Get started

Developers · build on Quox

Your code, on every QuoxCORE.

One command scaffolds a plugin. One build produces a signed .quoxplugin. One marketplace distributes it, reviewed and credited to you. This page is the whole route in.

Packages 3Templates 8Permissions 7Signing Ed25519

In plain words

What it is, where it lives, when to reach for it

What is it
The developer hub: the SDK, the protocols and the paths to build on the Quox platform.
Where do I use it
Start here, then follow each track to its own docs or tooling page.
When would I use it
When you want to build a plugin, a skill or an integration on the platform.
How do I use it
Pick a track below; the plugin SDK and the Developer Kit are free to start with.

Watch it happen

Scaffold to signed package.

The real loop, end to end: generate a project from a template, build it into a .quoxplugin, and sign it for verified distribution.

developer session

real commands from the SDK · the Plugin SDK page has the full toolchain →

Why build here

The platform is the distribution.

Community plugins list in the marketplace credited to their author, free or sold on your terms, and install on any QuoxCORE.

The format

One file. Everything inside.

A .quoxplugin is a ZIP archive. QuoxCORE extracts it, validates the manifest, and registers routes and sidebar entries automatically.

  • manifest.json Metadata, the permissions your plugin declares, sidebar config.
  • plugin.esm.js Compiled ESM bundle. React is externalised and shared by the host.
  • plugin.css Optional scoped styles.
  • signature.json Optional Ed25519 signature over the manifest. Cryptographically checked when the installing organisation has pinned a publisher key.

Permissions, sandbox and the full API →

my-plugin.quoxplugin (ZIP)
my-plugin.quoxplugin/
├── manifest.json
├── plugin.esm.js
├── plugin.css
├── assets/
│   └── icon.svg
└── signature.json

# signed · Ed25519 · over the manifest

Where your work fits

Four kinds of add-on, clearly labelled.

No one should have to guess which is which. Plugins you build with the SDK list as Community plugins, credited to you.

Core

bundled · always on

Ships inside every QuoxCORE install. Always present, no purchase, cannot be removed. QuoxCORE itself is the platform runtime, not a plugin.

e.g. QuoxMemory, governance

Installable

marketplace · free or licence key

Added from the marketplace when you want it. Toggle on and off.

e.g. Wazuh SIEM, Prometheus, GitHub

Quox-installable

install · a real deploy

Quox-made, but a genuine install: a daemon, service or desktop app.

e.g. QuoxAgent, QuoxBastion, QuoxTerminal
you are here

Community

marketplace · third-party

Built by an outside developer and credited to its author. Listing is not open yet.

open for developers to publish

Sell what you build. Community plugins can be listed free or sold through the storefront. Browse the marketplace →

Publishing

From your repo to a listing.

This is the shape publishing takes. The automated gate runs today; listing and staffed human review are not open yet, and the trust model page → says exactly where each part stands.

1

Build you

npm run build produces the .quoxplugin ZIP: bundle, manifest, styles and optional signature.

2

Upload you

In QuoxCORE, the seller dashboard takes the file and a version number.

3

Automated review gate 1

Runs instantly: manifest validation, ID format, bundle size limits, blocked code patterns. Results in seconds. It does not check the signature.

4

Human review gate 2

Designed, not staffed. The approve and reject step exists in the platform and belongs to an instance administrator; there is no Quox review team reading submissions today.

Live marketplace

Users discover, install, review and rate your work.

seller trust ladder:registereddeveloperverifiedtrusted partner

pluginsworkflowsagentsagent teamsall four package and list the same way

AI pair

Your Claude already knows the SDK.

The SDK ships a Claude Code skill that understands the whole QuoxCORE plugin architecture. Copy it into your skills directory and ask in plain language.

$ cp -r node_modules/quox-plugin-sdk/.claude/skills/quox-plugin ~/.claude/skills/
scaffoldBuild me a monitoring plugin for Datadog
manifestCheck my manifest for errors
debugMy plugin doesn't load after install
extendWire up vault credentials for my API key
reviewRun a pre-submission check on my package

Quox as a Claude extension

Point your Claude at Quoxpert. It becomes a Quox expert.

Quoxpert is a distributable Claude skill. Install it once and your Claude (Claude Code, Claude Desktop, claude.ai, or the Agent SDK) knows how to operate Quox: the CLI, the MCP tools, workflows, the agent fleet, plugins, and the four governance protocols.

$ /plugin marketplace add quoxai/quoxpert

Early access, launching soon. Open source, Apache-2.0.

Meet Quoxpert and its install options →
The quox CLIagents, workflows, triggers, traces
MCP toolsthe live, RBAC-gated tool surface
Workflowsruns, objectives and crystal skills
The agent fleethosts, governed SSH, approvals
Pluginsbuild, sign, install, sell
ProtocolsAEE, AOCL, VOLT and WARD

Quickstart

One command to a running plugin.

Scaffold, develop, build, sign. The SDK is open source under the MIT licence.

$npx create-quox-plugin my-plugin
github.com/quoxai/quox-plugin-sdk · MIT licence · 8 templates in the scaffolder

Start now

Ship something this afternoon.

Scaffold a plugin, run it locally, sign it, and put it in front of a customer. What signing proves and what the marketplace does not do yet are both written down →.

scroll