Agent apps. One command away.

Capabilities built for agents, not browsers: databases, sandboxes, search, email and phone, payments. Each one installs as a sha256-pinned, signature-verified service that the daemon starts for you and your agent calls as typed JSON.

Browse 30 apps Publish your app

Looking for live data instead? The data service agents answer queries over the network.

discoverpilotctl appstore catalogue

installpilotctl appstore install io.pilot.plainweb

catalogue signature
tarball sha256
manifest signature
binary sha256

waiting to spawn

callpilotctl appstore call io.pilot.plainweb plainweb.fetch

in {"url":"https://example.com"}

out "content_type": "text/markdown; charset=utf-8"

"content": "This domain is for use in documentation examples…"

The call and reply are real, recorded in October 2026.

⌘K

30 apps · 8 categories · all live

Latest featured app

PostgreSQL

Pilot Protocol · v17.5.0

Run and query PostgreSQL from an agent: local server lifecycle plus psql, any libpq target.

category: Data & Storage
platforms: macOS · Linux
methods: 13

$ pilotctl appstore install io.pilot.postgres

View PostgreSQL

Full usage demo · from nothing to a query in five calls

$ pilotctl appstore call io.pilot.postgres postgres.version '{}'

→ the delivered client version, e.g. “psql (PostgreSQL) 17.10”

DuckDBalso featured

In-process analytical SQL over files. No server, no provisioning.

macOS · Linux

Dockeralso featured

A local Docker Engine and CLI on Linux. Real containers, run by your agent.

Linux

All apps

Discover, install, call. JSON in, JSON out.

An app is a small binary and a signed manifest. It runs on your machine next to the daemon, which supervises it and brokers every call over local IPC.

1Discover
$ pilotctl appstore catalogue
$ pilotctl appstore view io.pilot.cosift
view is the app's detail page: vendor, changelog, size, source, methods and the permissions it asks for, installed or not.
2Install
$ pilotctl appstore install io.pilot.cosift
Fetch, verify, install. The daemon spawns the app and keeps it running. No config step.
3Call
$ pilotctl appstore call io.pilot.cosift cosift.search '{"q":"raft consensus","k":"5"}'
JSON in, JSON out on stdout. Hints for the next command go to stderr, so the JSON stays pipeable.

Every app explains itself.

By convention each app has a <app>.help method: one local call, no backend round-trip, that returns every method with its parameters and a latency class, so an agent picks the cheapest call that fits before spending a slow one.

fastmedslow

Mostly free.

Most apps run locally and cost nothing. A few call a paid partner API through Pilot's broker and draw on a USD 5 budget per user, per app. Only successful paid calls count, reads are free, and <app>.balance shows what's left. Each app's page lists its prices.

1catalogue

ed25519 signature

a substituted app list fails

2tarball

sha256 pinned by the catalogue

a swapped CDN byte fails

3binary

sha256 pinned in the signed manifest

re-checked before every spawn

Every install checks all three, outside in.

For builders

Ship an agent app. It’s just a manifest.

Describe your app's methods in a guided submission. We build, sign and review the adapter. Once it's approved, pilotctl appstore install <id> works everywhere on the overlay.

Publish your app Read the docs

manifest.jsongenerated by pilot-app

{
  "id": "io.pilot.cosift",
  "app_version": "0.1.2",
  "binary": { "runtime": "go", "path": "bin/cosift-app", "sha256": "<pinned>" },
  "exposes": ["cosift.search", "cosift.answer", "cosift.research",
              "cosift.stats", "cosift.health", "cosift.help"],
  "grants": [
    { "cap": "net.dial", "target": "cosift.pilotprotocol.network",
      "if": { "kind": "rate", "params": { "per": "min", "limit": 120 } } },
    { "cap": "fs.read",  "target": "$APP/config.json" },
    { "cap": "audit.log", "target": "*" }
  ],
  "protection": "shareable",
  "store": { "publisher": "ed25519:...", "signature": "..." }
}

The binary is pinned by hash and the whole manifest is signed. Grants say what the app may do.

Agent apps. One command away.

PostgreSQL

All apps

AEGIS

AgentPhone

Bowmark

ComOS Federation

Cosift

Dead Simple Email

Dial

Didit

Docker

DuckDB

General Legal

Ideon (Free)

InsForge

Kinetic Pricing

Miren

MySQL

Orthogonal

Otto

Plainweb

PostgreSQL

Primitive

Redis

Rent A Human

Sixtyfour

Slipstream

Smol Machines

SQLite

tldr

Upfile

Wallet

Discover, install, call. JSON in, JSON out.

Every app explains itself.

Mostly free.

Ship an agent app. It’s just a manifest.