Tools

Official skills from US broker Alpaca: teach agents to backtest, place and check paper trades, plus developer guides for Broker API account opening, funding and reconciliation. Needs an Alpaca API key (paper trading uses no real money) and the Alpaca CLI; results need professional review.

Slack's official plugin: connects the Slack-hosted MCP to search messages and files, send or schedule messages, and read and write canvases. Includes commands for channel summaries and standup reports, plus skills for building Slack apps. Requires workspace admin approval.

Microsoft Translator's translation quality tool: GPT scores each sentence using MQM error categories or a direct score; --list_mqm_errors shows error types and severity. Needs line-aligned source and target files, Python and an OpenAI or Azure OpenAI key (paid); a translator should still review.

Connects any FHIR-compliant EHR server (e.g. the Epic sandbox or HAPI) to agents to search, read, create and update patient clinical data in plain language, with SMART on FHIR auth. By WSO2. Needs a FHIR server URL, access token and uv; clinicians must review results.

Runs locally with no API key: looks up drug labels and adverse events from FDA, EMA and DailyMed, plus WHO health statistics, PubMed papers, clinical trials and clinical guidelines, with auto-generated evidence-level tags on papers. Needs Node.js. Have a doctor or pharmacist verify results.

Sonar's official plugin bringing SonarQube checks into the agent coding loop: secrets-scanning hook, issue fixing, quality gates, coverage and dependency risk; with Vortex analysis on, every edit is checked. Needs SonarQube (free Community Build works), the sonar CLI and Docker.

From Twilio Labs: exposes Twilio's public APIs (SMS, voice, phone numbers, Serverless and more) as MCP tools generated from its OpenAPI specs, with filtering by service or tag. Needs a Twilio API key; marked as a proof of concept.

Shapes the agent's own replies rather than your documents: separates what changed from what was verified, cuts invented confidence, leads with the action and keeps load-bearing caveats. Manually invoked and stays on until you say stop; a script can enable it in CLAUDE.md or AGENTS.md.

Neon's official plugin combining the Neon MCP and skills to manage serverless Postgres: projects and branches, object storage, Functions and the AI Gateway. Signs in to Neon via OAuth the first time you use the MCP.

Connects to PACS and other DICOM servers: query images by patient, study and series, read text from PDF reports embedded in DICOM, and forward series to AI nodes such as segmentation. Needs uv and a YAML config. Not for clinical use or real patient data (per the author).

Analyzes your codebase and generates a render.yaml Blueprint, or creates services directly through the Render MCP, to deploy apps to Render. Maintained by Render and included in OpenAI's curated skills. Needs a Render account and code pushed to GitHub, GitLab or Bitbucket.

Searches 600,000+ studies registered on ClinicalTrials.gov, shows protocols and posted results (efficacy, adverse events), and matches patients to recruiting trials by age, sex, condition and location. Public data, no API key; needs Node.js 24+. Unofficial; results must be reviewed by a doctor.

PostHog's official plugin with a built-in MCP and 30+ skills: query product analytics, feature flags, A/B experiments, dashboards and error tracking from chat, and optionally send Claude Code sessions to LLM Analytics. Needs OAuth sign-in with a PostHog account.

MLflow's official skills plugin: lets coding agents add MLflow Tracing to LLM apps, analyze failed traces, build evaluation datasets and scorers, and query token and latency metrics, closing the instrument, evaluate, iterate loop. Needs MLflow 3.8+.

Prisma's official skills: the Prisma ORM CLI, Client query API, connection setup for various databases, a v6 to v7 upgrade guide, and deployment workflows for Prisma Postgres and Compute.

42 official AWS skills for healthcare and life sciences: medical coding and terminology mapping, FHIR/HL7 parsing, claims and prior authorization rules, medical imaging, pharmacoepidemiology and genomics, per US standards. Some need local software. Not for clinical decisions; expert review required.

Pinecone's official plugin: bundles the Pinecone MCP server and /pinecone skill commands to create vector indexes, upsert data, search in plain language, or build a document Q&A assistant with citations from Claude Code. Needs a Pinecone API key (free sign-up); Assistant features also need uv.

Drafts US-law contracts: the agent gathers terms for standard templates (NDA, SAFE, offer letter, cloud services agreement) and outputs a DOCX to review in Word, plus guides and checklists citing source law. Use the hosted URL, or run locally for sensitive matters. Drafts only; a lawyer must review.

Helps agents add Auth0 authentication to apps: detects 35+ frameworks and covers login, MFA, SSO, RBAC, JWT validation, migration from other auth providers, and tenant security audits. Maintained by Auth0; needs an Auth0 account (free sign-up).

Netlify's official plugin with skills for Functions, Edge Functions, Blobs, databases, forms, caching, netlify.toml configuration and deploys, plus the hosted Netlify MCP (OAuth sign-in on first use).

Official MCP for Paddle, the merchant of record: manage products and prices, customers, subscriptions, transactions and refunds from chat, download invoice PDFs and generate financial reports. Needs a Paddle Billing account and API key; start in sandbox with read-only or non-destructive tools.

Supabase's official plugin: Supabase and Postgres best-practice skills plus the Supabase remote MCP to manage projects, run SQL, design schemas and RLS policies, and handle auth and storage. Needs a Supabase account.

Official CLI for Weblate, the open-source translation platform: check translation progress for projects and components, upload and download translation files, lock components, and commit or push repository changes. Hosted or self-hosted; needs the server URL, an API key and Python.

GitGuardian's official MCP: scans code for leaked secrets with 500+ detectors, and lets agents triage and remediate incidents, generate honeytokens and open fix PRs. Needs a GitGuardian account; the hosted endpoint with OAuth sign-in is recommended.