Tools

Locize's official CLI: sync local translation files with the Locize platform, add, remove and look up keys, download published translations, manage versions and branches, and export JSON, XLIFF, PO, CSV or Excel for translators. Needs a Locize account, project ID and API key; free plan available.

Pinecone's official plugin: bundles the Pinecone MCP server and /pinecone skill commands to create vector indexes, upsert data, search in plain language, or build a document Q&A assistant with citations from Claude Code. Needs a Pinecone API key (free sign-up); Assistant features also need uv.

HashiCorp's official MCP: lets agents manage Vault mounts, read and write KV secrets, enable PKI, create issuers and roles, and issue certificates. Needs a reachable Vault server and token; HashiCorp recommends using it only in trusted local environments.

Beancount's official query tool, bean-query: run SQL-like queries on plain-text double-entry ledgers to get balances, income and expense summaries and account details, for agent-assisted bookkeeping. Needs uv or Python 3.8+ and a Beancount ledger; have an accountant review reports.

Reads local hledger plain-text ledgers to produce balance sheets, income and cash flow statements and spending stats, and can add or edit entries (dry-run previews, backups before writes). Needs hledger and Node.js; start read-only. Have an accountant review reports.

Official MCP for Norman, a German bookkeeping and tax service: create invoices (including ZUGFeRD e-invoices), categorize transactions, match receipts, preview and file VAT returns, and prepare GmbH/UG formation documents. Needs a Norman account (OAuth); a tax advisor should review filings.

Trivy's MCP plugin: lets agents scan local projects, container images and remote repositories for vulnerabilities and misconfigurations in plain language, optionally checking policy compliance via the Aqua platform. Requires Trivy; maintained by Aqua Security.

Helps agents add Auth0 authentication to apps: detects 35+ frameworks and covers login, MFA, SSO, RBAC, JWT validation, migration from other auth providers, and tenant security audits. Maintained by Auth0; needs an Auth0 account (free sign-up).

Official CLI for Ramp spend management: query transactions and cards, submit and approve reimbursements, approve bills, upload receipts and book travel, with JSON output; installs skills for your agents. Needs a Ramp business account (browser login); defaults to sandbox. Confirm approvals by hand.

Netlify's official plugin with skills for Functions, Edge Functions, Blobs, databases, forms, caching, netlify.toml configuration and deploys, plus the hosted Netlify MCP (OAuth sign-in on first use).

Lets AI read Ledger CLI plain-text double-entry ledgers and query balances, registers, accounts, payees and budget performance. Easiest with Docker and the author's image (Ledger CLI included), or install Ledger CLI yourself; needs your ledger file.

Official MCP for Paddle, the merchant of record: manage products and prices, customers, subscriptions, transactions and refunds from chat, download invoice PDFs and generate financial reports. Needs a Paddle Billing account and API key; start in sandbox with read-only or non-destructive tools.

EODHD's official plugin (remote MCP, 7 workflow skills, an analyst subagent): quotes, fundamentals and macro data from 70+ exchanges worldwide, company briefs, stock screening and portfolio risk analysis. Needs an EODHD account; free tier: 20 calls/day, basic US data only. Not investment advice.

Phrase Strings' official CLI: phrase init walks you through config, then phrase push uploads language files and phrase pull fetches the latest translations; it also wraps the full API for projects, locales and keys. Needs a Phrase Strings account (paid, 14-day free trial) and an API token.

Xero's official CLI (alpha): lets AI query and enter contacts, invoices, quotes, payments, bank transactions and manual journals, export invoice PDFs, and run P&L, balance sheet and trial balance reports for multiple orgs. Needs a Xero account and OAuth app; have an accountant review.

GitGuardian's official MCP: scans code for leaked secrets with 500+ detectors, and lets agents triage and remediate incidents, generate honeytokens and open fix PRs. Needs a GitGuardian account; the hosted endpoint with OAuth sign-in is recommended.

Lets agents upload, download and list files in Tencent Cloud Object Storage (COS), and use Cloud Infinite for image processing, QR code recognition, document-to-PDF conversion, video frame capture and natural-language search. Maintained by Tencent Cloud; needs a SecretId and SecretKey.

Langfuse's official plugin: uses hooks to send prompts, model calls, token usage and cost, tool calls and subagents from Claude Code sessions to Langfuse as traces for monitoring and review. Needs Langfuse keys (self-hosting supported) and uv or Python 3.10+.

AWS's official plugin for startups: answers AWS Activate credit eligibility and 60+ startup perks, gives architecture and cost advice by funding stage, team size and runway, and plans migrations from GCP, Azure or Heroku. Perk lookups need no AWS account; migrations need your repo.

ModelScope's official MCP: search models, datasets, Studio apps, papers and MCP servers and view details, plus text-to-image and image-to-image generation. Needs a ModelScope API token.

Pigment's official plugin: bundles the Pigment MCP and 30+ modeling skills to query business data and compare budget vs. actuals in plain language; with advanced mode on, build budget and forecast models, metrics and boards. Needs an enterprise Pigment workspace with MCP on; have finance review.

Apideck's official MCP: one unified API to read and write invoices, ledgers and reports in QuickBooks, Xero, NetSuite and other accounting systems, plus HR, CRM and ATS data. Needs a paid Apideck account (30-day trial), API key and App ID, with your systems connected. An accountant should review.

Semgrep's official MCP server plus hooks: every file the agent writes is scanned with Semgrep Code, Supply Chain and Secrets for vulnerabilities, malicious dependencies and hardcoded secrets; the agent rewrites until clean or you dismiss findings. Requires a Semgrep login.

Preconfigures the Datadog MCP in Claude Code to query logs, metrics, traces, dashboards and monitors in plain language while troubleshooting production. Maintained by Datadog; needs a Datadog account (OAuth or API key). In preview.