Reference
CAPSULE FIELD GUIDEPRIVATE-FIRSTEXPERIMENTAL
Command reference
The core Capsule lifecycle and host-inspection commands.
This is the compact command map for the current experimental build. Run capsule --help on the installed version before automating a new workflow; APIs and flags can change during early development.
| Command | Purpose |
|---|---|
capsule install | Guided host setup or client connection setup. |
capsule ui | Open Mission Control. |
capsule new | Create a Firecracker microVM. |
capsule raw exec | Run a bounded command in a guest. |
capsule push / capsule pull | Move files through the private management path. |
capsule ps | List managed VMs. |
capsule inspect | Inspect VM state and metadata. |
capsule images | List immutable image inventory. |
capsule resources | Report host resource state. |
capsule events | Read recent host or VM events. |
capsule doctor | Check host and VM artifact consistency. |
capsule repair | Conservatively repair stale Capsule-owned artifacts. |
capsule pop | Destroy a microVM. |
Typical lifecycle
capsule new --name worker-a --image agent-full --ttl 2h --egress restricted
capsule raw exec --cwd /workspace --timeout 120s worker-a -- 'python3 --version'
capsule pull worker-a /workspace/result.patch ./result.patch
capsule pop worker-aEgress choices
| Mode | Intent |
|---|---|
none | No network access. |
internet | Broad internet access when the workload requires it. |
restricted | Capsule's constrained default policy for agent work. |
allowlist | Only declared domains and/or CIDRs; use for tightly controlled workloads. |
Use the narrowest egress policy that lets the workload function. Security model explains the DNS-aware allowlist boundary and its current limitations.