Tools

GitGuardian's official MCP: scans code for leaked secrets with 500+ detectors, and lets agents triage and remediate incidents, generate honeytokens and open fix PRs. Needs a GitGuardian account; the hosted endpoint with OAuth sign-in is recommended.

Pika's official plugin: 9 one-shot workflows (podcasts, explainer videos, UGC ads, brand books, founder product videos) that work from a URL or product image, backed by 58 image, video, music and editing tools. Needs a Pika account; credit-based, with free credits on sign-up.

Snowflake's official plugin: detects Snowflake-related requests and hands them to the Cortex Code CLI, whose 55+ built-in skills handle SQL, dynamic tables, data governance and more. Needs the cortex CLI installed and a Snowflake connection configured.

Wix's official skill that teaches agents the right APIs for managing Wix site business features: store products and orders, bookings, events, pricing plans, forms, blog, SEO and marketing, instead of clicking through the dashboard. Needs a Wix site with an API key or OAuth; still experimental.

Lets agents upload, download and list files in Tencent Cloud Object Storage (COS), and use Cloud Infinite for image processing, QR code recognition, document-to-PDF conversion, video frame capture and natural-language search. Maintained by Tencent Cloud; needs a SecretId and SecretKey.

Amazon's official seller plugin (beta): connect Seller Central to check sales, traffic and inventory, get stockout alerts and restock suggestions, plan FBA inbound shipments and diagnose suppressed or unsearchable listings. Changes are drafted and need your approval. Needs a seller account.

Builds compact, polished landing pages for dev tools, package demos and micro-SaaS. Picks a design fingerprint (composition, palette, type, radius, surfaces, motion) so each run looks different, features a product-native demo, and keeps zero layout shift, focus states and reduced motion.

Langfuse's official plugin: uses hooks to send prompts, model calls, token usage and cost, tool calls and subagents from Claude Code sessions to Langfuse as traces for monitoring and review. Needs Langfuse keys (self-hosting supported) and uv or Python 3.10+.

HubSpot's official skills for running the CRM via the hubspot CLI: look up customers and history, filter audiences, dedupe records, advance deals, build sales reports and route support tickets. Needs the HubSpot Agent CLI (beta) signed in; dry-run bulk edits first; some features need paid plans.

AWS's official plugin for startups: answers AWS Activate credit eligibility and 60+ startup perks, gives architecture and cost advice by funding stage, team size and runway, and plans migrations from GCP, Azure or Heroku. Perk lookups need no AWS account; migrations need your repo.

ModelScope's official MCP: search models, datasets, Studio apps, papers and MCP servers and view details, plus text-to-image and image-to-image generation. Needs a ModelScope API token.

Pigment's official plugin: bundles the Pigment MCP and 30+ modeling skills to query business data and compare budget vs. actuals in plain language; with advanced mode on, build budget and forecast models, metrics and boards. Needs an enterprise Pigment workspace with MCP on; have finance review.

Salesforce's official sales plugin (beta): daily briefs, meeting prep and follow-up email drafts, team pipeline reviews, forecast and slipped-deal scenarios, and lead triage, confirming before editing records. Needs Salesforce hosted MCP (admin-enabled) and Slack; email and calendar optional.

Apideck's official MCP: one unified API to read and write invoices, ledgers and reports in QuickBooks, Xero, NetSuite and other accounting systems, plus HR, CRM and ATS data. Needs a paid Apideck account (30-day trial), API key and App ID, with your systems connected. An accountant should review.

Himalayas' official MCP: employers post remote jobs free (with screening questions), search open-to-work candidates and check salary benchmarks by role and country; job seekers search jobs and manage their profile and application board. Searching needs no account; managing needs a browser login.

Semgrep's official MCP server plus hooks: every file the agent writes is scanned with Semgrep Code, Supply Chain and Secrets for vulnerabilities, malicious dependencies and hardcoded secrets; the agent rewrites until clean or you dismiss findings. Requires a Semgrep login.

Preconfigures the Datadog MCP in Claude Code to query logs, metrics, traces, dashboards and monitors in plain language while troubleshooting production. Maintained by Datadog; needs a Datadog account (OAuth or API key). In preview.

Grafana's official plugin marketplace with three plugins: the hosted Grafana Cloud MCP, the local mcp-grafana and Grafana Assistant, covering dashboards, data sources, Prometheus and Loki queries, alerting and incident management. Works with Claude Code and Codex.

Carta's official equity plugin: ask about cap tables, option grants and vesting, SAFE conversions, 409A valuation history and liquidation waterfall scenarios, plus compensation benchmarks and drafting share issuances. Needs a Carta account (OAuth); collects usage telemetry. Have results reviewed.

ZoomInfo's official sales intelligence plugin with 14 skills: find target companies and decision makers, enrich leads and accounts, find lookalike customers, score accounts and leads on intent signals, prep account meetings and draft outreach emails. Needs a paid ZoomInfo account with API access.

Hunter.io's official plugin: find and verify work emails by name and company, list a domain's contacts, enrich company data, build lead lists, create outreach email sequences and push them to your CRM. Needs a Hunter account (free plan: 25 searches a month); follow anti-spam and privacy laws.

Lovable's official plugin: includes the Lovable remote MCP to create, edit, deploy and manage websites and apps in plain language, so founders and PMs can build interactive prototypes fast. Needs a Lovable account; generation and edits use Lovable credits.

PortSwigger's official Burp Suite extension that lets agents read proxy history, send HTTP requests and create Repeater tabs; with Burp Pro it can also read scan results and use Collaborator. Install from the BApp Store; listens on 127.0.0.1:9876 by default.

Airwallex's official plugin: extract details from contracts or POs to create invoices and subscriptions, add beneficiaries from supplier documents, issue employee cards with limits, and summarize multi-currency balances and FX exposure. Needs an Airwallex business account; finance should review.