The plugin registry for the bext engine.
Discover, install, and publish plugins and starter kits — every one sandboxed, so a plugin can extend your server without ever being able to crash it.
Popular plugins
Battle-tested building blocks the community reaches for first.
JWT middleware with refresh tokens and RBAC.
Sliding-window rate limiter. Redis optional.
WebP/AVIF on the fly, with blur placeholders.
Privacy-first page views. No cookies, no PII.
Redis L2 cache with tag-based invalidation.
OAuth2 flows for GitHub, Google & custom IdPs.
Sandboxed by default
Every plugin runs isolated from the host. No filesystem, no network, no crashing your server — unless you explicitly grant it.
WASM
Compiled, near-native, fully memory-isolated. Best for hot-path middleware and codecs.
QuickJS
A tiny JS interpreter per plugin. Instant cold-start, no filesystem, no network unless granted.
nsjail
Hard OS-level sandbox for plugins that need a real process. Seccomp + namespaces.
Publish to the registry
One manifest, one command. We sign it, sandbox it, and surface it to every bext developer.