Herramientas

PortSwigger's official Burp Suite extension that lets agents read proxy history, send HTTP requests and create Repeater tabs; with Burp Pro it can also read scan results and use Collaborator. Install from the BApp Store; listens on 127.0.0.1:9876 by default.

Box's official plugin: agents search files, organize folders and set sharing via the Box MCP or CLI, and use Box AI for Q&A, summaries and field extraction. Plus law firm workflows (contract review, client intake, M&A data rooms); lawyers make the legal calls. Needs Box MCP authorization.

Official MCP for user research platform Dovetail: product managers, designers and researchers can pull research projects, raw data such as interviews, and insights into chat, citing user evidence when writing requirements. Needs a Dovetail API token, Node.js 22+ and the released script file.

NiuTrans' official MCP: translate text through the NiuTrans Open Platform, with a catalog of 455 languages and aliases and broad coverage of less common languages. Needs an API key from niutrans.com (about 200,000 free characters a day, then top up) and uv.

Prototyper UI's animation conventions for writing, reviewing or debugging component motion: copy-paste class strings for overlays, dialogs and sheets, press-feedback scales, state transitions, easing tokens and prefers-reduced-motion handling.

Usage guide for the Prototyper UI component library, built on @base-ui/react and Tailwind CSS v4 with copy-paste distribution, OKLCH colors and CVA variants: setup, theme tokens, component selection and patterns, noting render= replaces Radix asChild.

Official MCP for LibreTranslate, the open-source machine translation engine: translate text, detect languages and list supported languages. Use libretranslate.com (paid API key) or your own free self-hosted instance so text never leaves your machine or network. Needs Node.js.

Mintlify's official plugin: reference for Mintlify components, docs.json config, navigation and API docs, plus Mintlify docs search and site management, for building and updating product docs and help centers. Needs a Mintlify docs project; management needs browser sign-in.

PagerDuty's official plugin: analyzes your current git diff against the service's past incidents and change events, gives a 0-5 risk score and suggestions before you commit, and can create PagerDuty SRE Agent skills (early access program required). Needs a PagerDuty API token.

Vanta's official plugin: from Claude Code, review control gaps for SOC 2, ISO 27001 and other frameworks, failing tests, vendor risk and policies, and generate fixes for code-level issues. Needs admin access to a paid Vanta account (browser auth); have compliance conclusions reviewed by an expert.

Lucid's official hosted MCP: search and summarize documents in your Lucid account, generate flowcharts, org charts (importable from CSV) and sequence diagrams from a sentence, edit shapes, export PNGs and create share links. Needs a Lucid account (free plan works) with OAuth on first connect.

Atlassian's official plugin: run /twg-setup to install and sign in to the Teamwork Graph CLI, then Claude Code can query and act on issues, pages and pull requests across Jira, Confluence, Bitbucket, Trello and more. Needs an Atlassian Cloud account; terminal or desktop only.

Circleback's official plugin: agents search meeting notes, timestamped transcripts, action items, calendar events and connected email via its remote MCP, for post-meeting notes and follow-ups. Needs a Circleback account recording your meetings (free tier works); authorize via /mcp.

DeepL's official Claude Code plugin: uses DeepL's hosted service to translate text and Word, PowerPoint, Excel and PDF files with formatting intact, rephrase and polish, fix grammar and apply glossaries. Needs an eligible DeepL subscription; browser sign-in on first use.

Locize's official plugin: agents translate and review strings using your project's glossary, style guide and translation memory, and check new copy for banned terms; also bundles the Locize MCP and an i18next skill for developers. Needs a Locize account (free tier); browser auth or a personal token.

Cloudinary's official plugin with 5 MCP servers and 3 skills: upload, manage, crop and compress image and video assets, run AI image analysis and automated media workflows, and search docs for developers. Needs a Cloudinary account (free tier) or a temporary cloud claimed within 24 hours.

StackOne's official plugin connects its hosted MCP so agents can search and act across hundreds of connected business systems, from HR platforms like Workday and SAP to CRMs and Jira, for example looking up leave requests. Needs a StackOne account (free plan available) with your systems connected.

Greptile's official AI code review plugin: view and address review comments on GitHub or GitLab PRs, review the current branch before opening a PR, and search your team's knowledge base and coding standards. Needs a Greptile account (OAuth, free tier available) and Node locally.