Modules

Model Context Protocol client

e2e cross-env queue fix validation (incident 2026-05-18)

System monitor — stats collector and TUI dashboard for Wippy applications

Document analysis and field extraction

Kickside Transfer — export and import a user's own components (and their backing data) between environments. Owns the exportable-component picker, the batch orchestrator, archive packaging, and the export/import API.

Kickside webscout — web research tools and an installable GTM candidate scan through Google Custom Search.

Self-modifying development agent that builds its own tools at runtime

Kickside webhooks — user-minted, secret-secured, schema-validated public webhook endpoints. Each webhook is a thread-backed component (class kickside.webhooks) that acts as a data-flow trigger source; the public endpoint verifies the secret, validates the body against the webhook's declared schema, and appends it as a thread event the poller drains.

Docker integration for Wippy - container, image, network, and volume management over the daemon socket with declarative container reconcile

Sandboxed Lua execution and one canonical Run Code Block, bounded to an installer-whitelisted tool set. Ships the Block editor, SDK-reference and assist endpoints, a dry-run-validated generator, and the agent trait.

Kickside Atlassian — Jira and Confluence provider. Self-declares as an oauth_provider discovered by kickside/oauth (3LO) and supports stored-credential connections (Cloud API token / Server PAT). Ships agent tools (JiraRead/JiraWrite, ConfluenceRead/ConfluenceWrite) over a shared authenticated transport.

Kickside Google — Google OAuth connection provider, agent traits and connection picker for Gmail, Drive, Calendar, Docs, Sheets, Slides, Contacts and Analytics.

Kickside Discord provider — bot-token connection, reply provider, resource discovery, normalized inbound adapter for DM/channel bots, and data-sync source/sink for channel messages.

Kickside DM — bridges inbound external direct messages onto private, user-owned agent chats. After pairing an external identity to an internal user (surfaced via inbox), a DM is backed by a user-owned kickside.core thread; a provider-chosen automation runs the agent on it under the user's actor, and replies go back out via kickside.connection.

Kickside MCP — user- and workspace-scoped Model Context Protocol endpoints. A user mints a scoped bearer credential whose synthetic principal is granted, over a chosen component subtree (their account root or a workspace slice), only the access the owner themselves holds. A single stateless streamable-HTTP endpoint multiplexes every credential; two-layer authz (tool allowlist + the native component access model) gates each call. Tokens are hashed at rest and shown once.

Kickside PhantomBuster — API-key connection provider with agent discovery, read/write tools, and an installable GTM candidate pull.

OAuth 2.0 connection management with PKCE support

Kickside llm-ocr — LLM-based OCR for scanned/image-only documents. Transcribes stored page screenshots into text and supersedes empty extracted content, with an admin-editable model pointer.

Multi-user-safe Streamable HTTP MCP connections and dynamic agent tools for Kickside.

Kickside HubSpot — private-app-token connection provider for the HubSpot CRM, with split read/write agent tools over contacts, companies, deals, and tasks.