Bulwark Extensions
Submit an extension

Plugins and themes for Bulwark Webmail.

Every extension is free, open source and reviewed before it is published. Install it on your own Bulwark from here.

30 plugins1 theme

Open source only

Each extension has an OSI licence and a public repository.

Reviewed before release

An automated scan and a reviewer check every version.

Readable code

No minified or obfuscated code, and no telemetry.

Permissions up front

Each plugin lists what it can read and change.

Featured by the reviewers.

Browse everything

Gravatar Avatars

Bulwark, verified author

Resolves Gravatar profile pictures for email contacts via the avatar transform hook

Hook1.6k downloadsFeaturedInstall

External Link Warning

Bulwark, verified author

Warns before opening external links to unknown domains. Admins can pre-populate a trusted domain list.

Hook1.5k downloadsFeaturedInstall

External Recipient Warning

Bulwark, verified author

Warns before sending email to recipients outside your safe-domain list, and flags incoming messages from external senders with a banner. Admins can pre-populate organisation-wide safe domains.

Hook967 downloadsFeaturedInstall

Recently updated.

All by update
  1. AI AssistantBulwark, verified author2.2.1, 39m ago
  2. External Mail WarningBulwark, verified author1.6.2, 39m ago
  3. Paperless-ngxBulwark, verified author1.2.2, 39m ago
  4. Proofreading (LanguageTool)Bulwark, verified author1.0.0, 22h ago
  5. Send ChecksBulwark, verified author1.0.0, 2d ago
  6. Auto TagBulwark, verified author1.3.2, 2d ago

Most downloaded.

All by downloads
  1. Impersonation NoticeBulwark, verified author2.0k downloads
  2. PGP True End-to-EndPaulhenry Saux1.8k downloads
  3. Gravatar AvatarsBulwark, verified author1.6k downloads
  4. Calendar AgendaBulwark, verified author1.6k downloads
  5. External Link WarningBulwark, verified author1.5k downloads
  6. Spam ScoreBulwark, verified author1.5k downloads

Build an extension.

The API is a typed JMAP client, a handful of interface slots and a manifest. The review rules are short and public.

Developer docsAPI reference, manifest schema, hook lifecycle and examples.Review guidelinesOSI licence required, no minification, no telemetry.Publish an extensionPush a tag from GitHub Actions, or name a repository and a tag here.