Tools

Xero's official CLI (alpha): lets AI query and enter contacts, invoices, quotes, payments, bank transactions and manual journals, export invoice PDFs, and run P&L, balance sheet and trial balance reports for multiple orgs. Needs a Xero account and OAuth app; have an accountant review.

GitGuardian's official MCP: scans code for leaked secrets with 500+ detectors, and lets agents triage and remediate incidents, generate honeytokens and open fix PRs. Needs a GitGuardian account; the hosted endpoint with OAuth sign-in is recommended.

NASA's official MCP for its Common Metadata Repository: find Earth science and remote sensing datasets in plain language, check that data files exist for a given place and time, and get access services, related tools and citation info. No account to connect; downloads need an Earthdata login.

Snowflake's official plugin: detects Snowflake-related requests and hands them to the Cortex Code CLI, whose 55+ built-in skills handle SQL, dynamic tables, data governance and more. Needs the cortex CLI installed and a Snowflake connection configured.

Langfuse's official plugin: uses hooks to send prompts, model calls, token usage and cost, tool calls and subagents from Claude Code sessions to Langfuse as traces for monitoring and review. Needs Langfuse keys (self-hosting supported) and uv or Python 3.10+.

ModelScope's official MCP: search models, datasets, Studio apps, papers and MCP servers and view details, plus text-to-image and image-to-image generation. Needs a ModelScope API token.

Pigment's official plugin: bundles the Pigment MCP and 30+ modeling skills to query business data and compare budget vs. actuals in plain language; with advanced mode on, build budget and forecast models, metrics and boards. Needs an enterprise Pigment workspace with MCP on; have finance review.

Apideck's official MCP: one unified API to read and write invoices, ledgers and reports in QuickBooks, Xero, NetSuite and other accounting systems, plus HR, CRM and ATS data. Needs a paid Apideck account (30-day trial), API key and App ID, with your systems connected. An accountant should review.

Semgrep's official MCP server plus hooks: every file the agent writes is scanned with Semgrep Code, Supply Chain and Secrets for vulnerabilities, malicious dependencies and hardcoded secrets; the agent rewrites until clean or you dismiss findings. Requires a Semgrep login.

From TUM's Chair of Geoinformatics (a 3DCityDB co-developer): query CityGML 3D city models in 3DCityDB v5 in plain language, covering both spatial and semantic attributes, with read-only SQL. Needs a deployed 3DCityDB database and Python; register it from the folder with your .env config.

Official kFinance library and MCP server from Kensho (S&P Global): lets AI query S&P Capital IQ financials, prices and market caps, consensus estimates, M&A and funding, earnings call transcripts and more. Needs an S&P LLM-ready API subscription or trial; verify outputs.

OpenCage's official MCP: geocode addresses and place names, reverse geocode coordinates (with admin area, time zone and more), and check API quota. For small lookups; use its CLI for batches. Needs an OpenCage API key (free trial), Node.js 20+, and manual setup from a repo clone.

Carta's official equity plugin: ask about cap tables, option grants and vesting, SAFE conversions, 409A valuation history and liquidation waterfall scenarios, plus compensation benchmarks and drafting share issuances. Needs a Carta account (OAuth); collects usage telemetry. Have results reviewed.

Carta's official plugin for VC and PE fund finance and IR teams: query fund NAV, performance and benchmarks, pull Form ADV data, build management company budgets and consolidated statements in Excel, and generate LP annual meeting materials. Needs a Carta fund admin account; results need review.

PortSwigger's official Burp Suite extension that lets agents read proxy history, send HTTP requests and create Repeater tabs; with Burp Pro it can also read scan results and use Collaborator. Install from the BApp Store; listens on 127.0.0.1:9876 by default.

Airwallex's official plugin: extract details from contracts or POs to create invoices and subscriptions, add beneficiaries from supplier documents, issue employee cards with limits, and summarize multi-currency balances and FX exposure. Needs an Airwallex business account; finance should review.

Airwallex's official CLI: lets agents check multi-currency balances, beneficiaries, transfers and FX, and manage billing customers, invoices, subscriptions, corporate cards and expenses. Needs an Airwallex business account; macOS and Linux. Closed-source beta; confirm real-money actions manually.

Daloopa's official plugin: 21 skills on its sourced company fundamentals for company snapshots, earnings previews and reviews, DCF and comps, research notes, Excel models and pitch decks, with source links for each number. Needs a Daloopa account (OAuth, no API key); review results.

Vanta's official plugin: from Claude Code, review control gaps for SOC 2, ISO 27001 and other frameworks, failing tests, vendor risk and policies, and generate fixes for code-level issues. Needs admin access to a paid Vanta account (browser auth); have compliance conclusions reviewed by an expert.

Avalara's official hosted MCP servers: US sales tax calculation, returns filing, e-invoicing, exemption certificates, cross-border duties and HS code classification. Needs an Avalara account (AvaTax has a 90-day trial) and browser OAuth; the command adds AvaTax. Have a tax professional review.

From CFA Institute's Research and Policy Center: using the CFA behavioral finance curriculum, flags anchoring, confirmation bias, loss aversion and more in investment memos, research and AI-generated content, with rewrite suggestions and self-check questions. Install by copying the folder.

Bigdata.com's official research plugin (RavenPack): search news, filings and call transcripts; run valuation snapshots, peer comps, earnings previews and recaps, risk and catalyst tracking, sector and macro research; draft investment memos. Needs a Bigdata.com account (free tier: one-time credits).

BlackRock's official advisor plugin: on Advisor Center 360 data, run client portfolio reviews, fund health checks with opportunity flags, benchmark selection, portfolio construction and wealth projections, as visual cards. Needs an Advisor Center account; a licensed advisor must review results.

Intuit's official QuickBooks plugin: health checks on profit, cash flow, balance sheet and receivables, peer benchmarking and payroll cost analysis, and drafts payment reminders, estimates and invoices, confirming before writes. Needs QuickBooks Online (official connector); have finance review.