Run and query PostgreSQL from an agent — provision a local server
(initdb/start/createdb) and run SQL
@@ -442,6 +442,32 @@ try {
v8.6.2 · AGPL-3.0
+
+
@@ -12,56 +12,59 @@ import PlainLayout from '../../layouts/PlainLayout.astro';
How it works
- - Discover: Agents browse the App Store through their native protocol, searching by capability.
- - Install: A single command, `pilotctl appstore install <id>`, fetches, verifies signatures, requests permissions, and spawns the app.
+ - Discover: Agents browse the App Store through their native protocol.
+ - Install: Apps are installed with a single command. The daemon fetches the app, verifies its signature, requests permissions, and spawns it.
- Run: Apps run in the agent's context with native protocol access.
+pilotctl appstore install <id>
Featured apps
-The following apps are available in the catalogue. They can be installed with `pilotctl appstore install`.
-AEGIS (io.pilot.aegis): A runtime firewall for AI agents that intercepts prompt injection, jailbreaks, homoglyph attacks, and infrastructure-impersonation. It is an 880 KB Rust binary that runs fully offline.
+The following apps are available in the catalogue.
+AEGIS (io.pilot.aegis): A runtime firewall for AI agents that intercepts prompt injection, jailbreaks, and other attacks at agent input surfaces. It is a fully offline Rust binary.
pilotctl appstore install io.pilot.aegis
-Cosift (io.pilot.cosift): Provides grounded web search, retrieval, and research for agents. It performs keyword and semantic search, document retrieval, and returns LLM-grounded answers as structured JSON. Methods are discoverable via `cosift.help`.
+Cosift (io.pilot.cosift): Provides grounded web search, retrieval, and research for agents. It returns structured JSON from a crawled web corpus.
pilotctl appstore install io.pilot.cosift
-Sixtyfour (io.pilot.sixtyfour): People and company intelligence for agents. Functions include contact discovery, reverse lookups, and person/company enrichment. Data is returned as structured JSON. Methods are discoverable via `sixtyfour.help`.
+Sixtyfour (io.pilot.sixtyfour): People and company intelligence for agents. Features include contact discovery, reverse lookups, and person/company enrichment.
pilotctl appstore install io.pilot.sixtyfour
-Smol Machines (io.pilot.smolmachines): Provides fast, hardware-isolated Linux microVMs on demand with sub-second boot times. Used to safely run untrusted code, GPU tasks, or headless browser automation. Driven through `smolmachines.exec`.
+Smol Machines (io.pilot.smolmachines): Provides fast, hardware-isolated Linux microVMs on demand to safely run untrusted or AI-generated code.
pilotctl appstore install io.pilot.smolmachines
-Wallet (io.pilot.wallet): Enables on-overlay USDC payments using x402 and EIP-3009 settlement across Base, Ethereum, and Polygon. Spend caps are declared in the manifest and enforced on every signing operation.
+Wallet (io.pilot.wallet): Enables on-overlay USDC payments across Base, Ethereum, and Polygon. Spend caps are declared in the manifest and enforced on signing operations.
pilotctl appstore install io.pilot.wallet
-Ideon (io.telepat.ideon-free): An article generation tool for agents. `ideon-free.generate(idea)` returns a job ID, and `ideon-free.poll(jobId)` returns the finished markdown article.
+Ideon (io.telepat.ideon-free): An adapter for article generation. The `generate` method returns a job ID, and the `poll` method returns the finished markdown article.
pilotctl appstore install io.telepat.ideon-free
-Slipstream (io.pilot.slipstream): Provides Polymarket intelligence for agents. Features include leaderboards, live signals, a market scanner, and opportunity scores, delivered over an Ed25519-signed API. Methods are discoverable via `slipstream.help`.
+Slipstream (io.pilot.slipstream): Provides Polymarket intelligence for agents, including leaderboards, live signals, and a market scanner over a signed API.
pilotctl appstore install io.pilot.slipstream
-Miren (io.pilot.miren): Allows an agent to operate the Miren PaaS. Functions include deploying and rolling back apps, inspecting status and logs, and a passthrough `miren.exec` for any miren subcommand.
+Miren (io.pilot.miren): Allows an agent to operate the Miren PaaS to deploy apps, inspect status and logs, and run server commands.
pilotctl appstore install io.pilot.miren
-Plainweb (io.pilot.plainweb): Retrieves any web page as plain text Markdown. The `plainweb.fetch(url)` call fetches and returns the page content.
+Plainweb (io.pilot.plainweb): Retrieves any web page as plain text Markdown with a single `plainweb.fetch(url)` call.
pilotctl appstore install io.pilot.plainweb
-Otto (io.pilot.otto): Drives Chrome tabs from an agent. It can extract page content, run site-specific commands, and screenshot pages. Includes a passthrough `otto.exec` for any otto subcommand.
+Otto (io.pilot.otto): Drives Chrome tabs from an agent to extract page content, run site commands, and screenshot pages via a browser extension relay.
pilotctl appstore install io.pilot.otto
-PostgreSQL 17.5 (io.pilot.postgres): Allows an agent to run and query PostgreSQL. It can provision a local server and run SQL with `psql`, or connect to any libpq target.
+PostgreSQL 17 (io.pilot.postgres): Allows an agent to run and query PostgreSQL. It can provision a local server or connect to any libpq target.
pilotctl appstore install io.pilot.postgres
-Docker (io.pilot.docker): Allows an agent to run Docker on Linux. It includes the full Docker Engine and CLI to start a local engine, pull images, and run containers.
+Docker (io.pilot.docker): Allows an agent to run the full Docker Engine and CLI on Linux to pull images and run containers.
pilotctl appstore install io.pilot.docker
-Redis (io.pilot.redis): Allows an agent to run Redis. It can start a local in-memory data store and interact with it using `redis-cli`.
+Redis (io.pilot.redis): Allows an agent to start a local Redis in-memory data store and interact with it via `redis-cli`.
pilotctl appstore install io.pilot.redis
+DuckDB (io.pilot.duckdb): Allows an agent to run DuckDB, an in-process analytical SQL database. It can run SQL in-memory or query CSV, Parquet, and JSON files.
+pilotctl appstore install io.pilot.duckdb
-For builders
-Existing HTTP APIs can be wrapped in a signed adapter and published to the catalogue.
+Publishing an app
+Existing HTTP APIs can be wrapped in a signed adapter and published to the catalogue. There are two ways to publish.
- - Publish in a browser: A publish wizard is used to describe the app's ID, methods, backend URL, and auth headers. The adapter is then generated, signed, and verified before a team review.
- - Publish by pull request: The `pilot-app` toolkit turns a `pilot.app.yaml` file into a signed adapter bundle. A pull request is opened to `pilot-protocol/app-template`, where CI verifies the bundle before a maintainer review.
+ - Publish in browser: Use the publish wizard to describe the app's ID, methods, backend URL, and auth headers. The adapter is generated, signed, and verified automatically before team review.
+ - Publish by PR: Use the `pilot-app` toolkit to turn a `pilot.app.yaml` into a signed adapter bundle. Open a pull request to the `pilot-protocol/app-template` repository for verification and release.
-All apps have the following properties:
+All apps have the following security features:
- - Verified: Every adapter is sha256-pinned and signed by its publisher. The daemon re-verifies the signature and binary hash each time it spawns the app.
- - Scoped: Apps declare required permissions, such as network access or file I/O. The agent grants or denies these permissions at install time.
+ - Verified: Adapters are sha256-pinned and signed by the publisher. The daemon verifies the signature and hash on every spawn.
+ - Scoped: Apps declare required permissions, such as network access or file I/O, which the agent grants or denies at install time.
Related
- 
+