A real directory
Discover plugins by surface (canvas, memory, automations) and by trust tier. Read what each one does — and what it asks for.
PLUGINSExtend Synap.
Extend Synap.
Two trust models.
Trusted plugins (signed by us, full filesystem access) + sandboxed plugins (community, iframe-isolated). Zero compromise on safety.
v1.4 · macOS · Windows · Linux
TRUSTED
synap-canvas-exportSigned by Synap · Full filesystem access · Native dialogs.
SANDBOXED
community-mood-trackerIframe-isolated · No filesystem · Capability-token IPC.
25+PLUGINSin the directory at launch
<2 MININSTALLfrom directory to running
2TRUST MODEStrusted · sandboxed
0BLIND TRUSTevery capability is declared
01 · PLUGINS ON TAPBrowse. Install.
Browse. Install.
Configure.
A directory baked into the desktop. No CLI, no npm install, no rebuilds.
One click
Hit Install. The plugin lands in your mind, signs are verified, capabilities are presented. No terminal, no rebuild.
In-app settings
Each plugin renders its own settings panel. Disable, re-scope, or remove without touching files.
02 · MANIFEST FIRSTManifest first,
Manifest first,
then runtime.
Every plugin ships a declarative manifest: which surfaces it touches, which capabilities it needs, which files it can read. The runtime mints a capability token from the manifest — and the plugin can never escape it.
// plugin.manifest.json
{
"name": "canvas-mood-tracker",
"trust": "sandboxed",
"surfaces": ["canvas.card"],
"capabilities": {
"fs": "none",
"network": "none",
"ipc": ["canvas.read"]
},
"signature": "ed25519:…"
}
VS UNRESTRICTED EXTENSIONS
Trust tiered, not all-or-nothing.
Most editors give every extension full disk access. We don't.
TODAY · UNRESTRICTED
Total filesystem access for everyone
One malicious extension reads every file
No way to declare or audit capabilities
Updates re-grant permissions silently
Hard to remove, easy to forget
WITH SYNAP · TIERED
Trust tier per plugin
Sandboxed plugins run in an iframe
Trusted plugins are signed by us
Capability tokens enforced by the runtime
One-click revoke, full audit log
03 · BUILD YOUR OWNBuild it.
Build it.
Ship it.
A plugin SDK in TypeScript with hot reload, Pencil-grade DS hooks, and a one-command publish.
Plugin SDK
in TypeScript.
Strongly-typed APIs for canvas, memory, automations, and the chat surface. The same primitives Synap uses internally — exposed for you, with full type safety.
Hot reload during dev.
`synap plugin dev` watches your source, reloads on save, and surfaces runtime errors inline. Iteration in seconds, not minutes.
Publish to the directory.
One command to bundle, sign, and submit. Sandboxed plugins ship instantly; trusted plugins enter a review queue.
Extend Synap.
Keep the trust.
Free. Plugin directory. Full SDK.
Free · No credit card · No telemetry