[ Switch to styled version → ]

Agent Apps. One command away.

The App Store is a catalogue of tools for AI agents on the Pilot Protocol network. Apps are installed with a single command and managed from one namespace. Developers can publish their own apps to the store.

How it works

• Discover: Agents browse the App Store through their native protocol to search and filter apps by capability.
• Install: Apps are installed with the command `pilotctl appstore install <id>`. The daemon fetches the app, verifies its signature, requests permissions, and spawns it.
• Run: Apps run in the agent's context with native protocol access, not in a browser.

Featured apps

The following apps are available in the catalogue. They can be installed with `pilotctl appstore install`.

AEGIS (io.pilot.aegis): A runtime firewall for AI agents that intercepts prompt injection, jailbreaks, and other attacks at all input surfaces. It is an 880 KB offline Rust binary with 90% recall and 95% precision. Specs: 4 methods, 2.3MB download.

pilotctl appstore install io.pilot.aegis

Cosift (io.pilot.cosift): Provides grounded web search, retrieval, and research for agents. It performs keyword and semantic search, retrieves documents, and returns structured JSON. Methods are discoverable via `cosift.help`. Specs: 8 methods, 4.6MB download.

pilotctl appstore install io.pilot.cosift

Sixtyfour (io.pilot.sixtyfour): A people and company intelligence tool for agents. It performs contact discovery, reverse lookups, and data enrichment, returning structured JSON. Methods are discoverable via `sixtyfour.help`. Specs: 12 methods, 4.9MB download.

pilotctl appstore install io.pilot.sixtyfour

Smol Machines (io.pilot.smolmachines): Provides fast, hardware-isolated Linux microVMs on demand with sub-second boot times. Used to safely run untrusted code, GPU tasks, or browser automation. Driven via `smolmachines.exec`. Specs: <1s VM boot, 5MB download.

pilotctl appstore install io.pilot.smolmachines

Wallet (io.pilot.wallet): Enables on-overlay USDC payments using x402 and EIP-3009 settlement across Base, Ethereum, and Polygon. Spend caps are declared in the manifest and enforced on signing operations. Specs: 3 USDC chains, 8.7MB download.

pilotctl appstore install io.pilot.wallet

Ideon (io.telepat.ideon-free): An article generation tool for agents. `ideon-free.generate(idea)` returns a job ID, and `ideon-free.poll(jobId)` returns the finished article in Markdown. Specs: 2 methods, 5KB download.

pilotctl appstore install io.telepat.ideon-free

Slipstream (io.pilot.slipstream): Provides Polymarket intelligence for agents, including leaderboards, live signals, a market scanner, and opportunity scores. The API is Ed25519-signed. Methods are discoverable via `slipstream.help`. Specs: 9 methods, 4.5MB download.

pilotctl appstore install io.pilot.slipstream

Miren (io.pilot.miren): Allows an agent to operate the Miren PaaS. Functions include deploying apps, inspecting status and logs, and running diagnostics. Includes a passthrough `miren.exec` for any miren subcommand. Specs: 15 methods, 4.9MB download.

pilotctl appstore install io.pilot.miren

Plainweb (io.pilot.plainweb): Retrieves any web page as plain text Markdown. The `plainweb.fetch(url)` call fetches and returns the page content. Specs: 1 method, 4.8MB download.

pilotctl appstore install io.pilot.plainweb

Otto (io.pilot.otto): Drives Chrome tabs from an agent to extract page content, run site-specific commands, and take screenshots. Includes a passthrough `otto.exec` for any otto subcommand. Specs: 15 methods, 27MB download.

pilotctl appstore install io.pilot.otto

PostgreSQL 17 (io.pilot.postgres): Allows an agent to run and query PostgreSQL. It can provision a local server, run SQL with `psql`, or connect to any libpq target. Includes a passthrough for the full toolchain. Specs: 13 methods, 37MB download.

pilotctl appstore install io.pilot.postgres

Docker (io.pilot.docker): Allows an agent to run Docker on Linux, including the full Docker Engine and CLI. It can start a local engine, pull images, and run containers. Includes a passthrough for any docker command. Specs: 12 methods, 87MB download.

pilotctl appstore install io.pilot.docker

Redis (io.pilot.redis): Allows an agent to run Redis. It can start a local in-memory data store and interact with it via `redis-cli`. Includes a passthrough for any Redis command. Specs: 11 methods, 26MB download.

pilotctl appstore install io.pilot.redis

DuckDB (io.pilot.duckdb): Allows an agent to run DuckDB, an in-process analytical SQL database. It can run SQL in-memory or against files, and directly query CSV, Parquet, and JSON files. Includes a passthrough for the full CLI. Specs: 11 methods, 21MB download.

pilotctl appstore install io.pilot.duckdb

Ship an agent app

Existing HTTP APIs can be wrapped in a signed adapter, which serves as the agent-facing interface, and published to the catalogue. There are two methods for publishing.

• Publish in browser: Use the publish wizard to describe the app's ID, methods, backend URL, and auth headers. The adapter is then generated, signed, and submitted for review.
• Publish by PR: Use the `pilot-app` toolkit to turn a `pilot.app.yaml` file into a signed adapter bundle. Submit the bundle via a pull request to the `pilot-protocol/app-template` repository for verification and review.

All published apps have the following security features:

• Signature verification: Each adapter is sha256-pinned and signed by its publisher. The daemon verifies the signature and hash on every spawn.
• Scoped permissions: Apps declare required permissions, such as network or file access, which the agent must grant at install time.

Related

• Publish an app
• App Store Docs