도구

Sonar's official plugin bringing SonarQube checks into the agent coding loop: secrets-scanning hook, issue fixing, quality gates, coverage and dependency risk; with Vortex analysis on, every edit is checked. Needs SonarQube (free Community Build works), the sonar CLI and Docker.

From Twilio Labs: exposes Twilio's public APIs (SMS, voice, phone numbers, Serverless and more) as MCP tools generated from its OpenAPI specs, with filtering by service or tag. Needs a Twilio API key; marked as a proof of concept.

Shapes the agent's own replies rather than your documents: separates what changed from what was verified, cuts invented confidence, leads with the action and keeps load-bearing caveats. Manually invoked and stays on until you say stop; a script can enable it in CLAUDE.md or AGENTS.md.

Neon's official plugin combining the Neon MCP and skills to manage serverless Postgres: projects and branches, object storage, Functions and the AI Gateway. Signs in to Neon via OAuth the first time you use the MCP.

Analyzes your codebase and generates a render.yaml Blueprint, or creates services directly through the Render MCP, to deploy apps to Render. Maintained by Render and included in OpenAI's curated skills. Needs a Render account and code pushed to GitHub, GitLab or Bitbucket.

PostHog's official plugin with a built-in MCP and 30+ skills: query product analytics, feature flags, A/B experiments, dashboards and error tracking from chat, and optionally send Claude Code sessions to LLM Analytics. Needs OAuth sign-in with a PostHog account.

MLflow's official skills plugin: lets coding agents add MLflow Tracing to LLM apps, analyze failed traces, build evaluation datasets and scorers, and query token and latency metrics, closing the instrument, evaluate, iterate loop. Needs MLflow 3.8+.

Prisma's official skills: the Prisma ORM CLI, Client query API, connection setup for various databases, a v6 to v7 upgrade guide, and deployment workflows for Prisma Postgres and Compute.

Discourse's official MCP: lets agents search and read forum topics and posts and view categories and users. Read-only by default and no account needed for public forums; posting and replying require a site API key and the --allow_writes flag. Needs Node.js 24+.

Zendesk's official CLI: preview, import and publish Help Center themes locally, and create, package and deploy Zendesk apps such as ticket sidebar apps. Needs a Zendesk account, Node.js 20.17+ and yarn, some HTML/CSS for themes; run zcli login first.

Lets agents create, search, update and reply to Freshdesk tickets, add internal notes, and look up contacts, companies and agents, so support teams can process and summarize tickets in bulk. Needs a Freshdesk API key and account domain; runs locally with uvx.

Pinecone's official plugin: bundles the Pinecone MCP server and /pinecone skill commands to create vector indexes, upsert data, search in plain language, or build a document Q&A assistant with citations from Claude Code. Needs a Pinecone API key (free sign-up); Assistant features also need uv.

HashiCorp's official MCP: lets agents manage Vault mounts, read and write KV secrets, enable PKI, create issuers and roles, and issue certificates. Needs a reachable Vault server and token; HashiCorp recommends using it only in trusted local environments.

Trivy's MCP plugin: lets agents scan local projects, container images and remote repositories for vulnerabilities and misconfigurations in plain language, optionally checking policy compliance via the Aqua platform. Requires Trivy; maintained by Aqua Security.

Helps agents add Auth0 authentication to apps: detects 35+ frameworks and covers login, MFA, SSO, RBAC, JWT validation, migration from other auth providers, and tenant security audits. Maintained by Auth0; needs an Auth0 account (free sign-up).

Netlify's official plugin with skills for Functions, Edge Functions, Blobs, databases, forms, caching, netlify.toml configuration and deploys, plus the hosted Netlify MCP (OAuth sign-in on first use).

Official MCP for Paddle, the merchant of record: manage products and prices, customers, subscriptions, transactions and refunds from chat, download invoice PDFs and generate financial reports. Needs a Paddle Billing account and API key; start in sandbox with read-only or non-destructive tools.

Supabase's official plugin: Supabase and Postgres best-practice skills plus the Supabase remote MCP to manage projects, run SQL, design schemas and RLS policies, and handle auth and storage. Needs a Supabase account.

Official CLI for Weblate, the open-source translation platform: check translation progress for projects and components, upload and download translation files, lock components, and commit or push repository changes. Hosted or self-hosted; needs the server URL, an API key and Python.

Lets agents search Help Scout conversations, see a customer's or organization's full history and pull reports like CSAT; add a Docs API key to search the knowledge base. Write actions (draft replies, internal notes, tags) are off by default. Needs App ID and Secret from a Help Scout private app.

GitGuardian's official MCP: scans code for leaked secrets with 500+ detectors, and lets agents triage and remediate incidents, generate honeytokens and open fix PRs. Needs a GitGuardian account; the hosted endpoint with OAuth sign-in is recommended.

Postman's official plugin: sets up the Postman MCP server so Claude Code can sync collections, run API tests and diagnose failures, generate client code, create mocks and docs, and run OWASP API security checks. Needs a Postman account.

Lets agents upload, download and list files in Tencent Cloud Object Storage (COS), and use Cloud Infinite for image processing, QR code recognition, document-to-PDF conversion, video frame capture and natural-language search. Maintained by Tencent Cloud; needs a SecretId and SecretKey.

Community-built MCP for the Genesys Cloud contact center: supervisors and QA staff can check queue volumes, sample conversations, and read call quality, sentiment, topics and transcripts. Needs an OAuth client in your Genesys Cloud org with per-tool permissions, and Node.js. Still in development.