Modules Catalog

The ColdBox ecosystem catalog — every actively maintained module, grouped by concern, with install commands and links to each module's own documentation.

ColdBox is deliberately lean: capabilities beyond the core framework ship as modules installable from ForgeBox. This catalog lists the actively maintained modules from the coldbox-modules organization, grouped by concern.

Each entry links to the module's own documentation — the guides in this section cover the most widely used ones. Install any module with CommandBox:

box install <slug>

Security

Module	What it does	Docs
cbsecurity	Rule-driven security engine (sessions, JWT)	book
cbauth	Authentication service backing cbsecurity	ForgeBox
cbcsrf	CSRF token generation and verification	ForgeBox
cbsecurity-passkeys	WebAuthn/passkey authentication	ForgeBox
cbSSO	Single sign-on across ColdBox apps	ForgeBox
bcrypt	BCrypt password hashing	ForgeBox
cbantisamy	OWASP AntiSamy XSS cleanup	ForgeBox

→ Guide: Security

Data & Persistence

Module	What it does	Docs
cborm	Hibernate ORM extensions (services, criteria, ActiveEntity)	book
quick	Entity-based ORM engine (no Hibernate required)	book
qb	Fluent query builder	book
cfmigrations	Database migrations	book
mementifier	Object-to-struct serialization	book
cbpaginator	Pagination for queries and collections	ForgeBox

→ Guides: Data & Persistence, Serialization

Web & APIs

Module	What it does	Docs
hyper	Fluent HTTP client	book
cbswagger	OpenAPI docs generated from your routes	ForgeBox
cbfeeds	Consume and produce RSS/ATOM feeds	ForgeBox
cbwire	Reactive, Livewire-style components	book
SocketBox	WebSocket server integration	ForgeBox
cbstreams	Functional stream operations	ForgeBox

→ Guide: HTTP Client, API Documentation

Messaging & Background Work

Module	What it does	Docs
cbq	Queue-based job dispatching	book
cbmailservices	Protocol-based mail sending (CFMail, file, Postmark, SendGrid)	book
cbmessagebox	Flash-scoped, skinnable user messages	ForgeBox

→ Guides: Queues, Mail

File Storage

Module	What it does	Docs
cbfs	Unified filesystem abstraction (local, S3, R2)	book
s3sdk	Amazon S3 SDK	ForgeBox
r2sdk	Cloudflare R2 client	ForgeBox
cbfs-r2	R2 storage provider for cbfs	ForgeBox

→ Guide: File Storage

Validation & Rules

Module	What it does	Docs
cbvalidation	Server-side object and form validation	book
rulebox	Natural-language business rules engine	ForgeBox

→ Guide: Validation

Developer Tools

Module	What it does	Docs
cbdebugger	Request profiler and debug panel	ForgeBox
route-visualizer	Visual map of your route table	ForgeBox
cbMockData	Fake data generation for tests	ForgeBox
cbPlaywright	Browser testing via Playwright	ForgeBox
cbMCP	Expose your running app as an MCP server	ForgeBox

Search & Observability

Module	What it does	Docs
cbelasticsearch	Elasticsearch integration	ForgeBox
cbmeilisearch	Meilisearch integration	ForgeBox
sentry	Sentry error reporting	ForgeBox
cbotel	OpenTelemetry tracing	ForgeBox
logstash	Logstash appender for LogBox	ForgeBox

Utilities

Module	What it does	Docs
cbi18n	Localization and resource bundles	ForgeBox
cbstorages	Facades over native persistence scopes	ForgeBox
cbcommons	Date, file, JVM, query, and zip helpers	ForgeBox
cbmarkdown	Markdown rendering	ForgeBox
cbemoji	Emoji parsing and rendering	ForgeBox
cbjavaloader	Dynamic Java classloading (CFML engines)	ForgeBox
cbproxies	Generate proxies to ColdBox services	ForgeBox
vite-helpers	Vite asset helpers for views	ForgeBox

→ Guide: i18n

Legacy Modules

These modules are no longer actively developed. They remain on ForgeBox for existing applications but are not recommended for new projects.

Module	Note
cbopenai	Superseded by BoxLang AI (bx-ai)
cbRedis	Dormant since 2016
relax	REST API tooling, dormant
cboptional	Java Optional helpers, dormant
cbyaml	YAML parsing, dormant
swagger-sdk	Superseded by cbswagger
cbioc	Third-party DI integration — WireBox covers this
cbsoap	SOAP helper, dormant
cffractal	Serialization, superseded by mementifier
coldbox-asset-bag	Superseded by Vite-based asset pipelines