Show HN: Federated app store for self-hosted AI agents (Apache-2.0)

2 pointsposted 10 hours ago
by brandon-bennett

1 Comments

brandon-bennett

10 hours ago

Aloha HN! Author here.

Origin story:

I built this after repeatedly seeing the same problem: companies wanted to use specialized AI agents (document processing, compliance checks, data analysis) but couldn't justify either: (1) building everything in-house - expensive and creates unmaintainable internal tools, or (2) sending sensitive data to third-party SaaS platforms.

The same pattern kept repeating: they needed "an app store for agents" that worked like Docker Hub but with security isolation baked in.

The interesting technical choice:

I wanted this to be fully open with no gatekeepers - no accounts, nothing to signup for, and as decentralized as possible. So I came up with a federated Git-based index. Instead of a centralized marketplace, agent metadata lives in a GitHub repo. Developers fork it, add their agent to `developers/their-username/`, and submit a PR. Automated validation checks that the folder name matches the fork owner (GitHub-authenticated namespace ownership). No manual approval needed. The entire system operates without gatekeepers - fully forkable if you disagree with the index maintainers.

Current state & what I need:

Pre-release and functional. The platform works, but the agent index is mostly empty since we're just getting started. I'm looking for:

1. Agent builders - If you've built agents for internal use, consider publishing them. The SDK makes it straightforward.

2. Security researchers - I want this architecture stress-tested. Found a hole? I'll credit you and fix it.

3. Organizations with data governance requirements - If you need self-hosted AI infrastructure, let's talk about your use case.

Tech stack:

- Control plane: FastAPI, PostgreSQL, Docker SDK

- UI: React, TypeScript, Zustand

- SDK: Python, Typer

- Agents: Any language (FastAPI template provided)

Happy to answer questions about the architecture, federated index mechanics, or security model. Critiques are welcome too - that's why I'm posting early.