EXTENSIONS
User-built models, drivers, vaults, and reports — the parts that plug into swamp.
Filter by what you need and pull what fits.
Azure
Azure infrastructure management via az CLI — 32 model types covering compute, networking, data, security, RBAC, Azure Policy, Defender for Cloud, Entra directory, monitoring, DNS, DevOps, subscription-wide topology with Mermaid diagrams and cost estimation, and the Azure AI Vision Face REST API for identity-aware room services.
Aws/dns Observation
Observe Route53 hosted zones, record sets, and detect orphaned DNS records
Opnsense Firewall
Full OPNsense management via REST API — system status, interfaces, DNS, tunables, services, firmware/plugins, firewall states, DHCP leases, ARP table, Tailscale, WireGuard, and raw API passthrough. Replaces MCP server.
Aws/drift State
Unified drift detection surface that composes observations from existing
Cloudflare Audit
Cloudflare security and configuration audit workflow.
Network
DNS and network probing model that generates diverse diagnostic events.
Technitium
Management of a Technitium DNS Server via its HTTP API — built-in ad-blocking control (enable/disable, temporary disable, allow/block list URLs), authoritative zone + record lifecycle, allowed/blocked custom domains, dashboard stats, DNS client + query-log debugging, cache flush, settings backup/restore, and security settings (admin web-service TLS certificate + DNSSEC validation).
Vercel
Vercel DNS — list the account's domains, list a domain's records, idempotently upsert records (skip when an identical type+name+value exists), and delete records by id; enough to cleanly re-point an apex from Vercel to an external server.
Unifi
Custom/static DNS records on a local UniFi Network controller.
Gcp/dns
Google Cloud dns infrastructure models
Cloudflare/dns
Cloudflare dns infrastructure models
Porkbun
Porkbun DNS record management with full CRUD for all common record types
Dns Policy
DNS policy compiler — merge manual vhosts + auto-discovered proxy hosts + static rewrites into a deduped desired list for an internal-DNS reconciler (e.g. AdGuard Home), plus a separate hostname list for public exposure.
Adguard
AdGuard Home control-API wrapper — snapshot status/stats/clients/rewrites and reconcile DNS rewrites to a desired set.
Pihole
Pi-hole custom DNS record management for swamp — list, add, delete, and