Tools

PortSwigger's official Burp Suite extension that lets agents read proxy history, send HTTP requests and create Repeater tabs; with Burp Pro it can also read scan results and use Collaborator. Install from the BApp Store; listens on 127.0.0.1:9876 by default.

Airwallex's official plugin: extract details from contracts or POs to create invoices and subscriptions, add beneficiaries from supplier documents, issue employee cards with limits, and summarize multi-currency balances and FX exposure. Needs an Airwallex business account; finance should review.

Airwallex's official CLI: lets agents check multi-currency balances, beneficiaries, transfers and FX, and manage billing customers, invoices, subscriptions, corporate cards and expenses. Needs an Airwallex business account; macOS and Linux. Closed-source beta; confirm real-money actions manually.

HubSpot's official CLI for AI agents (beta): find and bulk-update contacts, companies, deals and tickets, log calls and meetings, advance deal stages and route conversations, with an official skill pack. Needs a HubSpot account and browser login; writes hit live data, so try --dry-run first.

Mintlify's official plugin: reference for Mintlify components, docs.json config, navigation and API docs, plus Mintlify docs search and site management, for building and updating product docs and help centers. Needs a Mintlify docs project; management needs browser sign-in.

PagerDuty's official plugin: analyzes your current git diff against the service's past incidents and change events, gives a 0-5 risk score and suggestions before you commit, and can create PagerDuty SRE Agent skills (early access program required). Needs a PagerDuty API token.

Plain's official plugin: look up customers, threads and SLAs in Claude Code, add internal notes, create and update help center articles, and draft broadcast announcements (saved as drafts, never sent). Needs a Plain API key plus curl and jq; not in a marketplace; clone the repo to load it.

Vanta's official plugin: from Claude Code, review control gaps for SOC 2, ISO 27001 and other frameworks, failing tests, vendor risk and policies, and generate fixes for code-level issues. Needs admin access to a paid Vanta account (browser auth); have compliance conclusions reviewed by an expert.

Avalara's official hosted MCP servers: US sales tax calculation, returns filing, e-invoicing, exemption certificates, cross-border duties and HS code classification. Needs an Avalara account (AvaTax has a 90-day trial) and browser OAuth; the command adds AvaTax. Have a tax professional review.

HubSpot's official sales plugin with the HubSpot remote MCP: skills to import contacts and deals, get daily briefs, prep calls, draft follow-up emails, log call notes back to HubSpot and review the pipeline. Needs a HubSpot account.

Lusha's official prospecting plugin: find decision makers by ideal customer profile, enrich verified emails, direct and mobile numbers and company signals, find lookalikes, generate personalized outreach sequences and export CSV. Needs Lusha API access; lookups use credits. Respect privacy laws.

Sentry's official plugin: skills for SDK setup across platforms, production issue debugging, Sentry-aware code review and alert configuration, plus the hosted Sentry MCP to query errors and stack traces. Needs a Sentry account.

Circleback's official plugin: agents search meeting notes, timestamped transcripts, action items, calendar events and connected email via its remote MCP, for post-meeting notes and follow-ups. Needs a Circleback account recording your meetings (free tier works); authorize via /mcp.

Intercom's official support plugin: via a remote MCP, search conversations, analyze support issue trends, look up contacts and companies, build 360-degree customer profiles, and install Messenger. Read-only; needs an Intercom workspace and currently works only in the US region.

Shippo's official plugin: compare rates from dozens of carriers (USPS, UPS, FedEx, DHL), validate addresses, buy labels incl. customs, track packages, ship in bulk and analyze costs. Needs a Shippo account (OAuth); rates and validation are free, labels cost. Mainly for North American sellers.

LogRocket's official plugin: when users report problems, agents pull up their session replays, network requests and errors and analyze the cause, so support doesn't have to keep asking for repro steps. Needs Claude Code and a site or app on paid LogRocket (14-day trial); sign in on first use.

Pendo's official product analytics plugin: summarize account activity and feedback before customer meetings, analyze feature adoption, group user feedback into themes and find session replays. Needs a Pendo subscription; authorize via /mcp after install.

Pendo's official plugin: two short rounds of questions capture your goals and brand style, then it generates ready-to-launch in-app guides such as walkthroughs, announcements, reminders, polls and promotions as HTML/CSS/JS. Needs a Pendo account authorized in Claude Code.

Intuit's official QuickBooks plugin: health checks on profit, cash flow, balance sheet and receivables, peer benchmarking and payroll cost analysis, and drafts payment reminders, estimates and invoices, confirming before writes. Needs QuickBooks Online (official connector); have finance review.

Windsor.ai's official plugin: connects ad accounts on Google, Meta, TikTok and more plus 350+ data sources such as GA4 and CRMs for quick cross-channel performance reports and wasted-spend detection; asks before changing budgets or pausing ads. Needs a Windsor.ai account with data sources connected.

Official plugin for Windmill performance management: write feedback and kudos for colleagues, manage 1:1 agendas and private notes about teammates, create and schedule pulse surveys, and summarize team updates. Needs a Windmill account (free up to 10 users); browser sign-in.

100Hires' official hosted ATS MCP: HR can manage candidates, job postings, pipeline stages, interview scheduling, email templates and scorecards from chat, covering its full API. Sign in via browser OAuth, nothing to install. Needs a paid 100Hires account (14-day free trial).

Leadfeeder's official plugin: identifies companies visiting your site, writes daily high-intent visitor briefs, company research and outreach scripts, suggests contacts by buyer persona and adds companies to lists after you confirm. Needs Leadfeeder tracking on your site; some actions cost credits.

LegalZoom's official plugin: upload a contract (PDF, Word or pasted text) for risk-scored clause analysis and suggested edits, with flags on when to involve a lawyer; connecting to LegalZoom attorneys needs a separate legal plan, US only. Not legal advice; have a lawyer review.