EXTENSIONS
Built by operatives — models, drivers, vaults, and reports, the parts that plug into Swamp.
Filter by what you need and pull what fits.
Github/actions/secrets
Sync secrets to GitHub repository-scoped Actions secrets via the GitHub REST API.
Github/environments/variables
Sync variables to GitHub environment-scoped Actions variables via the gh CLI. Value-aware: reconciles on value drift, not just presence.
Github/environments/secrets
Sync secrets to GitHub environment-scoped Actions secrets via the GitHub REST API.
Newrelic
New Relic entity model types backed by the NerdGraph GraphQL API
Patch
Agentless fleet patch management — scan Proxmox VMs/CTs, bare-metal, and VPS hosts for pending updates, apply them safely (snapshot-guarded, health-checked, auto-rollback), and keep an auditable history over @swamp/ssh
Honeycomb
Manage Honeycomb resources via the v1 Configuration API: @hivemq/honeycomb covers SLOs, SLI derived columns, burn alerts, queries, query annotations, and triggers; @hivemq/honeycomb/datasets covers dataset discovery and cleanup
Harvester/key Pair
Manages Harvester KeyPair custom resources for SSH key injection into VMs.
Jenkins
Longhorn
Longhorn storage on Harvester: list storage classes, volumes, replicas, nodes, settings, and pods in the Longhorn namespace; check volume and node health; create and delete Longhorn storage classes. Talks to the Kubernetes REST API with the kubeconfig CA through `Deno.createHttpClient`.
Diary
Turn a day of synced Garmin and Zwift data into one Obsidian daily note, merging into any note you have already edited.
Fitness Refresh
Refresh every Garmin and Zwift data source in one ordered run, so a
Garmin
Sync a Garmin Connect account into swamp: one authenticated transport, plus
Predb
PreDB.net integration for swamp — scene release search, nuke status, NFOs, group/section stats, and per-season completeness by group
Stagecraft
stagecraft builds factories. A factory describes your process as a set of
Appspace
Appspace Cloud v3 API administration toolkit — devices, reservations, users, visitors, and the custom card development lifecycle (scaffold, pull existing, validate, package, register instances). Walk-in workflows fire DropIn invitations through Appspace's native notification routing (Teams Passport, in-app push, Concierge) with no external webhook required.
Openai Decision Tools
Agent-facing predicate, choice, and score judgments over supplied text or scoped repository files using OpenAI Decisions. Inspired by IndyDevDan's "10 Levels of Jev For Agentic Engineers" cheap-read and files-at-scale demos: scout relevant source, classify file roles, triage existing test output, or choose from available agents without filling the calling agent's context. Multiple questions share one request; independent files use bounded internal concurrency. Advisory only, with explicit refusals and answer-only results. Independent of Jev. Live smoke examples: supplied failure triage in 369 ms, two-file parallel scouting in 682 ms, and combined comparison in 399 ms. Single-run processing measurements, not latency guarantees. See README for exact queries, results, and privacy limits.
Purview
Microsoft Purview compliance-portal RBAC — role groups, their constituent management roles, membership, and the eDiscovery Administrator list, over Security & Compliance PowerShell. Exists because eDiscovery permission is invisible from Entra: Global Administrator maps to OrganizationManagement, which carries Case Management, Compliance Search, Hold and Search And Purge but not Export, Preview, Review, RMS Decrypt or Custodian, so a tenant admin can run a search yet be unable to export a single item. auditPrincipals separates canSearch from canExport and flags eDiscovery Administrators, who can open every case in the tenant. Carries its own credential surface because the compliance endpoint rejects Azure CLI tokens regardless of user.
Webflow
Webflow Data API v2 extension — site publishing, CMS collection schema discovery, CMS item CRUD with batch create/update/delete/publish, live-item read/create/update/unpublish, page metadata with SEO/Open Graph management, paginated and localized page DOM read/write, merge-safe page custom code, and JSON-LD structured data via registered inline scripts. Shared API client handles pagination and OAuth bearer auth via vault credentials.
Utelogy
Utelogy AV monitoring platform — rooms with CLM status and metrics, assets with driver/feature inventory, alerts with acknowledgement, and Global Device Library search. REST API integration with vault-based credentials.
Pexip Infinity
Pexip Infinity v39 management and development — conference lifecycle, node deployment, platform administration, integrations, policy server development, event-driven automation, branding, client API, auth/RBAC, network infrastructure, licensing, recording, diagnostics, and Exchange calendar connectors.
Servicenow
ServiceNow integration model — OAuth client_credentials authentication with automatic token caching, generic Table API CRUD (query, get, create, update, delete), Aggregate API for data analysis, Attachment API (list, download, upload, delete), and a passthrough REST call for endpoints outside the Table API. Foundation for spoke development, administration, and ad-hoc operations against any ServiceNow instance.
Hetzner Cloud
Hetzner Cloud infrastructure models
Aws/dynamodb
AWS DYNAMODB infrastructure models
Aws/dsql
AWS DSQL infrastructure models