EXTENSIONS
User-built models, drivers, vaults, and reports — the parts that plug into swamp.
Filter by what you need and pull what fits.
Duckdb
DuckDB integration for swamp: query model for ad-hoc SQL, and a datastore backend that stores swamp runtime data in a DuckDB database file with row-based distributed locking. Embedded, local-only — no network dependency.
Swamp Extension Creator
Autonomous pipeline for creating, testing, and publishing swamp extensions. Generates scaffolds (manifest, model, README), quality checklists, and readiness reports — all as structured data resources.
Agent Browser Batch
Dispatch agent-browser commands as a single subprocess via `agent-browser batch --json` so cookies and Chromium state persist across every step. Supports {{secret:NAME}} placeholders for credentials.
Aws/inventory
Discover running AWS resources for cost estimation and inventory management.
Aws/networking
Inspect VPC networking resources that commonly generate hidden costs:
Aws/traces
Query and analyze X-Ray distributed traces for incident investigation and performance analysis.
Aws/logs
Query and analyze CloudWatch Logs for operational visibility and incident investigation.
Aws/pricing
AWS Pricing API model for looking up service costs.
Aws/alarm Investigation
CloudWatch alarm investigation and triage model.
Aws/guardduty
Query and inspect GuardDuty findings from a delegated administrator account,
Aws/cost Estimate
Calculate AWS infrastructure costs from inventory data or planned specs.
Aws/metrics
Query and analyze CloudWatch Metrics for operational visibility and performance monitoring.
Cloudflare
Cloudflare management - zones, DNS records, WAF/firewall rules, Workers, and cache/CDN
Aws/bedrock Usage
AWS Bedrock token usage monitoring — multi-account fan-out scanning of
Aws/alarms
Query and analyze CloudWatch Alarms for operational visibility and incident response.
Aws/cost Explorer
Query AWS Cost Explorer for actual spend analysis by service, usage type,
Hashicorp Vault
HashiCorp Vault secrets management via REST API (KV v1 and v2)
Gitlab Datastore
Stores swamp runtime data in GitLab using the Terraform state HTTP API. Provides distributed locking via GitLab's native state locking mechanism and bidirectional sync between local cache and GitLab.
Postgres Datastore
Stores swamp runtime data in PostgreSQL with row-based distributed locking. Compatible with AWS RDS, Aurora, and Aurora Serverless v2. Uses fencing tokens for split-brain safety across failover events.
Pass
GPG-encrypted password store using the pass CLI (passwordstore.org)
Gopass
gopass password manager (gopass.pw) - pass compatible with extra features
Aws/adopt
Brownfield adoption of existing AWS infrastructure into swamp models.
Gcp/drive
Google Cloud drive infrastructure models
Gcp/domains
Google Cloud domains infrastructure models