Tools

Gathers all agreements with a vendor from your CLM, CRM, email and drive, lists signed and missing MSAs, DPAs and SOWs, and flags upcoming expirations, auto-renewal notice windows and surviving obligations. Needs those connectors. From Anthropic's legal plugin; verify against originals.

Anthropic's official data skill that guides agents to write, translate and optimize SQL across Snowflake, BigQuery, Databricks, PostgreSQL and other warehouse dialects, including CTEs, window functions and analytical aggregations.

Plugin for in-house legal: reviews contracts clause by clause against your negotiation playbook with suggested redlines, triages NDAs green/yellow/red, handles compliance and privacy questions, assesses legal risk and writes briefs. Official from Anthropic; default playbook assumes US law.

For internal auditors running SOX tests: lists key controls by area (revenue, procure-to-pay, payroll, close, ITGC) and period, sets sample sizes, samples from your population, and generates test workpaper templates and deficiency assessments. Needs professional review. Official from Anthropic.

Pre-signature check for final contracts: open redlines, missing exhibits, party names and signature blocks, then sets up sequential or parallel signing. Sends via DocuSign or similar e-signature services when connected, otherwise writes signing instructions. From Anthropic's legal plugin.

Helps in-house legal score and rank risks in contracts, deals and disputes on a severity-by-likelihood matrix, write risk memos, and know when to escalate to senior or outside counsel. No other tools needed. From Anthropic's legal plugin; not legal advice, have a lawyer review.

Drafts common legal replies from templates: data subject requests, litigation hold notices, vendor legal inquiries, NDA requests and subpoenas, first checking for regulatory or litigation issues that templates should not handle. From Anthropic's legal plugin; have a lawyer review.

Runs compliance checks on planned features, marketing campaigns or business initiatives: identifies applicable regulations such as GDPR and CCPA, required approvals and risks, and concludes go, go with conditions, or needs further review. From Anthropic's legal plugin; not legal advice.

Three kinds of briefs for legal teams: daily briefs of to-dos and deadlines from email, calendar and contracts; topic briefs on a legal question; and incident briefs for breaches, litigation threats or regulator inquiries. Needs email and calendar tools. From Anthropic; not legal advice.

Reviews contracts clause by clause against your organization's negotiation playbook, flags deviations, proposes redlines and analyzes business impact. A skill from Anthropic's official legal plugin; conclusions need review by a legal professional.

Anthropic's official plugin that opens PDFs in a local interactive viewer where Claude proposes highlights, comments and approval stamps in batches, walks you through form filling, places signature images and exports an annotated copy. Needs Node.js 18+; signatures are not digital certificates.

Prepares structured briefs for meetings with legal stakes, such as contract negotiations, board meetings, compliance reviews or litigation: attendees and agenda, related agreements and open issues, negotiation points, and post-meeting action items. From Anthropic's legal plugin; verify the brief.

Methodology reference for US SOX 404 internal control audits: scoping significant accounts, sampling methods, workpaper and evidence standards, and classifying deficiencies, significant deficiencies and material weaknesses. Not audit or legal advice; needs professional review. By Anthropic.

Compliance skill from Anthropic's official operations plugin: maps controls, owners and evidence for SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, schedules audits, runs gap analyses, and outputs audit-readiness checklists and evidence collection plans. Have legal or compliance experts review.

Everyday software engineering plugin: standup summaries, code review, structured debugging, architecture decision records, incident response and pre-deploy checks. Official from Anthropic, built mainly for Cowork but also usable in Claude Code.

Adds a searchable, copyable text layer to scanned PDFs, with automatic deskew, rotation and size optimization, outputting PDF/A by default. Built on Tesseract, supports 100+ languages and runs fully locally.

Processes large tool outputs in a sandbox and returns only the results to context; logs session events in SQLite with FTS5 so work continues after context compaction. Supports Claude Code, Codex and a dozen other clients. ELv2 licensed.

Vercel's official cost and performance skill: gathers production metrics, usage and project config, investigates only the routes and files the metrics point to, and returns ranked, doc-backed recommendations. Supports Next.js, SvelteKit and Nuxt; needs Vercel CLI v53+ logged in and linked.

Vercel's official deployment skill: checks the git remote, project link and CLI login, then deploys a preview (default) or production via git push or vercel deploy. When login isn't possible in a sandbox, it can create a claimable preview link.

Runs the cognee memory engine as an MCP server whose remember, recall and forget tools write documents and conversations into a knowledge graph and vector store for cross-session retrieval. Start it with Docker or uv first; needs an LLM API key by default, or connect to Cognee Cloud.

Daemonless, rootless container and pod manager with a Docker-compatible CLI for building, running and pushing OCI images. On macOS and Windows it runs inside a podman machine VM.

Fast vulnerability scanner driven by YAML templates: uses a community template library to detect known vulnerabilities over HTTP, DNS, TCP, SSL and more, supports custom templates and plugs into CI/CD. Use only on targets you're authorized to test.

Writes conversations and business data into Graphiti's temporal knowledge graph so agents can retrieve long-term memory by entity, fact and time. Open source from Zep; start FalkorDB or Neo4j and the server with Docker first, and configure an LLM API key.

Grafana's load and performance testing tool: write test scripts in JavaScript covering HTTP, WebSocket, gRPC and browsers, set threshold assertions and run them in CI.