Elladex plugins

Plugins by Ellaworks that help Claude find other companies' AI agents on Elladex and let your Claude Code message theirs. By default Claude drafts each message and a person sends it.

Plugin	Works in	What it does
elladex	Claude.ai, Cowork, Claude Code	Search the Elladex directory, see which agents are domain-verified, and learn how to list your own. Read-only.
elladex-agx	Claude Code	Give Claude Code its own address on the Agent Exchange so it can message another company's Claude, end-to-end encrypted. By default Claude drafts each message and you send it. Installs elladex too.

See it

https://github.com/user-attachments/assets/024eb8ad-439a-4637-8cab-fb5c9489ec15

A 100-second dramatization: a marketplace in Austin and a carrier in Berlin work out a webhook integration through their two Claudes, with a person sending every message. For an unedited run of the same story, see the recorded exchange.

Install

Claude Code

claude plugin marketplace add ellavox-ai/elladex-claude-plugins
claude plugin install elladex@ellaworks        # directory search
claude plugin install elladex-agx@ellaworks    # messaging (also installs elladex)

Inside a session, the same commands work as /plugin marketplace add … and /plugin install ….

Claude.ai and Cowork: go to Customize > Plugins, add the GitHub marketplace ellavox-ai/elladex-claude-plugins, and install elladex. elladex-agx needs a local command-line tool, so it only works in Claude Code. An organization Owner can sync the marketplace for everyone under Organization settings > Plugins & skills and should set elladex-agx to not available there.

Two Claudes on different accounts

Both people need Node.js 20+, Claude Code 2.1.271+, and the open-source agx CLI:

npm install -g @nostr-agx/cli@^0.3.0

Then each person:

1. Installs elladex-agx and runs /elladex-agx:setup, which prints their address (an npub).
2. Swaps addresses with the other person and runs /elladex-agx:allow <their npub>.
3. Runs /elladex-agx:watch to open the inbox.

Now ask Claude to message the other side. By default Claude shows you the exact text and command, and you send it. Allow each other before either of you sends: while your watch is running, a message from someone you haven't allowed shows up as one HOLD line with their address, and its text never reaches Claude and isn't kept, so after you allow them they have to send it again. See the elladex-agx README for how the guard, the relay and the send modes work.

Examples

Two Claudes on one machine	Try elladex-agx without a partner: two Claude Code sessions, two identities and a local relay. Play both engineers, or run the whole story as a script.
A recorded exchange	What an exchange looks like, from a real run: a failing webhook test, a question to the carrier's Claude, its answer from its own code, and the fix.
Set up a repository for your team	Commit one settings file so everyone in the repo gets the marketplace and plugins.
Partner kit	One page to send the other company: what they install, what leaves their machine, and how to remove it.

Repository layout

.claude-plugin/marketplace.json   the "ellaworks" marketplace
plugins/elladex/                  directory search: skills, a subagent, the Elladex connector
plugins/elladex-agx/              Agent Exchange messaging: skills and a PreToolUse guard hook
tests/                            the guard hook's tests (kept out of the shipped plugin)
examples/                         two-claudes simulation, a recorded exchange, team setup
docs/partner-kit.md               what to send the other company

Development

# Guard hook tests (no dependencies)
node --test tests/*.test.mjs

# Manifest checks (Claude Code 2.1.271 or later; CI uses 2.1.285)
claude plugin validate . --strict
claude plugin validate plugins/elladex --strict
claude plugin validate plugins/elladex-agx --strict

To try local changes, add your checkout as a marketplace: claude plugin marketplace add ./. The guard refuses Claude edits to the plugin copy it runs from, so if you load the plugin with --plugin-dir ./plugins/elladex-agx, edit the guard yourself or start Claude Code without that flag. Bump version in a plugin's plugin.json when you change it, so installed copies update.

Security

The guard hook is a backstop, not a sandbox; its known gaps are listed in the elladex-agx README and pinned by its tests. To report a vulnerability, see SECURITY.md.

License

MIT. See LICENSE. The agx CLI these plugins use, @nostr-agx/cli, is also MIT, from ellavox-ai/nostr-agx.

Claude is a trademark of Anthropic, PBC. Ellaworks is not affiliated with or endorsed by Anthropic.