brew / rank 9439

Install apm with Homebrew, scoop, winget

Dependency manager for AI agent configuration. Version 0.26.0 via Homebrew; verified 2026-07-25. Also installable with scoop: scoop install main/apm.

Install command Security notes

install

Additional install commands

macOS

Homebrewverified · 100%

brew install apm

local Homebrew formula metadata

Windows

Scoopverified · 92%

scoop install main/apm

Scoop official bucket manifest trees · bucket/apm.json · source: api.github.com

Windows Package Managerverified · 92%

winget install --id Microsoft.APM -e

Windows Package Manager source index · Microsoft.APM · source: cdn.winget.microsoft.com

overview

Package summary

Dependency manager for AI agent configuration

Project links

Commands and aliases

history

Project history and usage

APM, the Agent Package Manager, is a dependency manager for AI-agent context. It gives skills, prompts, instructions, plugins, and MCP servers a project manifest and lockfile workflow analogous to established language package managers.

Project history

Microsoft's public repository was created in September 2025 and published v0.4.0 that month. The project describes itself as open source and community driven, and credits Daniel Meppiel as creator with Daniel Meppiel and Sergio Sisternes as maintainers.

Adoption history

The official documentation targets GitHub Copilot, Claude Code, Cursor, OpenCode, Codex, Gemini, Windsurf, and Kiro. The supplied package metadata records distribution through Homebrew, Scoop, and WinGet, while the official README also documents platform installers and pip.

How it is used

A project declares agent dependencies in a repository-root apm.yml. Running apm install resolves those dependencies and produces a lockfile so collaborators and CI can reproduce the same agent context; additional commands cover compilation, packaging, auditing, marketplaces, and policy enforcement.

Why package nerds care

APM applies familiar manifest, lockfile, transitive-resolution, integrity, and policy concepts to agent configuration, an ecosystem that has otherwise relied heavily on manually copied files. Its cross-harness targeting and multiple installation channels make it notable as an attempt to turn agent context into a conventional package-management domain.

Timeline

2025-09: Public GitHub repository created and v0.4.0 published.
2026-07: v0.26.0 published.

Related projects

The official project relates its workflow to npm, pip, and Cargo and builds on AGENTS.md, Agent Skills, and the Model Context Protocol. The companion microsoft/apm-action project brings installation and bundle restoration into GitHub Actions.

Sources

https://api.github.com/repos/microsoft/apm — official GitHub repository metadata and creation date.
https://api.github.com/repos/microsoft/apm/releases?per_page=100 — official GitHub release history.
https://github.com/microsoft/apm — official README, project purpose, maintainers, supported agent harnesses, installation methods, and usage.
https://microsoft.github.io/apm/ — official documentation for the manifest, lockfile, installation, security, and policy model.
input source_facts.package-manager — supplied Homebrew, Scoop, and WinGet package records.

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for apm. Nucleus package metadata is still published here so future coverage has a stable package URL.

Install behavior

No Homebrew bottle metadata was recorded.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix: ./apm.yml~/.apm/apm.yml~/.apm/config.json

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix: ~/.apm/config.json

executables

Installed executables

Command	Kind	Exposure	Note
`apm`	executable	indexed executable	Discovered from the local executable index.

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-03

manager version0.26.0

manager updated2026-07-25

local dataunknown

upstreamnot available

latest detectednot detected

okNo freshness warnings were generated.

install metadata

Package metadata

Package key	brew:apm
Version	0.26.0
Package manager	Homebrew
Homepage	https://microsoft.github.io/apm/
Repository	https://github.com/microsoft/apm
Last updated	2026-07-25T09:54:32Z
Pulse	updated
Bottle	not recorded
Service	none declared

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Scoop95%

main/apm

scoop install main/apm

normalized package name match
Matched by: Apm

Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/apm.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

winget95%

Microsoft.APM

winget install --id Microsoft.APM -e

normalized package name match
Matched by: Apm

Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: Microsoft.APM from https://cdn.winget.microsoft.com/cache/source.msix