Every agent, contained.
Capsule wraps every AI agent you run in production with full visibility, hard cost limits, and policy control.
One control plane. Three guarantees.
Trace, Cap, and Route give platform teams the visibility, cost control, and governance that production agents demand.
Trace
See every run, tool call, and handoff.
Full execution traces for every agent — inputs, tool calls, sub-agent handoffs, latency, and outcomes. Replay any run end to end.
Cap
Token and cost budgets per agent and team.
Set hard spend and token limits at the agent, team, or org level. Capsule pauses runs the moment a budget is breached — no surprises on the invoice.
Route
Send each step to the right model and region.
Policy-based routing picks the right model, provider, and region for every step — with automatic failover and data-residency controls.
From SDK to governed in an afternoon.
Capsule slots into your existing stack. No rebuilds, no migrations — just visibility and control from day one.
Connect the SDK
Drop in the Capsule SDK or point your agents at the Capsule proxy. Two lines of code — no rewrites, no lock-in.
import { capsule } from '@capsule/sdk'Wrap agents in a Capsule
Every run executes inside an isolated, observable Capsule. Inputs, tool calls, and handoffs are captured automatically.
const agent = capsule.wrap(myAgent)Set caps & policies
Define cost limits, model routes, and governance policies as code or in the dashboard. Apply them per agent, team, or org.
capsule.policy({ maxUsd: 50, region: 'us' })Govern in production
Watch live traces, enforce hard budgets, route every step, and audit each decision — with full control as you scale.
// shipping with confidence ✓Built for teams that answer to security review.
Capsule is designed for the controls platform and security teams require before agents touch production data.
Data control
Your data stays yours. No training on your traces, field-level redaction of secrets and PII, and retention you configure.
Audit trail
Every run, policy change, budget breach, and override is logged immutably — exportable to your SIEM for review.
Deploy on your terms
Run fully managed, inside your own VPC, or on-prem — with SSO, SAML, and role-based access control built in.