Capsulate MCP server
io.github.capsulatedev/capsulate·v0.7.0Real Linux and Windows desktop VMs for AI agents: exec, files, computer-use and snapshots via MCP.
not scanned yet
0 stars38 downloads/wk
Reviews
Write oneNobody has reviewed Capsulate yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Capsulate tools
No tool declarations could be read from the package source. They show once the server is installed.
How Capsulate compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 82/100
- higher than 63% of 48,243 servers
- Downloads a week
- 38
- more than 28% of 12,306 servers with a package
Release history: 3 versions in the registry since 2026-09-12, latest 2026-10-12, typically one every 29 days.
Install Capsulate in Claude Code, Cursor or VS Code
Runs npx -y @capsulate/mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add capsulate -- npx -y @capsulate/mcp
What the publisher says
From the Capsulate repository's README, as published. We do not edit it. Read it on GitHub
Capsulate
Real computers for AI agents. A capsule is a full KVM virtual machine, Linux headless, Linux desktop, or Windows Server desktop for invited testers, taken from a warm pool in about two seconds. Your agent gets exec, files, screenshots, the OS accessibility tree (AT-SPI on Linux, UIAutomation on Windows), checkpoint and rollback of the whole machine, and session replay.
This repository is the doorway: everything a developer installs to talk to Capsulate. It is MIT licensed. The engine (the control plane and the node agent) runs on our metal in Helsinki and is not in this repository.
Quickstart
You need an API key from the dashboard (Settings, API and Keys). Capsulate is in a private beta; request access at capsulate.dev.
npm i -g @capsulate/cli
cap login --api-key cap_live_...
cap launch -t ubuntu-desktop -s 1c2g --wait
cap exec <id> -- python3 -c "print(6 * 7)"
cap shot <id> -o frame.png
cap capsule destroy <id>Or from TypeScript:
import { Capsulate } from "@capsulate/sdk";
const cap = new Capsulate({ apiKey: process.env.CAPSULATE_API_KEY });
const box = await cap.capsules.launch({ template: "ubuntu-desktop", size: "1c2g" });
await box.waitUntilActive();
await box.exec(["python3", "main.py"]);
await box.findAndClick({ name: "Save" }); // find the control by name, act, verify
const cp = await box.checkpoint("before-submit"); // whole machine, under a second
await box.destroy();More in examples/ and at docs.capsulate.dev.
Sizes and pricing
Machines are metered per second. The beta is free; the published rates are on the pricing page. Limits and known issues are listed honestly at docs.capsulate.dev/limits: one compute node in Helsinki today, about ten to fifteen capsules active at the same time, Windows for invited testers only.
Developing
npm ci
npm run build:sdk # the CLI, MCP server and tool packs typecheck against the built SDK types
npm run typecheck
npm run buildnpm run build builds the SDK first, then the tool packs, the CLI and the MCP server.
Security
Report vulnerabilities to security@capsulate.dev (see SECURITY.md). Never put a real caplive key in an issue.
License
MIT. Copyright 2026 Milad Djahandide.
Nothing above is checked by us. What we check is on the safety report.
Capsulate: common questions
- Is Capsulate MCP server safe?
- Mostly: it is graded B (82/100). Read the Capsulate safety report
- How do I install Capsulate?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Capsulate need an API key?
- Yes. The registry entry asks for
CAPSULATE_API_KEY. - Is Capsulate maintained?
- The last commit was 54 days ago (2026-09-12). The latest release is v0.7.0.
- What can I use instead of Capsulate?
- Servers from other publishers that do the same job: Desktop Commander MCP server, SSH — policy-gated remote access MCP server and ProxmoxMCP-Plus MCP server. Compare all Capsulate alternatives.
- How does Capsulate compare with other MCP servers?
- safety score 82/100 (higher than 63% of 48,243 servers); downloads a week 38 (more than 28% of 12,306 servers with a package). Full comparison.
Alternatives to Capsulate
Same job from other publishers: the closest match first, then the best rated.
- Desktop CommanderMCP server for terminal commands, file operations, and process managementnot reviewedWidely usedC
- SSH — policy-gated remote accessPolicy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log.not reviewedEstablishedB
ProxmoxMCP-PlusProxmox VE MCP server for VMs, LXCs, snapshots, backups, storage, and cluster operations.not reviewedEstablishedB- ComputerA private persistent computer: files that survive between runs, a bash shell and JavaScript.not reviewedEstablishedA
- Token OptimizerContext-window optimization: caching, compression & smart file tools that cut tokens 60-90%.not reviewedEstablishedC