도구

Pinecone's official plugin: bundles the Pinecone MCP server and /pinecone skill commands to create vector indexes, upsert data, search in plain language, or build a document Q&A assistant with citations from Claude Code. Needs a Pinecone API key (free sign-up); Assistant features also need uv.

HashiCorp's official MCP: lets agents manage Vault mounts, read and write KV secrets, enable PKI, create issuers and roles, and issue certificates. Needs a reachable Vault server and token; HashiCorp recommends using it only in trusted local environments.

Trivy's MCP plugin: lets agents scan local projects, container images and remote repositories for vulnerabilities and misconfigurations in plain language, optionally checking policy compliance via the Aqua platform. Requires Trivy; maintained by Aqua Security.

Alibaba Cloud's official MCP server: through the DataWorks Open API, agents manage data development nodes and workflows, operate scheduled instances, query Data Map metadata and lineage, and configure data quality rules. Needs an Alibaba Cloud AccessKey.

Helps agents add Auth0 authentication to apps: detects 35+ frameworks and covers login, MFA, SSO, RBAC, JWT validation, migration from other auth providers, and tenant security audits. Maintained by Auth0; needs an Auth0 account (free sign-up).

Supabase's official plugin: Supabase and Postgres best-practice skills plus the Supabase remote MCP to manage projects, run SQL, design schemas and RLS policies, and handle auth and storage. Needs a Supabase account.

Lets agents search Help Scout conversations, see a customer's or organization's full history and pull reports like CSAT; add a Docs API key to search the knowledge base. Write actions (draft replies, internal notes, tags) are off by default. Needs App ID and Secret from a Help Scout private app.

Snowflake's official plugin: detects Snowflake-related requests and hands them to the Cortex Code CLI, whose 55+ built-in skills handle SQL, dynamic tables, data governance and more. Needs the cortex CLI installed and a Snowflake connection configured.

GitGuardian's official MCP: scans code for leaked secrets with 500+ detectors, and lets agents triage and remediate incidents, generate honeytokens and open fix PRs. Needs a GitGuardian account; the hosted endpoint with OAuth sign-in is recommended.

Community-built MCP for the Genesys Cloud contact center: supervisors and QA staff can check queue volumes, sample conversations, and read call quality, sentiment, topics and transcripts. Needs an OAuth client in your Genesys Cloud org with per-tool permissions, and Node.js. Still in development.

Langfuse's official plugin: uses hooks to send prompts, model calls, token usage and cost, tool calls and subagents from Claude Code sessions to Langfuse as traces for monitoring and review. Needs Langfuse keys (self-hosting supported) and uv or Python 3.10+.

HubSpot's official skills for running the CRM via the hubspot CLI: look up customers and history, filter audiences, dedupe records, advance deals, build sales reports and route support tickets. Needs the HubSpot Agent CLI (beta) signed in; dry-run bulk edits first; some features need paid plans.

HubSpot's official skill: agents use the HubSpot Agent CLI to create and triage tickets, move them through pipeline stages, queue by priority, bulk-update status and log resolutions. Needs the HubSpot Agent CLI (beta), signed in, plus the repo's bulk-operations skill. Edits live data; try a sandbox.

Teamwork.com's official MCP: query and update projects, tasks, milestones and time logs in plain language, and handle Desk support tickets and Spaces wiki pages, with role-based tool sets (e.g. project manager, support). Needs a Teamwork.com account with AI/MCP enabled by an admin.

ModelScope's official MCP: search models, datasets, Studio apps, papers and MCP servers and view details, plus text-to-image and image-to-image generation. Needs a ModelScope API token.

Semgrep's official MCP server plus hooks: every file the agent writes is scanned with Semgrep Code, Supply Chain and Secrets for vulnerabilities, malicious dependencies and hardcoded secrets; the agent rewrites until clean or you dismiss findings. Requires a Semgrep login.

Chatwoot's official CLI: AI can search conversations, reply to customers, add private notes, assign, label, prioritize and resolve, and look up help center articles; a bundled skill sets safety rules for customer-visible replies. Needs a Chatwoot account (cloud or self-hosted) and API key.

PortSwigger's official Burp Suite extension that lets agents read proxy history, send HTTP requests and create Repeater tabs; with Burp Pro it can also read scan results and use Collaborator. Install from the BApp Store; listens on 127.0.0.1:9876 by default.

HubSpot's official CLI for AI agents (beta): find and bulk-update contacts, companies, deals and tickets, log calls and meetings, advance deal stages and route conversations, with an official skill pack. Needs a HubSpot account and browser login; writes hit live data, so try --dry-run first.

Mintlify's official plugin: reference for Mintlify components, docs.json config, navigation and API docs, plus Mintlify docs search and site management, for building and updating product docs and help centers. Needs a Mintlify docs project; management needs browser sign-in.

Plain's official plugin: look up customers, threads and SLAs in Claude Code, add internal notes, create and update help center articles, and draft broadcast announcements (saved as drafts, never sent). Needs a Plain API key plus curl and jq; not in a marketplace; clone the repo to load it.

Vanta's official plugin: from Claude Code, review control gaps for SOC 2, ISO 27001 and other frameworks, failing tests, vendor risk and policies, and generate fixes for code-level issues. Needs admin access to a paid Vanta account (browser auth); have compliance conclusions reviewed by an expert.

Intercom's official support plugin: via a remote MCP, search conversations, analyze support issue trends, look up contacts and companies, build 360-degree customer profiles, and install Messenger. Read-only; needs an Intercom workspace and currently works only in the US region.

LogRocket's official plugin: when users report problems, agents pull up their session replays, network requests and errors and analyze the cause, so support doesn't have to keep asking for repro steps. Needs Claude Code and a site or app on paid LogRocket (14-day trial); sign in on first use.