Extend FinAegis with a secure, sandboxed plugin system. Discover, install, and manage plugins with built-in security scanning and permission enforcement.
Install, enable, disable, update, and remove plugins with semver-aware dependency resolution. Full lifecycle management via API or admin UI.
Plugins run in a permission-enforced sandbox. Each plugin declares required permissions and is restricted from accessing unauthorized resources.
Static analysis scans plugin code for dangerous patterns before activation. Severity classification (critical, high, medium, low) with detailed reporting.
Plugins integrate via a hook-based system that fires at key points in the platform lifecycle. Hooks are type-safe and support priority ordering.
| Method | Endpoint | Description |
|---|---|---|
| GET | /api/v2/plugins | List all plugins |
| GET | /api/v2/plugins/{id} | Show plugin details |
| POST | /api/v2/plugins/{id}/enable | Enable a plugin |
| POST | /api/v2/plugins/{id}/disable | Disable a plugin |
| POST | /api/v2/plugins/{id}/scan | Run security scan |
| POST | /api/v2/plugins/discover | Discover new plugins |
| DELETE | /api/v2/plugins/{id} | Remove a plugin |
The full plugin management UI is available in the Filament admin dashboard. Browse installed plugins, run security scans, enable/disable plugins, and discover new ones.
Requires admin authentication
FinAegis ships with reference plugins that demonstrate the hook system and serve as templates for custom development.
Sends HTTP webhooks on platform events. Supports configurable endpoints, retry logic, and payload signing.
Exports audit trail events to external systems. Supports CSV, JSON, and direct database export with scheduled runs.