Works with the tools you have, through your host.
Every integration below works today. Its status says how far: "tested", or "built and not yet tested against a live account". Everything else is on the list at the bottom.
Press a jack to patch it into the host and read how it connects, and where it stops.
Kodela hostyour hardware
GitHub App
- How it connects
- A GitHub App you create. Its key stays on your host, and workspaces get short-lived per-repository tokens (about an hour) through the git broker.
- Its limit
- GitHub only. Direct GitHub is refused only below file-transfer "both". The pull-requests pane stays inert until the App can read pull requests and issues.
Logos name integrations; they are trademarks of their owners and do not imply endorsement. None of them is a customer.
Every integration, in one ledger
We list only what works today. Everything else is on the "not yet" list at the bottom.
| Integration | Category | How it connects | Status | Limit |
|---|---|---|---|---|
| GitHub App | Git | A GitHub App you create. Its key stays on your host, and workspaces get short-lived per-repository tokens (about an hour) through the git broker. | tested | GitHub only. Direct GitHub is refused only below file-transfer "both". The pull-requests pane stays inert until the App can read pull requests and issues. |
| Anthropic | Models and agents | Chat and Claude Code go through the model proxy. The real key stays on the host; the workspace gets a per-workspace key that is worthless off the host. | tested | Under the open or metered level the token is mounted in the container, and the per-workspace key is readable by that developer. |
| OpenAI-compatible · Codex | Models and agents | The chat speaks the OpenAI dialect with a custom base URL. The Codex CLI goes through the key broker. | partial | The key broker is off until an admin turns it on, and some AI APIs can still be reached directly from a workspace. |
| Google Gemini | Models and agents | Chat through the OpenAI-compatible endpoint, with your AI Studio key held on the host. | tested | Chat only. There is no Gemini CLI in the workspace. |
| Google Antigravity | Models and agents | The CLI is installed in every workspace, and its credential is held on the host. | partial | The in-workspace Antigravity CLI does not use the key broker. |
| MCP servers | Models and agents | Servers your organisation allowlists, dialled through the egress proxy. | built · off by default | Off until an admin turns it on. No servers are bundled. |
| Open VSX | Editor | Pinned extensions for VS Code in the browser: Python, ESLint, Prettier, GitLens and Claude Code. | tested | The set is curated and pinned; extensions a devcontainer asks for are matched against it. |
| VS Code · JetBrains desktop | Editor | Desktop VS Code (Remote-SSH), JetBrains Gateway or plain ssh attach over a WebSocket with a 12-hour token. | built · off by default | Off until an admin turns it on. Attach bypasses file transfer, and the switch-on says so. |
| npm · PyPI | Runtime and more | Installs reach the registries through the egress allowlist, which includes them by default. | tested | npm publish can upload code today. It is on the known gaps list. |
| Microsoft Entra ID | Identity | Per-organisation single sign-on over OIDC, pinned to one tenant. | built · untested live | Not yet tested against a customer's live identity provider. No SAML or SCIM. |
| Google Workspace | Identity | Per-organisation single sign-on over OIDC, checked against your domain. | built · untested live | Not yet tested against a customer's live identity provider. No SAML or SCIM. |
| Any OIDC provider | Identity | Generic OIDC per organisation, for providers such as Okta or Keycloak. Endpoints are entered by hand; discovery is not fetched. | built · untested live | Untested with specific vendors, and not yet against a customer's live identity provider. |
| Cloudflare Tunnel · Access | Network | A Tunnel gives your host a public address without opening ports. Access, if you use it, is validated at the front door. | Tunnel tested · Access partial | The cloudflared image is not pinned. Access was verified only against a stand-in issuer. |
| Splunk · QRadar · ArcSight · Sentinel | Evidence | The audit log exports as CEF, LEEF, syslog (RFC 5424), JSON or CSV, which these tools read. | export only | You ship the export; we do not forward it. The host-wide HTTP export is operator-only; an organisation's Audit tab exports its current filter as CSV or JSON, and that export is audited. |
| SMTP relay | Runtime and more | Any SMTP relay you configure, for invitations, verification and password-reset mail. | partial · off by default | Mail refuses every send until you configure it, and no delivery is on record yet. |
| PostgreSQL | Runtime and more | Each new workspace gets its own Postgres by default (none, or connect your own server, are still choices), with a read-only Database tab. A server you supply connects through that tab; the model never sees the connection string. | partial | The default is skipped on a member's own computer and on a host without the Postgres image. The Database tab is read-only and never reads an external server's schema. |
| Docker | Runtime and more | Every workspace on your host is a Docker container, with a non-root user, limits and its own organisation network. If your organisation allows it, a workspace can also run docker and docker compose through a per-workspace broker. | tested | Containers, not VMs: no capability drop, seccomp profile or read-only root yet. Docker in a workspace is off until your organisation allows it, and is not available on members' computers. |
Not yet
None of these works today. Tell us which one would decide it for you.
- GitLab
- Bitbucket
- Azure DevOps
- SAML
- SCIM
- Slack or Teams notifications
- Jira or Linear
- SIEM forwarding
- Prometheus metrics
- Copilot
- Cursor
What it does not do yet
The limits that cut across every integration above.
- No public API, SDK or webhooks. Integrations are built into the host, not plugged in by you.
- Single sign-on is untested live. OIDC has not been exchanged with a customer's identity provider.
- Evidence is exported, not forwarded. Nothing ships to your SIEM on its own.
- Several are off by default: MCP servers, desktop IDE attach and the key broker.
Wire it to your stack
Start with the host. The guides cover the GitHub App, model providers and exports.