xAI's Grok Build Gets a Plugin Marketplace with SHA-Locked Security

xAI has launched a built-in plugin marketplace for its terminal AI coding tool Grok Build — the Grok Build Plugin Marketplace. Developers can now browse, install, and update third-party tools directly from the command line without ever leaving the terminal. Each plugin bundles together AI skills, control protocols (MCP), and code hint tools (LSP), eliminating the hassle of piecemeal configuration.

Among the first plugins available: a MongoDB plugin that lets the AI query and optimize databases, a Vercel plugin for managing cloud deployments and domains, a Sentry plugin that analyzes error stacks to auto-fix bugs, and a Chrome DevTools plugin that gives the AI real-time browser control and performance recording. Cloudflare development skills and the community workflow tool Superpowers are also live.

To install, users type /marketplace in Grok Build or run `grok plugin install

--trust` from the command line. To guard against supply chain attacks, every remote plugin is locked to a specific Git commit SHA hash, and Grok Build enforces verification on install. The marketplace is fully open — developers can publish their own plugins by submitting a pull request to the xai-org/plugin-marketplace repository on GitHub.