Plugin System
Enterprise-grade extensibility — install certified internal plugins or sandboxed marketplace plugins with full lifecycle management.
SCRIPE's Plugin System gives your platform infinite extensibility without compromising security. Platform teams can publish certified Tier 1 plugins that run in-process with full infrastructure access. Third-party vendors can publish Tier 2 plugins that run in a secure sandbox — isolated from your core data, rate-limited, and audited.
Business Value
Infinite Extensibility
Extend SCRIPE with any capability — CRM integrations, AI assistants, analytics dashboards — without forking the core codebase.
Secure Sandbox
Tier 2 plugins are isolated in a REST gateway. They cannot access your database, internal services, or other tenants.
Marketplace Ready
Built-in plugin catalog, install/uninstall lifecycle, and consent flow ready for a commercial marketplace.
Fast Integration
Plugins can inject navigation items, settings UIs, and backend services with zero changes to the host application.
Full Auditability
Every API call made by a Tier 2 plugin is logged with endpoint, duration, status code, and timestamp.
RTL & i18n Ready
The plugin SDK automatically pushes the host's language direction (LTR/RTL) and accent color to all plugin iframes.
Tier 1 vs Tier 2
Choose the right tier for each use case. Tier 1 for your own certified plugins; Tier 2 for third-party marketplace integrations.
Tier 1 — Certified
- In-process — zero network overhead
- Full access to DI, database, and events
- Module Federation frontend (shared React bundle)
- IPluginStartup contract for clean registration
Tier 2 — Marketplace
- Sandboxed — cannot access host internals
- Rate limited (60 req/min per installation)
- iframe frontend with postMessage SDK
- Isolated key-value data store per installation
Who Benefits
The Plugin System creates value for every stakeholder in the SCRIPE ecosystem.
| Role | Benefit |
|---|---|
| Platform Operator | Extend the platform without modifying the core. Publish certified Tier 1 plugins for your team. |
| Tenant Admin | Install and configure marketplace plugins in minutes. Control which plugins are active for your team. |
| Third-Party Vendor | Publish your product as a Tier 2 plugin. Get distribution, lifecycle management, and webhook events for free. |
| Platform Developer | Build plugins with clear contracts — IPluginStartup for Tier 1, postMessage SDK for Tier 2. No undocumented hooks. |
Security Architecture
The Plugin System enforces strict security boundaries at every layer — origin validation, API key hashing, tenant isolation, and rate limiting.