# What a Kapsule is

One folder at kapsules/<name>/ with one kapsule.json. Mounts live (no restart), removable, diffable, git-shippable.

## What it can carry (any mix)
- agent: persona + model + tool allowlist + optional schedule (what the Kapsules tab shows)
- skills: instruction documents its agent always carries
- mcp: its own tool server, spawned and supervised by Kaptain
All three together = a complete capability: worker + knowledge + tools in one reviewable folder.

## Why a file, not a database row
Readable contracts. The approval mode travels WITH the kapsule (a git-shipped kapsule carries its own policy). Each kapsule gets a private memory DB; its folder is read-only to the agent, <name>_workspace/ is read-write.

## Boundaries
Empty tool list = full enabled catalog, still approval-gated. trusted_scopes pre-approve TARGETS (path / one MCP server / one host), never whole tools.

How to build one: https://chynj.ca/kaptain/docs/how-to/kapsules/