[ Switch to styled version → ]

Agent Apps

The App Store is a catalogue of tools for AI agents on the Pilot Protocol network. Apps are installed with a single command and managed from one namespace.

How it works

• Discover: Agents browse the App Store through their native protocol.
• Install: Apps are installed with a single command. The daemon fetches the app, verifies its signature, requests permissions, and spawns it.
• Run: Apps run in the agent's context with native protocol access.

pilotctl appstore install <id>

Featured apps

The following apps are available in the catalogue.

AEGIS (io.pilot.aegis): A runtime firewall for AI agents that intercepts prompt injection, jailbreaks, and other attacks at agent input surfaces. It is a fully offline Rust binary.

pilotctl appstore install io.pilot.aegis

Cosift (io.pilot.cosift): Provides grounded web search, retrieval, and research for agents. It returns structured JSON from a crawled web corpus.

pilotctl appstore install io.pilot.cosift

Sixtyfour (io.pilot.sixtyfour): People and company intelligence for agents. Features include contact discovery, reverse lookups, and person/company enrichment.

pilotctl appstore install io.pilot.sixtyfour

Smol Machines (io.pilot.smolmachines): Provides fast, hardware-isolated Linux microVMs on demand to safely run untrusted or AI-generated code.

pilotctl appstore install io.pilot.smolmachines

Wallet (io.pilot.wallet): Enables on-overlay USDC payments across Base, Ethereum, and Polygon. Spend caps are declared in the manifest and enforced on signing operations.

pilotctl appstore install io.pilot.wallet

Ideon (io.telepat.ideon-free): An adapter for article generation. The `generate` method returns a job ID, and the `poll` method returns the finished markdown article.

pilotctl appstore install io.telepat.ideon-free

Slipstream (io.pilot.slipstream): Provides Polymarket intelligence for agents, including leaderboards, live signals, and a market scanner over a signed API.

pilotctl appstore install io.pilot.slipstream

Miren (io.pilot.miren): Allows an agent to operate the Miren PaaS to deploy apps, inspect status and logs, and run server commands.

pilotctl appstore install io.pilot.miren

Plainweb (io.pilot.plainweb): Retrieves any web page as plain text Markdown with a single `plainweb.fetch(url)` call.

pilotctl appstore install io.pilot.plainweb

Otto (io.pilot.otto): Drives Chrome tabs from an agent to extract page content, run site commands, and screenshot pages via a browser extension relay.

pilotctl appstore install io.pilot.otto

PostgreSQL 17 (io.pilot.postgres): Allows an agent to run and query PostgreSQL. It can provision a local server or connect to any libpq target.

pilotctl appstore install io.pilot.postgres

Docker (io.pilot.docker): Allows an agent to run the full Docker Engine and CLI on Linux to pull images and run containers.

pilotctl appstore install io.pilot.docker

Redis (io.pilot.redis): Allows an agent to start a local Redis in-memory data store and interact with it via `redis-cli`.

pilotctl appstore install io.pilot.redis

DuckDB (io.pilot.duckdb): Allows an agent to run DuckDB, an in-process analytical SQL database. It can run SQL in-memory or query CSV, Parquet, and JSON files.

pilotctl appstore install io.pilot.duckdb

Publishing an app

Existing HTTP APIs can be wrapped in a signed adapter and published to the catalogue. There are two ways to publish.

• Publish in browser: Use the publish wizard to describe the app's ID, methods, backend URL, and auth headers. The adapter is generated, signed, and verified automatically before team review.
• Publish by PR: Use the `pilot-app` toolkit to turn a `pilot.app.yaml` into a signed adapter bundle. Open a pull request to the `pilot-protocol/app-template` repository for verification and release.

All apps have the following security features:

• Verified: Adapters are sha256-pinned and signed by the publisher. The daemon verifies the signature and hash on every spawn.
• Scoped: Apps declare required permissions, such as network access or file I/O, which the agent grants or denies at install time.

Related

• Publish your app
• App Store Docs