integrations
Plug in the LLM,
the proxy, the inbox.
Xalgorix is self-hosted, so every integration is one environment variable or one CLI flag away. The list below is what currently ships in github.com/xalgord/xalgorix— no fictional connectors.
LLM providers
9 integrationsOpenAI
Default base https://api.openai.com/v1. Use models like openai/gpt-5.4 via XALGORIX_LLM.
XALGORIX_LLM=openai/gpt-5.4
Anthropic
Default base https://api.anthropic.com. Set the model with the anthropic/ prefix.
XALGORIX_LLM=anthropic/claude-…
DeepSeek
Default base https://api.deepseek.com/v1.
XALGORIX_LLM=deepseek/…
Groq
OpenAI-compatible endpoint at https://api.groq.com/openai/v1.
XALGORIX_LLM=groq/…
Google Gemini
Default base https://generativelanguage.googleapis.com/v1. Also accepts the gemini/ prefix.
XALGORIX_LLM=google/gemini-2.5-pro
Ollama (local)
Run models locally; default base http://localhost:11434/v1.
XALGORIX_LLM=ollama/llama3.1
MiniMax
Default base https://api.minimax.io/v1. Recommended: minimax/MiniMax-M2.7.
XALGORIX_LLM=minimax/MiniMax-M2.7
Custom OpenAI-compatible
Point Xalgorix at any OpenAI-compatible API by setting XALGORIX_API_BASE alongside your model.
XALGORIX_API_BASE=https://your-provider/v1
Gemini web search
Optional Gemini key used for web-search enrichment during recon, independent of the main LLM provider.
GEMINI_API_KEY=AIza…
Notifications
1 integrationDiscord
Push verified findings to a Discord webhook with a configurable minimum severity floor.
XALGORIX_DISCORD_WEBHOOK + XALGORIX_DISCORD_MIN_SEVERITY
AgentMail
Test inboxes, verification emails, OTP flows, and email-triage events used by phase 15 (email security).
AGENTMAIL_POD + AGENTMAIL_API_KEY
Proxy & traffic
2 integrationsCaido
Auto-detect the Caido proxy port (0 = auto) and authenticate with an API token for traffic interception.
CAIDO_PORT + CAIDO_API_TOKEN
Proxy pool
Single proxy URL or a file of proxies with round-robin or random rotation. Honors XALGORIX_USE_PROXY and XALGORIX_TLS_SKIP_VERIFY.
XALGORIX_PROXY_FILE + XALGORIX_PROXY_ROTATION
Runtime
3 integrationsHeadless Chrome / Chromium
Used by the browser_action / page_agent tools for runtime testing. Auto-detected or set explicitly.
XALGORIX_BROWSER_PATH=/usr/bin/chromium
systemd service mode
Install Xalgorix as a system service and tail logs with journalctl.
sudo xalgorix --start · journalctl -u xalgorix -f
Security-tool auto-install
Install security tooling (subfinder, ffuf, sqlmap, etc.) on demand. Off by default for non-root users.
XALGORIX_ALLOW_AUTO_INSTALL=true
Reports
3 integrationsBranded PDF reports
Generated per scan: executive summary, verified findings with CVSS, evidence, remediation, plus company name and uploaded logo.
POST /api/upload-logo → GET /api/report/:id
WebSocket event stream
Live stream of tool calls, agent messages, findings, errors, HTTP activity, and LLM activity — wire it into your own UI or SIEM.
GET /ws
Local REST API
20+ endpoints under /api/* on 127.0.0.1:9137 to start, stop, pause, resume, list, and inspect scans.
GET /api/scans · POST /api/scan
Need a different provider?
Any OpenAI-compatible API works — set XALGORIX_API_BASE and you're done. Or open an issue on GitHub and we'll add the prefix to the catalog.
xalgorix