24 integrations · 8 database engines
Everything toil connects to.
Each one is a command area or a database engine. It signs in with a token or account you set up once, and returns the same JSON envelope.
- unit
Shipped, with its logic tested against stubbed HTTP. Never run against a real instance.
- live
Run against a real instance; its common commands work there.
- stable
In routine use against real instances, with its commands and output settled.
Work tracking
Where the work is planned and tracked.
-
toil jiraunitJira
Issues, search, transitions, comments, worklogs, attachments, custom fields, projects, users, boards, sprints
Sign-in Personal access token (Data Center) or Atlassian account email and API token (Cloud)
-
toil adounitAzure DevOps
Work items, boards, backlogs, sprints, repos, pull requests, comments, votes, pipelines
Sign-in Personal access token (Server), or an organization-scoped one (Services)
Source and review
Where code is kept and reviewed.
-
toil githubunitGitHub & GitHub Enterprise
Pull requests, reviews, issues, projects, checks
Sign-in Fine-grained PAT
-
toil bitbucketunitBitbucket
Repositories, branches, tags, commits, files, pull requests, comments, builds, Pipelines
Sign-in HTTP access token (Data Center) or Atlassian API token with Bitbucket scopes, or an access token (Cloud)
-
toil gitunitLocal git
Status, diff, log, branches, commit report
Sign-in None — local
Databases
One set of db commands for every engine.
-
engine: sqliteliveSQLite
Sign-in None — a local file
-
engine: postgreslivePostgreSQL
Sign-in User and password
-
engine: mysqlliveMySQL / MariaDB
Sign-in User and password
-
engine: sqlserverliveSQL Server
Sign-in SQL login, or Windows authentication
-
engine: oracleliveOracle
Sign-in User and password
-
engine: teradataunitTeradata
Sign-in User and password, or a bearer token
-
engine: hiveliveHive
Sign-in A read-only account's user and password
-
engine: impalaliveImpala
Sign-in A read-only account's user and password
CI/CD and runtime
Where code becomes something running.
-
toil jenkinsunitJenkins
Jobs, builds, console logs, queue
Sign-in API token
-
toil artifactoryunitJFrog Artifactory
Repositories, artifact search, versions, licenses
Sign-in Access token
-
toil openshiftunitOpenShift / Kubernetes
Pods, events, logs, metrics, deployments
Sign-in Service account token
Testing and flags
Test runs, devices and feature flags.
-
toil saucelabsunitSauce Labs
Test jobs, builds, real devices and device sessions, tunnels, platforms, app storage, teams
Sign-in Username and access key
-
toil splitiounitSplit.IO
Feature flags, environments, change requests
Sign-in Admin API key
Security and quality
The scanners and gates every change has to clear.
-
toil sonarunitSonarQube
Quality gates, issues, hotspots, measures
Sign-in User token
-
toil checkmarxunitCheckmarx One
Projects, scans and scan results statistics
Sign-in API key, exchanged over HTTP
-
toil contrastunitContrast Security
Applications, vulnerability findings, libraries
Sign-in API key + service key
-
toil sonatypeiqunitSonatype IQ Server
Applications, organizations, policies, policy evaluations
Sign-in User token pair
-
toil sdeunitSD Elements
Projects, countermeasures, threats, users
Sign-in API token
-
toil osvunitOSV.dev
Known vulnerabilities for a dependency inventory, from the public OSV database
Sign-in None — public API
-
toil ossindexunitSonatype OSS Index
Known vulnerabilities for a dependency inventory, from Sonatype's public index
Sign-in Account username and API token
Observability
What production is actually doing.
-
toil dynatraceunitDynatrace
Problems, entities, traces
Sign-in Access token
-
toil logscaleunitFalcon LogScale
Log queries, repositories
Sign-in Personal API token
-
toil elasticsearchunitElasticsearch
Search, count, indices, cluster health
Sign-in API key
-
toil kibanaunitKibana
Status, spaces, dashboards, data views, alerting rules
Sign-in API key
Docs and design
The context engineers pull in from outside the code.
-
toil confluenceunitConfluence
Pages, spaces, search, comments, labels, attachments
Sign-in Personal access token (Data Center) or Atlassian account email and API token (Cloud)
-
toil figmaunitFigma
Files from a link, comments, version history
Sign-in Personal access token
-
toil alationunitAlation
Catalog metadata, search, documents
Sign-in Refresh token, exchanged over HTTP
Dependency checks
One command per source. You compose.
No single command quietly asks four services on your behalf. Build an inventory locally, then pipe it to exactly the sources you trust, and every finding says where it came from.
$ toil deps scan | toil osv vulns $ toil deps scan > inventory.json $ toil sonatypeiq evaluate --from inventory.json --application-id payments-api
| Command | Source | Covers | Network |
|---|---|---|---|
toil deps scan | Local manifests | Package inventory for npm, Maven and NuGet | None |
toil deps diff | Local manifests | Packages added, removed or changed between two refs | None |
toil osv vulns | OSV.dev | Known vulnerabilities for an inventory | Public API |
toil ossindex vulns | Sonatype OSS Index | Known vulnerabilities for an inventory | Public API |
toil sonatypeiq evaluate | Sonatype IQ Server | Policy evaluation against an application | Your server |
toil deps frisk --source <one> | The source you name | Alias for the matching command above | As above |
toil deps outdated | JFrog Artifactory | Newer versions in your mirrors | Your server |
toil deps license-check | JFrog Artifactory | License metadata for an inventory | Your server |