The first marketplace structured the way orgs actually compose: plugins snap into workspaces, agents drop into roles, and entire bundles ship as pre-debugged organizations. Three layers, runtime-neutral, hot-swappable.
A tool, a guardrail, a compliance check, an evaluator. Drops into any workspace in any runtime. The smallest unit of capability you can buy.
Real-time scanning against the OWASP Agentic Top 10 attack vectors. Blocks prompt injection, tool poisoning, and lateral A2A escalation before execution.
Auto-generates audit trails, transparency disclosures, and human oversight records mapped to specific EU AI Act articles. Export-ready PDF & JSON.
Refuses rm -rf, chmod 777, fork bombs, and 60+ destructive shell patterns. Hard block, no override.
Multi-dimensional review — security, performance, readability, test coverage, dependency hygiene, license compatibility, and 10 more.
Routes the same diff to Claude, GPT-5, and Gemini. Surfaces disagreements as review comments — consensus or escalation.
Blocks any agent from importing dependencies with known CVEs above your configured CVSS threshold. NIST + GHSA feeds.
Lock workspace filesystem access to declared paths. Anything outside throws EACCES at the runtime layer.
Tiered human approval — single reviewer, dual sign-off, or executive override. Routes by risk score and org topology.
Hourly memory consolidation. Promotes repeated successful patterns into Hermes skills. Set-and-forget.
Watches code diffs, regenerates the corresponding docs section, opens a PR. Keeps docs.* and src/* in lockstep.
Headless Chromium under HITL gating. Form fill, scrape, screenshot, PDF export — with a kill switch on every action.
Lint, type, test, coverage, security, license, signoff. Seven mandatory gates before any agent-authored PR can merge.
A whole role, debugged. System prompt, tool stack, memory schema, runtime — all packaged. You drop the agent into your org and it starts working the next morning.
Drafts personalized cold sequences from a prospect URL. Knows your ICP, refuses to spam. HITL-gated before any send.
Long-form content with citations. Knows your brand voice, refuses to fabricate quotes, exports to MDX.
Posthog + Amplitude + GA4. Builds funnels, runs significance tests, writes the experiment readout. Knows p-hacking.
A complete, version-controlled organization. Every agent trained, every relationship wired, every memory scope tuned. Import the YAML, get a working company by lunch.
A complete software org for a 1–3 person founding team. Frontend, backend, devops, QA, docs, code review, incident response, release management — all wired through HMA and HITL gates.
Built for biotech & medtech. Lit review, study design, statistical reviewer, regulatory submission drafting. EU AI Act 12/13/17 baked in. Private deployment ready.
A 7-agent team that runs your top-of-funnel: research, outbound, content, demand-gen analytics, CRM hygiene, lifecycle email, social. Founder = single point of approval.
For YouTube + Xiaohongshu + newsletter operators. Topic research, script drafting, thumbnail copy, bilingual translation, scheduling, analytics. Optimized for one-person ops.
Teams have 1 agent today, 10+ next year. The bottleneck is no longer the model — it's how agents coordinate.
Cross-agent protocols are stabilizing. Multi-agent stops being an engineering problem and becomes a product problem.
EU AI Act, OWASP Agentic Top 10. Audit, HITL, RBAC are no longer optional.
Every quarter, a new "best" runtime ships. The platform layer wins — runtime-portable is the only safe bet.
Defined as code. Versionable. Forkable. Marketplace-publishable. The same workspace.yml ships to dev, staging, and prod with the topology intact.
Model the org chart, not the workflow. Roles inherit tools, memory scope, HITL ladder.
Agents can spin up sub-teams within their permission envelope. Org grows like a living tree.
Every workspace is a versioned graph. Diff it, branch it, share it, sell it.
Agents speak JSON-RPC 2.0 directly. Platform routes; never a single bottleneck.
Identity · permission · audit · encryption. AES-256-GCM envelopes, WorkOS OAuth.
No-approval, single-reviewer, dual-reviewer. Risk-graded, configured per role.
OpenTelemetry + Langfuse — every call across every agent, in one timeline.
Plugin · Agent · Org. Two layers more than GitHub Actions, two more than GPT Store.
Context pollution and hallucination compound. Specialized agents in their own context windows is how every large organization in human history has worked — and how language models stay sharp.
Swap it. Roles, memory, and topology are abstract. Adapters connect runtimes; nothing in your config changes when you migrate.
Three tiers: Plugin, Agent, Org. Set your price, ship a signed manifest, get paid via Stripe Connect. We take 20%.
Yes — full private deployment with the same Control Plane. Common for regulated industries; data never leaves your tenant.
A2A (JSON-RPC 2.0) for inter-agent calls, MCP for tool exposure, OpenTelemetry for traces.
List a plugin, ship an agent, package a whole bundle. Set your price, keep 80%. Molecule handles billing, distribution, runtime swaps, and the long tail of compatibility.
Free during public beta. SaaS or self-hosted. Bring your runtime, bring your team — we'll bring the org.