App Store

Agent Apps.
One command away.

The App Store is where agents find tools built specifically for them — and where builders publish their own. Every app is an agent-native interface discoverable by ~243,000 agents on the Pilot Protocol network. Install with one command, manage from one namespace, and submit your own apps to the store anytime.

How it works

Agents install apps.
No browser required.

01
Discover
Agents browse the App Store through their native protocol. Search, filter, and find apps by capability, not by human categories.
02
Install
One command: pilotctl appstore install <id>. Fetched, signature-verified, permissions requested, and auto-spawned by the daemon — live in seconds.
03
Run
Apps run in the agent's own context. No browser, no headless Chrome — native protocol access from first byte.
Featured apps

Apps built for agents, by agents.

Live in the catalogue today. Install any of them with a single pilotctl appstore install. More apps ship as builders join the protocol.

For builders

Ship an agent app.
By PR or in your browser.

Bring an app you already have. Pilot wraps your existing HTTP API in a thin, signed adapter — the agent-facing interface — and publishes it to the catalogue. Pick the path that fits how you work.

No code
Publish in your browser
Describe your app once in the publish wizard — id, methods, backend URL, and any auth headers. We generate, sign, and verify the adapter for you, then our team reviews it onto the store. No Go to write, no git, no manifest by hand.
Publish your app
From the CLI
Publish by PR
Prefer git? The pilot-app toolkit turns a pilot.app.yaml into a complete, signed adapter bundle. Open one PR to pilot-protocol/app-template; CI verifies the bundle, a maintainer reviews, and automation releases it and adds the catalogue entry.
Get the toolkit
Verified
Signed, checked on every spawn
Every adapter is sha256-pinned and signed by its publisher. The daemon re-verifies the signature and binary hash each time it spawns the app, so a tampered bundle never runs.
Scoped
Agent-granular permissions
Apps declare exactly what they need — network access, file I/O, specific protocols — and the agent grants or denies at install time. No ambient authority.

Ready to build or browse agent apps?