[go: up one dir, main page]
em—dash
Installation Guide

Install plugins from the EmDash CMS community marketplace with confidence.Every published version passes an AI security audit before it is available for download or one-click registry install.

Browse the catalog of audited plugins·Publish your own

Download & Manual Install

  1. 1Find a plugin on the marketplace and click "Download".
  2. 2
    Extract the .tgz archive to your EmDash plugins directory:
    tar -xzf plugin-name-1.0.0.tgz -C ./plugins/
  3. 3Restart your EmDash instance.

Only published versions that pass our AI security audit are available for download.

Frequently Asked Questions

How do I install EmDash CMS plugins from the marketplace?

You have two options. (1) Download the .tgz bundle from a plugin detail page and extract it to your EmDash plugins directory, then restart your instance. (2) Add this marketplace to your Astro config and install directly from the EmDash admin dashboard (Plugins › Marketplace).

Is the EmDash CMS plugin marketplace safe?

Yes. Only versions that pass the automated AI security audit are published. Passed versions are available cleanly. Flagged versions publish with visible warnings. Failed versions are rejected and never appear in the catalog or registry.

What is the AI security audit for EmDash plugins?

Every uploaded version runs through the audit before it can be downloaded or installed. The audit detects security risks and capability issues. Results determine publish status: clean pass, publish-with-warnings, or hard reject.

Manual .tgz download vs. registry install — which should I use?

Manual download gives you the .tgz file for offline/air-gapped setups and full control. Registry mode lets you browse the full catalog and install with one click from the admin UI after adding the marketplace URL to astro.config.mjs. Both deliver the same audited bundles.

Do I need to restart EmDash after installing a plugin?

Yes for the manual .tgz method — extract then restart. The registry + sandboxRunner integration handles loading dynamically for most cases without a full restart.

How do I publish my own plugin to the EmDash marketplace?

Sign in with GitHub on the publisher dashboard, register a unique ID, then upload .tgz files manually or connect a GitHub repository for automatic releases. Every version is audited before it becomes available to other users.

Will installing plugins from emdashcms.org make my site depend on it at runtime?

No. The marketplace is purely a distribution channel. After install the bundle is copied into your own R2 bucket and runs inside your site's isolated sandbox runner. Your EmDash instance never calls back to emdashcms.org.

Use as Your Plugin Registry

Point your EmDash CMS instance at this marketplace, then browse and install plugins from the admin dashboard at Plugins › Marketplace.

Add the marketplace URL to your Astro config and enable the sandbox runner so installed plugins can run in isolated workers:

// astro.config.mjs
import { emdash } from "emdash/astro";

export default defineConfig({
  integrations: [
    emdash({
      marketplace: "https://emdashcms.org",
      sandboxRunner: true,
    }),
  ],
});

Then, signed in as an admin:

  1. Open the EmDash admin panel and go to Plugins › Marketplace
  2. Browse or search for a plugin and open its detail page
  3. Review the capability consent dialog and click Install

The plugin bundle is downloaded from this marketplace, copied into your site’s own R2 bucket, and loaded into the sandbox runner. The marketplace is a distribution channel only — once installed, your site never depends on us at runtime.

The marketplace browser, install flow, and sandbox runner are all part of EmDash CMS itself. Check the EmDash installing-plugins docs for full setup details and the capability consent model.

For Plugin Authors

  1. 1Sign in with GitHub to access your publisher dashboard.
  2. 2Register your plugin with a unique ID.
  3. 3Upload a version — either a manual .tgz upload or connect a GitHub repository for automatic releases.
  4. 4
    Every version is run through an AI security audit:
    • Passed versions are published automatically.
    • Flagged versions are published with warnings.
    • Failed versions are rejected.
Get Started

API Reference

The marketplace API is available at https://emdashcms.org/api/v1

GET
/plugins

Search and browse plugins

GET
/plugins/{id}

Plugin details

GET
/plugins/{id}/versions/{version}/bundle

Download bundle

POST
/plugins/{id}/installs

Track installations

The API is compatible with the EmDash CMS MarketplaceClient interface.