EXTENSIONS
User-built models, drivers, vaults, and reports — the parts that plug into swamp.
Filter by what you need and pull what fits.
Ssh
Run commands, copy files, and open port forwards across a declared set of
Tailscale/net
Tailscale tailnet device inventory via the API — sync all devices, delete stale entries
Tailscale
Tailscale for swamp: a `setup-tailscale` workflow that installs Tailscale and joins hosts of an @swamp/ssh fleet to the tailnet (auth key via vault + SSH env), plus a `net` model that syncs `tailscale status --json` into one resource per machine so downstream models and workflows can look up nodes by name.
Tailscale/device
Tailscale TCP serve rule management via SSH — sync, set, unset
Tailscale
Install Tailscale on remote VMs over SSH and sync tailnet machine inventory from tailscale status JSON into per-machine resources.
Tailnet Healthcheck
Tailnet health reporting — find devices running outdated Tailscale clients and alert via Slack
Tailscale
Tailscale tailnet management — 10 model types covering devices, users, ACLs, DNS, auth keys, webhooks, settings, contacts, posture, and log config. 22 workflows for device inventory, user lifecycle, ACL audit, security audit, compliance, incident response, monitoring, and more. Fix: OAuth token cache now keys on credentials so different tailnets/OAuth clients no longer share tokens.