EXTENSIONS

Read-only inventory of an on-premises Active Directory domain over LDAP. Collects users, groups, and computers straight from a domain controller — no Windows host, no WinRM, no PowerShell — and decodes what AD returns raw: FILETIME timestamps, binary SIDs and GUIDs, userAccountControl and groupType bitmasks. Handles paged searches and member range retrieval, so domains over 1000 objects and groups over 1500 members are not silently truncated. Methods: inventory, list_users, list_groups, list_computers.

Vault-backed Zernio account verification plus approval-bound, schedule-only Facebook and Instagram publishing.

Read-only Mailgun models — GET requests only, no write capability

Generic read, normalization, digest, and transition-only alert workflows for Swamp observability adapters.

Creates deterministic, bounded authorization plans for read-only investigations without executing queries, invoking providers, or mutating production systems.

Read fantasy league state from the Sleeper platform's public read-only API — no key, no OAuth, no write surface. Resolve a username to a user ID, list leagues and drafts, and read a league in depth: settings and scoring, rosters with owners joined and standings derived, weekly matchups paired head to head, the transaction log, traded picks, playoff brackets, the draft board, and league-wide add/drop trends. Player IDs are resolved to names from a locally cached catalogue, and a missing record (which Sleeper reports as HTTP 200 with a null body) fails loudly instead of reading as empty.

Fact-check one Markdown document through a provider-neutral, read-only adapter. Kiro CLI is the default provider; Claude CLI is supported when explicitly selected. Repository and optional web capabilities are recorded separately, with no provider fallback.