Canopy is a community platform for discovering, publishing, and discussing Gorilla Tag mods. Creators publish releases with changelogs and compatibility info, link their source code, and build a following. Players browse, download scanned releases, vote, and comment.

Canopy is an independent project. It is not affiliated with, endorsed by, or sponsored by Gorilla Tag or Another Axiom.

Most PC mods use a mod loader such as BepInEx. The usual steps:

1. Install the loader the mod lists (each mod page shows its loader under Compatibility).
2. Launch the game once so the loader creates its folders, then close it.
3. Put the mod's .dll in Gorilla Tag/BepInEx/plugins (or unzip the archive there, following the mod's own install notes).
4. Install any listed dependencies first.

Always read the mod's Installation section — creators can add specific steps. Back up your game files before trying something new, and remove mods before reporting bugs to the game's developers.

Each release lists the platforms it targets — Steam (PC VR), Meta PC/Rift, or Quest standalone — and which game update it was built for. Game updates often break mods, so check that a release matches your platform and the current game version before installing. Filter by both on the Explore page.

Quest standalone mods require different tooling from PC mods. Only install files built for your platform.

1. Create a draft with your mod's name, description, and compatibility details.
2. Upload a release (.dll or .zip). The file goes into private quarantine storage — nobody can download it yet.
3. Validation. We check the real file: size, file signature (a real DLL or ZIP), and its SHA-256 checksum. Archives are inspected without being extracted for path tricks, nested archives, executables, and decompression bombs.
4. Malware scan. A background job sends the file to the configured scanner.
5. Review and publish. Clean files move out of quarantine. New mods get a quick moderator review; updates to established mods can go live straight away.

If a scan finds a threat or fails, the release stays unavailable and you'll see why in your dashboard. Canopy never runs uploaded mods.

A result like "No threats detected by the configured scanner" means one specific scanner didn't recognise anything known-bad in that exact file (identified by its SHA-256 checksum) at the time shown.

It does not mean a mod is guaranteed safe. Scanners miss new or targeted malware, and a mod can behave badly in ways that aren't malware — like breaking your game or misbehaving in public lobbies. Prefer creators with linked source code and a track record, read the comments, and only install what you trust.

Open your mod in the dashboard and paste a public GitHub repository URL under Source code. Visitors can then browse files, read the README, and view code in Canopy. Each release can point at a specific tag or commit.

To show a Verified owner badge, commit a file named .canopy to the repository's default branch containing the token shown in your dashboard, then press Verify. Linking a repository doesn't prove the uploaded file was built from that source — Canopy says so on every mod page.

Use the Report button on any mod, comment, or profile. Pick a reason and add details. Reports are private: the creator never sees who reported them. Moderators review every report and you'll get a notification when it's been handled.

If you think a mod contains malware, report it and don't run it.

From the dashboard, open the mod and choose New release. Add a version number and a changelog, upload the new file, and it goes through the same validation and scanning as the first release. Older releases stay listed under Versions so players can roll back. Creators can unpublish a release (or the whole listing) at any time.

Trending looks at the last 7 days of real activity, with recent days counting more:

score = Σ 0.75^age × (downloads + 4·likes − 2·dislikes + 2·comments)

Downloads are counted once per visitor per release per day. Mods with no recent activity aren't shown as trending — we never fill the list with random picks.

Your profile and username are removed, your mods are taken down and their files deleted, your votes and follows are removed, and your comments are anonymised so reply threads still make sense. Moderation records keep only an internal ID. This can't be undone.