도구

Trivy's MCP plugin: lets agents scan local projects, container images and remote repositories for vulnerabilities and misconfigurations in plain language, optionally checking policy compliance via the Aqua platform. Requires Trivy; maintained by Aqua Security.

Alibaba Cloud's official MCP server: through the DataWorks Open API, agents manage data development nodes and workflows, operate scheduled instances, query Data Map metadata and lineage, and configure data quality rules. Needs an Alibaba Cloud AccessKey.

Netlify's official plugin with skills for Functions, Edge Functions, Blobs, databases, forms, caching, netlify.toml configuration and deploys, plus the hosted Netlify MCP (OAuth sign-in on first use).

Legal education skills from Harvard's Library Innovation Lab: help teachers build casebook-based syllabi, run Socratic Q&A and mock exam feedback for students, help self-represented litigants frame issues and learn legal research, plus CLE plans for lawyers. US law school focus; not legal advice.

Supabase's official plugin: Supabase and Postgres best-practice skills plus the Supabase remote MCP to manage projects, run SQL, design schemas and RLS policies, and handle auth and storage. Needs a Supabase account.

Lets agents search Help Scout conversations, see a customer's or organization's full history and pull reports like CSAT; add a Docs API key to search the knowledge base. Write actions (draft replies, internal notes, tags) are off by default. Needs App ID and Secret from a Help Scout private app.

Lets agents read a Moodle course's student list, assignments and quizzes, view submissions and attempts, and grade assignments, write feedback and comment on quizzes. Needs a Moodle web service token from an admin and Node.js; build from source. Each config covers one course.

Snowflake's official plugin: detects Snowflake-related requests and hands them to the Cortex Code CLI, whose 55+ built-in skills handle SQL, dynamic tables, data governance and more. Needs the cortex CLI installed and a Snowflake connection configured.

GitGuardian's official MCP: scans code for leaked secrets with 500+ detectors, and lets agents triage and remediate incidents, generate honeytokens and open fix PRs. Needs a GitGuardian account; the hosted endpoint with OAuth sign-in is recommended.

Lets agents upload, download and list files in Tencent Cloud Object Storage (COS), and use Cloud Infinite for image processing, QR code recognition, document-to-PDF conversion, video frame capture and natural-language search. Maintained by Tencent Cloud; needs a SecretId and SecretKey.

Community-built MCP for the Genesys Cloud contact center: supervisors and QA staff can check queue volumes, sample conversations, and read call quality, sentiment, topics and transcripts. Needs an OAuth client in your Genesys Cloud org with per-tool permissions, and Node.js. Still in development.

Langfuse's official plugin: uses hooks to send prompts, model calls, token usage and cost, tool calls and subagents from Claude Code sessions to Langfuse as traces for monitoring and review. Needs Langfuse keys (self-hosting supported) and uv or Python 3.10+.

HubSpot's official skills for running the CRM via the hubspot CLI: look up customers and history, filter audiences, dedupe records, advance deals, build sales reports and route support tickets. Needs the HubSpot Agent CLI (beta) signed in; dry-run bulk edits first; some features need paid plans.

Jotform's official hosted MCP: lets agents create and edit forms, list forms, and query or add submissions by criteria, handy for event sign-ups, surveys, permission slips and feedback. Nothing to install; OAuth sign-in (only workspace admins can install). Free accounts are rate-limited.

HubSpot's official skill: agents use the HubSpot Agent CLI to create and triage tickets, move them through pipeline stages, queue by priority, bulk-update status and log resolutions. Needs the HubSpot Agent CLI (beta), signed in, plus the repo's bulk-operations skill. Edits live data; try a sandbox.

EduBase's official MCP: teachers and trainers can generate questions in bulk, build question banks and exams, schedule tests, manage classes and learners, and analyze results. Needs EduBase API credentials (App ID and secret, from Integrations; code MCPGITHUB unlocks it) and Node.js.

Teamwork.com's official MCP: query and update projects, tasks, milestones and time logs in plain language, and handle Desk support tickets and Spaces wiki pages, with role-based tool sets (e.g. project manager, support). Needs a Teamwork.com account with AI/MCP enabled by an admin.

AWS's official plugin for startups: answers AWS Activate credit eligibility and 60+ startup perks, gives architecture and cost advice by funding stage, team size and runway, and plans migrations from GCP, Azure or Heroku. Perk lookups need no AWS account; migrations need your repo.

ModelScope's official MCP: search models, datasets, Studio apps, papers and MCP servers and view details, plus text-to-image and image-to-image generation. Needs a ModelScope API token.

Preconfigures the Datadog MCP in Claude Code to query logs, metrics, traces, dashboards and monitors in plain language while troubleshooting production. Maintained by Datadog; needs a Datadog account (OAuth or API key). In preview.

Grafana's official plugin marketplace with three plugins: the hosted Grafana Cloud MCP, the local mcp-grafana and Grafana Assistant, covering dashboards, data sources, Prometheus and Loki queries, alerting and incident management. Works with Claude Code and Codex.

Cartesia's official voice MCP: turn text into natural speech, transcribe recordings, clone voices and localize a voice into other languages from chat, for course narration, audio content and voiceovers. Hosted; sign in with your Cartesia account in the browser. Free tier available.

Dropbox's official plugin (Claude, Codex and Cursor versions): search and browse Dropbox files, read and summarize documents, create shared links, send file requests to collect materials, and organize folders, confirming a list before deleting. Respects existing permissions; needs Dropbox sign-in.

Chatwoot's official CLI: AI can search conversations, reply to customers, add private notes, assign, label, prioritize and resolve, and look up help center articles; a bundled skill sets safety rules for customer-visible replies. Needs a Chatwoot account (cloud or self-hosted) and API key.