# capabilities

> One MCP endpoint for every tool your agents use. A local-first capability hub with three tools (search, describe, execute) where reads run, writes ask, only a person approves, and secrets never reach the model.

Canonical page: https://capabilities.sh/

> [!STATUS]
> In development. Milestone M1, the local hub, is in progress and nothing is released yet.

capabilities is a hub for people who use agents. Put your MCP servers, HTTP APIs, credentials and skills in one hub, and every agent (Claude Code, Codex, Cursor) reaches all of them through one code-mode MCP endpoint.

## Three tools

1. **`search`** finds tools by intent and returns one-line TypeScript signatures.
2. **`describe`** returns exact types for the tools the model will call.
3. **`execute`** runs the model's code in a sandbox whose only way out is your tools.

## Four promises

- **Reads run.** A tool that declares itself read-only runs without asking.
- **Writes ask.** Everything else asks a person first, and asks again if the tool changes upstream.
- **Only a person approves.** No path the model can reach records a decision.
- **Secrets never reach the model.** Credentials stay in your keychain and are scrubbed from every result.

## Local first

The local hub runs on your machine and will be free and open source (MIT). A hosted hub on Cloudflare, for cloud agents such as claude.ai and ChatGPT, is the planned paid product.

## Read next

- [Overview](https://capabilities.sh/docs.md)
- [Quickstart](https://capabilities.sh/docs/quickstart.md)
- [The MCP surface](https://capabilities.sh/docs/mcp.md)
- [Security and approvals](https://capabilities.sh/docs/security.md)
- [Status and roadmap](https://capabilities.sh/status.md)
- [For agents](https://capabilities.sh/agents.md)