Capsulate runs on your own machine — the client starts it, so there is no endpoint to ping. 98 installs a week from npm. Last commit 13 Oct 2026.
Real Linux and Windows desktop VMs for AI agents: exec, files, computer-use and snapshots via MCP.
What the code does
We read the source, 5 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
const child = spawn(cmd, args, { detached: true, stdio: "ignore" });
return ok((await browser(a.sessionId).eval(a.expression)).value ?? null);
for (const e of await fs.readdir(path.join(root, rel), { withFileTypes: true })) {
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add capsulate -e 'CAPSULATE_API_KEY=<CAPSULATE_API_KEY>' -- npx -y @capsulate/mcp{
"mcpServers": {
"capsulate": {
"command": "npx",
"args": [
"-y",
"@capsulate/mcp"
],
"env": {
"CAPSULATE_API_KEY": "<CAPSULATE_API_KEY>"
}
}
}
}[mcp_servers.capsulate]
command = "npx"
args = ["-y", "@capsulate/mcp"]
env = { CAPSULATE_API_KEY = "<CAPSULATE_API_KEY>" }{
"mcpServers": {
"capsulate": {
"command": "npx",
"args": [
"-y",
"@capsulate/mcp"
],
"env": {
"CAPSULATE_API_KEY": "<CAPSULATE_API_KEY>"
}
}
}
}{
"servers": {
"capsulate": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@capsulate/mcp"
],
"env": {
"CAPSULATE_API_KEY": "<CAPSULATE_API_KEY>"
}
}
}
}Put your own value in place of
<CAPSULATE_API_KEY> (A cap_live_ API key from the dashboard (Settings → API & Keys)).
The author’s registry entry marks it as required.
Optional settings from the registry entry, left out of the block above:
CAPSULATE_BASE_URL (API base URL. Defaults to https://api.capsulate.dev), CAPSULATE_TEAM_ID (Team to bill. Defaults to the API key's team).
Alternatives to Capsulate
same job, measured the same waySandboxed computer-use for AI agents: drive real browser + desktop apps in nested X11 windows
Control this Windows desktop from any MCP client: files, windows, keyboard and mouse.
Instant, resettable Windows, Ubuntu and Arch Linux ARM desktop VMs for AI agents on Apple Silicon.
Local MCP server for desktop automation: mouse, keyboard, screen, windows, and processes.
Let any AI agent operate desktop apps on macOS, Windows and Linux, in the background and safely.
Linux VMs for AI agents: create VMs, run commands, edit files and open preview URLs.
An MCP Server for computer-use in Windows OS
A 1:1 replica of Claude Desktop's computer-use tool surface, for Windows and the Claude Code CLI.
Capsulate — questions
Answers built from our own checks of this server.