Caplets
Caplets wraps MCP servers, APIs, and commands into focused capabilities for coding agents.
Code Mode is the default surface: each configured backend becomes a typed caplets.<id>
handle that an agent can inspect, search, call, filter, and summarize in one workflow.
Use Caplets with Codex, Claude, OpenCode, Pi, or any MCP client that can launch a local stdio server.
Start here
Section titled “Start here”Run a known-good no-auth setup first. OSV is public, so it is the fastest way to prove your agent can see and call a Caplet.
npx caplets setupnpx caplets install spiritledsoftware/caplets osvnpx caplets doctorOr install it globally:
npm install -g capletscaplets setupcaplets install spiritledsoftware/caplets osvcaplets doctordoctor should identify the active Caplets config path and report the checks it can run
for your configured integrations. Fix any failed check before testing through an agent.
Then ask your agent:
Use Caplets Code Mode to query OSV for npm react 18.2.0. Return the package,version, vulnerability count, and advisory IDs as compact JSON.A successful agent run should use the visible caplets__code_mode tool and inspect an
OSV handle such as caplets.osv. If the agent cannot see that tool, go to
Troubleshooting.
First success shape
Section titled “First success shape”The exact OSV data can change over time, but the result should have this shape:
{ "package": "react", "version": "18.2.0", "vulnerabilityCount": 0, "advisoryIds": []}If the package has advisories, vulnerabilityCount should increase and advisoryIds
should contain the OSV identifiers the agent found.
What to read next
Section titled “What to read next”- Install - set up the CLI and agent connection.
- Code Mode - learn the default agent workflow.
- Configuration - configure user and project Caplets.
- Capabilities - add MCP, OpenAPI, GraphQL, HTTP, CLI, and shared Caplets.
- Agent integrations - use Codex, Claude, OpenCode, and Pi.
- Remote attach - connect agents to a remote Caplets runtime.
- Troubleshooting - check config, auth, and runtime issues.