A Trustless App Store for AI Agent Apps

Developers
1

Hey everyone,

A couple of weeks ago, we launched our auth server to bring OAuth 2.1 flows to the IC. That was step one. Today, we’re showing you the next piece of the puzzle.

We’re building a decentralized app store for MCP Servers.

For those unfamiliar, Model-Context-Protocol (MCP) is an open protocol developed by Anthropic. It’s like the LSP for AI—a standard interface that lets any AI agent securely discover and use tools and data.

To help developers build on the IC, we’ve created the mcp-motoko-sdk. We’re also excited to join others in this effort, notably @baolongt and @kyle, who have already done fantastic work on a Rust implementation. Now, builders have options in both Motoko and Rust.

With these SDK’s, you can build powerful, secure on-chain apps for AI agents. For instance, here’s an example of an OAuth-protected MCP server using our Motoko SDK, connecting back to our auth server work:
https://github.com/prometheus-protocol/motoko-sdk/blob/main/examples/private_mcp_server/src/main.mo

But an SDK is just a tool. To make it useful, agents need a place to discover trusted servers. This is why we’re building the registry.

This project is our entry for the WCHL hackathon, where we were honored to take first place in the US in the initial round. The only reason we’ve been able to move this fast is because we are building on the incredible foundation of community-driven standards. We are composing, not reinventing.

Our entire system is a living testament to the power of standards based development:

  • The Core Vision: The MCP Standard and our OAuth 2.1 implementation.
  • The App Store Engine & Secure Upgrades (ICRC-118 & ICRC-120): The standards and reference implementations for these were pioneered by @skilesare, giving us a robust app store engine and secure upgrade path right out of the box.
  • The Verification Logbook (ICRC-126): Creates an immutable, on-chain record of audit requests and attestations.
  • The Economic Engine (ICRC-127 & ICRC-2): Powers automated bounty payouts for successful audits.

We could not have built this without these standards.

The engine for a fully transparent, community-governed software supply chain for AI agent apps is running. The SDKs are live. Now we need more builders.

  • For Developers: Use the SDKs to build the first wave of on-chain tools for agents.
  • For Collaborators: The entire project, including the registry and orchestrator, is open source.

Help us forge the infrastructure for the next generation of autonomous systems. The main repository for our registry and orchestrator is here:

To coordinate all this work, we’ve created a dedicated IC MCP Discord with @baolongt and @kyle for anyone interested in building with MCP on the IC. Join the conversation:

7 Likes