EXTENSIONS
Built by operatives — models, drivers, vaults, and reports, the parts that plug into Swamp.
Filter by what you need and pull what fits.
Pgp
ASCII-armored OpenPGP private key operations via the local gpg binary — inspect, extend expiry, sign-and-verify, upload to keyserver. Runs each invocation against an ephemeral GNUPGHOME so the host keyring is never touched. Auto-detects raw armored or base64-encoded armored key material on import (works around vault providers that strip newlines from multi-line field values).
Pass
GPG-encrypted password store using the pass CLI (passwordstore.org). Emits OpenTelemetry spans for get, put, and list so vault reads are visible in traces, including reads during model and workflow runs where the host emits nothing. Span attributes carry the vault name, key name, and backend only — never secret values or error messages.
Gopass
gopass password manager (gopass.pw) - pass compatible with extra features. Emits OpenTelemetry spans for get, put, and list so vault reads are visible in traces, including reads during model and workflow runs where the host emits nothing. Span attributes carry the vault name, key name, and backend only — never secret values or error messages.