Tools

Pulumi's official skills: Pulumi program best practices, components and the Automation API, ESC secrets and config, debugging failed pulumi up runs, and migrating from Terraform, CDK, CloudFormation or ARM to Pulumi.

Pulumi's official plugin marketplace: write infrastructure as code in TypeScript, Python, Go and more, migrate from Terraform, CDK, CloudFormation or ARM, and manage ESC secrets and config. Works with both Claude Code and Codex.

Discourse's official MCP: lets agents search and read forum topics and posts and view categories and users. Read-only by default and no account needed for public forums; posting and replying require a site API key and the --allow_writes flag. Needs Node.js 24+.

42 official AWS skills for healthcare and life sciences: medical coding and terminology mapping, FHIR/HL7 parsing, claims and prior authorization rules, medical imaging, pharmacoepidemiology and genomics, per US standards. Some need local software. Not for clinical decisions; expert review required.

Trello's official hosted MCP, maintained by Atlassian: after OAuth authorization of one workspace, agents can search boards, create and move cards, maintain checklists and tidy the inbox, without permanently deleting data. Works on any Trello plan.

Lets agents create, search, update and reply to Freshdesk tickets, add internal notes, and look up contacts, companies and agents, so support teams can process and summarize tickets in bulk. Needs a Freshdesk API key and account domain; runs locally with uvx.

Pinecone's official plugin: bundles the Pinecone MCP server and /pinecone skill commands to create vector indexes, upsert data, search in plain language, or build a document Q&A assistant with citations from Claude Code. Needs a Pinecone API key (free sign-up); Assistant features also need uv.

HashiCorp's official MCP: lets agents manage Vault mounts, read and write KV secrets, enable PKI, create issuers and roles, and issue certificates. Needs a reachable Vault server and token; HashiCorp recommends using it only in trusted local environments.

Typefully's official skill: lets agents draft posts and long threads and schedule or publish them to X, LinkedIn, Threads, Bluesky, Mastodon and Substack Notes, and view scheduled content. Needs a Typefully account and API key, plus Node.js 18+.

Contentful's official MCP: content and marketing teams can create, edit and publish entries and assets in bulk using plain language, and manage localized content and scheduled publishing. Needs a Space ID, a management API token and Node.js; protected environments guard live content.

Trivy's MCP plugin: lets agents scan local projects, container images and remote repositories for vulnerabilities and misconfigurations in plain language, optionally checking policy compliance via the Aqua platform. Requires Trivy; maintained by Aqua Security.

Helps agents add Auth0 authentication to apps: detects 35+ frameworks and covers login, MFA, SSO, RBAC, JWT validation, migration from other auth providers, and tenant security audits. Maintained by Auth0; needs an Auth0 account (free sign-up).

Airtable's official plugin for Claude Code, Codex and Cursor: connects the official Airtable MCP and adds filtering, CLI, and product, marketing and sales ops skills, so agents can create tables, define fields, read and write records, and build shared views. Needs Airtable account authorization.

Netlify's official plugin with skills for Functions, Edge Functions, Blobs, databases, forms, caching, netlify.toml configuration and deploys, plus the hosted Netlify MCP (OAuth sign-in on first use).

Official MCP for Paddle, the merchant of record: manage products and prices, customers, subscriptions, transactions and refunds from chat, download invoice PDFs and generate financial reports. Needs a Paddle Billing account and API key; start in sandbox with read-only or non-destructive tools.

Supabase's official plugin: Supabase and Postgres best-practice skills plus the Supabase remote MCP to manage projects, run SQL, design schemas and RLS policies, and handle auth and storage. Needs a Supabase account.

Official CLI for Weblate, the open-source translation platform: check translation progress for projects and components, upload and download translation files, lock components, and commit or push repository changes. Hosted or self-hosted; needs the server URL, an API key and Python.

Amplitude's official plugin with a remote MCP and nearly 30 analysis skills: build charts and dashboards in plain language, interpret A/B experiments, summarize user feedback, and generate daily or weekly data briefs. Needs an Amplitude account with data (free plan exists); browser sign-in.

Lets agents search Help Scout conversations, see a customer's or organization's full history and pull reports like CSAT; add a Docs API key to search the knowledge base. Write actions (draft replies, internal notes, tags) are off by default. Needs App ID and Secret from a Help Scout private app.

From IMG.LY: gives agents the CE.SDK design engine to create editable posters, flyers, social graphics and videos by chat, resize for each platform, import PSD, InDesign and PDF, and export print-ready PDFs with CMYK and bleed. Needs Node.js 22.15+ (WSL on Windows); the engine is free locally.

GitGuardian's official MCP: scans code for leaked secrets with 500+ detectors, and lets agents triage and remediate incidents, generate honeytokens and open fix PRs. Needs a GitGuardian account; the hosted endpoint with OAuth sign-in is recommended.

Postman's official plugin: sets up the Postman MCP server so Claude Code can sync collections, run API tests and diagnose failures, generate client code, create mocks and docs, and run OWASP API security checks. Needs a Postman account.

Wix's official skill that teaches agents the right APIs for managing Wix site business features: store products and orders, bookings, events, pricing plans, forms, blog, SEO and marketing, instead of clicking through the dashboard. Needs a Wix site with an API key or OAuth; still experimental.

Lets agents upload, download and list files in Tencent Cloud Object Storage (COS), and use Cloud Infinite for image processing, QR code recognition, document-to-PDF conversion, video frame capture and natural-language search. Maintained by Tencent Cloud; needs a SecretId and SecretKey.