도구

Runway's official plugin: agents batch-generate videos, images, voiceovers and sound effects from one prompt, for ad variations, product videos and multi-shot shorts; also helps developers integrate Runway into apps. Needs a Runway developer account ($10 minimum top-up), an API key and uv.

Locize's official CLI: sync local translation files with the Locize platform, add, remove and look up keys, download published translations, manage versions and branches, and export JSON, XLIFF, PO, CSV or Excel for translators. Needs a Locize account, project ID and API key; free plan available.

Reconnects an existing Figma design to published design-system components. Backs up the frame, classifies each section as already connected, exact swap, compose from primitives or blocked, then replaces detached layers and local wrappers one section at a time. Needs Figma MCP.

Audits a Figma screen or component for design-system drift, read-only: shared primitives rebuilt as plain frames, hard-coded values instead of variables, and variant drift. Each finding cites structural evidence and may suggest a replacement. Outputs Markdown or JSON; needs Figma MCP.

Fixes one design-system finding in a Figma screen, typically from Audit Design System. Checks the fix is feasible, backs up only the affected node, applies the smallest change (swap instance, compose from primitives, bind tokens or align variant) and verifies it locally. Needs Figma MCP.

Pinecone's official plugin: bundles the Pinecone MCP server and /pinecone skill commands to create vector indexes, upsert data, search in plain language, or build a document Q&A assistant with citations from Claude Code. Needs a Pinecone API key (free sign-up); Assistant features also need uv.

Audits Web Audio API code for procedural UI sound synthesis: reusing one AudioContext, resuming when suspended, disconnecting nodes, exponential decay envelopes, noise for clicks and parameter choices, with findings reported as file:line.

HashiCorp's official MCP: lets agents manage Vault mounts, read and write KV secrets, enable PKI, create issuers and roles, and issue certificates. Needs a reachable Vault server and token; HashiCorp recommends using it only in trusted local environments.

Audits animation code against Disney's 12 principles adapted for the web, checking timing, easing, physics and staging rules such as user-initiated motion under 300ms and ease-out entrances, and reports findings as file:line.

Audits animation code for the right timing function: springs for gestures and interruptible motion, easing for system-driven state changes, linear for progress, and no animation for high-frequency interactions. Also checks spring parameters and durations. Reports file:line findings.

Guides the agent in building SVG icon components that morph between any two icons by moving lines instead of crossfading. Every icon uses exactly three lines, unused ones collapse to the center, and grouped variants rotate with springs. Examples use React and Motion and respect reduced motion.

Audits UI code for audio feedback: every sound needs a visual equivalent, an off switch and volume control, and should respect reduced motion. Sound is for confirmations and errors, not typing or decorative hovers. Also checks preloading, default volume and sound weight. Reports file:line findings.

Trivy's MCP plugin: lets agents scan local projects, container images and remote repositories for vulnerabilities and misconfigurations in plain language, optionally checking policy compliance via the Aqua platform. Requires Trivy; maintained by Aqua Security.

Helps agents add Auth0 authentication to apps: detects 35+ frameworks and covers login, MFA, SSO, RBAC, JWT validation, migration from other auth providers, and tenant security audits. Maintained by Auth0; needs an Auth0 account (free sign-up).

Netlify's official plugin with skills for Functions, Edge Functions, Blobs, databases, forms, caching, netlify.toml configuration and deploys, plus the hosted Netlify MCP (OAuth sign-in on first use).

Official MCP for Paddle, the merchant of record: manage products and prices, customers, subscriptions, transactions and refunds from chat, download invoice PDFs and generate financial reports. Needs a Paddle Billing account and API key; start in sandbox with read-only or non-destructive tools.

Phrase Strings' official CLI: phrase init walks you through config, then phrase push uploads language files and phrase pull fetches the latest translations; it also wraps the full API for projects, locales and keys. Needs a Phrase Strings account (paid, 14-day free trial) and an API token.

Supabase's official plugin: Supabase and Postgres best-practice skills plus the Supabase remote MCP to manage projects, run SQL, design schemas and RLS policies, and handle auth and storage. Needs a Supabase account.

Official CLI for Weblate, the open-source translation platform: check translation progress for projects and components, upload and download translation files, lock components, and commit or push repository changes. Hosted or self-hosted; needs the server URL, an API key and Python.

Provides twelve drop-in CSS transitions, including card resize, number pop-in, badges, dropdowns, modals, panel reveals, page slides, icon swaps, success checks and error shakes, configured through shared CSS custom properties with no framework dependency and reduced-motion guards.

From IMG.LY: gives agents the CE.SDK design engine to create editable posters, flyers, social graphics and videos by chat, resize for each platform, import PSD, InDesign and PDF, and export print-ready PDFs with CMYK and bleed. Needs Node.js 22.15+ (WSL on Windows); the engine is free locally.

GitGuardian's official MCP: scans code for leaked secrets with 500+ detectors, and lets agents triage and remediate incidents, generate honeytokens and open fix PRs. Needs a GitGuardian account; the hosted endpoint with OAuth sign-in is recommended.

Postman's official plugin: sets up the Postman MCP server so Claude Code can sync collections, run API tests and diagnose failures, generate client code, create mocks and docs, and run OWASP API security checks. Needs a Postman account.

Lets agents upload, download and list files in Tencent Cloud Object Storage (COS), and use Cloud Infinite for image processing, QR code recognition, document-to-PDF conversion, video frame capture and natural-language search. Maintained by Tencent Cloud; needs a SecretId and SecretKey.