Documentation for the Magma Moose tools

Each tool has its own documentation site: how to set it up, the full reference, and the reasoning behind its design. All of it is free to read, with no sign-in.

docs.magmamoose.com

// the tools

Start with the tool you run.

Diatreme

release orchestration

One GitHub Action for the entire release: versioning, releases, changelogs, signed commits, provenance-verified Docker promotion and SBOMs.

Read the docs Product page

Chargate

security & lint gating

Security assurance for a pull request: it gates on the security and lint findings that PR introduced, so the backlog never blocks.

Read the docs Product page

Brimyr

patch-coverage gating

Quality assurance for a pull request: it gates on the coverage of the lines that PR changed, so legacy debt never blocks.

Read the docs Product page

Draventis

scheduled security testing

● early

Tests what you actually deployed: OWASP ZAP and Nuclei run against your running targets on a schedule, and the findings land in DefectDojo.

Read the docs Product page

// also documented

Two more tools with documentation of their own.

Tremvok

deployment orchestration

One GitHub Action for the whole deploy side: GitHub Pages, Cloudflare Workers, S3 and CloudFront, Lambda, Terragrunt and Ansible, and it checks that each deploy actually went live.

Read the docs

Ponvara

finding bus

It pulls security findings from sources that cannot push to DefectDojo themselves, such as Dependency-Track and GitHub Advanced Security, and reimports them there.

Read the docs

// for your AI assistant

Your assistant can read them too.

Every docs site publishes llms.txt and llms-full.txt. All of the public documentation is also searchable over MCP at https://mcp.magmamoose.com/, a public, read-only server over Streamable HTTP with no sign-in.

Claude on the web or desktop, on any plan (Free allows one custom connector): open Customize › Connectors, choose +, then Add custom connector, and paste the URL. Turn it on in a chat from the + menu, under Connectors.

ChatGPT on the web (Plus, Pro, Business, Enterprise and Edu): turn on Developer mode under Settings › Security and login, then add a developer-mode app with the same URL and no authentication.

terminal

# Claude Code
claude mcp add --transport http magmamoose https://mcp.magmamoose.com/

# Codex: the CLI, the IDE extension and the ChatGPT
# desktop app share this one config
codex mcp add magmamoose --url https://mcp.magmamoose.com/