A catalogue is easy. The review is the product.
Anyone can list plugins. The hard part — and the only part worth paying for — is knowing what a plugin can do before it runs with your permissions.
A plugin for a coding agent is not a browser extension in a sandbox. It runs on your machine, as you, with your files and your credentials in reach. It can add commands the model will call, register agents that read your code, and hook into events you never see. Installing one is a decision about trust, taken with almost no information.
Pluggable exists to give that decision something to stand on. Every version submitted here is checked before it is published: the archive against the digest recorded at submission, the declared permissions against the components actually present, automated rules over the source, the dependency list, a malware lookup, an execution in a container with no network and a read-only filesystem, and a comparison between what the code does and what its author claimed.
The result is published with the plugin. Not a badge — the record, including the stages that did not run.
A stage that is not configured is marked skipped, never passed. A file the analyser cannot read is declared, not ignored. “Not checked” must never look like “clean”: that distinction is the whole product.
What we will not do
We will not publish something because no rule happened to fire. A single critical finding rejects a version outright; anything ambiguous goes past a person before it reaches anyone’s machine.
We will not quietly leave a harmful plugin up because people paid for it. Suspension removes it for everyone, buyers included — a suspension with exceptions protects nobody.
We will not pretend the review is more than it is. It says that one archive passed those checks at that moment. It is not a promise that the plugin is good, or right for you. Read what it asks for.
How it pays for itself
Publishers keep most of what they sell; the platform takes a share that is heavier on small amounts, because the card fee and the sandboxed review cost the same whether a plugin sells for €4 or €400. The exact rates are on the publisher agreement.
Free plugins go through exactly the same review. Nothing is fast-tracked for paying, and nothing is buried for being free.
Where to go next
Read what we check, browse the catalogue, or submit something and watch the pipeline take it apart.