Herramientas

Trivy's MCP plugin: lets agents scan local projects, container images and remote repositories for vulnerabilities and misconfigurations in plain language, optionally checking policy compliance via the Aqua platform. Requires Trivy; maintained by Aqua Security.

Alibaba Cloud's official MCP server: through the DataWorks Open API, agents manage data development nodes and workflows, operate scheduled instances, query Data Map metadata and lineage, and configure data quality rules. Needs an Alibaba Cloud AccessKey.

Helps agents add Auth0 authentication to apps: detects 35+ frameworks and covers login, MFA, SSO, RBAC, JWT validation, migration from other auth providers, and tenant security audits. Maintained by Auth0; needs an Auth0 account (free sign-up).

Airtable's official plugin for Claude Code, Codex and Cursor: connects the official Airtable MCP and adds filtering, CLI, and product, marketing and sales ops skills, so agents can create tables, define fields, read and write records, and build shared views. Needs Airtable account authorization.

Official CLI for Ramp spend management: query transactions and cards, submit and approve reimbursements, approve bills, upload receipts and book travel, with JSON output; installs skills for your agents. Needs a Ramp business account (browser login); defaults to sandbox. Confirm approvals by hand.

Official MCP for Paddle, the merchant of record: manage products and prices, customers, subscriptions, transactions and refunds from chat, download invoice PDFs and generate financial reports. Needs a Paddle Billing account and API key; start in sandbox with read-only or non-destructive tools.

EODHD's official plugin (remote MCP, 7 workflow skills, an analyst subagent): quotes, fundamentals and macro data from 70+ exchanges worldwide, company briefs, stock screening and portfolio risk analysis. Needs an EODHD account; free tier: 20 calls/day, basic US data only. Not investment advice.

Supabase's official plugin: Supabase and Postgres best-practice skills plus the Supabase remote MCP to manage projects, run SQL, design schemas and RLS policies, and handle auth and storage. Needs a Supabase account.

Amplitude's official plugin with a remote MCP and nearly 30 analysis skills: build charts and dashboards in plain language, interpret A/B experiments, summarize user feedback, and generate daily or weekly data briefs. Needs an Amplitude account with data (free plan exists); browser sign-in.

Xero's official CLI (alpha): lets AI query and enter contacts, invoices, quotes, payments, bank transactions and manual journals, export invoice PDFs, and run P&L, balance sheet and trial balance reports for multiple orgs. Needs a Xero account and OAuth app; have an accountant review.

NASA's official MCP for its Common Metadata Repository: find Earth science and remote sensing datasets in plain language, check that data files exist for a given place and time, and get access services, related tools and citation info. No account to connect; downloads need an Earthdata login.

GitGuardian's official MCP: scans code for leaked secrets with 500+ detectors, and lets agents triage and remediate incidents, generate honeytokens and open fix PRs. Needs a GitGuardian account; the hosted endpoint with OAuth sign-in is recommended.

Snowflake's official plugin: detects Snowflake-related requests and hands them to the Cortex Code CLI, whose 55+ built-in skills handle SQL, dynamic tables, data governance and more. Needs the cortex CLI installed and a Snowflake connection configured.

Pika's official plugin: 9 one-shot workflows (podcasts, explainer videos, UGC ads, brand books, founder product videos) that work from a URL or product image, backed by 58 image, video, music and editing tools. Needs a Pika account; credit-based, with free credits on sign-up.

Wix's official skill that teaches agents the right APIs for managing Wix site business features: store products and orders, bookings, events, pricing plans, forms, blog, SEO and marketing, instead of clicking through the dashboard. Needs a Wix site with an API key or OAuth; still experimental.

Builds compact, polished landing pages for dev tools, package demos and micro-SaaS. Picks a design fingerprint (composition, palette, type, radius, surfaces, motion) so each run looks different, features a product-native demo, and keeps zero layout shift, focus states and reduced motion.

Amazon's official seller plugin (beta): connect Seller Central to check sales, traffic and inventory, get stockout alerts and restock suggestions, plan FBA inbound shipments and diagnose suppressed or unsearchable listings. Changes are drafted and need your approval. Needs a seller account.

Community-built MCP for the Genesys Cloud contact center: supervisors and QA staff can check queue volumes, sample conversations, and read call quality, sentiment, topics and transcripts. Needs an OAuth client in your Genesys Cloud org with per-tool permissions, and Node.js. Still in development.

Langfuse's official plugin: uses hooks to send prompts, model calls, token usage and cost, tool calls and subagents from Claude Code sessions to Langfuse as traces for monitoring and review. Needs Langfuse keys (self-hosting supported) and uv or Python 3.10+.

HubSpot's official skills for running the CRM via the hubspot CLI: look up customers and history, filter audiences, dedupe records, advance deals, build sales reports and route support tickets. Needs the HubSpot Agent CLI (beta) signed in; dry-run bulk edits first; some features need paid plans.

AWS's official plugin for startups: answers AWS Activate credit eligibility and 60+ startup perks, gives architecture and cost advice by funding stage, team size and runway, and plans migrations from GCP, Azure or Heroku. Perk lookups need no AWS account; migrations need your repo.

ModelScope's official MCP: search models, datasets, Studio apps, papers and MCP servers and view details, plus text-to-image and image-to-image generation. Needs a ModelScope API token.

Pigment's official plugin: bundles the Pigment MCP and 30+ modeling skills to query business data and compare budget vs. actuals in plain language; with advanced mode on, build budget and forecast models, metrics and boards. Needs an enterprise Pigment workspace with MCP on; have finance review.

Salesforce's official sales plugin (beta): daily briefs, meeting prep and follow-up email drafts, team pipeline reviews, forecast and slipped-deal scenarios, and lead triage, confirming before editing records. Needs Salesforce hosted MCP (admin-enabled) and Slack; email and calendar optional.