Tools
Find the adapters and utilities that connect Magpie to the services you use.
75 tools39 across 18 contracts36 substrates44 implemented6 wrap an MCP server
Showing all 75 tools
adversarial-review
Runs other models' CLIs — Codex, Copilot, Antigravity, Grok, Claude — read-only over a change, and prints their merged findings as one JSON report. Magpie skills run it before they open a PR; pr-management-code-review runs it over…
- review
agent-guard
Checks shell commands against deterministic rules before the agent runs them.
- action-guard
agent-isolation
Provides the scripts and configuration used to set up an isolated agent workspace.
- sandbox
apache-projects
Reads public Apache project information, committee rosters, and committer records.
ASF- MCP
- Adapter / spec
- Experimental
- project-metadata
asf-nexus
Read-only adapter for the Nexus staging repository — the half of an ASF JVM release that dist.apache.org does not model. A JVM release candidate is voted on in two places at once: the dist/ tree carries the voted source artefact (the…
- Nexus Repository Manager (ASF-hosted)
- ASF
- Adapter / spec
- Experimental
- release-staging
ASF Security dashboard bridge
Read-only bridge to the ASF Security team's dashboard, dash.security.apache.org (source). The dashboard lists the security reports the ASF Security team tracks for each PMC, keyed by the Message-ID of the email that reported them, with…
- ASF
- Implemented
- security-tracker
asf-svn
Connects Magpie workflows to Apache’s Subversion repositories.
Subversion- ASF
- Adapter / spec
- Experimental
- source-control
Bitbucket forge bridge
Connects Magpie to Bitbucket repositories and pull requests.
Atlassian- Implemented
- Experimental
- change-request
- tracker
body-field-contract
How every reader and writer finds the ### <Name> fields of a tracker issue body, stated once and independent of language: what a field boundary is, which code blocks count, which heading is the field, what is ambiguous and must be…
- body-field
change-request
Defines the interface for reviewing and merging changes across different backends.
- change-request
chat
This file defines the adapter contract for project chat — the public channels of a project's Slack workspace, Discord server, or similar. The contributor-growth skills read it to see how a contributor helps others in chat: questions…
- chat
chat-discord
The Discord adapter for the tools/chat/ contract: reads public channels of the project's Discord server through the Discord MCP, to see how a contributor helps others in chat. It is read-only — see Operations for the only tools it calls.
- chat
chat-slack
The Slack adapter for the tools/chat/ contract: reads public channels of the project's Slack workspace through the Slack MCP, to see how a contributor helps others in chat. It is read-only — see Operations for the only tools it calls.
- chat
container-gateway
A per-project policy proxy in front of the container daemon socket. Sandboxed shell commands talk to it through CONTAINER_HOST / DOCKER_HOST; it forwards the Docker-compatible API to podman or docker after labelling every resource with…
- sandbox
contributor-metrics
Counts a contributor's activity on <upstream> over a window — PRs opened and merged, reviews, substantive reviews, issues filed, issues triaged, threads commented — splits it by area label, and applies the automated-work weights and…
- analytics
cve-org
Submits allocated CVE records to CVE.org for publication.
- cve-authority
cve-tool
Defines the interface for CVE allocation and record management.
- cve-authority
cve-tool-vulnogram
Allocates CVE IDs and publishes records through Apache’s Vulnogram instance.
- Vulnogram
- ASF
- Adapter / spec
- cve-authority
Dashboard generator
Generates issue dashboards that can be refreshed and published by CI.
- analytics
dev
Checks framework placeholders and supplies agent pre-commit helpers.
- framework-dev
Discourse forum bridge
Discourse forum bridge for Magpie adopters whose design discussion, RFCs and announcements live on a Discourse forum (for example discuss.python.org) rather than on a mailing list. It reads a forum topic using the thread_data field…
- mail-archive
egress-gateway
Restricts outbound HTTP connections to an approved list of hosts.
- sandbox
forgejo
Forgejo / Gitea REST substrate. Pure read/write wrapper used by every lifecycle phase (triage / intake / fix / resolve / stats). See tool.md for the operation catalogue and the per-area files (issue-template.md, labels.md,…
- tracker
- source-control
- change-request
forwarder-relay
Defines how to recognize forwarded security reports and preserve reporter credit.
- report-relay
Fossil Forge Bridge
Connects Magpie to Fossil repositories, tickets, wikis, and forums.
- tracker
- source-control
github
Reads and updates GitHub issues, pull requests, project boards, and repositories.
GitHub- MCP
- Adapter / spec
- tracker
- source-control
- change-request
- people
github-body-field
Reads or updates one issue-body field without loading the whole issue into the agent.
- GitHub
- Implemented
- tracker
- body-field
github-rollup
Updates an issue’s status summary without loading the existing summary into the agent.
- GitHub
- Implemented
- tracker
GitLab bridge
Read-only client for the GitLab REST API v4.
- tracker
- source-control
- change-request
gmail
Reads Gmail threads and prepares drafts; it does not send messages.
Google- MCP
- Adapter / spec
- mail-source
- mail-create
- mail-archive
hook-manager
This file defines the contract for git-hook managers — prek, pre-commit, lefthook, husky and their kin — under the secure agent setup. A hook manager installs a script into a repository's hooks directory and, when git runs that hook,…
- hook-manager
JIRA bridge
Connects issue workflows to Jira trackers.
- Atlassian
- Implemented
- Experimental
- tracker
- people
- security-tracker
- body-field
jira-patch
Supports code review through patches attached to Jira issues.
- Atlassian
- ASF
- Adapter / spec
- Experimental
- change-request
Local file tracker
A security tracker kept as Markdown files in a folder of a private Git or SVN working copy. It implements the security-tracker contract, so the security-* skills run against it unchanged when a project sets tracker.platform: local-files.
- security-tracker
- body-field
mail-archive
Defines the interface for reading public mailing-list archives.
- mail-archive
mail-patch
Supports code review through patches exchanged on a mailing list.
- ASF
- Adapter / spec
- Experimental
- change-request
mail-source
Defines a shared message format for importing reports from different mail backends.
- mail-source
maildir
Reads and writes local Maildir and mbox files without a cloud mail account.
- mail-source
- mail-create
maven-artifact-verify
Verifies locally staged JVM release-candidate artefacts — the .pom files, the main jars and their companion -sources.jar / -javadoc.jar — the way release-verify-rc verifies a staged source artefact today. Implements the blocking checks…
- ASF
- Implemented
- Experimental
- release
osv
OSV.dev vulnerability cross-reference client. Queries the OSV.dev REST API v1 for vulnerability records, aliases (CVE ↔ GHSA ↔ OSV IDs), affected package versions, and vulnerabilities associated with a public upstream commit.…
- security-cross-ref
people
This file defines the adapter contract for people on a forge or tracker — the accounts contributors hold there, who may read a repository, and who belongs to a team. The contributor-growth skills read it to name a contributor, to find…
- people
permission-audit
Audits and updates Claude Code permission entries in project settings.
- sandbox
pilot-report-validator
Checks that experimental-workflow pilot reports contain the required information.
- framework-dev
ponymail
Reads Apache mailing-list archives to cross-reference public discussions.
- ASF
- MCP
- Adapter / spec
- mail-archive
- mail-source
pr-management
The deterministic core of the pr-management skills: pr-management-triage's classification, guards and bodies, and the whole pr-management-stats dashboard. It reads the reads a skill saved with vetted-op-read --save, plus the adopter's…
- analytics
preflight-audit
Tests bulk-workflow classification rules against real or recorded tracker data.
- analytics
privacy-llm
Detects and redacts personal information before content reaches an external model.
- privacy
Probe templates
Provides reusable scripts for testing related failure scenarios when reproducing an issue.
- sandbox
release-config
Loads the release-management configuration an adopter keeps in <project-config> and runs the deterministic part of each release-* skill's Step 0 — Pre-flight check, printing JSON. Required keys, argument formats, the digest-set rule,…
- release
release-management
The deterministic core of the release-management skills. release-config resolves the configuration and runs each skill's Step 0; this tool takes what release-config load printed and renders everything the skill hands the release…
- release
release-verify
Deterministic, read-only checks of a staged release candidate, one subcommand per mechanical step of the release-verify-rc skill, plus list-keys, which lists the public keys in a KEYS file or a fetched key for release-keys-sync. Each…
- release
reproducible-archive
Builds, lints and compares reproducible source archives. The archive is always derived from git archive <ref>, so only tracked files at the tag are packed and the repository's .gitattributes export-ignore rules decide what stays out. On…
- release
sandbox-lint
Checks Claude Code sandbox settings against Magpie’s baseline and security requirements.
- sandbox
scan-format
Defines how security workflows read findings from different scanner formats.
- scan-format
secret-prompt
Asks the operator for a secret, such as a single-use PyPI token, and runs the prompt into that command's environment and nowhere else: it is never printed, written to a file, or passed on a command line, so it stays out of the shell…
- release
security-management
The deterministic core of the security-* skills. Each skill family is a subcommand: security-issue-import (issue-import), security-issue-import-from-pr (issue-import-from-pr) security-issue-import-from-md (issue-import-from-md)…
- analytics
security-tracker
The seam between the security-* skills and the place a project keeps its security reports. contract:tracker covers issue trackers in general; this contract adds what handling embargoed reports needs on top of it — named body fields, the…
- security-tracker
security-tracker-stats-dashboard
Builds an HTML dashboard of security-report progress and backlog.
- analytics
setup-preflight
Resolve a project's Magpie setup state, and one skill's fingerprint, into a machine-readable verdict.
- setup
skill-and-tool-validator
Checks skill metadata, internal links, and placeholder conventions.
- framework-dev
skill-evals
Tests skill behavior against example cases and expected structured outputs.
- framework-dev
skill-lock
A per-skill write lock for the batch skills. A sweep's read and classify phase has no side effects and may run concurrently with anything. Its write phase (posting triage comments, stale nudges, labels, closes) must not: two overlapping…
- action-guard
skill-reconciler-diff
Compares two sets of skill files and reports structural changes.
- framework-dev
skill-token-count
Measures skill token counts and checks the published measurements.
- framework-dev
- analytics
SourceHut (sr.ht) Forge Bridge
Connects Magpie to SourceHut tickets, patch reviews, builds, and repositories.
- tracker
- source-control
- mail-archive
spec-inventory
Indexes repository information for the specification-driven development loop.
- framework-dev
- analytics
spec-loop
Runs development iterations against a specification with human approval points.
- framework-dev
spec-status-index
Groups development specifications by status to identify the next work item.
- framework-dev
- analytics
spec-validator
Checks development specification files against the framework’s format.
- framework-dev
symlink-lint
Checks that framework skill symlinks are wired correctly.
- framework-dev
tracker
This file is the interface spec for the read-only activity queries of contract:tracker — the issue tracker where a project's bugs and feature requests live. It is deliberately minimal. The rest of the tracker contract (issue read /…
- tracker
typed-decision
Provider-agnostic typed decision adapter contract (choice, score, noul) with TypeSafe's Jev API (api.typesafe.ai/v1/systemone) as the initial reference backend and an in-tree local OpenAI-compatible provider (Ollama / llama.cpp / vLLM)…
- typed-decision
magpie-vcs
Provides common version-control operations through a shared interface.
Git- Implemented
- Experimental
- source-control
vendor-neutrality-score
Measures vendor neutrality from the framework’s tool and skill metadata.
- framework-dev
- analytics
vetted-ops
Runs a defined set of policy-scoped forge operations through one dispatcher.
- sandbox
No matching tools. Try another search or clear the filters.