Package catalog

Everything an agent can use in a space comes from a package. A package adds one capability: an agent, a language, a tool, a sign-in to a service, or a set of allowed hosts. A stack bundles packages into a ready setup, a manifest picks a stack and your settings, and a space runs it. This page lists every package in the Marshal marketplace, grouped by kind. Your install shows new packages as the marketplace grows.

Only an admin can install a package. To see how a package gets into a space, read Marketplace packages. For install steps, see the how-to guides. For install errors, see Marketplace and packages.

Pick by goal

You want the agent to…	Add these packages
Push branches and open pull requests on GitHub	`github`
Write and run browser tests	`playwright`
Drive a browser through tool calls, with no script	`playwright-mcp` and `chromium`
Take screenshots, network traces and Lighthouse audits	`chrome-devtools` and `chromium`
Read and update Jira and Confluence	`atlassian-mcp`
Search and post in Slack as you	`slack-mcp`
Query a Postgres database without seeing its password	`postgres`
Build and run containers	`docker`
Build native extensions (Ruby gems, Node add-ons)	`build-tools`
Investigate production logs, metrics and traces	`datadog-mcp` or `sentry-mcp`
Work from VS Code over Remote-SSH	`egress-vscode`

What the kinds mean

Kind	What you get
Agent	A coding agent that runs in the space.
Toolchain	A language runtime or build toolset added to the space, such as Node.js, Python, `gcc` or Playwright.
Tool	A command line tool.
Authentication	A tool plus a credential type. Marshal adds the credential to requests. The agent never sees it.
MCP	An MCP server that gives the agent tools.
Network	An allow-list of hosts. No tools and no credentials.
Sidecar	An extra container that runs next to the agent.
Content	Instructions and skills for the agent.
Webhook	A way to receive inbound webhooks.

Agents (8)

Package	What it is
`claude-code`	Anthropic’s Claude Code CLI. Works interactively and in runs. Signs in with an API key or a setup token.
`codex`	OpenAI’s Codex CLI. Approval policy, sandbox mode, and workspace trust are admin settings.
`copilot`	GitHub Copilot CLI. Needs a GitHub token on an account with a Copilot subscription.
`cursor-cli`	The `cursor-agent` CLI from Cursor, not the editor. Signs in with a Cursor API key.
`gemini-cli`	Google’s Gemini CLI.
`grok`	xAI’s Grok Build CLI.
`hermes`	The hermes agent from Nous Research.
`opencode`	The open-source, model-agnostic opencode agent. This version is set up for Anthropic models with an API key.

Languages and toolchains (7)

Package	What it is
`node`	Node.js LTS with corepack and the TypeScript stack.
`python`	CPython with pip and uv.
`go`	The Go compiler and module tools, with `golangci-lint` and other Go dev tools.
`ruby`	Ruby with gem, bundler, and rake. Add `build-tools` for native gems.
`dotnet`	The .NET SDK with ASP.NET Core and EF Core tools.
`build-tools`	`gcc`, `g++`, `make`, and binutils, for packages with native extensions.
`playwright`	Playwright for browser test scripts and `playwright test`.

Tools (7)

Package	What it is
`tools-base`	The always-on toolbox in every space: `curl`, `wget`, `jq`, `yq`, `git`, and more. You cannot install or remove it.
`apt`	`marshal-apt`, an installer for `.deb` packages that needs no `sudo`.
`fnm`	The `fnm` Node version manager.
`terraform`	The Terraform CLI. It carries no credentials of its own.
`runlease`	The RunLease CLI for on-demand VMs on cloud spot capacity. Needs the `aws` or `gcloud` package.
`chromium`	A shared Chromium browser for browser tools. Install it with `chrome-devtools` or `playwright-mcp`.
`chrome-devtools`	One-shot Chrome DevTools commands from the shell: screenshots, network traces, Lighthouse audits.

Code hosting and cloud (authentication, 10)

Package	What it is
`github`	`git` and `gh` with the credential added for you. Signs in with GitHub or a personal access token. Also receives GitHub App webhooks.
`gitlab`	`git` and `glab` for GitLab.
`bitbucket`	`git` and the Bitbucket REST API.
`aws`	AWS CLI v2. Connect with an access key, a session token, or Sign in with AWS SSO.
`az`	Azure CLI. Signs in with a service principal.
`gcloud`	`gcloud`, `gsutil`, and `bq`. Signs in with a service account.
`k8s`	`kubectl` and Helm. The credential is a kubeconfig file.
`vercel`	The Vercel CLI. Signs in with an access token.
`wrangler`	The Cloudflare CLI for Workers, Pages, KV, D1, and R2.
`atlassian-cli`	`acli` for Jira and Confluence.

Container registries (authentication, 4)

These add credentials to docker pull, docker push, and docker build steps without putting them in the image or the agent’s environment.

Package	What it is
`aws-ecr`	Amazon ECR, private and public.
`gcp-artifact-registry`	Google Artifact Registry and Container Registry.
`docker-hub`	Docker Hub private repositories. Also raises the pull-rate limit for public images.
`private-registry`	Any OCI registry, such as GHCR, Quay, Harbor, Artifactory, Nexus, or Azure ACR.

Databases (authentication, 6)

The agent connects through a local socket in the space. The credentials stay in Marshal’s database proxy.

Package	What it is
`postgres`	PostgreSQL, with `psql`, `pg_dump`, and related tools.
`mysql`	MySQL and MariaDB.
`mongodb`	MongoDB.
`redis`	Redis.
`clickhouse`	ClickHouse, self-hosted or ClickHouse Cloud.
`snowflake`	Snowflake. Signs in with a password, token, or RSA key pair.

MCP servers (29)

Most connect to the vendor’s hosted MCP server through sign-in. The agent never sees your credential.

Package	What it gives the agent
`slack-mcp`	Search messages, read channels and threads, post messages, and create and update canvases in Slack, as you. Each person connects their own account. Tools that delete, archive or remove are blocked.
`atlassian-mcp`	Jira and Confluence. Sign in with Atlassian, or use an email and API token.
`github-mcp`	GitHub code search, issues, and pull requests. Needs the `github` package.
`gitlab-mcp`	GitLab merge requests, work items, and pipelines.
`linear-mcp`	Linear issues, projects, and cycles.
`notion-mcp`	Notion pages and databases.
`asana-mcp`	Asana tasks and projects.
`monday-mcp`	monday.com boards and items.
`intercom-mcp`	Intercom conversations and contacts.
`canva-mcp`	Canva designs and brand templates.
`figma-mcp`	Figma frames, styles, and variables.
`fathom-mcp`	Fathom meeting recordings and transcripts.
`fellow-mcp`	Fellow meetings and action items.
`datadog-mcp`	Datadog logs, metrics, traces, and monitors. Read-only by default: tools whose names start with `get`, `search`, `list`, `describe`, `explore`, `find`, `aggregate` or `validate`.
`posthog-mcp`	PostHog logs, errors, and insights.
`sentry-mcp`	Sentry issues and stack traces.
`neon-mcp`	Neon projects and SQL.
`netlify-mcp`	Netlify sites and deploys.
`webflow-mcp`	Webflow sites and CMS.
`wix-mcp`	Wix sites and stores.
`stripe-mcp`	Stripe customers, subscriptions, and invoices.
`paypal-mcp`	PayPal orders and invoices.
`square-mcp`	Square catalog and orders.
`twilio-mcp`	Twilio’s API documentation and reference, so the agent writes the exact call. It reads documentation only and needs no credential.
`globalping-mcp`	Ping, traceroute, and DNS checks from probes around the world.
`port-mcp-eu`, `port-mcp-us`	Port developer portal. Pick the region of your Port account.
`playwright-mcp`	Browser control through tool calls. Needs `chromium`.
`chrome-devtools-mcp`	More than 60 Chrome DevTools tools. Needs `chromium`.

Network allow-lists (5)

Package	What it allows
`egress-vscode`	The VS Code Remote-SSH server download and the VS Code Marketplace.
`egress-cursor`	The Cursor Remote-SSH server download and its extension marketplace.
`egress-copilot`	GitHub Copilot’s suggestion and chat requests from the editor.
`egress-windsurf`	The Windsurf editor connecting over Remote-SSH.
`egress-dockerhub`	Image pulls from Docker Hub.

Sidecar (1)

Package	What it is
`docker`	A rootless Docker daemon next to the agent, with the `docker` CLI, `buildx`, and `docker-compose`. See Docker in spaces.

Webhooks (1)

Package	What it is
`generic-hmac-webhook`	Receives webhooks from any sender that signs the body with HMAC-SHA256. See Sending Marshal a Webhook.

Content (1)

Package	What it is
`working-in-marshal`	Teaches agents how to work in a Marshal space. Always on. You cannot install or remove it.

Stacks

A stack is a ready-made group of packages.

Stack	Contains
`default-engineering`	`claude-code`, Go, Node.js, Python, `github`, `egress-vscode`
`frontend`	`claude-code`, Node.js, `github`, `egress-vscode`
`data-science`	`claude-code`, Python, `github`, `egress-vscode`
`locked-down-reviewer`	`claude-code` and `github` only, with egress that allows only Anthropic and GitHub. The package set is locked