The AI drives it through the tools above while a person watches the same screen in a browser, sees the AI's pointer, clicks and keys drawn over it, reads its narration, and can take the screen at any time.

ToolWhat it does
capsulate_console_linkA signed, expiring URL that opens the live screen in any browser with no login (control or view)
capsulate_sayShow one line of narration on the live console
capsulate_controlWho is driving: free, agent (the AI) or human; take or release the screen; set the pace (natural or presentation) for a person watching
capsulate_handoffHand the screen to the person with a note ("Please sign in"), wait until they hand it back, get their note
capsulate_wait_for_handbackKeep waiting for the person to hand the screen back

While a person holds the screen, the AI's input verbs answer human_in_control and nothing reaches the capsule; the tool result says to wait with capsulate_wait_for_handback. Reading the screen (screenshot, UI tree, OCR) keeps working. Each AI input holds the screen for 45 seconds; the console is view-only for everyone else during that time and turns interactive again when the AI goes quiet or releases.

Skills: learn once, replay in minutes

ToolWhat it does
capsulate_lessonLearn a job on a capsule: a person teaches on the shared screen (clicks, keys and typing with the elements they hit, passwords masked, optionally video and voice) or the AI teaches itself toward a goal; get reads the digest
capsulate_skillsThe team's skills: save one from a lesson's digest, versions, approve, save an environment, rehearse, weekly rehearsals
capsulate_skill_runRun a skill's procedure in the background; it asks you where the skill leaves a decision open
capsulate_inboxRuns that wait, versions to approve, failed rehearsals and skills whose software changed

The server's instructions carry the learning protocol: explore with a goal, note what you learn, finish, read the digest, save the skill; next time launch its environment and run its procedure.

Try it

"Spin up an ubuntu-22.04-headless capsule, run my test suite, and show me the output."

The model calls capsulate_launch, then capsulate_exec, and reports back.

"Launch an ubuntu-22.04-desktop capsule, give me a live link, and find the latest Firefox release notes. If anything needs a login, hand it to me."

The model launches the desktop, calls capsulate_console_link and gives you the URL, narrates with capsulate_say as it works, and calls capsulate_handoff when it needs you. You press Done, hand back in the live console when you finish, and it carries on.

Develop

bash
npm run build                          # from the repo root: sdk, ai-tools, cli, mcpnode apps/mcp/scripts/smoke-live.mjs   # live tools end to end against a fake API

Source: apps/mcp/README.md at commit 36f738e

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

6
  1. v0.7.0LatestOct 13, 2026
  2. v0.6.0Oct 12, 2026
  3. v0.5.0Oct 11, 2026
  4. v0.4.1Oct 10, 2026
  5. v0.4.0Oct 10, 2026
  6. v0.2.0Sep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts