---
title: "Capabilities · intentic"
description: "Wire an agent to GitHub, PostgreSQL, Sentry, Stripe, Discord, SSH or any MCP server. Each capability installs a real tool; the credential never leaves your sandbox."
url: "https://intentic.dev/product/capabilities/"
---

Capabilities

# An agent is only as useful as what it can reach.

Capabilities are how a sandbox grows: GitHub, PostgreSQL, Sentry, Stripe, Discord, SSH, any MCP server. Each installs a real tool and keeps its credential in your sandbox.

[Get started free](https://app.intentic.dev) [Open the live workspace](https://intentic.dev/demo/)

acme-shop · /capabilities

![The capability catalog grouped by Platform, Code & issues, Observability, Data and Communication, with GitHub, Sentry, PostgreSQL, Discord, Docker and SSH marked as connected.](https://intentic.dev/_astro/capabilities.CRlNhySj_TgTEM.webp)

- 25

 capabilities and connectors in the catalog today
- 0

 credentials the platform can read
- Any MCP

 server or Claude Code plugin, by URL or git repo

## Adding one tells you exactly what it will do

Before you paste a token, the card lists the effects: the skill the agent gains, the variable it lands in, the image fragment that installs the client.

acme-shop · /capabilities/github

![The GitHub capability: a connected instance, a name field, a personal access token field, a Git access toggle, and a panel listing what it adds to the sandbox: a skill the agent loads next turn and a secret injected into its environment.](https://intentic.dev/_astro/capability-github.CGxhn9dN_R8JyA.webp)

## The credential never leaves the sandbox

Secrets are written inside your sandbox and injected each turn. They are denylisted from the file relay, and the platform has no path to them at all.

### Stays inside your sandbox

- Your code and repos
- Every credential and token
- The agent's transcripts
- The container and its image

### All the platform holds

- Your identity (Google sign-in)
- The sandbox's name and URL
- Billing state
- Grants to invited teammates

What it stores is AES-256-GCM encrypted, with no decrypt path in the product.

## The systems around one sandbox

A specialized agent is three or four capabilities from doing a real job: the repo, the database, the error tracker, the chat where its colleagues live.

One sandbox

credentials inside it

GitHub GitLab PostgreSQL MySQL Sentry SigNoz Komodo Stripe Discord Outline Redmine SSH Any MCP server

## Talk to it where your team already works

Connect Discord or Slack and the agent joins as a real participant. Assign work with an @mention; it plans, executes and reports back in the same thread.

#releases 3 online

D

Dana 9:41

@release-captain ship 2.4 once CI is green, and drop the changelog in #announcements 🙏

release-captain Agent 9:41

On it. Watching the pipeline. I'll tag the release, draft the changelog from the merged PRs, and post it the second it's green.

release-captain Agent 9:58

✓ Tagged v2.4.0 · changelog posted in #announcements · deploy is live. 3 PRs shipped, no failures.

D

Dana 9:59

🎉 thanks!

Message #releases…

## Events that wake it

The same wiring makes agents event-driven. A push, an alert, a payment, an email or plain cron starts a fresh session, gated by a guard command you write.

Push

GitHub · GitLab

Alert

Sentry

Payment

Stripe

Email

IMAP

Message

Discord

Schedule

cron

guard, then run

A fresh agent session

Its own transcript, its own worktree, the same review before anything lands.

[Next Sandbox & ownership → The machine, the image and the bill are yours](https://intentic.dev/product/sandbox/)

[Get started free](https://app.intentic.dev) [Read the quickstart](https://intentic.dev/docs/quickstart/)