Table of Contents generated with DocToc

Adapter registry

A discovery index of the tool adapters and organizations Magpie knows about — the ones that ship in-tree, the open extension points, and links to community-maintained adapters defined elsewhere.

Discovery, never installation. Per PRINCIPLES.md §13, this page is an index, not a package manager. Nothing here is auto-fetched. To use an adapter you wire it in deliberately — point your <project-config>/project.md (or organizations/<org>/) at it, exactly as you would a built-in one. An external link is a pointer for humans to evaluate, not a supply-chain hook.

This applies to the adapter/organization index on this page. Skills are different: §13 permits installing a skill or skill-family from a trusted external source — pinned, verified, and adopter-vouched. That mechanism and its own discovery index live under docs/skill-sources/.

To author a new adapter, see authoring.md.

In-tree tool adapters

Each capability contract under tools/<contract>/ enumerates the adapters that fulfil it. Shipping = a working adapter in the tree; extension point = a documented, labelled slot with a tracking issue.

Capability contract Shipping adapter(s) Extension points (tracked)
tools/cve-tool cve-tool-vulnogram (ASF) MITRE form, CVE.org direct, GHSA
tools/mail-archive ponymail (ASF) Hyperkitty, Discourse, Google Groups, GitHub Discussions
tools/mail-source mbox, IMAP Mailman 3 (#306)
tools/forwarder-relay ASF-security (tools/gmail/asf-relay.md) huntr.com, HackerOne, GHSA relay
tools/scan-format ASVS other scanner formats
tools/vcs Git, Mercurial, Fossil Subversion #602, Jujutsu #603, Perforce #605
Forge / tracker github, jira, bitbucket partial-read-only foundation, sourcehut, fossil GitLab #305, Forgejo/Gitea #310, Pagure #312, deeper Bitbucket/Jira coverage #606, Bugzilla #302
Agentic runtime Claude Code Codex #313–OpenHands #322
Security cross-ref OSV.dev #311

In-tree organizations

Organization Directory
Apache Software Foundation organizations/ASF/
Independent (no formal governing body) organizations/independent/

Community / external adapters

Adapters maintained outside this repository — kept in their authors’ own repos and linked here for discovery. An adopter wires one in by pointing their config at it (see the discovery-not-installation note above); the framework never fetches them.

Adapter Capability / org Maintainer Link Notes
(none listed yet) Open a PR to add a row — see below.

Adding an external adapter to this index

Open a PR against apache/magpie that adds one row to the table above with: the adapter name, the capability contract (or organization) it implements, the maintainer, a link to its repository, and a one-line note. Listing here is editorial discovery only — it makes no guarantee about the adapter and triggers no install. Adapters you would rather contribute into the tree itself follow authoring.md instead.

See also

Suggest a change