A comprehensive Ruby client library for JPS platform APIs with 69+ API modules, modular loading, OAuth authentication, and optimized performance

Ask LLMs for JSON responses and validate their shape.

KairosChain is a Model Context Protocol (MCP) server for self-managed, evolvable AI skill definitions. It combines Pure Skills design (Ruby DSL/AST) with a private blockchain, enabling AI agents to define, evolve, and audit their own capabilities through self-referential skill management. Supports stdio and Streamable HTTP transport.

Deploy web apps in containers to servers running Docker with zero downtime.

Directly control Kasa devices

Encrypt and Decrypt Strings with keys (to the kingdom)

Encrypted column values with versioned key rotation and optional blind indexes for equality lookups. Framework-agnostic core (AES-256-GCM envelope + HMAC-SHA256 blind index) with opt-in adapters for Sequel, ROM, and Active Record. Ruby companion to the Crystal avram_encrypted shard.

Ruby SDK for Kintsugi Tax Platform

kiosk-redteam drives hostile HTTP scenarios against a Kiosk origin that mounts the engine at /kiosk, and asserts each attack is correctly blocked — a deliberate refusal, never a crash and never a toll the harness could not settle. A scenario that finds a real breach fails loudly. Ships a Scenario/Verdict/Runner framework and a library of generic attack scenarios parameterised by a Profile of the origin. It attacks through the assistant client kiosk-test-support ships. `require "kiosk/redteam"` loads no Rails. Through kiosk-test-support, installing the gem installs Rails.

kiosk-reputation decides *when* and *how hard* to challenge a request with a proof-of-work, issues and verifies the signed challenge, and provides a pluggable reputation policy interface. Pure Ruby — no dependency on any PoW gem or kiosk-core. A PoW backend is registered via Kiosk::Reputation::Backends.register: kiosk-pow-equihash registers itself as "equihash" (the shipped default) in a Rails app; the host registers kiosk-pow-argon2id as the legacy "argon2id" and kiosk-pow-cuckoo as the opt-in "cuckatoo". Anti-DoS invariant: Challenge.verify performs cheap HMAC-sig + expiry checks BEFORE the one expensive backend eval, so floods of forged/expired proofs are rejected without running a proof check. Ships one policy, Policies::RecentSpend: it asks one proof of a session, by a chance that the customer's recent spend lowers.

kiosk-server is the host-side surface for Kiosk. The full surface ships: - The controllers — the per-verb endpoints (GET <endpoint>/<query-name>, POST <endpoint>/<action-name>) and the reserved endpoints (/kiosk/schema, /kiosk/pay), a derived OpenAPI description of both, OAuth client registration (RFC 7591) and the token endpoint (private_key_jwt client assertions, DPoP), JWKS, the KYC attestation endpoint, agents.txt / agents.json / kiosk.json discovery, and the account-binding ceremony (RFC 8628 device authorization and token poll, the verify and «Link an assistant» pages). - Kiosk::Server::Executor — dispatches a resolved command to the queries and actions the host registered. - Client registration and authentication, with a pluggable agent-IdP. - The proof-of-work toll that a kiosk-reputation policy sets (soft dependency; zero overhead when no policy is set). - A Rack middleware injecting the Kiosk-Server-Version / Kiosk-API-Version / Kiosk-Min-Client response headers, a pure-Ruby builder for the discovery documents, SQL generators for the canonical schema migrations, and a `kiosk:install` generator that lays down the initializer and the migrations. The Rails engine serves that whole surface from one `kiosk` block in config/routes.rb, which mounts it at Kiosk.configuration.mount_path — drawing the verb/auth/JWKS/KYC/binding routes under the mount and installing the root-relative discovery routes (agents.txt, .well-known) into the host — then one route per query and action the block names. It also auto-injects the headers middleware.

Kitsune Kit is an inspectable infrastructure CLI for provisioning DigitalOcean servers, configuring Ubuntu and Docker, and managing private application services.

Build system and devtools for Klenod.

The official Ruby SDK for the Kombo Unified API

Kruby is a community-maintained Ruby client generated from Kubernetes OpenAPI.

Pure-Ruby client for KSeF API 2.0 (Krajowy System e-Faktur). Provides low-level 1:1 endpoint access plus high-level coordinators for authentication (XAdES), interactive and batch invoice sessions, invoice download/export, incremental sync, KSeF certificates, tokens, permissions and offline QR codes. Rails integration is loaded conditionally.

A Ruby client for the Polish National e-Invoicing System (KSeF 2.0). Targets the FA(3) schema, supports token-based authentication, interactive sessions, and inbound invoice retrieval (metadata, XML, and visualisation). Pure Ruby with no Rails dependency.

CLI to run pods based on deployments

KubesealR is a pure-Ruby implementation of Bitnami's Sealed-Secrets CLI client "kubeseal." KubesealR also embeds a plugin for KustomizeR, allowing KustomizeR to seal (generated or provided) secrets as a resource-config transformation pass.

Kward is an extensible Ruby coding agent with workspace tools, resumable sessions, multiple model providers, a local browser UI, and JSON-RPC integrations.