Launch a whole Linux computer
Each workload gets a Firecracker microVM with its own kernel, resources, network, and lifespan.
PRIVATE AGENT COMPUTER PLATFORM
One host.
Many isolated computers.
Capsule turns hardware you control into a private Firecracker microVM lab for AI agents. It is a working research project, not a finished platform.
Built to learn in public.
APIs, images, and workflows will change.
1 hostlab-scale by design
1 binarystill changing quickly
0 SLAno support guarantee
v0expect rough edges
Small on the outside.
Serious machinery
on the inside.
01
Let your agent get to work
Run commands and move files through private vsock. No guest SSH service or password pile.
Leave no mess behind
TTL reaping, conservative garbage collection, snapshots, and checksummed images keep the host tidy.
security is the experiment
Isolation is the goal.
Not a warranty.
Capsule explores stronger boundaries for agent workloads using Firecracker, jailer, cgroups, and explicit network policy. It has not received an independent security audit.
- ✓ Jailed process, UID, cgroup, network, and disk
- ✓ Scoped, expiring, revocable access tokens
- ✓ Named egress policies and structured audit logs
YOUR AGENTbusy building something useful
CAPSULEits own Linux kernel
JAILERhard resource boundaries
YOUR HOSTstill yours
Curious builders only.
Enter the lab
carefully.
Use a disposable test machine and nonsensitive workloads. Setup Center explains proposed host changes, but upgrades may break state and the project may change without migration support. Start with the getting-started guide.
CAPSULE FIELD GUIDEEARLY DEVELOPMENT
- 1Read the field guide
- 2Use a disposable Linux host
- 3Wait for the public host release
Public Linux host binary: not yet released · no production use · no stability promise