Log inSubmit server
Capsulate logo

Capsulate

Runs AI-agent tasks inside real Linux and Windows virtual machines with execution, files, screenshots, UI access, and snapshots over MCP.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Capsulate

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "capsulate": {
      "command": "npx",
      "args": [
        "-y",
        "@capsulate/mcp"
      ],
      "env": {
        "CAPSULATE_API_KEY": "YOUR_VALUE_HERE"
      }
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Values are written into the snippet above so you can paste it as is. They never leave your browser.

Automated check passed— started and listed 54 tools correctly (21d ago).

Overview

The capsulate MCP server gives AI agents access to real Linux and Windows desktop virtual machines through MCP. It supports command execution, file operations, screenshots, accessibility-tree interaction, whole-machine checkpoints and rollback, and session replay. Install the MCP package with npx and provide an API key from the Capsulate dashboard. Reach for it when an agent needs an isolated operating system rather than only API-level tools.

Use cases

  • Run scripts inside isolated Linux or Windows desktops
  • Inspect desktop controls through accessibility trees
  • Capture screenshots during agent workflows
  • Checkpoint and roll back complete virtual machines
  • Replay sessions for workflow review

Key features

  • Linux headless and desktop capsules
  • Windows Server desktop capsules
  • Command and file operations
  • Screenshots and accessibility-tree interaction
  • Whole-machine checkpoints and rollback
  • Session replay

Tools54

What Capsulate lets your agent do. Expand a tool for its parameters.

Verified live~11.4k tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 1d ago

Recent health check succeeded.

10/10 checks healthy over the last 44d

What it can do

From the 54 tools this server returned when we ran it.

Runs commands · 5Can delete or modify data · 1Writes files · 2Handles credentials · 4Makes network requests · 7Read-only tools · 47
Network at startup3 connections
Files written at startupNone
Install scriptsNone
npm provenanceNot published
Package age125 days
Maintainers1

Observed 2026-10-22 in an isolated sandbox. A description of reach, not a security audit.

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 14d ago via OSV.dev · @capsulate/mcp (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

npm downloads1.4kPackage downloads in the last 30 days.
Last commit1mo agoMost recent push to the default branch.
Availability100%Our rolling endpoint + install checks that succeeded.
Install checkPassedOur sandbox started it and listed its tools.
Tools exposed54Callable tools this server registers over MCP.
Directory activity3 viewsConfig copies, upvotes, and views on AllMCPs.

How Capsulate works

What capsulate does

The capsulate MCP server connects AI agents to real KVM virtual machines, called capsules. Available machine types include Linux headless systems, Linux desktops, and Windows Server desktops. Capsules are obtained from a warm pool and can become available in about two seconds, according to the project documentation.

An agent can work with the operating system through several interfaces. It can execute commands, work with files, capture screenshots, and inspect or operate controls through the operating system accessibility tree. Linux uses AT-SPI for this tree, while Windows uses UIAutomation. The server also exposes checkpointing and rollback for the complete machine, along with session replay.

The underlying control plane and node agent run on Capsulate infrastructure in Helsinki; they are not included in this repository. The repository contains the SDK, CLI, MCP package, AI tool packs, and a GitHub Action for running a step inside a capsule.

How it works

An MCP-compatible client starts the @capsulate/mcp package, which communicates with Capsulate using credentials supplied by the developer. The client can then request capsule operations through MCP tools. The same service can also be accessed through the TypeScript SDK or the cap command-line tool, but those are separate interfaces to the platform.

Capsules represent complete virtual machines rather than individual processes. A workflow can launch a machine from a template, wait for it to become active, perform commands or desktop interactions, create a checkpoint, and later destroy the capsule. Checkpoints cover the whole machine and support rollback when a workflow needs to return to an earlier state.

Setup and configuration

The capsulate MCP server is installed and run with:

Terminal
npx -y @capsulate/mcp

Use an API key obtained from the Capsulate dashboard under Settings, API and Keys. Capsulate is currently in private beta, so access must be requested through the Capsulate website. The repository identifies CAPSULATE_API_KEY as the SDK configuration pattern; the MCP client configuration should provide the corresponding key to the server according to the client’s environment settings.

The repository also provides a global CLI installation with npm i -g @capsulate/cli. Its documented workflow logs in with an API key, launches a template and size, executes a command, captures a screenshot, and destroys the capsule.

Tools and capabilities

The capsulate MCP server is suited to workflows requiring an actual operating system environment. Supported capabilities include:

  • Launching Linux or Windows capsule types
  • Running commands inside a capsule
  • Reading and manipulating files
  • Taking screenshots
  • Inspecting and interacting with accessibility-tree controls
  • Creating checkpoints of the complete machine
  • Rolling a machine back to a checkpoint
  • Replaying a session

The README specifically shows a desktop interaction that finds a control by name and clicks it, then creates a checkpoint before submission.

Limitations and notes

The service is metered by the second, although the beta is free; published rates are maintained on the pricing page. The documented deployment currently has one compute node in Helsinki and supports approximately ten to fifteen active capsules at once. Windows access is limited to invited testers.

The engine is hosted remotely and is not part of the repository, so local installation does not provide a self-hosted VM control plane. Keep API keys out of source repositories and issue reports; the project asks users to report security vulnerabilities separately. The capsulate MCP server therefore fits hosted, access-controlled automation better than an offline or self-contained deployment.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Capsulate

capsulate is an MCP server that connects AI agents to real Linux and Windows desktop virtual machines. Its main tools support command execution, file operations, screenshots, accessibility-tree interaction, machine checkpoints, rollback, and session replay. Capsules can be launched from a warm pool and controlled through MCP-compatible clients.

Install it with `npx -y @capsulate/mcp` and configure an API key from the Capsulate dashboard. The service is currently in private beta, so you must request access before using it. The repository lists Claude Desktop, Cursor, and other MCP clients as supported consumers.

Yes, capsulate works with Cursor. The repository lists `@capsulate/mcp` as an MCP server for Cursor, Claude Desktop, and any MCP client. Configure the server in Cursor and provide the Capsulate API key required to access capsules.

Yes, capsulate can checkpoint and roll back the whole virtual machine. A workflow can create a checkpoint during a session and return the capsule to that machine state later.

Related MCP servers

All in OS Automation All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewCapsulate AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/capsulate?style=directory)](https://allmcps.com/mcp/capsulate)
HTML Embed
<a href="https://allmcps.com/mcp/capsulate"><img src="https://allmcps.com/api/badge/capsulate?style=directory" alt="Capsulate on AllMCPs" /></a>