Herramientas

Semgrep's official MCP server plus hooks: every file the agent writes is scanned with Semgrep Code, Supply Chain and Secrets for vulnerabilities, malicious dependencies and hardcoded secrets; the agent rewrites until clean or you dismiss findings. Requires a Semgrep login.

Preconfigures the Datadog MCP in Claude Code to query logs, metrics, traces, dashboards and monitors in plain language while troubleshooting production. Maintained by Datadog; needs a Datadog account (OAuth or API key). In preview.

Grafana's official plugin marketplace with three plugins: the hosted Grafana Cloud MCP, the local mcp-grafana and Grafana Assistant, covering dashboards, data sources, Prometheus and Loki queries, alerting and incident management. Works with Claude Code and Codex.

Cartesia's official voice MCP: turn text into natural speech, transcribe recordings, clone voices and localize a voice into other languages from chat, for course narration, audio content and voiceovers. Hosted; sign in with your Cartesia account in the browser. Free tier available.

Dropbox's official plugin (Claude, Codex and Cursor versions): search and browse Dropbox files, read and summarize documents, create shared links, send file requests to collect materials, and organize folders, confirming a list before deleting. Respects existing permissions; needs Dropbox sign-in.

PortSwigger's official Burp Suite extension that lets agents read proxy history, send HTTP requests and create Repeater tabs; with Burp Pro it can also read scan results and use Collaborator. Install from the BApp Store; listens on 127.0.0.1:9876 by default.

PagerDuty's official plugin: analyzes your current git diff against the service's past incidents and change events, gives a 0-5 risk score and suggestions before you commit, and can create PagerDuty SRE Agent skills (early access program required). Needs a PagerDuty API token.

Vanta's official plugin: from Claude Code, review control gaps for SOC 2, ISO 27001 and other frameworks, failing tests, vendor risk and policies, and generate fixes for code-level issues. Needs admin access to a paid Vanta account (browser auth); have compliance conclusions reviewed by an expert.

Sentry's official plugin: skills for SDK setup across platforms, production issue debugging, Sentry-aware code review and alert configuration, plus the hosted Sentry MCP to query errors and stack traces. Needs a Sentry account.

ASSISTments' official math assessment plugin: breaks a math standard (such as US CCSS) into teachable, testable sub-skills and an item plan, then generates targeted practice or mastery quizzes for teacher review first. Drafting works as is; saving to ASSISTments needs its MCP and an account.

Coursera's official learning plugin: asks about your topic, background and preferred formats, then searches the Coursera catalog to recommend courses, hands-on projects, short videos or role-play practice, and plans your next learning steps. Requires the Coursera connector to be enabled.

Official remote MCP from AP prep platform Fiveable: browse study guides and topics for US AP courses, practice multiple-choice questions with adaptive diagnostics, get FRQ answers scored and estimate AP scores. For students. No install or API key; sign in to save progress.