도구

Semgrep's official MCP server plus hooks: every file the agent writes is scanned with Semgrep Code, Supply Chain and Secrets for vulnerabilities, malicious dependencies and hardcoded secrets; the agent rewrites until clean or you dismiss findings. Requires a Semgrep login.

Icons8's official remote MCP: search and preview 420,000 icons in 132 styles, drop icons straight into web pages or projects, or swap an existing icon set for a new style. Free HD PNGs with attribution link after signing in to Icons8; SVG needs a paid subscription.

Reviews, rewrites, generates or harmonizes interface copy inside a Figma file, covering buttons, forms, errors, empty states, onboarding, confirmations and consent; edits only the selection, preserves components and Auto Layout, and never invents product facts.

Cloudinary's official MCP servers: upload, search and transform images and videos by chat, manage upload presets and structured metadata, and run AI content analysis, moderation and auto-tagging. Needs a Cloudinary account (some features paid); the command adds only the asset management server.

Crowdin's official plugin with the Crowdin MCP: manage projects and translations in Claude Code, Cowork or Codex, with skills to build glossaries, add translator context, draft translations for review and answer how-tos. Needs a Crowdin account; drafts and glossary uploads need its CLI.

Zeplin's official MCP: hands screen and component specs, assets, design tokens and designer annotations to the agent so developers can implement designs more accurately during handoff. Needs a Zeplin account, a personal access token and Node.js 20+.

Health-checks Linear projects for targets at risk of slipping, In Progress issues with no comment in over 7 days, orphan issues without milestones, and common anti-patterns. Reads and comments only, never mass-creates or restructures. Can run from a Cursor Automation. Needs the Linear MCP.

Bootstraps Linear tracking for a repo: checks for an existing project, anchors milestones to a North Star, backfills Done work only with evidence from the CHANGELOG, roadmap or git log, wires blockedBy links, and writes the protocol into CLAUDE.md, AGENTS.md or Cursor rules. Needs the Linear MCP.

Syncs, audits or rescues an existing Linear project against repo reality: enumerates issues, milestones, labels and docs, scores it on a 20-point rubric with a gap list, asks per category before any write, fixes orphans, milestones and dependencies, then re-scores. Needs the Linear MCP.

Keeps agent sessions honest in repos with a Linear tracking protocol: search before creating issues, move them to In Progress at start and Done only when shipped, and close the loop before ending. In untracked repos it asks once whether to run linear-setup. Needs the Linear MCP.

Finishes installing the Linear tracking pack: writes an always-on rule that makes Linear the source of truth into Cursor user rules or global files such as ~/.claude/CLAUDE.md and AGENTS.md, then verifies Linear MCP auth. On Cursor it can also set up a weekly health-check automation.

Entry point of the Linear tracking pack: anchors tracking to the project's North Star and real roadmap, routes requests to linear-setup, linear-sync, linear-monitor or linear-finish-install, and applies linear-discipline throughout the session. Needs the Linear MCP.

Lovable's official plugin: includes the Lovable remote MCP to create, edit, deploy and manage websites and apps in plain language, so founders and PMs can build interactive prototypes fast. Needs a Lovable account; generation and edits use Lovable credits.

Official MCP for user research platform Dovetail: product managers, designers and researchers can pull research projects, raw data such as interviews, and insights into chat, citing user evidence when writing requirements. Needs a Dovetail API token, Node.js 22+ and the released script file.

SAP's official plugin: answers questions on configuring the UI theme designer on SAP BTP, creating and publishing themes, and looks up SAP Fiori design tokens and theming parameters used by UI5 controls. For designers theming SAP enterprise apps; no extra SAP software needed.

Zoom's official plugin: helps plan, build and debug Zoom integrations (REST API, Meeting/Video SDK, webhooks, meeting bots) and includes the Zoom MCP to search meetings and fetch recordings and transcripts. In Claude Code you complete OAuth yourself.

PortSwigger's official Burp Suite extension that lets agents read proxy history, send HTTP requests and create Repeater tabs; with Burp Pro it can also read scan results and use Collaborator. Install from the BApp Store; listens on 127.0.0.1:9876 by default.

Prototyper UI's animation conventions for writing, reviewing or debugging component motion: copy-paste class strings for overlays, dialogs and sheets, press-feedback scales, state transitions, easing tokens and prefers-reduced-motion handling.

Usage guide for the Prototyper UI component library, built on @base-ui/react and Tailwind CSS v4 with copy-paste distribution, OKLCH colors and CVA variants: setup, theme tokens, component selection and patterns, noting render= replaces Radix asChild.

Box's official plugin: agents search files, organize folders and set sharing via the Box MCP or CLI, and use Box AI for Q&A, summaries and field extraction. Plus law firm workflows (contract review, client intake, M&A data rooms); lawyers make the legal calls. Needs Box MCP authorization.

Mintlify's official plugin: reference for Mintlify components, docs.json config, navigation and API docs, plus Mintlify docs search and site management, for building and updating product docs and help centers. Needs a Mintlify docs project; management needs browser sign-in.

PagerDuty's official plugin: analyzes your current git diff against the service's past incidents and change events, gives a 0-5 risk score and suggestions before you commit, and can create PagerDuty SRE Agent skills (early access program required). Needs a PagerDuty API token.

Vanta's official plugin: from Claude Code, review control gaps for SOC 2, ISO 27001 and other frameworks, failing tests, vendor risk and policies, and generate fixes for code-level issues. Needs admin access to a paid Vanta account (browser auth); have compliance conclusions reviewed by an expert.

Lucid's official hosted MCP: search and summarize documents in your Lucid account, generate flowcharts, org charts (importable from CSV) and sequence diagrams from a sentence, edit shapes, export PNGs and create share links. Needs a Lucid account (free plan works) with OAuth on first connect.