# CTXPKG Registry (ctxpkg.com)

> The package registry for AI-agent context. Signed, checksum-verified,
> quality-scored .ctxpkg packages: portable knowledge graphs your agent
> installs instead of re-deriving.

The registry implements the open CTXPKG standard (https://ctxpkg.org).
Free packages download anonymously; paid packages require an account.
Every version is immutable, ed25519-signed and SHA-256 pinned.

## Core pages

- [Package catalog](https://ctxpkg.com/packages/): browse, search, filter by tag
- [Publish guide](https://ctxpkg.com/publish/): create, sign and publish a package
- [Trust model](https://ctxpkg.com/trust/): verification pipeline, quality score, token-ROI methodology
- [API reference](https://ctxpkg.com/docs/api/): full HTTP API

## API (no auth required for public data)

- `GET https://ctxpkg.com/api/v1/index.json`: full catalog with quality scores and ROI
- `GET https://ctxpkg.com/api/v1/search?q={query}`: search packages
- `GET https://ctxpkg.com/api/v1/packages/{ns}/{name}/index.json`: package detail + versions
- `GET https://ctxpkg.com/api/v1/packages/{ns}/{name}/{version}/download`: the .ctxpkg artifact
- `GET https://ctxpkg.com/api/v1/packages/{ns}/{name}/{version}/trust`: publish-time audit document (trust report)

## Plans
Free: unlimited public packages, 3 tokens, all trust features. Pro (9 EUR/month): private
packages, 10 tokens. Selling: publisher keeps 85%, 15% platform fee. Trust features
(signing, verification, audit reports, verified badge, evidence ranking) are free on
every plan and never for sale. Details: https://ctxpkg.com/pricing/ and
https://ctxpkg.com/mission/

## Install

```
lean-ctx pack install {namespace}/{name}
```

Installs verify the SHA-256 against the registry index and re-verify the
embedded ed25519 signature locally before anything lands on disk.

## Governance

- [Governance](https://ctxpkg.com/governance/): the governed context supply chain — distill, seal, publish, verify, enforce; what is verifiable today (signatures, public trust reports, verified identity, immutable versions, scoped tokens) and how the enforcement layer (LeanCTX, Open Context Protocol) gates installs by policy
- [RFC 0002](https://ctxpkg.org/rfcs/0002-provenance-attestations/): proposed provenance attestations for the open standard

## Specification

- [CTXPKG standard](https://ctxpkg.org/spec/v2/): normative spec
- [Registry protocol](https://ctxpkg.org/registry/): build a compatible registry
- [Test vectors](https://ctxpkg.org/conformance/): golden files for implementers