Sandbox

Plugin Marketplace

Extend FinAegis with a secure, sandboxed plugin system. Discover, install, and manage plugins with built-in security scanning and permission enforcement.

Core Capabilities

Plugin Manager

Install, enable, disable, update, and remove plugins with semver-aware dependency resolution. Full lifecycle management via API or admin UI.

Sandbox Execution

Plugins run in a permission-enforced sandbox. Each plugin declares required permissions and is restricted from accessing unauthorized resources.

Security Scanner

Static analysis scans plugin code for dangerous patterns before activation. Severity classification (critical, high, medium, low) with detailed reporting.

17 Integration Hooks

Plugins integrate via a hook-based system that fires at key points in the platform lifecycle. Hooks are type-safe and support priority ordering.

account.* Account creation, updates, deletion
transaction.* Pre/post transaction processing
compliance.* KYC/AML verification triggers
wallet.* Wallet operations and balance changes
security.* Authentication and authorization events
// Example: Webhook Notifier Plugin
class WebhookNotifierPlugin
{
public string $name = 'webhook-notifier';
public array $hooks = [
'transaction.completed',
'account.created',
];
public array $permissions = [
'http:outbound',
'config:read',
];
}

Plugin REST API

Method Endpoint Description
GET /api/v2/plugins List all plugins
GET /api/v2/plugins/{id} Show plugin details
POST /api/v2/plugins/{id}/enable Enable a plugin
POST /api/v2/plugins/{id}/disable Disable a plugin
POST /api/v2/plugins/{id}/scan Run security scan
POST /api/v2/plugins/discover Discover new plugins
DELETE /api/v2/plugins/{id} Remove a plugin

Manage Plugins in the Admin Panel

The full plugin management UI is available in the Filament admin dashboard. Browse installed plugins, run security scans, enable/disable plugins, and discover new ones.

Open Plugin Marketplace

Requires admin authentication

Built-in Plugins

FinAegis ships with reference plugins that demonstrate the hook system and serve as templates for custom development.

Webhook Notifier

webhook-notifier

Sends HTTP webhooks on platform events. Supports configurable endpoints, retry logic, and payload signing.

Audit Exporter

audit-exporter

Exports audit trail events to external systems. Supports CSV, JSON, and direct database export with scheduled runs.

Extend the platform your way

17 integration hooks, sandboxed execution, and a security scanner. Build plugins that ship with confidence.

Developer Docs View APIs