Tools

42 official AWS skills for healthcare and life sciences: medical coding and terminology mapping, FHIR/HL7 parsing, claims and prior authorization rules, medical imaging, pharmacoepidemiology and genomics, per US standards. Some need local software. Not for clinical decisions; expert review required.

Pinecone's official plugin: bundles the Pinecone MCP server and /pinecone skill commands to create vector indexes, upsert data, search in plain language, or build a document Q&A assistant with citations from Claude Code. Needs a Pinecone API key (free sign-up); Assistant features also need uv.

HashiCorp's official MCP: lets agents manage Vault mounts, read and write KV secrets, enable PKI, create issuers and roles, and issue certificates. Needs a reachable Vault server and token; HashiCorp recommends using it only in trusted local environments.

CoinGecko's official MCP: query prices, market caps, exchanges and price history for 10,000+ crypto assets, plus on-chain DEX data. Connect to the free keyless public server (shared rate limits) or use a Pro API key for higher limits and the full toolset. For research only, not investment advice.

Trivy's MCP plugin: lets agents scan local projects, container images and remote repositories for vulnerabilities and misconfigurations in plain language, optionally checking policy compliance via the Aqua platform. Requires Trivy; maintained by Aqua Security.

Alibaba Cloud's official MCP server: through the DataWorks Open API, agents manage data development nodes and workflows, operate scheduled instances, query Data Map metadata and lineage, and configure data quality rules. Needs an Alibaba Cloud AccessKey.

Helps agents add Auth0 authentication to apps: detects 35+ frameworks and covers login, MFA, SSO, RBAC, JWT validation, migration from other auth providers, and tenant security audits. Maintained by Auth0; needs an Auth0 account (free sign-up).

EODHD's official plugin (remote MCP, 7 workflow skills, an analyst subagent): quotes, fundamentals and macro data from 70+ exchanges worldwide, company briefs, stock screening and portfolio risk analysis. Needs an EODHD account; free tier: 20 calls/day, basic US data only. Not investment advice.

Supabase's official plugin: Supabase and Postgres best-practice skills plus the Supabase remote MCP to manage projects, run SQL, design schemas and RLS policies, and handle auth and storage. Needs a Supabase account.

Amplitude's official plugin with a remote MCP and nearly 30 analysis skills: build charts and dashboards in plain language, interpret A/B experiments, summarize user feedback, and generate daily or weekly data briefs. Needs an Amplitude account with data (free plan exists); browser sign-in.

NASA's official MCP for its Common Metadata Repository: find Earth science and remote sensing datasets in plain language, check that data files exist for a given place and time, and get access services, related tools and citation info. No account to connect; downloads need an Earthdata login.

GitGuardian's official MCP: scans code for leaked secrets with 500+ detectors, and lets agents triage and remediate incidents, generate honeytokens and open fix PRs. Needs a GitGuardian account; the hosted endpoint with OAuth sign-in is recommended.

Snowflake's official plugin: detects Snowflake-related requests and hands them to the Cortex Code CLI, whose 55+ built-in skills handle SQL, dynamic tables, data governance and more. Needs the cortex CLI installed and a Snowflake connection configured.

Amazon's official seller plugin (beta): connect Seller Central to check sales, traffic and inventory, get stockout alerts and restock suggestions, plan FBA inbound shipments and diagnose suppressed or unsearchable listings. Changes are drafted and need your approval. Needs a seller account.

Community-built MCP for the Genesys Cloud contact center: supervisors and QA staff can check queue volumes, sample conversations, and read call quality, sentiment, topics and transcripts. Needs an OAuth client in your Genesys Cloud org with per-tool permissions, and Node.js. Still in development.

Langfuse's official plugin: uses hooks to send prompts, model calls, token usage and cost, tool calls and subagents from Claude Code sessions to Langfuse as traces for monitoring and review. Needs Langfuse keys (self-hosting supported) and uv or Python 3.10+.

ModelScope's official MCP: search models, datasets, Studio apps, papers and MCP servers and view details, plus text-to-image and image-to-image generation. Needs a ModelScope API token.

Pigment's official plugin: bundles the Pigment MCP and 30+ modeling skills to query business data and compare budget vs. actuals in plain language; with advanced mode on, build budget and forecast models, metrics and boards. Needs an enterprise Pigment workspace with MCP on; have finance review.

Semgrep's official MCP server plus hooks: every file the agent writes is scanned with Semgrep Code, Supply Chain and Secrets for vulnerabilities, malicious dependencies and hardcoded secrets; the agent rewrites until clean or you dismiss findings. Requires a Semgrep login.

Mixpanel's official CLI, mp (with a Python library): query event trends, funnels, retention and user flows, and manage dashboards, reports and cohorts. Needs Python 3.10+ and a Mixpanel account; run mp login to authorize in the browser. Pre-release; interfaces may change.

OpenCage's official MCP: geocode addresses and place names, reverse geocode coordinates (with admin area, time zone and more), and check API quota. For small lookups; use its CLI for batches. Needs an OpenCage API key (free trial), Node.js 20+, and manual setup from a repo clone.

PortSwigger's official Burp Suite extension that lets agents read proxy history, send HTTP requests and create Repeater tabs; with Burp Pro it can also read scan results and use Collaborator. Install from the BApp Store; listens on 127.0.0.1:9876 by default.

Vanta's official plugin: from Claude Code, review control gaps for SOC 2, ISO 27001 and other frameworks, failing tests, vendor risk and policies, and generate fixes for code-level issues. Needs admin access to a paid Vanta account (browser auth); have compliance conclusions reviewed by an expert.

Pendo's official product analytics plugin: summarize account activity and feedback before customer meetings, analyze feature adoption, group user feedback into themes and find session replays. Needs a Pendo subscription; authorize via /mcp after install.