Connect kiLM to the data your teams already use

Office & documents Shipped

Everyday documents and the structural information inside them — paragraphs, headings, tables, embedded images, captions.

• PDF
• DOC
• DOCX
• PPT
• PPTX
• ODT
• ODP
• RTF
• TXT
• MD
• HTML
• EML
• MBOX
• MSG
• IPYNB
• ICS
• VCard
• SRT
• VTT
• INI
• TOML
• conf
• ReqIF

Structured data Shipped

Tabular and semi-structured data with column-aware extraction — supports schema inference and per-cell sensitivity classification. Big-data columnar formats land natively; database dumps and SQLite files are parsed by the same path.

• CSV
• TSV
• JSON
• JSONL
• XML
• Parquet
• Avro
• ORC
• SQL
• SQLite

Spreadsheets Shipped

Multi-sheet workbooks with formula preservation, merged-cell handling, and per-sheet schema inference. Macros are sandboxed (XLSM gets the same treatment as XLSX — never executed).

• XLS
• XLSX
• XLSM
• ODS

CAD & engineering Shipped

Native B-Rep, mesh, BIM, USD, and FEM formats with geometry-aware extraction. Tier 1 formats use built-in kernels; Tier 2 formats route to an OpenCascade companion worker.

• STEP
• STP
• IGES
• IGS
• BREP
• STL
• OBJ
• PLY
• GLB
• GLTF
• 3MF
• IFC
• DXF
• DWG
• USD
• USDA
• USDC
• USDZ
• JT
• BDF
• NAS
• OP2

Simulation models Shipped

Functional Mock-up Units (FMI standard) — model metadata, parameter ranges, and variable definitions extracted into searchable records so engineers can find the model they need without running it.

• FMU
• FMI 2.0 / 3.0

Engineering & manufacturing systems Shipped

Neutral interchange exports from PLM, ALM, QMS/LIMS, CAE, MES, and the core engineering tools (MATLAB, Modelica/Dymola, Revit) — imported air-gapped with no vendor SDK and no live credentials. PLMXML/STEP-AP242 BOMs, ReqIF requirement-to-test traceability, AnIML lab results, VTK/HDF5 simulation results, B2MML/ISA-95 as-built genealogy, MATLAB .mat datasets, and Modelica .mo system models become governed, queryable records plus graph relationships. Every import is bound to a versioned extraction contract. Default off; operator opt-in per source. Native vendor formats (Abaqus .odb, MATLAB .m/.slx, Revit .rvt) are bring-your-own-license.

• PLMXML
• STEP-AP242
• ReqIF
• ReqIFZ
• AnIML
• VTK
• HDF5
• MED
• CGNS
• ODB (BYOL)
• B2MML
• ISA-95
• MAT
• Modelica .mo
• IFC
• FMU
• .m/.slx (BYOL)
• .rvt (BYOL)
• Simscape .ssc
• Amesim (BYOL)
• SAP IDoc
• Ariba cXML
• EDI X12/EDIFACT
• EDI logistics (WMS/TMS)
• OAGIS BOD (Infor)
• IBM Maximo MIF
• PLCopen XML
• AutomationML
• ServiceNow
• Workday
• AAS (.aasx)
• OPC-UA NodeSet2
• Gerber (RS-274X)
• ODB++

Quality, test & process Shipped

Free, air-gapped readers for quality, test-management, and business-process interchange: dimensional-inspection results (QIF / ISO 23952, Q-DAS / AQDEF — Hexagon, Zeiss), test cases with requirement coverage (TestRail XML, Xray Cucumber / Test JSON), and process / decision models (BPMN 2.0, DMN, Visio). Each becomes governed, queryable records plus graph relationships — which tests cover a requirement, which characteristics failed inspection, and the next step in a process. No vendor API and no live credentials; default off, operator opt-in per source.

• QIF (ISO 23952)
• Q-DAS / AQDEF
• STDF
• TestRail
• Xray (Cucumber)
• Xray (JSON)
• BPMN 2.0
• DMN
• Visio .vsdx

Geospatial Shipped

Vector geospatial with attribute extraction; coordinate reference systems preserved through the pipeline.

• SHP
• GPKG
• GML
• GeoJSON
• GeoJSONL
• KML
• KMZ
• GPX

Automotive Shipped

CAN bus databases, calibration files, AUTOSAR descriptions, and ODX diagnostics — extracted into searchable structured records.

• DBC
• A2L
• ARXML
• ODX
• FIBEX
• LDF
• HEX
• S19
• BIN
• ASAM MDF4

Scientific & life sciences Shipped

Bioinformatics, chemistry, structural biology, and high-throughput experimental data.

• FASTA
• FASTQ
• VCF
• SDF
• MOL
• PDB
• CIF
• mmCIF
• mzML
• mzXML
• NetCDF
• CDF
• HDF5

Healthcare & clinical records Shipped

Standards-based clinical ingestion for the healthcare domain — HL7 FHIR R4/R5 resources and Bundles (Patient, Encounter, Observation, Condition, Procedure, MedicationRequest, DiagnosticReport) and DICOM imaging header metadata (Patient → Study → Series → Instance). PHI is Presidio-scrubbed at parse time and DICOM PatientID is hashed; the DICOM reader reads header metadata only and never the pixel data. No vendor SDK, no live credentials, fully air-gappable; default off, operator opt-in per source.

• HL7 FHIR (R4/R5)
• FHIR Bundle
• DICOM (.dcm)

Finance, compliance & security Shipped

Financial reporting and software-supply-chain / security compliance as a governed graph: XBRL / iXBRL financial reports (context / unit / fact), NIST OSCAL control catalogs, SSPs and assessment results, CycloneDX and SPDX software bills-of-materials (component dependency graph), and OASIS CSAF security advisories (advisory → vulnerability → affected product). The SBOM dependency graph pairs with CSAF advisories. No vendor SDK, no live credentials, fully air-gappable; default off, operator opt-in per source.

• XBRL / iXBRL
• OSCAL
• CycloneDX
• SPDX
• CSAF

Technical documentation Shipped

Aerospace / defense / MRO service manuals as a navigable structure: S1000D data and publication modules and DITA topics and maps become Module / Topic records with the cross-references between them (a publication module references a data module, a map references a topic). The structure and identifiers are graphed; the prose body still flows through normal text ingestion and retrieval. No vendor SDK, no live credentials, fully air-gappable; default off, operator opt-in per source.

• S1000D
• DITA
• DITA map

Images & multimodal Shipped

Images become first-class search citizens — OCR text, vision captions, and visual embeddings for cross-modal retrieval.

• PNG
• JPG
• JPEG
• TIFF
• BMP
• WebP
• PDF

Audio & video Limited

Audio and video formats are routed to a speech worker for transcription. The speech worker is shipped at a placeholder level today — formats are recognized and queued, but production-grade transcription quality should be validated against your specific use case. Native transcription engine selection is on the roadmap.

• WAV
• MP3
• M4A
• AAC
• FLAC
• OGG
• OPUS
• WMA
• MP4
• MOV
• MKV
• AVI
• WebM
• MPEG

Archives Gated OFF

Multi-file archives are extracted into staging, scanned for nested code or executables, then re-routed to the appropriate worker per child file. The archive gate ships OFF because expansion costs are unbounded without explicit opt-in.

• ZIP
• TAR
• TAR.GZ
• TAR.BZ2
• TAR.XZ
• GZ
• BZ2
• XZ
• 7Z
• LZ4
• ZST

Quarantined by default Shipped

Source code, installers, executables, and DLLs land in quarantine instead of the knowledge corpus. Time-series / sensor-telemetry tables in CSV or Excel are also quarantined — kiLM does not handle time-series data today; only the non-time-series content of a mixed file is ingested. An admin can review or reroute; nothing is silently extracted.

• ~150 source extensions
• EXE / MSI / DMG / PKG / DEB / RPM / APK
• DLL / SO / DYLIB
• RAR (always refused)
• Time-series tables (CSV / Excel)

MCP Shipped

Model Context Protocol over HTTP+SSE and stdio. Both server and sanitizing client modes. Per-client bearer-token + ACL + audit on every invocation.

REST + Server-Sent Events Shipped

FastAPI backend with a published OpenAPI specification. Chat and long-running jobs use SSE for streaming. Versioned namespace under /api/v1.

Webhooks Shipped

Outbound webhooks via an at-least-once outbox pattern with HMAC-SHA256 signing, exponential backoff, and a dead-letter queue. Subscribers configure event filters per endpoint.

OAuth 2.0 + OpenID Connect Shipped

All authentication routes through Keycloak. Token exchange, refresh, PKCE, service-account credentials, and per-tenant realms supported out of the box.

SMTP & Microsoft Graph Shipped

SMTP for outbound delivery; inbound mail comes via Microsoft Graph or Exchange Web Services. IMAP and POP3 ingestion are intentionally not supported.

S3-compatible storage Shipped

MinIO is bundled. Any S3-compatible backend works for the data lake — AWS S3, Backblaze B2, Wasabi, or your own MinIO cluster.

PostgreSQL Shipped

Primary warehouse + per-domain partitions. Postgres-compatible warehouses (Redshift, CockroachDB) federate via the generic JDBC path.

Kafka Shipped

Event-bus subscription via aiokafka. Topic-scoped subscriptions, consumer-group offsets, and replay markers — Kafka is the first adapter; others are planned.

CDC delete events Gated OFF

REST endpoint that accepts change-data-capture delete events for governed erasure — deterministic idempotency by event signature, still routed through dual approval. Full CDC source connectors (Debezium and friends) are planned.

Temporal Shipped

All long-running work is a Temporal workflow with deterministic replay, explicit retry policies, and per-activity audit. Self-hosted, no external Temporal Cloud dependency.

Python SDK Shipped

The kilm package ships with every release. Typed wrappers for admin, search, chat, ingest, inference, and webhook endpoints — including ingest helpers like trigger() and upload_and_trigger(). Bring-your-own bearer token; everything routes through the same OpenAPI spec.

Admin ingest endpoints Shipped

POST /api/v1/admin/ingest kicks ingestion for a single object already staged in MinIO. POST /admin/ingest/batch accepts up to a thousand object references and queues each one through the standard routing path. Useful for pipelines that hand off batches at the end of an upstream run.

Signed S3 / MinIO PUT URLs Shipped

The Upload page mints a short-lived signed PUT URL so the browser uploads directly to MinIO, then POSTs an ingest trigger. Scripts can request the same URL via the admin API. Size limits and magic-byte sniff enforced server-side.

Multipart upload Shipped

Standard multipart for airgap release-bundle upload, support-request and enhancement attachments, and admin import flows. Streaming size cap + content-type allowlist on every endpoint.

MinIO notifications → auto-ingest Shipped

External pipelines can drop objects straight into a watched MinIO bucket; the lake-watcher worker receives the bucket-notification webhook and kicks the standard ingestion workflow. Per-bucket auto-ingest toggle.

Chat SSE streaming Shipped

Server-Sent Events stream from /chat/sessions/{id}/messages — tokens, citations, tool decisions, conflict signals, task-dispatcher events. The MCP server uses the same transport.

Local MCP stdio bridge Shipped

kilm_mcp_stdio.py exposes kiLM's MCP tools to local clients like Claude Desktop and Cursor over standard input/output, without opening an HTTP port on the workstation.

Archive explode & re-route Gated OFF

When the archive gate is ON, uploaded ZIP / TAR / 7Z / etc. are unpacked into a staging area, scanned for nested code or executables, then each member is re-injected into the standard ingestion router as if it had been uploaded directly. Expansion limits and per-member quotas keep runaway archives bounded.

Failure-recovery reroute Shipped

If a worker's extractor fails — wrong extension, mistyped MIME, vendor PDF that's really an image — kiLM sniffs the file's magic bytes and reroutes it to the worker that should have handled it in the first place. The reroute is audited; reconciliation flags persistent misrouting patterns so admins can fix the upstream source.

Chat-attachment ingestion Gated OFF

Files dropped into the chat composer become session-scoped knowledge — visible to that conversation only, with their own retention policy. Not the same as permanent corpus ingestion; use the save-to-corpus task verb to promote a useful attachment.

Structured record ingestion Shipped

The structured-worker path normalizes records, tables, and spreadsheets into searchable row-level entries with schema-aware extraction. Persistent upsert into per-domain tables is still evolving — current ingestion is read-then-index; mutation semantics follow on a future slice.

OIDC federation Gated OFF

Pre-built presets for Microsoft Entra (Azure AD), Okta, Google Workspace, and any generic OIDC issuer with discovery. Each provider is independently gated.

SAML 2.0 Gated OFF

Generic SAML 2.0 federation via the bundled Keycloak — metadata URL + signing keys, ADFS / OneLogin / Auth0 / Ping / Shibboleth all federate via this path.

LDAP / Active Directory Gated OFF

User federation against Active Directory, OpenLDAP, FreeIPA, or any LDAPv3 server. Read-only or read-write attribute mapping. Optional Kerberos pass-through.

OAuth 2.0 client credentials Shipped

Machine-to-machine auth for the Python SDK, MCP clients, the Copilot connector, and backend service principals. Per-client scopes, per-realm credential rotation.

OAuth 2.0 authorization code + PKCE Shipped

User-delegated grants for the webapp, the MCP browser flow, and selected cloud-storage and email integrations that need consented per-user access (Microsoft Graph, Google Drive).

Bearer tokens Shipped

JWT bearer tokens issued by Keycloak authenticate every REST, MCP, SDK, and Copilot call. Standard expiry + refresh; service-account tokens optional for long-running integrations.

HMAC-SHA256 signatures Shipped

Used wherever a bearer token isn't appropriate: MinIO bucket events, outbound webhooks, Label Studio review callbacks, vendor heartbeat. Subscribers verify with the published signing key.