ツール

Fixes one design-system finding in a Figma screen, typically from Audit Design System. Checks the fix is feasible, backs up only the affected node, applies the smallest change (swap instance, compose from primitives, bind tokens or align variant) and verifies it locally. Needs Figma MCP.

HashiCorp's official MCP: lets agents manage Vault mounts, read and write KV secrets, enable PKI, create issuers and roles, and issue certificates. Needs a reachable Vault server and token; HashiCorp recommends using it only in trusted local environments.

TomTom's official MCP: geocoding and reverse geocoding, fuzzy and nearby search, single and multi-stop routing, reachable range, live traffic incidents, and static or dynamic maps. Needs a TomTom developer account and API key; use the hosted server (public preview) or run locally via npx.

Trivy's MCP plugin: lets agents scan local projects, container images and remote repositories for vulnerabilities and misconfigurations in plain language, optionally checking policy compliance via the Aqua platform. Requires Trivy; maintained by Aqua Security.

Helps agents add Auth0 authentication to apps: detects 35+ frameworks and covers login, MFA, SSO, RBAC, JWT validation, migration from other auth providers, and tenant security audits. Maintained by Auth0; needs an Auth0 account (free sign-up).

Netlify's official plugin with skills for Functions, Edge Functions, Blobs, databases, forms, caching, netlify.toml configuration and deploys, plus the hosted Netlify MCP (OAuth sign-in on first use).

Official MCP for Paddle, the merchant of record: manage products and prices, customers, subscriptions, transactions and refunds from chat, download invoice PDFs and generate financial reports. Needs a Paddle Billing account and API key; start in sandbox with read-only or non-destructive tools.

Official CLI for Weblate, the open-source translation platform: check translation progress for projects and components, upload and download translation files, lock components, and commit or push repository changes. Hosted or self-hosted; needs the server URL, an API key and Python.

Audits animation code against Disney's 12 principles adapted for the web, checking timing, easing, physics and staging rules such as user-initiated motion under 300ms and ease-out entrances, and reports findings as file:line.

Audits Web Audio API code for procedural UI sound synthesis: reusing one AudioContext, resuming when suspended, disconnecting nodes, exponential decay envelopes, noise for clicks and parameter choices, with findings reported as file:line.

Guides the agent in building SVG icon components that morph between any two icons by moving lines instead of crossfading. Every icon uses exactly three lines, unused ones collapse to the center, and grouped variants rotate with springs. Examples use React and Motion and respect reduced motion.

Audits UI code for audio feedback: every sound needs a visual equivalent, an off switch and volume control, and should respect reduced motion. Sound is for confirmations and errors, not typing or decorative hovers. Also checks preloading, default volume and sound weight. Reports file:line findings.

Audits animation code for the right timing function: springs for gestures and interruptible motion, easing for system-driven state changes, linear for progress, and no animation for high-frequency interactions. Also checks spring parameters and durations. Reports file:line findings.

Provides twelve drop-in CSS transitions, including card resize, number pop-in, badges, dropdowns, modals, panel reveals, page slides, icon swaps, success checks and error shakes, configured through shared CSS custom properties with no framework dependency and reduced-motion guards.

Supabase's official plugin: Supabase and Postgres best-practice skills plus the Supabase remote MCP to manage projects, run SQL, design schemas and RLS policies, and handle auth and storage. Needs a Supabase account.

From IMG.LY: gives agents the CE.SDK design engine to create editable posters, flyers, social graphics and videos by chat, resize for each platform, import PSD, InDesign and PDF, and export print-ready PDFs with CMYK and bleed. Needs Node.js 22.15+ (WSL on Windows); the engine is free locally.

NASA's official MCP for its Common Metadata Repository: find Earth science and remote sensing datasets in plain language, check that data files exist for a given place and time, and get access services, related tools and citation info. No account to connect; downloads need an Earthdata login.

GitGuardian's official MCP: scans code for leaked secrets with 500+ detectors, and lets agents triage and remediate incidents, generate honeytokens and open fix PRs. Needs a GitGuardian account; the hosted endpoint with OAuth sign-in is recommended.

Postman's official plugin: sets up the Postman MCP server so Claude Code can sync collections, run API tests and diagnose failures, generate client code, create mocks and docs, and run OWASP API security checks. Needs a Postman account.

Lets agents upload, download and list files in Tencent Cloud Object Storage (COS), and use Cloud Infinite for image processing, QR code recognition, document-to-PDF conversion, video frame capture and natural-language search. Maintained by Tencent Cloud; needs a SecretId and SecretKey.

Builds compact, polished landing pages for dev tools, package demos and micro-SaaS. Picks a design fingerprint (composition, palette, type, radius, surfaces, motion) so each run looks different, features a product-native demo, and keeps zero layout shift, focus states and reduced motion.

Meitu's official skills: one prompt gets agents posters, covers, sticker packs, ID photos and multi-angle e-commerce product shots, plus background removal, image restoration, image-to-video and music or voiceover for videos. Needs MeituHub AK/SK keys (free credits for new users) and meitu-cli.

When the agent changes a single CSS value or Tailwind class in a Next.js App Router project, a floating bar appears on the page so you can fine-tune it with arrow keys before persisting. Loads a runtime script from budge.design in app/layout.tsx.

Fixes hover and click dead zones between spaced interactive elements such as chart bars, list rows, tabs and nav items by making hit targets flush and moving visual spacing inside each item, with React and Tailwind examples.