You certainly can plug them in at MTA level. I've not much idea about postfix; but I've had it working in exim. You basically set it up as another transport, round-trip everything through that transport and set a flag so that you're not going round in circles.

spamc/spamd certainly are command line tools, but isn't everything?