In-process
A source kind registered directly in the default control-plane binary.
Product · Integrations
Connect the agents, identity systems, infrastructure, data sources and output destinations already in your estate. Every row below comes from the product connector truth table.
Measured snapshot: 152 connector directories; 99 in-process kinds; 67 go-plugin binaries; 22 output kinds; 22 identity roster providers; 11 content sources.
12 directories are shared contract libraries, not connector capabilities.
A connector can carry more than one kind. The badges on each row reproduce the hub classification.
A source kind registered directly in the default control-plane binary.
An out-of-process connector binary using the Go plugin boundary.
A destination that implements the output connector contract.
A read-only provider that supplies identity graph snapshots.
A pull-driven knowledge source; its live/export detail remains visible in the technical badge.
Filter by functional category. Technical kind badges and evidence notes remain in English because they mirror the fast-moving source truth table.
152 shown
a2aTruth-table note
implements sdk.SourceConnector but has no sources.go case and no cmd/*/main.go; unreachable in default binary
aaaTruth-table note
default-binary source registry
agent365Truth-table note
default-binary source registry; Snapshot consumed by modules/governance/roster.go:125; GraphProvider contract connectors/identitysource/identitysource.go:357; Graph v1.0 package inventory with app-permission client credentials or delegated token; opt-in detail enrichment; Gather emits registry-hygiene findings @ connectors/agent365/posture.go:30; no usage/owner/risk/Agent Map read API
agentcoreTruth-table note
default-binary source registry; Snapshot consumed by modules/governance/roster.go:125; GraphProvider contract connectors/identitysource/identitysource.go:357
agentsmdTruth-table note
default-binary source registry
ai-gatewayTruth-table note
default-binary source registry
aicontroltowerTruth-table note
Snapshot consumed by modules/governance/roster.go:125; GraphProvider contract connectors/identitysource/identitysource.go:357; Gather returns nil @ connectors/aicontroltower/aicontroltower.go:207; roster-only S14-2 pattern; emits no observations
amqpTruth-table note
No additional note recorded.
argocdTruth-table note
default-binary source registry
awsTruth-table note
No additional note recorded.
awskmsTruth-table note
default-binary source registry; Snapshot consumed by modules/governance/roster.go:125; GraphProvider contract connectors/identitysource/identitysource.go:357
azure-activityTruth-table note
default-binary source registry
azure-blob-auditTruth-table note
default-binary source registry
azure-openaiTruth-table note
default-binary source registry
azureaisearchTruth-table note
List @ connectors/azureaisearch/azureaisearch.go:105; Fetch live-dispatch/export-fallback @ connectors/azureaisearch/azureaisearch.go:116; live fetch impl @ connectors/azureaisearch/live.go:267
azurekeyvaultTruth-table note
default-binary source registry; Snapshot consumed by modules/governance/roster.go:125; GraphProvider contract connectors/identitysource/identitysource.go:357
backstageTruth-table note
non-Go scaffold: backend 20 tests and frontend 26 tests passed; package builds fail on dist-types
bedrockTruth-table note
No additional note recorded.
bedrock-kbTruth-table note
implements sdk.SourceConnector but has no sources.go case and no cmd/*/main.go; unreachable in default binary
bigquery-auditTruth-table note
default-binary source registry
chronicleTruth-table note
No additional note recorded.
claudeTruth-table note
No additional note recorded.
claude-apiTruth-table note
default-binary source registry
claude-apps-gatewayTruth-table note
default-binary source registry
claude-batchTruth-table note
implements sdk.SourceConnector but has no sources.go case and no cmd/*/main.go; unreachable in default binary
claude-complianceTruth-table note
default-binary source registry
claude-configTruth-table note
default-binary source registry
claude-consoleTruth-table note
Snapshot consumed by modules/governance/roster.go:125; GraphProvider contract connectors/identitysource/identitysource.go:357
claude-managed-agentsTruth-table note
default-binary source registry
claude-projectsTruth-table note
default-binary source registry
claude-routinesTruth-table note
implements sdk.SourceConnector but has no sources.go case and no cmd/*/main.go; unreachable in default binary
claude-wifTruth-table note
Snapshot consumed by modules/governance/roster.go:125; GraphProvider contract connectors/identitysource/identitysource.go:357
clineTruth-table note
default-binary source registry
cloudflareTruth-table note
implements sdk.SourceConnector but has no sources.go case and no cmd/*/main.go; unreachable in default binary
cloudflare-ai-gatewayTruth-table note
No additional note recorded.
cloudflare-mcp-portalsTruth-table note
No additional note recorded.
cloudqueueTruth-table note
No additional note recorded.
codexTruth-table note
default-binary source registry
codex-managed-configTruth-table note
default-binary source registry
cohereTruth-table note
implements sdk.SourceConnector but has no sources.go case and no cmd/*/main.go; unreachable in default binary
confluenceTruth-table note
List @ connectors/confluence/confluence.go:86; Fetch live-dispatch/export-fallback @ connectors/confluence/confluence.go:97; live fetch impl @ connectors/confluence/live.go:243
contentsourceTruth-table note
shared contract/internal library; excluded from capability counts
coworkTruth-table note
No additional note recorded.
cowork-analyticsTruth-table note
default-binary source registry
crossplaneTruth-table note
default-binary source registry
cursorTruth-table note
default-binary source registry
databricks-ucTruth-table note
default-binary source registry
datadogTruth-table note
No additional note recorded.
datasourceaclTruth-table note
shared contract/internal library; excluded from capability counts
debeziumTruth-table note
No additional note recorded.
deepseekTruth-table note
default-binary source registry
delta-sharingTruth-table note
default-binary source registry
ebpfTruth-table note
default-binary source registry
edugainTruth-table note
default-binary source registry
egress-proxyTruth-table note
default-binary source registry
elasticTruth-table note
No additional note recorded.
emailTruth-table note
No additional note recorded.
entra-agentTruth-table note
default-binary source registry; Snapshot consumed by modules/governance/roster.go:125; GraphProvider contract connectors/identitysource/identitysource.go:357; roster includes agentIdentity, agentUser, blueprints, blueprint principals, owners/sponsors, orphan marking and opt-in soft-deleted identities; Gather emits blueprint static-secret drift, CA/risky-agent/governance/sponsorless posture findings, and opt-in beta auditLogs/signIns observed agent access edges
envoyTruth-table note
No additional note recorded.
exampleTruth-table note
No additional note recorded.
externalsecretsTruth-table note
default-binary source registry; Snapshot consumed by modules/governance/roster.go:125; GraphProvider contract connectors/identitysource/identitysource.go:357
falTruth-table note
default-binary source registry
filelogTruth-table note
No additional note recorded.
fluxTruth-table note
default-binary source registry
foundry-agentsTruth-table note
default-binary source registry; Snapshot consumed by modules/governance/roster.go:125; GraphProvider contract connectors/identitysource/identitysource.go:357; reads Foundry projects, agent applications/deployments and current Agent Service agents; Gather emits ARM-derived application posture findings @ connectors/foundry-agents/posture.go:25; minimal-data: instructions/tools/metadata are not decoded; per-project data-plane 403 is tolerated
fscontentTruth-table note
S376 read-only filesystem batch content source (stdlib, os.Root-confined); Fetch @ connectors/fscontent/fscontent.go:155; minimal-data, export-store backed
gcp-auditTruth-table note
default-binary source registry
gcpkmsTruth-table note
default-binary source registry; Snapshot consumed by modules/governance/roster.go:125; GraphProvider contract connectors/identitysource/identitysource.go:357
gcs-auditTruth-table note
default-binary source registry
gdriveTruth-table note
List @ connectors/gdrive/gdrive.go:90; Fetch live-dispatch/export-fallback @ connectors/gdrive/gdrive.go:101; live fetch impl @ connectors/gdrive/live.go:242
geminiTruth-table note
No additional note recorded.
gemini-cliTruth-table note
default-binary source registry
githubTruth-table note
default-binary source registry
gitlabTruth-table note
default-binary source registry
glmTruth-table note
default-binary source registry; declared GLM catalog + USD list-pricing Meter; no usage/billing API; PRC-nexus / Entity-List sovereignty caveat on both z.ai and bigmodel.cn surfaces
google-agentTruth-table note
default-binary source registry; Snapshot consumed by modules/governance/roster.go:125; GraphProvider contract connectors/identitysource/identitysource.go:357; Gather emits Agent Registry / Agent Gateway posture findings and shadow-agent detection @ connectors/google-agent/googleagent.go:285; minimal-data: registry card/skills/descriptions and MCP tool descriptions are not decoded
gooseTruth-table note
default-binary source registry
hermesTruth-table note
default-binary source registry; S321 re-pinned to real `~/.hermes/config.yaml` + `/etc/hermes` managed-scope surface with discovery + state-tree findings
hubbleTruth-table note
No additional note recorded.
iceberg-catalogTruth-table note
default-binary source registry
identitysourceTruth-table note
shared contract/internal library; excluded from capability counts
idpTruth-table note
default-binary source registry; Snapshot consumed by modules/governance/roster.go:125; GraphProvider contract connectors/identitysource/identitysource.go:357
inference-gatewayTruth-table note
default-binary source registry
infisicalTruth-table note
default-binary source registry; Snapshot consumed by modules/governance/roster.go:125; GraphProvider contract connectors/identitysource/identitysource.go:357
internalTruth-table note
shared contract/internal library; excluded from capability counts
istio-telemetryTruth-table note
default-binary source registry
jiraTruth-table note
No additional note recorded.
kafkaTruth-table note
No additional note recorded.
kerberosTruth-table note
default-binary source registry
keycloakTruth-table note
Snapshot consumed by modules/governance/roster.go:125; GraphProvider contract connectors/identitysource/identitysource.go:357; Gather returns nil @ connectors/keycloak/keycloak.go:226; roster-only S14-2 pattern; emits no observations
kmipTruth-table note
default-binary source registry; Snapshot consumed by modules/governance/roster.go:125; GraphProvider contract connectors/identitysource/identitysource.go:357
kong-auditTruth-table note
default-binary source registry
ldapTruth-table note
default-binary source registry; Snapshot consumed by modules/governance/roster.go:125; GraphProvider contract connectors/identitysource/identitysource.go:357
localTruth-table note
No additional note recorded.
managedsettingsTruth-table note
default-binary source registry
mcpTruth-table note
default-binary source registry
mcpbTruth-table note
default-binary source registry
mistralTruth-table note
default-binary source registry
modelproviderTruth-table note
shared contract/internal library; excluded from capability counts
modelrouterTruth-table note
shared contract/internal library; excluded from capability counts
mongo-auditTruth-table note
default-binary source registry
mqttTruth-table note
No additional note recorded.
mssql-auditTruth-table note
default-binary source registry
mysqlauditTruth-table note
No additional note recorded.
natsTruth-table note
No additional note recorded.
notionTruth-table note
List @ connectors/notion/notion.go:85; Fetch live-dispatch/export-fallback @ connectors/notion/notion.go:96; live fetch impl @ connectors/notion/live.go:303
oasfTruth-table note
default-binary source registry; Snapshot consumed by modules/governance/roster.go:125; GraphProvider contract connectors/identitysource/identitysource.go:357
onepasswordTruth-table note
default-binary source registry; Snapshot consumed by modules/governance/roster.go:125; GraphProvider contract connectors/identitysource/identitysource.go:357
openaiTruth-table note
No additional note recorded.
openclawTruth-table note
default-binary source registry; S321 re-pinned to real `~/.openclaw/openclaw.json` JSON5 surface with discovery + per-agent findings
opencodeTruth-table note
default-binary source registry; local opencode.json(c) JSONC governance with permission/admin-override/MCP/share/OTEL posture and permitted MCP/tool/custom-agent edges
openhandsTruth-table note
default-binary source registry
openidfedTruth-table note
default-binary source registry
openlineageTruth-table note
default-binary source registry
opsgenieTruth-table note
No additional note recorded.
oracle-auditTruth-table note
default-binary source registry
otlplogTruth-table note
No additional note recorded.
pagerdutyTruth-table note
No additional note recorded.
pgauditTruth-table note
default-binary source registry
pgcontentTruth-table note
S375 read-only Postgres content source; Fetch live-dispatch/export-fallback @ connectors/pgcontent/pgcontent.go:131; live fetch @ connectors/pgcontent/pgcontent.go:145; DeltaList/FetchACL/Discover live-only
redactTruth-table note
shared contract/internal library; excluded from capability counts
redshift-auditTruth-table note
default-binary source registry
runtimeTruth-table note
default-binary source registry
s3archiveTruth-table note
No additional note recorded.
s3cloudtrailTruth-table note
default-binary source registry
s3contentTruth-table note
List @ connectors/s3content/s3content.go:93; Fetch live-dispatch/export-fallback @ connectors/s3content/s3content.go:104; live fetch impl @ connectors/s3content/live.go:168
salesforceTruth-table note
List @ connectors/salesforce/salesforce.go:89; Fetch live-dispatch/export-fallback @ connectors/salesforce/salesforce.go:100; live fetch impl @ connectors/salesforce/live.go:206
sapodataTruth-table note
List @ connectors/sapodata/sapodata.go:89; Fetch live-dispatch/export-fallback @ connectors/sapodata/sapodata.go:100; live fetch impl @ connectors/sapodata/live.go:266
secretrefTruth-table note
shared contract/internal library; excluded from capability counts
servicenowTruth-table note
No additional note recorded.
sharepointTruth-table note
List @ connectors/sharepoint/sharepoint.go:86; Fetch live-dispatch/export-fallback @ connectors/sharepoint/sharepoint.go:97; live fetch impl @ connectors/sharepoint/live.go:210
siemTruth-table note
No additional note recorded.
siemsinkTruth-table note
shared contract/internal library; excluded from capability counts
slackTruth-table note
No additional note recorded.
snmpTruth-table note
No additional note recorded.
snowflakeTruth-table note
List @ connectors/snowflake/snowflake.go:91; Fetch live-dispatch/export-fallback @ connectors/snowflake/snowflake.go:102; live fetch impl @ connectors/snowflake/live.go:296
snowflake-auditTruth-table note
default-binary source registry
sopsTruth-table note
default-binary source registry; Snapshot consumed by modules/governance/roster.go:125; GraphProvider contract connectors/identitysource/identitysource.go:357
spiffeTruth-table note
Snapshot consumed by modules/governance/roster.go:125; GraphProvider contract connectors/identitysource/identitysource.go:357; Gather returns nil @ connectors/spiffe/spiffe.go:198; roster-only S14-2 pattern; emits no observations
splunkhecTruth-table note
No additional note recorded.
ssfTruth-table note
default-binary source registry
syslogTruth-table note
No additional note recorded.
takTruth-table note
default-binary source registry · S349 clean-room CoT connector: TAK Server posture from CoreConfig.xml (offline) + optional live version probe, and governed Cursor-on-Target ingest over UDP/TCP (minimal-data: coordinates/`<detail>` never leave, uid hashed by default). CoT wire format implemented from the public-release MITRE spec; links no GPL TAK/ATAK code
teamsTruth-table note
No additional note recorded.
threatfeedTruth-table note
shared contract/internal library; excluded from capability counts
twilioTruth-table note
No additional note recorded.
vaultTruth-table note
default-binary source registry; Snapshot consumed by modules/governance/roster.go:125; GraphProvider contract connectors/identitysource/identitysource.go:357
vectorindexTruth-table note
shared contract/internal library; excluded from capability counts
vertexTruth-table note
default-binary source registry
voiceTruth-table note
shared contract/internal library; excluded from capability counts; S334 added the OpenAI Realtime SIP call plane (webhook verify, call-control REST, sideband client via connectors/internal/wsclient, per-modality usage) consumed by modules/voice through cmd wiring
webhookTruth-table note
No additional note recorded.
xaiTruth-table note
default-binary source registry