-Agent App Store
+Agent Apps
-The App Store is a catalogue of applications for AI agents on the Pilot Protocol network. Apps are installed with a single command and managed from one namespace. Developers can publish their own apps to the store.
+The App Store is a catalogue of tools for AI agents on the Pilot Protocol network. Apps are installed with a single command and managed from one namespace.
How it works
- - Agents browse the App Store through the native protocol to search and filter apps by capability.
- - Apps are installed with a single command. The daemon fetches the app, verifies its signature, requests permissions, and spawns it.
- - Apps run in the agent's context with native protocol access.
+ - Discover: Agents browse the App Store through their native protocol, searching by capability.
+ - Install: A single command, `pilotctl appstore install <id>`, fetches, verifies signatures, requests permissions, and spawns the app.
+ - Run: Apps run in the agent's context with native protocol access.
-pilotctl appstore install <id>
Featured apps
-The following apps are available in the catalogue.
-AEGIS (io.pilot.aegis): A runtime firewall for AI agents that intercepts prompt injection, jailbreaks, homoglyph attacks, and infrastructure-impersonation. It is an 880 KB offline Rust binary with 90% recall and 95% precision on a held-out corpus.
+The following apps are available in the catalogue. They can be installed with `pilotctl appstore install`.
+AEGIS (io.pilot.aegis): A runtime firewall for AI agents that intercepts prompt injection, jailbreaks, homoglyph attacks, and infrastructure-impersonation. It is an 880 KB Rust binary that runs fully offline.
pilotctl appstore install io.pilot.aegis
-4 methods · 2.3 MB download · category: security · v0.1.4 · Apache-2.0.
-Cosift (io.pilot.cosift): Provides grounded web search, retrieval, and research for agents. It returns keyword and semantic search results, documents, and LLM-grounded answers as structured JSON. Methods are discoverable via `cosift.help`.
+Cosift (io.pilot.cosift): Provides grounded web search, retrieval, and research for agents. It performs keyword and semantic search, document retrieval, and returns LLM-grounded answers as structured JSON. Methods are discoverable via `cosift.help`.
pilotctl appstore install io.pilot.cosift
-8 methods · 4.6 MB download · category: search · v0.1.2 · MIT.
-Sixtyfour (io.pilot.sixtyfour): Provides people- and company-intelligence for agents, including contact discovery, reverse lookups, and enrichment. Data is source-backed and returned as structured JSON. Methods are discoverable via `sixtyfour.help`.
+Sixtyfour (io.pilot.sixtyfour): People and company intelligence for agents. Functions include contact discovery, reverse lookups, and person/company enrichment. Data is returned as structured JSON. Methods are discoverable via `sixtyfour.help`.
pilotctl appstore install io.pilot.sixtyfour
-12 methods · 4.9 MB download · category: intel · v0.1.0 · Proprietary.
-Smol Machines (io.pilot.smolmachines): Provides hardware-isolated Linux microVMs on demand with sub-second boot time. Used to run untrusted code, GPU tasks, or headless browser automation in a sandbox. Driven through `smolmachines.exec`.
+Smol Machines (io.pilot.smolmachines): Provides fast, hardware-isolated Linux microVMs on demand with sub-second boot times. Used to safely run untrusted code, GPU tasks, or headless browser automation. Driven through `smolmachines.exec`.
pilotctl appstore install io.pilot.smolmachines
-VM boot under 1s · 5 MB download · category: compute · v1.2.0 · Apache-2.0.
Wallet (io.pilot.wallet): Enables on-overlay USDC payments using x402 and EIP-3009 settlement across Base, Ethereum, and Polygon. Spend caps are declared in the manifest and enforced on every signing operation.
pilotctl appstore install io.pilot.wallet
-3 USDC chains · 8.7 MB download · category: payments · v0.3.3 · AGPL-3.0.
-Ideon (io.telepat.ideon-free): An adapter for article generation. `ideon-free.generate(idea)` returns a job ID, and `ideon-free.poll(jobId)` returns the finished markdown article.
+Ideon (io.telepat.ideon-free): An article generation tool for agents. `ideon-free.generate(idea)` returns a job ID, and `ideon-free.poll(jobId)` returns the finished markdown article.
pilotctl appstore install io.telepat.ideon-free
-2 methods · 5 KB download · category: writing · v0.3.1.
-Slipstream (io.pilot.slipstream): Provides Polymarket intelligence for agents, including leaderboards, live signals, a market scanner, and opportunity scores over an Ed25519-signed API. Methods are discoverable via `slipstream.help`.
+Slipstream (io.pilot.slipstream): Provides Polymarket intelligence for agents. Features include leaderboards, live signals, a market scanner, and opportunity scores, delivered over an Ed25519-signed API. Methods are discoverable via `slipstream.help`.
pilotctl appstore install io.pilot.slipstream
-9 methods · 4.5 MB download · category: finance · v1.0.0 · MIT.
-Miren (io.pilot.miren): Operates the Miren PaaS from an agent. Functions include deploying apps, inspecting status and logs, and diagnosing connectivity. Includes a passthrough `miren.exec` for any miren subcommand.
+Miren (io.pilot.miren): Allows an agent to operate the Miren PaaS. Functions include deploying and rolling back apps, inspecting status and logs, and a passthrough `miren.exec` for any miren subcommand.
pilotctl appstore install io.pilot.miren
-15 methods · 4.9 MB download · category: devops · v0.1.0 · Proprietary.
-Plainweb (io.pilot.plainweb): Retrieves any web page as plain text. The `plainweb.fetch(url)` call fetches the page and returns it as GFM Markdown.
+Plainweb (io.pilot.plainweb): Retrieves any web page as plain text Markdown. The `plainweb.fetch(url)` call fetches and returns the page content.
pilotctl appstore install io.pilot.plainweb
-1 method · 4.8 MB download · category: web · v1.0.0 · Proprietary.
-Otto (io.pilot.otto): Drives Chrome tabs from an agent to extract page content, run site-specific commands, and screenshot pages. Operates via a relay to a browser extension. Includes a passthrough `otto.exec` for any otto subcommand.
+Otto (io.pilot.otto): Drives Chrome tabs from an agent. It can extract page content, run site-specific commands, and screenshot pages. Includes a passthrough `otto.exec` for any otto subcommand.
pilotctl appstore install io.pilot.otto
-15 methods · 27 MB download · category: browser · v0.20.0 · MIT.
-PostgreSQL 17.5 (io.pilot.postgres): Runs and queries PostgreSQL from an agent. It can provision a local server (initdb, start, createdb) and run SQL with psql, or connect to any libpq target. Returns table or CSV results, supports schema introspection, and exposes the full client/server toolchain via a passthrough.
+PostgreSQL 17.5 (io.pilot.postgres): Allows an agent to run and query PostgreSQL. It can provision a local server and run SQL with `psql`, or connect to any libpq target.
pilotctl appstore install io.pilot.postgres
-13 methods · 37 MB download · category: database · v17.5.0 · PostgreSQL.
-
-Docker (io.pilot.docker): Runs Docker from an agent on Linux. Delivers the full Docker Engine (dockerd, containerd, runc) and the docker CLI. Start a local engine, then pull images and run real containers; run/ps/images/pull/logs plus any docker command via a verbatim-argv passthrough.
+Docker (io.pilot.docker): Allows an agent to run Docker on Linux. It includes the full Docker Engine and CLI to start a local engine, pull images, and run containers.
pilotctl appstore install io.pilot.docker
-12 methods · 87 MB download · category: devops · v29.6.1 · Apache-2.0.
+Redis (io.pilot.redis): Allows an agent to run Redis. It can start a local in-memory data store and interact with it using `redis-cli`.
+pilotctl appstore install io.pilot.redis
-Publishing an app
-Existing HTTP APIs can be wrapped in a signed, agent-facing adapter and published to the catalogue. There are two ways to publish.
+For builders
+Existing HTTP APIs can be wrapped in a signed adapter and published to the catalogue.
+
+ - Publish in a browser: A publish wizard is used to describe the app's ID, methods, backend URL, and auth headers. The adapter is then generated, signed, and verified before a team review.
+ - Publish by pull request: The `pilot-app` toolkit turns a `pilot.app.yaml` file into a signed adapter bundle. A pull request is opened to `pilot-protocol/app-template`, where CI verifies the bundle before a maintainer review.
+
+All apps have the following properties:
- - Publish in a browser: Use the publish wizard to describe the app's ID, methods, backend URL, and auth headers. The adapter is then generated, signed, verified, and submitted for review.
- - Publish by pull request: Use the `pilot-app` toolkit with a `pilot.app.yaml` file to create a signed adapter bundle. Submit the bundle via a pull request to the `pilot-protocol/app-template` repository for verification and release.
+ - Verified: Every adapter is sha256-pinned and signed by its publisher. The daemon re-verifies the signature and binary hash each time it spawns the app.
+ - Scoped: Apps declare required permissions, such as network access or file I/O. The agent grants or denies these permissions at install time.
-Every adapter is sha256-pinned and signed by its publisher. The daemon re-verifies the signature and binary hash each time it spawns the app. Apps declare required permissions, such as network access or file I/O, which the agent grants or denies at install time.
Related
+