# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for Mobile & desktop or ML / AI or Data engineering or Security: 376 items. > - Mobile & desktop: Building and shipping iOS, Android and desktop apps. > - ML / AI: Model training, evaluation and LLM application development. > - Data engineering: Data pipelines, warehouse modeling, ETL and data quality. > - Security: Code audits, vulnerability triage, penetration testing and compliance. - [GEMBA](https://hebbmind.com/es/cli/gemba.md): [CLI] Microsoft Translator's translation quality tool: GPT scores each sentence using MQM error categories or a direct score; --list_mqm_errors shows error types and severity. Needs line-aligned source and target files, Python and an OpenAI or Azure OpenAI key (paid); a translator should still review. - [FHIR MCP Server](https://hebbmind.com/es/mcp/fhir-mcp-server.md): [MCP] Connects any FHIR-compliant EHR server (e.g. the Epic sandbox or HAPI) to agents to search, read, create and update patient clinical data in plain language, with SMART on FHIR auth. By WSO2. Needs a FHIR server URL, access token and uv; clinicians must review results. - [Lokalise CLI v2](https://hebbmind.com/es/cli/lokalise-cli-2-go.md): [CLI] Lokalise's official CLI (lokalise2) covering the Lokalise API v2: upload and download language files and manage keys, translations, screenshots, translation tasks and contributors. Needs a Lokalise account (paid, 14-day free trial) and an API token passed via --token. - [SonarQube](https://hebbmind.com/es/plugin/sonarqube-agent-plugins.md): [Plugin] Sonar's official plugin bringing SonarQube checks into the agent coding loop: secrets-scanning hook, issue fixing, quality gates, coverage and dependency risk; with Vortex analysis on, every edit is checked. Needs SonarQube (free Community Build works), the sonar CLI and Docker. - [Lottie Animation](https://hebbmind.com/es/skill/lottie-animation.md): [Skill] Integrates Lottie and dotLottie animations from After Effects into web, iOS, Android and React Native: playback and segment control, scroll- or hover-driven interactivity, runtime theming and recoloring, plus an After Effects export checklist. - [MLflow Skills](https://hebbmind.com/es/plugin/mlflow-skills.md): [Plugin] MLflow's official skills plugin: lets coding agents add MLflow Tracing to LLM apps, analyze failed traces, build evaluation datasets and scorers, and query token and latency metrics, closing the instrument, evaluate, iterate loop. Needs MLflow 3.8+. - [SimpleLocalize CLI](https://hebbmind.com/es/cli/simplelocalize-cli.md): [CLI] SimpleLocalize's official CLI: upload and download translation files, trigger machine and AI auto-translation, publish translations to the CDN, and extract translation keys from source code for CI. Needs a SimpleLocalize account and project API key; paid service with a 14-day free trial. - [RevenueCat](https://hebbmind.com/es/plugin/revenuecat.md): [Plugin] Official RevenueCat plugin: configure in-app purchase projects, products, entitlements and offerings from chat, view revenue, conversion funnels and experiment data, with SDK skills for iOS, Android, Flutter and more. Needs RevenueCat OAuth sign-in; SDK setup needs a developer. - [locize-cli](https://hebbmind.com/es/cli/locize-cli.md): [CLI] Locize's official CLI: sync local translation files with the Locize platform, add, remove and look up keys, download published translations, manage versions and branches, and export JSON, XLIFF, PO, CSV or Excel for translators. Needs a Locize account, project ID and API key; free plan available. - [Pinecone Plugin for Claude Code](https://hebbmind.com/es/plugin/pinecone-claude-code-plugin.md): [Plugin] Pinecone's official plugin: bundles the Pinecone MCP server and /pinecone skill commands to create vector indexes, upsert data, search in plain language, or build a document Q&A assistant with citations from Claude Code. Needs a Pinecone API key (free sign-up); Assistant features also need uv. - [Vault MCP Server](https://hebbmind.com/es/mcp/vault-mcp-server.md): [MCP] HashiCorp's official MCP: lets agents manage Vault mounts, read and write KV secrets, enable PKI, create issuers and roles, and issue certificates. Needs a reachable Vault server and token; HashiCorp recommends using it only in trusted local environments. - [Trivy MCP Server](https://hebbmind.com/es/mcp/trivy-mcp.md): [MCP] Trivy's MCP plugin: lets agents scan local projects, container images and remote repositories for vulnerabilities and misconfigurations in plain language, optionally checking policy compliance via the Aqua platform. Requires Trivy; maintained by Aqua Security. - [Alibaba Cloud DataWorks MCP Server](https://hebbmind.com/es/mcp/alibabacloud-dataworks-mcp-server.md): [MCP] Alibaba Cloud's official MCP server: through the DataWorks Open API, agents manage data development nodes and workflows, operate scheduled instances, query Data Map metadata and lineage, and configure data quality rules. Needs an Alibaba Cloud AccessKey. - [Auth0](https://hebbmind.com/es/plugin/auth0.md): [Plugin] Helps agents add Auth0 authentication to apps: detects 35+ frameworks and covers login, MFA, SSO, RBAC, JWT validation, migration from other auth providers, and tenant security audits. Maintained by Auth0; needs an Auth0 account (free sign-up). - [Supabase Agent Plugin](https://hebbmind.com/es/plugin/supabase-plugin.md): [Plugin] Supabase's official plugin: Supabase and Postgres best-practice skills plus the Supabase remote MCP to manage projects, run SQL, design schemas and RLS policies, and handle auth and storage. Needs a Supabase account. - [Phrase Strings CLI](https://hebbmind.com/es/cli/phrase-cli.md): [CLI] Phrase Strings' official CLI: phrase init walks you through config, then phrase push uploads language files and phrase pull fetches the latest translations; it also wraps the full API for projects, locales and keys. Needs a Phrase Strings account (paid, 14-day free trial) and an API token. - [GitGuardian MCP Server](https://hebbmind.com/es/mcp/ggmcp.md): [MCP] GitGuardian's official MCP: scans code for leaked secrets with 500+ detectors, and lets agents triage and remediate incidents, generate honeytokens and open fix PRs. Needs a GitGuardian account; the hosted endpoint with OAuth sign-in is recommended. - [Snowflake Cortex Code](https://hebbmind.com/es/plugin/cortex-code.md): [Plugin] Snowflake's official plugin: detects Snowflake-related requests and hands them to the Cortex Code CLI, whose 55+ built-in skills handle SQL, dynamic tables, data governance and more. Needs the cortex CLI installed and a Snowflake connection configured. - [Langfuse Observability Plugin](https://hebbmind.com/es/plugin/claude-observability-plugin.md): [Plugin] Langfuse's official plugin: uses hooks to send prompts, model calls, token usage and cost, tool calls and subagents from Claude Code sessions to Langfuse as traces for monitoring and review. Needs Langfuse keys (self-hosting supported) and uv or Python 3.10+. - [ModelScope MCP Server](https://hebbmind.com/es/mcp/modelscope-modelscope-mcp-server.md): [MCP] ModelScope's official MCP: search models, datasets, Studio apps, papers and MCP servers and view details, plus text-to-image and image-to-image generation. Needs a ModelScope API token. - [Semgrep Guardian](https://hebbmind.com/es/plugin/semgrep-plugin.md): [Plugin] Semgrep's official MCP server plus hooks: every file the agent writes is scanned with Semgrep Code, Supply Chain and Secrets for vulnerabilities, malicious dependencies and hardcoded secrets; the agent rewrites until clean or you dismiss findings. Requires a Semgrep login. - [Crowdin Skills](https://hebbmind.com/es/plugin/crowdin-skills.md): [Plugin] Crowdin's official plugin with the Crowdin MCP: manage projects and translations in Claude Code, Cowork or Codex, with skills to build glossaries, add translator context, draft translations for review and answer how-tos. Needs a Crowdin account; drafts and glossary uploads need its CLI. - [Zeplin MCP Server](https://hebbmind.com/es/mcp/zeplin-mcp-server.md): [MCP] Zeplin's official MCP: hands screen and component specs, assets, design tokens and designer annotations to the agent so developers can implement designs more accurately during handoff. Needs a Zeplin account, a personal access token and Node.js 20+. - [Burp Suite MCP Server](https://hebbmind.com/es/mcp/portswigger-mcp-server.md): [MCP] PortSwigger's official Burp Suite extension that lets agents read proxy history, send HTTP requests and create Repeater tabs; with Burp Pro it can also read scan results and use Collaborator. Install from the BApp Store; listens on 127.0.0.1:9876 by default. - [Vanta](https://hebbmind.com/es/plugin/vanta-mcp-plugin.md): [Plugin] Vanta's official plugin: from Claude Code, review control gaps for SOC 2, ISO 27001 and other frameworks, failing tests, vendor risk and policies, and generate fixes for code-level issues. Needs admin access to a paid Vanta account (browser auth); have compliance conclusions reviewed by an expert. - [Sentry for Claude Code](https://hebbmind.com/es/plugin/plugin-claude.md): [Plugin] Sentry's official plugin: skills for SDK setup across platforms, production issue debugging, Sentry-aware code review and alert configuration, plus the hosted Sentry MCP to query errors and stack traces. Needs a Sentry account.