
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@capsulate/mcp
Advanced tools
Capsulate MCP server — give Claude, Cursor, and any MCP client the ability to launch and drive cloud sandboxes (capsules).
The Capsulate Model Context Protocol server. Give Claude Desktop, Cursor, Windsurf, Antigravity — any MCP client — the ability to launch and drive isolated cloud sandboxes ("capsules").
{
"mcpServers": {
"capsulate": {
"command": "npx",
"args": ["-y", "@capsulate/mcp"],
"env": {
"CAPSULATE_API_KEY": "cap_live_…"
}
}
}
}
For a self-hosted or non-default deployment, also set
"CAPSULATE_BASE_URL": "https://api.your-domain".
| Tool | What it does |
|---|---|
capsulate_launch | Launch a capsule and wait until ready |
capsulate_list / capsulate_get | Inspect capsules |
capsulate_destroy | Tear a capsule down |
capsulate_exec | Run a command (argv array) |
capsulate_run_code | Run a python/node/bash snippet |
capsulate_write_file / capsulate_read_file | File I/O |
capsulate_set_env | Set environment variables |
capsulate_screenshot | See a desktop capsule (returns an image) |
capsulate_click / capsulate_type / capsulate_key | Computer-use |
capsulate_snapshot | Snapshot a capsule |
capsulate_catalog | Discover launchable templates & bundles |
"Spin up an
ubuntu-22.04-headlesscapsule, run my test suite, and show me the output."
The model will call capsulate_launch, then capsulate_exec, and report back.
FAQs
Capsulate MCP server — give Claude, Cursor, and any MCP client the ability to launch and drive cloud sandboxes (capsules).
We found that @capsulate/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.