A package registry built for the era where AI agents install most of the code. Every publish is cryptographically signed. Every install is verified against the publisher. Every package is a git repo. Payments built in.
Be among the first publishers, developers, and agent teams on zenpm
✔ Price: 0.25 USDC — paying via MPP...✔ Payment confirmed on Solana✔ Verified tarball against publisher signature✔ @acme/sdk@1.4.2 installedWhat npm would look like if it were designed today — for a world where AI agents write the code.
Every publish is signed with the publisher's Solana keypair. No API tokens to steal. No accounts to hijack. A stolen credential can't publish a malicious version.
Every tarball is hashed and verified against the publisher's signature on install. If the registry is compromised and serves a tampered package, your client catches it automatically.
Built on Cloudflare Artifacts. Every package has a full git history. Agents can clone, diff between versions, fork, and time-travel — native git operations, no special protocol.
Set a price on your package. Get paid in USDC on every install via the Machine Payments Protocol. No billing infrastructure. No API keys. No monthly invoicing.
Humans install with `npm install` like always. Agents can `git clone` packages directly for richer access. Same registry, two interfaces, zero inertia.
Runs on Cloudflare Workers + Artifacts + Cache API. Installs hit the nearest edge. Verifications happen at the client. Nothing sits on a single slow origin.
Sign your releases. Set your price. Let agents find you. The registry handles the rest.