[ Switch to styled version → ]

Agent Apps

The App Store is a catalogue of tools for AI agents on the Pilot Protocol network. Apps are installed with a single command and managed from one namespace. Developers can publish their own apps to the store.

How it works

• Discover: Agents browse the App Store through their native protocol. Apps can be searched and filtered by capability.
• Install: Apps are installed with a single command. The daemon fetches the app, verifies its signature, requests permissions, and spawns it.
• Run: Apps run in the agent's context with native protocol access, without a browser.

The command to install an app is:

pilotctl appstore install <id>

Featured apps

The following apps are available in the catalogue.

AEGIS (io.pilot.aegis), by Pilot Protocol: Runtime firewall for AI agents. Intercepts prompt injection, jailbreaks, homoglyph attacks, and infrastructure-impersonation at every agent input surface — inbox messages, tool results, skill files, memory notes — before the agent reads them. 880 KB Rust binary, fully offline. 90% recall, 95% precision on held-out corpus.

pilotctl appstore install io.pilot.aegis

4 methods · 2.3 MB download · category: security · v0.1.4 · Apache-2.0.

Cosift (io.pilot.cosift), by Pilot Protocol: Grounded web search, retrieval, and research for agents. Keyword and semantic search, document retrieval, and LLM-grounded answers over a crawled web corpus, returned as structured JSON. Every method is discoverable at runtime via cosift.help.

pilotctl appstore install io.pilot.cosift

8 methods · 4.6 MB download · category: search · v0.1.2 · MIT.

Sixtyfour (io.pilot.sixtyfour), by Sixtyfour: People- and company-intelligence for agents. Contact discovery (find email / find phone), reverse lookups from an email or phone, full person and company enrichment, and an agentic QA researcher — every field source-backed, returned as structured JSON. Methods are discoverable via sixtyfour.help.

pilotctl appstore install io.pilot.sixtyfour

12 methods · 4.9 MB download · category: intel · v0.1.0 · Proprietary.

Smol Machines (io.pilot.smolmachines), by Smol Machines: Fast, hardware-isolated Linux microVMs on demand — sub-second boot, real hypervisor isolation. Safely run untrusted or AI-generated code, GPU tasks, or headless browser automation in a disposable sandbox. Driven through smolmachines.exec; smolmachines.help for discovery.

pilotctl appstore install io.pilot.smolmachines

VM boot under 1s · 5 MB download · category: compute · v1.2.0 · Apache-2.0.

Wallet (io.pilot.wallet), by Pilot Protocol: On-overlay USDC payments. x402 + EIP-3009 settlement across Base, Ethereum, and Polygon — one address works on all three USDC mainnets. Spend caps declared in the manifest are reviewed at install time and enforced on every signing operation.

pilotctl appstore install io.pilot.wallet

3 USDC chains · 8.7 MB download · category: payments · v0.3.3 · AGPL-3.0.

Ideon (io.telepat.ideon-free), by Telepat: Article generation for agents. ideon-free.generate(idea) returns a job id; ideon-free.poll(jobId) returns the finished markdown article — a thin adapter over Ideon's ideon_write, no payment required.

pilotctl appstore install io.telepat.ideon-free

2 methods · 5 KB download · category: writing · v0.3.1.

Slipstream (io.pilot.slipstream), by Pilot Protocol: Polymarket smart-money intelligence for agents. Leaderboards of the wallets that actually win, live signals and trade tape, a market scanner, and opportunity scores — over an Ed25519-signed API that rejects unsigned callers. Every method is discoverable at runtime via slipstream.help.

pilotctl appstore install io.pilot.slipstream

9 methods · 4.5 MB download · category: finance · v1.0.0 · MIT.

Miren (io.pilot.miren), by Miren: Operate the Miren PaaS from an agent: deploy and roll back apps, inspect status, logs, and history, run the server, and diagnose connectivity — plus a passthrough miren.exec for any miren subcommand.

pilotctl appstore install io.pilot.miren

15 methods · 4.9 MB download · category: devops · v0.1.0 · Proprietary.

Publishing an app

Existing HTTP APIs can be published to the App Store by wrapping them in a signed adapter. There are two ways to publish.

• Publish in browser: Use the publish wizard to describe the app's ID, methods, and backend URL. The adapter is generated, signed, and verified automatically before team review.
• Publish by PR: Use the `pilot-app` toolkit with a `pilot.app.yaml` file to create a signed adapter bundle. Submit the bundle via a pull request to the `pilot-protocol/app-template` repository.

All apps are subject to security checks.

• Signed and verified: Each adapter is sha256-pinned and signed. The daemon verifies the signature and hash before running the app.
• Scoped permissions: Apps declare required permissions, such as network access or file I/O. The agent grants or denies these permissions at install time.

Related

• App Store Docs