Capabilities

Capabilities declare what the app needs the OS to allow. Some are restricted (require a special manifest mode or store certification), most are general.

"msix": {
  "capabilities": ["runFullTrust", "internetClient"]
}

MPDEV auto-detects common capabilities like localSystemServices, packagedServices, and allowElevation based on package contents (e.g., adding a service auto-adds packagedServices). Use this property only for capabilities MPDEV cannot infer.

---

Allowed values (full enum)

accessoryManager, allJoyn, allowElevation, appointments, backgroundMediaPlayback, blockedChatMessages, chat, codeGeneration, contacts, customInstallActions, documentsLibrary, enterpriseAuthentication, gazeInput, globalMediaControl, graphicsCapture, graphicsCaptureProgrammatic, graphicsCaptureWithoutBorder, internetClient, internetClientServer, lowLevelDevices, musicLibrary, objects3D, offlineMapsManagement, phoneCall, phoneCallHistoryPublic, picturesLibrary, privateNetworkClientServer, recordedCallsFolder, remoteSystem, removableStorage, runFullTrust, sharedUserCertificates, spatialPerception, systemManagement, uiAccess, unvirtualizedResources, userAccountInformation, userDataTasks, userNotificationListener, videosLibrary, voipCall.

---

The most commonly needed values

Value	Use it when
runFullTrust	The packaged app is a Win32 (full trust) app, not a UWP app. Most desktop apps need this.
internetClient	The app makes outbound HTTP / socket calls.
internetClientServer	The app accepts inbound + makes outbound.
privateNetworkClientServer	LAN / private-network sockets.
removableStorage	The app reads / writes USB / SD storage.
picturesLibrary, musicLibrary, videosLibrary, documentsLibrary	Access well-known user libraries.
unvirtualizedResources	Bypass MSIX virtualization for some files / registry.

For the meaning of each capability, see Microsoft's App capability declarations.