Quickstart: pull and run locally

stable

Get a pull-only registry credential, pull the marketplace image from registry.agentics.dk, and run it locally on Docker in zero-friction dev mode.

Usage: docker pull registry.agentics.dk/agentics/pks-agent-marketplace:latest
Category: agents

Quickstart: pull and run locally

1. Get your pull credential

Pulling the image needs a credential for our registry, registry.agentics.dk. It is 100% self-service:

  1. Open the product page and sign in with your Agentics account.
  2. Click Generate my pull credentials. We mint a registry owner just for you — pull-only, scoped to only agentics/pks-agent-marketplace. It can't push anything and can't see any other image.
  3. Copy the password now — it's shown once. You can always come back and rotate it (the old one stops working).

Why pull-only + scoped? Your credential can pull this product image and nothing else. If it ever leaks, the blast radius is one public product image.

2. Log in and pull

docker login registry.agentics.dk -u <your-owner> -p <your-password>
docker pull registry.agentics.dk/agentics/pks-agent-marketplace:latest

Pin a version in anything that matters: replace :latest with :x.y.z.

3. Run it locally (zero-friction dev mode)

The image is a Next.js web app on port 3000 with a persistent volume at /app/user-data. For local testing, run it in unsecured auth mode — it auto-signs you in as a local dev admin, with no email round-trip or identity provider:

docker run --rm --pull=always -p 3000:3000 \
  -e AUTH_PROVIDER=unsecured \
  -e ALLOW_UNSECURED_AUTH=true \
  -e AUTH_TRUST_HOST=true \
  -v marketplace-data:/app/user-data \
  registry.agentics.dk/agentics/pks-agent-marketplace:latest

Open http://localhost:3000. You're in.

  • AUTH_PROVIDER=unsecured turns on the auto-login dev user.
  • ALLOW_UNSECURED_AUTH=true is required because the image runs with NODE_ENV=production; without it, unsecured refuses to start. This is the safety backstop so a real deployment can never silently become open.
  • AUTH_TRUST_HOST=true tells Auth.js to trust the localhost request host under production mode — without it you'd hit UntrustedHost. Recent images default this on, so you can drop it once you're on the latest tag.
  • -v marketplace-data:/app/user-data keeps your catalog, sessions and settings across restarts. Drop it for a throwaway run.

Want a custom dev identity? Add -e UNSECURED_AUTH_EMAIL=you@example.com -e UNSECURED_AUTH_NAME="Your Name".

4. Next steps