Integrations catalog
Use Cosen with every LLM CLI and SDK your developers already have, then export cost, observability, and security into OWASP reports, SonarQube, GitHub Code Scanning, Prometheus, Grafana, and OpenTelemetry.
# discover + apply
cosen integrate list
cosen integrate show openai-python
cosen integrate show sonarqube
cosen export sarif --hours 24 --out reports/cosen-security.sarif
cosen export owasp --hours 24 --out reports/cosen-owasp.json
LLM CLIs & editors
| Tool | Setup |
|---|---|
| OpenAI Codex CLI | export OPENAI_BASE_URL=http://127.0.0.1:8080/v1 |
| Anthropic Claude CLI | export ANTHROPIC_BASE_URL=http://127.0.0.1:8080/v1 (Messages API) |
Simon Willison llm | llm -o base_url http://127.0.0.1:8080/v1 … |
| aider | export OPENAI_API_BASE=http://127.0.0.1:8080/v1 |
| Continue.dev | OpenAI provider with apiBase → Cosen |
| Cursor | cosen mcp + .cursor/mcp.json |
Application SDKs
Drop-in base_url / api_base — no vendor lock-in inside Cosen.
- OpenAI Python / Node —
examples/openai_sdk.py,examples/openai_sdk.mjs - Anthropic Python — Messages API via
examples/anthropic_sdk.py - LangChain —
ChatOpenAI(base_url=…) - LlamaIndex —
OpenAILike(api_base=…)
Tag every call with X-COS-Feature and X-COS-Project so spend and blocks roll up by product feature.
Security & governance platforms
| Tool | Pillars | Integration |
|---|---|---|
| OWASP LLM Top 10 | security | cosen export owasp maps scanners to LLM01–LLM10 and reports coverage gaps. |
| SARIF 2.1.0 | security | Portable findings format consumed by SonarQube, GitHub, VS Code. |
| SonarQube / SonarCloud | security | Set sonar.sarifReportPaths=reports/cosen-security.sarif (see examples/sonar-project.properties.example). |
| GitHub Code Scanning | security | Upload SARIF with examples/github-action-cosen-sarif.yml. |
| Semgrep | security | Keep Semgrep for SAST; add Cosen SARIF for runtime LLM findings in the same CI gate. |
Cost & observability platforms
| Tool | Pillars | Integration |
|---|---|---|
| Prometheus | costobssecurity | Scrape GET /metrics (examples/prometheus-cosen.yml). |
| Grafana | costobs | Prometheus datasource; panel cosen_cost_usd_total, cosen_security_blocks_total. |
| OpenTelemetry | obscost | cosen export otel or GET /api/export/otel → OTLP/JSON-shaped spans. |
SonarQube quick path
cosen serve --mock # generate traffic, then: cosen export sarif --hours 24 --out reports/cosen-security.sarif # sonar-project.properties sonar.sarifReportPaths=reports/cosen-security.sarif sonar-scanner
OWASP mapping (runtime)
- LLM01 Prompt Injection —
prompt_injection,jailbreak - LLM02 Sensitive Information Disclosure —
secrets,pii,system_leak - LLM05 Improper Output Handling — output scan + redact/block
- LLM07 System Prompt Leakage —
system_leak - LLM10 Unbounded Consumption — daily feature/project USD budgets
Categories without an on-path signal (supply chain, poisoning, misinformation, …) are reported as gaps with companion-tool guidance (Semgrep, Trivy, eval harnesses).
HTTP surfaces
GET /metrics GET /api/integrations GET /api/export/sarif?hours=24 GET /api/export/owasp?hours=24 GET /api/export/otel?hours=24