Engine · White-Label · Multi-Tenant

Koder Depot

The app store engine you self-host. Multi-tenant publishing, delta delivery, and billing — deploy under your own brand on your own infrastructure.

# Publish a new version
curl -X POST https://your-store.com/api/v1/apps/myapp/publish \
  -H "Authorization: Bearer $PUBLISH_KEY" \
  -F "artifact=@myapp_2.0.0_amd64.deb" \
  -F "changelog=Performance improvements"

# 202 Accepted — delta generation starts automatically
{
  "status":      "accepted",
  "version":     "2.0.0",
  "delta_job":   "queued",
  "artifact_id": "art_01j2kxyz"
}

Everything a store needs

Depot ships all the backend primitives. You bring the brand.

📦
Multi-platform publishing

Accept .deb, .rpm, .apk, .aab, .exe, .msix, .dmg, .ipa, .AppImage, and .kpkg. Each artifact is platform- and arch-tagged for precise delivery.

Delta delivery

Auto-generate bsdiff+gzip patches between versions. Clients update in seconds, not minutes — no full re-download needed.

🏢
Multi-tenant

Each tenant gets its own namespace, domain, and catalog. One Depot deployment hosts unlimited stores with full isolation.

🔐
Publisher portal

Developer registration, approval workflows, version management, screenshots, and changelogs — all built in, no extra setup.

💳
Billing & commissions

Configurable commission rates per tenant, paid app gating, and purchase history. Pluggable payment backend.

🔍
Search & discovery

Full-text search, trending, featured collections, and category browsing — all served over a clean REST API.

How It Works

A publish endpoint and a REST API are all you need to run a full-featured app store.

Publish once, deliver everywhere

POST any artifact format to the publish endpoint. Depot detects the platform and arch, stores the artifact, and automatically queues delta generation against the last three versions.

  • Platform and arch auto-detected from the artifact
  • Deltas generated in the background — publisher is never blocked
  • Changelogs, screenshots, and metadata in the same request
  • Idempotent — republishing the same version is safe
# Publish — any platform, any format
curl -X POST \
  https://store.example.com/api/v1/apps/myapp/publish \
  -H "Authorization: Bearer $PUBLISH_KEY" \
  -F "artifact=@myapp_2.0.0_amd64.deb" \
  -F "changelog=Faster startup, fixed crash on ARM"

# 202 Accepted
{
  "status":    "accepted",
  "version":   "2.0.0",
  "delta_job": "queued"
}
# Client signals its installed version via SHA256
GET /api/v1/apps/myapp/download?version=2.0.0&base=<sha256_old>
Accept: application/x-bsdiff, application/zip;q=0.9

# Depot serves the bsdiff patch
HTTP/1.1 200 OK
Content-Type: application/x-bsdiff
Content-Encoding: gzip
X-Koder-Delta-Base:   <sha256_old>
X-Koder-Delta-Target: <sha256_new>

# 512 KB patch · instead of 35 MB full download

Delta delivery, built in

Clients send the SHA256 of their installed version. Depot serves a bsdiff+gzip patch when available — a full download otherwise. Fallback is always transparent.

  • Patches generated against the last 3 published versions
  • Typical savings: 90–98% of download size
  • SHA256 verification before applying any patch
  • Clients without delta support receive the full package

Every platform, one engine

Accept any artifact format your users need. Each one is platform- and arch-tagged for precise delivery.

Linux .deb Linux .rpm AppImage Android .apk Android .aab Windows .exe Windows .msix macOS .dmg iOS .ipa Web .kpkg

How It Compares

Everything a store operator needs — without building it from scratch.

Feature Koder Depot Build Your Own Raw Storage (S3/CDN) App Marketplace
Multi-platform artifacts partial
Delta delivery
Multi-tenant
Publisher portal
Billing & commissions
Self-hostable
Open REST API partial
White-label

Ready to build your store?

The same engine that powers Koder Store. Self-hostable and production-ready.

See It Live — Koder Store → Koder Platform