Herramientas

PortSwigger's official Burp Suite extension that lets agents read proxy history, send HTTP requests and create Repeater tabs; with Burp Pro it can also read scan results and use Collaborator. Install from the BApp Store; listens on 127.0.0.1:9876 by default.

Box's official plugin: agents search files, organize folders and set sharing via the Box MCP or CLI, and use Box AI for Q&A, summaries and field extraction. Plus law firm workflows (contract review, client intake, M&A data rooms); lawyers make the legal calls. Needs Box MCP authorization.

Mintlify's official plugin: reference for Mintlify components, docs.json config, navigation and API docs, plus Mintlify docs search and site management, for building and updating product docs and help centers. Needs a Mintlify docs project; management needs browser sign-in.

PagerDuty's official plugin: analyzes your current git diff against the service's past incidents and change events, gives a 0-5 risk score and suggestions before you commit, and can create PagerDuty SRE Agent skills (early access program required). Needs a PagerDuty API token.

Vanta's official plugin: from Claude Code, review control gaps for SOC 2, ISO 27001 and other frameworks, failing tests, vendor risk and policies, and generate fixes for code-level issues. Needs admin access to a paid Vanta account (browser auth); have compliance conclusions reviewed by an expert.

Sentry's official plugin: skills for SDK setup across platforms, production issue debugging, Sentry-aware code review and alert configuration, plus the hosted Sentry MCP to query errors and stack traces. Needs a Sentry account.

Atlassian's official plugin: run /twg-setup to install and sign in to the Teamwork Graph CLI, then Claude Code can query and act on issues, pages and pull requests across Jira, Confluence, Bitbucket, Trello and more. Needs an Atlassian Cloud account; terminal or desktop only.

Locize's official plugin: agents translate and review strings using your project's glossary, style guide and translation memory, and check new copy for banned terms; also bundles the Locize MCP and an i18next skill for developers. Needs a Locize account (free tier); browser auth or a personal token.

Greptile's official AI code review plugin: view and address review comments on GitHub or GitLab PRs, review the current branch before opening a PR, and search your team's knowledge base and coding standards. Needs a Greptile account (OAuth, free tier available) and Node locally.