[ Switch to styled version → ]

Agent Apps

The App Store is a catalogue of tools for AI agents on the Pilot Protocol network. Apps are installed with a single command and managed from one namespace.

How it works

• Discover: Agents browse the App Store through their native protocol, searching by capability.
• Install: A single command, `pilotctl appstore install <id>`, fetches, verifies signatures, requests permissions, and spawns the app.
• Run: Apps run in the agent's context with native protocol access.

Featured apps

The following apps are available in the catalogue. They can be installed with `pilotctl appstore install`.

AEGIS (io.pilot.aegis): A runtime firewall for AI agents that intercepts prompt injection, jailbreaks, homoglyph attacks, and infrastructure-impersonation. It is an 880 KB Rust binary that runs fully offline.

pilotctl appstore install io.pilot.aegis

Cosift (io.pilot.cosift): Provides grounded web search, retrieval, and research for agents. It performs keyword and semantic search, document retrieval, and returns LLM-grounded answers as structured JSON. Methods are discoverable via `cosift.help`.

pilotctl appstore install io.pilot.cosift

Sixtyfour (io.pilot.sixtyfour): People and company intelligence for agents. Functions include contact discovery, reverse lookups, and person/company enrichment. Data is returned as structured JSON. Methods are discoverable via `sixtyfour.help`.

pilotctl appstore install io.pilot.sixtyfour

Smol Machines (io.pilot.smolmachines): Provides fast, hardware-isolated Linux microVMs on demand with sub-second boot times. Used to safely run untrusted code, GPU tasks, or headless browser automation. Driven through `smolmachines.exec`.

pilotctl appstore install io.pilot.smolmachines

Wallet (io.pilot.wallet): Enables on-overlay USDC payments using x402 and EIP-3009 settlement across Base, Ethereum, and Polygon. Spend caps are declared in the manifest and enforced on every signing operation.

pilotctl appstore install io.pilot.wallet

Ideon (io.telepat.ideon-free): An article generation tool for agents. `ideon-free.generate(idea)` returns a job ID, and `ideon-free.poll(jobId)` returns the finished markdown article.

pilotctl appstore install io.telepat.ideon-free

Slipstream (io.pilot.slipstream): Provides Polymarket intelligence for agents. Features include leaderboards, live signals, a market scanner, and opportunity scores, delivered over an Ed25519-signed API. Methods are discoverable via `slipstream.help`.

pilotctl appstore install io.pilot.slipstream

Miren (io.pilot.miren): Allows an agent to operate the Miren PaaS. Functions include deploying and rolling back apps, inspecting status and logs, and a passthrough `miren.exec` for any miren subcommand.

pilotctl appstore install io.pilot.miren

Plainweb (io.pilot.plainweb): Retrieves any web page as plain text Markdown. The `plainweb.fetch(url)` call fetches and returns the page content.

pilotctl appstore install io.pilot.plainweb

Otto (io.pilot.otto): Drives Chrome tabs from an agent. It can extract page content, run site-specific commands, and screenshot pages. Includes a passthrough `otto.exec` for any otto subcommand.

pilotctl appstore install io.pilot.otto

PostgreSQL 17.5 (io.pilot.postgres): Allows an agent to run and query PostgreSQL. It can provision a local server and run SQL with `psql`, or connect to any libpq target.

pilotctl appstore install io.pilot.postgres

Docker (io.pilot.docker): Allows an agent to run Docker on Linux. It includes the full Docker Engine and CLI to start a local engine, pull images, and run containers.

pilotctl appstore install io.pilot.docker

Redis (io.pilot.redis): Allows an agent to run Redis. It can start a local in-memory data store and interact with it using `redis-cli`.

pilotctl appstore install io.pilot.redis

For builders

Existing HTTP APIs can be wrapped in a signed adapter and published to the catalogue.

• Publish in a browser: A publish wizard is used to describe the app's ID, methods, backend URL, and auth headers. The adapter is then generated, signed, and verified before a team review.
• Publish by pull request: The `pilot-app` toolkit turns a `pilot.app.yaml` file into a signed adapter bundle. A pull request is opened to `pilot-protocol/app-template`, where CI verifies the bundle before a maintainer review.

All apps have the following properties:

• Verified: Every adapter is sha256-pinned and signed by its publisher. The daemon re-verifies the signature and binary hash each time it spawns the app.
• Scoped: Apps declare required permissions, such as network access or file I/O. The agent grants or denies these permissions at install time.

Related

• Publish an app
• App Store documentation