Tools

HashiCorp's official MCP: lets agents manage Vault mounts, read and write KV secrets, enable PKI, create issuers and roles, and issue certificates. Needs a reachable Vault server and token; HashiCorp recommends using it only in trusted local environments.

Typefully's official skill: lets agents draft posts and long threads and schedule or publish them to X, LinkedIn, Threads, Bluesky, Mastodon and Substack Notes, and view scheduled content. Needs a Typefully account and API key, plus Node.js 18+.

Contentful's official MCP: content and marketing teams can create, edit and publish entries and assets in bulk using plain language, and manage localized content and scheduled publishing. Needs a Space ID, a management API token and Node.js; protected environments guard live content.

Trivy's MCP plugin: lets agents scan local projects, container images and remote repositories for vulnerabilities and misconfigurations in plain language, optionally checking policy compliance via the Aqua platform. Requires Trivy; maintained by Aqua Security.

Helps agents add Auth0 authentication to apps: detects 35+ frameworks and covers login, MFA, SSO, RBAC, JWT validation, migration from other auth providers, and tenant security audits. Maintained by Auth0; needs an Auth0 account (free sign-up).

Airtable's official plugin for Claude Code, Codex and Cursor: connects the official Airtable MCP and adds filtering, CLI, and product, marketing and sales ops skills, so agents can create tables, define fields, read and write records, and build shared views. Needs Airtable account authorization.

Netlify's official plugin with skills for Functions, Edge Functions, Blobs, databases, forms, caching, netlify.toml configuration and deploys, plus the hosted Netlify MCP (OAuth sign-in on first use).

Official MCP for Paddle, the merchant of record: manage products and prices, customers, subscriptions, transactions and refunds from chat, download invoice PDFs and generate financial reports. Needs a Paddle Billing account and API key; start in sandbox with read-only or non-destructive tools.

Supabase's official plugin: Supabase and Postgres best-practice skills plus the Supabase remote MCP to manage projects, run SQL, design schemas and RLS policies, and handle auth and storage. Needs a Supabase account.

Phrase Strings' official CLI: phrase init walks you through config, then phrase push uploads language files and phrase pull fetches the latest translations; it also wraps the full API for projects, locales and keys. Needs a Phrase Strings account (paid, 14-day free trial) and an API token.

Official CLI for Weblate, the open-source translation platform: check translation progress for projects and components, upload and download translation files, lock components, and commit or push repository changes. Hosted or self-hosted; needs the server URL, an API key and Python.

Amplitude's official plugin with a remote MCP and nearly 30 analysis skills: build charts and dashboards in plain language, interpret A/B experiments, summarize user feedback, and generate daily or weekly data briefs. Needs an Amplitude account with data (free plan exists); browser sign-in.

From IMG.LY: gives agents the CE.SDK design engine to create editable posters, flyers, social graphics and videos by chat, resize for each platform, import PSD, InDesign and PDF, and export print-ready PDFs with CMYK and bleed. Needs Node.js 22.15+ (WSL on Windows); the engine is free locally.

GitGuardian's official MCP: scans code for leaked secrets with 500+ detectors, and lets agents triage and remediate incidents, generate honeytokens and open fix PRs. Needs a GitGuardian account; the hosted endpoint with OAuth sign-in is recommended.

Pika's official plugin: 9 one-shot workflows (podcasts, explainer videos, UGC ads, brand books, founder product videos) that work from a URL or product image, backed by 58 image, video, music and editing tools. Needs a Pika account; credit-based, with free credits on sign-up.

Postman's official plugin: sets up the Postman MCP server so Claude Code can sync collections, run API tests and diagnose failures, generate client code, create mocks and docs, and run OWASP API security checks. Needs a Postman account.

Wix's official skill that teaches agents the right APIs for managing Wix site business features: store products and orders, bookings, events, pricing plans, forms, blog, SEO and marketing, instead of clicking through the dashboard. Needs a Wix site with an API key or OAuth; still experimental.

Perso AI's official plugin: dub videos into other languages with lip sync, transcribe to SRT, translate and burn in subtitles, cut vertical clips. Subtitle and clip tools are free and local; dubbing, lip sync and transcription need a Perso account, billed per second. Needs Node.js 18+.

Lets agents upload, download and list files in Tencent Cloud Object Storage (COS), and use Cloud Infinite for image processing, QR code recognition, document-to-PDF conversion, video frame capture and natural-language search. Maintained by Tencent Cloud; needs a SecretId and SecretKey.

Amazon's official seller plugin (beta): connect Seller Central to check sales, traffic and inventory, get stockout alerts and restock suggestions, plan FBA inbound shipments and diagnose suppressed or unsearchable listings. Changes are drafted and need your approval. Needs a seller account.

Meitu's official skills: one prompt gets agents posters, covers, sticker packs, ID photos and multi-angle e-commerce product shots, plus background removal, image restoration, image-to-video and music or voiceover for videos. Needs MeituHub AK/SK keys (free credits for new users) and meitu-cli.

Browser Use's official plugin: connects the Browser Use MCP so Claude can drive your local Chrome or a cloud browser to browse, extract data, fill forms, test sites and take screenshots. Needs uv; cloud browsers need sign-in or an API key.

Langfuse's official plugin: uses hooks to send prompts, model calls, token usage and cost, tool calls and subagents from Claude Code sessions to Langfuse as traces for monitoring and review. Needs Langfuse keys (self-hosting supported) and uv or Python 3.10+.

HubSpot's official skills for running the CRM via the hubspot CLI: look up customers and history, filter audiences, dedupe records, advance deals, build sales reports and route support tickets. Needs the HubSpot Agent CLI (beta) signed in; dry-run bulk edits first; some features need paid plans.