# Documentation for the Magma Moose tools

> Documentation for Diatreme, Chargate, Brimyr, Draventis, Tremvok and Ponvara: setup, the full reference and the reasoning behind each design. Free to read.

Canonical: <https://www.magmamoose.com/documentation/> · Last updated: 2026-09-23

Each tool has its own documentation site: how to set it up, the full reference, and the reasoning behind its design. All of it is free to read, with no sign-in.

docs.magmamoose.com

*the tools*

## Start with the tool you run.

### Diatreme

release orchestration

One GitHub Action for the entire release: versioning, releases, changelogs, signed commits, provenance-verified Docker promotion and SBOMs.

[Read the docs for Diatreme](https://docs.magmamoose.com/diatreme/) [Product page for Diatreme](https://www.magmamoose.com/diatreme/)

### Chargate

security & lint gating

Security assurance for a pull request: it gates on the security and lint findings that PR introduced, so the backlog never blocks.

[Read the docs for Chargate](https://docs.magmamoose.com/chargate/) [Product page for Chargate](https://www.magmamoose.com/chargate/)

### Brimyr

patch-coverage gating

Quality assurance for a pull request: it gates on the coverage of the lines that PR changed, so legacy debt never blocks.

[Read the docs for Brimyr](https://docs.magmamoose.com/brimyr/) [Product page for Brimyr](https://www.magmamoose.com/brimyr/)

### Draventis

scheduled security testing

early

Tests what you actually deployed: OWASP ZAP and Nuclei run against your running targets on a schedule, and the findings land in DefectDojo.

[Read the docs for Draventis](https://docs.magmamoose.com/draventis/) [Product page for Draventis](https://www.magmamoose.com/draventis/)

*also documented*

## Two more tools with documentation of their own.

### Tremvok

deployment orchestration

One GitHub Action for the whole deploy side: GitHub Pages, Cloudflare Workers, S3 and CloudFront, Lambda, Terragrunt and Ansible, and it checks that each deploy actually went live.

[Read the docs for Tremvok](https://docs.magmamoose.com/tremvok/)

### Ponvara

finding bus

It pulls security findings from sources that cannot push to DefectDojo themselves, such as Dependency-Track and GitHub Advanced Security, and reimports them there.

[Read the docs for Ponvara](https://docs.magmamoose.com/ponvara/)

*for your AI assistant*

## Your assistant can read them too.

Every docs site publishes [llms.txt](https://docs.magmamoose.com/llms.txt) and llms-full.txt. All of the public documentation is also searchable over MCP at `https://mcp.magmamoose.com/`, a public, read-only server over Streamable HTTP with no sign-in.

**Claude** on the web or desktop, on any plan (Free allows one custom connector): open Customize › Connectors, choose +, then Add custom connector, and paste the URL. Turn it on in a chat from the + menu, under Connectors.

**ChatGPT** on the web (Plus, Pro, Business, Enterprise and Edu): turn on Developer mode under Settings › Security and login, then add a developer-mode app with the same URL and no authentication.

terminal:

```
# Claude Code
claude mcp add --transport http magmamoose https://mcp.magmamoose.com/

# Codex: the CLI, the IDE extension and the ChatGPT
# desktop app share this one config
codex mcp add magmamoose --url https://mcp.magmamoose.com/
```

## Links

- [Open source: GitHub](https://github.com/MagmaMoose)
- [Open source: Homebrew tap](https://github.com/MagmaMoose/homebrew-tap)
- [Company: Contact](mailto:hello@magmamoose.com)
- [Company: LinkedIn](https://www.linkedin.com/company/magmamoose)