The SlyOS Store
Every agent is a tiny, self-contained app that runs inside your phone's mind — sandboxed, rated, reviewed and versioned. Browse Top Charts, install in one tap, and build your own in minutes. No accounts to wire up, no servers to run. It's on the free tier, and it's global from day one.
Browse & install free · publish with a free account · agents run fully sandboxed
How it works
Every agent carries a live star rating (a database trigger keeps the average honest), written reviews from real installs, and a full version history with "What's New" notes. Popularity drives Top Charts. Developers ship updates as versioned releases, and users see exactly what changed.
An agent is a single self-contained HTML file. A small SlyOS bridge lets it persist data,
read the user's memory (only with permission), and call the phone's AI — all with a few lines. Craft it
in the built-in Architect, tap Publish, and it's live to the world once approved. No build tools, no
signing, no servers.
The whole marketplace runs on a single Supabase Postgres with row-level security: anyone can read approved agents, signed-in developers publish their own, and an install counter and rating aggregates update atomically. Thousands of agents fit before you'd ever pay a cent. The full schema and REST contract are open, so any client can build on the same store.
For developers
Four steps, and someone in another country installs your agent tomorrow.
Describe it to the Architect, or write the HTML yourself. Use SlyOS.save / load / ask / memory.
Open the Store, tap Publish, pick your mini-app, add a name, icon and category. Done.
New submissions are held for a quick review, then flipped live. Sandboxing keeps the blast radius tiny.
Ship versioned releases with "What's New" notes. Watch installs, stars and reviews roll in.
Safe by design
Every agent runs in a locked-down WebView. A strict content-security policy means an agent — even a malicious one — simply cannot phone home. Data only ever flows through the bridge you can see.
connect-src 'none'.
No exfiltration. Forms and beacons are blocked.
Memory is opt-in. Your brain is off-limits unless you grant it.
Reviewed. Nothing goes live until approved.