# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for ML / AI or Data engineering or Security or Founders: 562 items.

> - ML / AI: Model training, evaluation and LLM application development.
> - Data engineering: Data pipelines, warehouse modeling, ETL and data quality.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.
> - Founders: Business plans, fundraising decks, business analysis and team management.

- [Clay](https://hebbmind.com/plugin/clay-run-agent-plugins.md): [Plugin] Official plugin for Clay, the GTM data platform: search target companies and contacts, find work emails and other details in bulk, query and analyze Clay tables, and draft sales outreach sequences. Needs a Clay account; run the bundled setup skill to install the clay CLI and sign in.
- [Webflow MCP Server](https://hebbmind.com/mcp/webflow-mcp-server.md): [MCP] Webflow's official MCP: manage your site's pages, CMS content and blog posts by chat, and with the MCP Bridge App in the Designer, edit page elements and styles directly. Needs a Webflow account and Node.js 22.3+; first connection asks you to authorize sites.
- [FHIR MCP Server](https://hebbmind.com/mcp/fhir-mcp-server.md): [MCP] Connects any FHIR-compliant EHR server (e.g. the Epic sandbox or HAPI) to agents to search, read, create and update patient clinical data in plain language, with SMART on FHIR auth. By WSO2. Needs a FHIR server URL, access token and uv; clinicians must review results.
- [naming](https://hebbmind.com/skill/naming.md): [Skill] Skill for naming products, brands, companies and open-source projects: writes a naming brief, explores metaphors, generates candidates while filtering out generic AI-style names, scores them on a rubric, then checks domain, social handle and package name availability. Good for early-stage startups.
- [SonarQube](https://hebbmind.com/plugin/sonarqube-agent-plugins.md): [Plugin] Sonar's official plugin bringing SonarQube checks into the agent coding loop: secrets-scanning hook, issue fixing, quality gates, coverage and dependency risk; with Vortex analysis on, every edit is checked. Needs SonarQube (free Community Build works), the sonar CLI and Docker.
- [Square MCP Server](https://hebbmind.com/mcp/square-mcp-server.md): [MCP] Official MCP (beta) from payments and POS platform Square: lets agents query and manage transactions, orders, refunds, invoices, inventory and customers for reconciliation and reporting. Hosted, with Square OAuth sign-in, nothing to install; confirm refunds and other writes manually.
- [MLflow Skills](https://hebbmind.com/plugin/mlflow-skills.md): [Plugin] MLflow's official skills plugin: lets coding agents add MLflow Tracing to LLM apps, analyze failed traces, build evaluation datasets and scorers, and query token and latency metrics, closing the instrument, evaluate, iterate loop. Needs MLflow 3.8+.
- [RevenueCat](https://hebbmind.com/plugin/revenuecat.md): [Plugin] Official RevenueCat plugin: configure in-app purchase projects, products, entitlements and offerings from chat, view revenue, conversion funnels and experiment data, with SDK skills for iOS, Android, Flutter and more. Needs RevenueCat OAuth sign-in; SDK setup needs a developer.
- [Slide Wright](https://hebbmind.com/skill/slide-wright.md): [Skill] Turns a topic, rough notes or an outline into an animated web slide deck. Invents a custom theme, shows a two-slide preview and builds the full single-file HTML deck with speaker notes only after you approve. Also edits existing reveal.js decks and can export PDF or deploy.
- [Pinecone Plugin for Claude Code](https://hebbmind.com/plugin/pinecone-claude-code-plugin.md): [Plugin] Pinecone's official plugin: bundles the Pinecone MCP server and /pinecone skill commands to create vector indexes, upsert data, search in plain language, or build a document Q&A assistant with citations from Claude Code. Needs a Pinecone API key (free sign-up); Assistant features also need uv.
- [Vault MCP Server](https://hebbmind.com/mcp/vault-mcp-server.md): [MCP] HashiCorp's official MCP: lets agents manage Vault mounts, read and write KV secrets, enable PKI, create issuers and roles, and issue certificates. Needs a reachable Vault server and token; HashiCorp recommends using it only in trusted local environments.
- [beanquery](https://hebbmind.com/cli/beanquery.md): [CLI] Beancount's official query tool, bean-query: run SQL-like queries on plain-text double-entry ledgers to get balances, income and expense summaries and account details, for agent-assisted bookkeeping. Needs uv or Python 3.8+ and a Beancount ledger; have an accountant review reports.
- [HLedger MCP Server](https://hebbmind.com/mcp/hledger-mcp.md): [MCP] Reads local hledger plain-text ledgers to produce balance sheets, income and cash flow statements and spending stats, and can add or edit entries (dry-run previews, backups before writes). Needs hledger and Node.js; start read-only. Have an accountant review reports.
- [Norman MCP Server](https://hebbmind.com/mcp/norman-mcp-server.md): [MCP] Official MCP for Norman, a German bookkeeping and tax service: create invoices (including ZUGFeRD e-invoices), categorize transactions, match receipts, preview and file VAT returns, and prepare GmbH/UG formation documents. Needs a Norman account (OAuth); a tax advisor should review filings.
- [Typefully Skills](https://hebbmind.com/skill/typefully-agent-skills.md): [Skill] Typefully's official skill: lets agents draft posts and long threads and schedule or publish them to X, LinkedIn, Threads, Bluesky, Mastodon and Substack Notes, and view scheduled content. Needs a Typefully account and API key, plus Node.js 18+.
- [OpenAgreements](https://hebbmind.com/mcp/open-agreements.md): [MCP] Drafts US-law contracts: the agent gathers terms for standard templates (NDA, SAFE, offer letter, cloud services agreement) and outputs a DOCX to review in Word, plus guides and checklists citing source law. Use the hosted URL, or run locally for sensitive matters. Drafts only; a lawyer must review.
- [Trivy MCP Server](https://hebbmind.com/mcp/trivy-mcp.md): [MCP] Trivy's MCP plugin: lets agents scan local projects, container images and remote repositories for vulnerabilities and misconfigurations in plain language, optionally checking policy compliance via the Aqua platform. Requires Trivy; maintained by Aqua Security.
- [Alibaba Cloud DataWorks MCP Server](https://hebbmind.com/mcp/alibabacloud-dataworks-mcp-server.md): [MCP] Alibaba Cloud's official MCP server: through the DataWorks Open API, agents manage data development nodes and workflows, operate scheduled instances, query Data Map metadata and lineage, and configure data quality rules. Needs an Alibaba Cloud AccessKey.
- [Auth0](https://hebbmind.com/plugin/auth0.md): [Plugin] Helps agents add Auth0 authentication to apps: detects 35+ frameworks and covers login, MFA, SSO, RBAC, JWT validation, migration from other auth providers, and tenant security audits. Maintained by Auth0; needs an Auth0 account (free sign-up).
- [Airtable](https://hebbmind.com/plugin/airtable.md): [Plugin] Airtable's official plugin for Claude Code, Codex and Cursor: connects the official Airtable MCP and adds filtering, CLI, and product, marketing and sales ops skills, so agents can create tables, define fields, read and write records, and build shared views. Needs Airtable account authorization.
- [Ramp CLI](https://hebbmind.com/cli/ramp-cli.md): [CLI] Official CLI for Ramp spend management: query transactions and cards, submit and approve reimbursements, approve bills, upload receipts and book travel, with JSON output; installs skills for your agents. Needs a Ramp business account (browser login); defaults to sandbox. Confirm approvals by hand.
- [Paddle MCP Server](https://hebbmind.com/mcp/paddle-mcp-server.md): [MCP] Official MCP for Paddle, the merchant of record: manage products and prices, customers, subscriptions, transactions and refunds from chat, download invoice PDFs and generate financial reports. Needs a Paddle Billing account and API key; start in sandbox with read-only or non-destructive tools.
- [Supabase Agent Plugin](https://hebbmind.com/plugin/supabase-plugin.md): [Plugin] Supabase's official plugin: Supabase and Postgres best-practice skills plus the Supabase remote MCP to manage projects, run SQL, design schemas and RLS policies, and handle auth and storage. Needs a Supabase account.
- [Amplitude](https://hebbmind.com/plugin/amplitude.md): [Plugin] Amplitude's official plugin with a remote MCP and nearly 30 analysis skills: build charts and dashboards in plain language, interpret A/B experiments, summarize user feedback, and generate daily or weekly data briefs. Needs an Amplitude account with data (free plan exists); browser sign-in.
- [Xero Command Line](https://hebbmind.com/cli/xero-command-line.md): [CLI] Xero's official CLI (alpha): lets AI query and enter contacts, invoices, quotes, payments, bank transactions and manual journals, export invoice PDFs, and run P&L, balance sheet and trial balance reports for multiple orgs. Needs a Xero account and OAuth app; have an accountant review.
- [GitGuardian MCP Server](https://hebbmind.com/mcp/ggmcp.md): [MCP] GitGuardian's official MCP: scans code for leaked secrets with 500+ detectors, and lets agents triage and remediate incidents, generate honeytokens and open fix PRs. Needs a GitGuardian account; the hosted endpoint with OAuth sign-in is recommended.
- [Pika Creative Suite](https://hebbmind.com/plugin/pika-plugins.md): [Plugin] Pika's official plugin: 9 one-shot workflows (podcasts, explainer videos, UGC ads, brand books, founder product videos) that work from a URL or product image, backed by 58 image, video, music and editing tools. Needs a Pika account; credit-based, with free credits on sign-up.
- [Snowflake Cortex Code](https://hebbmind.com/plugin/cortex-code.md): [Plugin] Snowflake's official plugin: detects Snowflake-related requests and hands them to the Cortex Code CLI, whose 55+ built-in skills handle SQL, dynamic tables, data governance and more. Needs the cortex CLI installed and a Snowflake connection configured.
- [Wix Manage](https://hebbmind.com/skill/wix-manage.md): [Skill] Wix's official skill that teaches agents the right APIs for managing Wix site business features: store products and orders, bookings, events, pricing plans, forms, blog, SEO and marketing, instead of clicking through the dashboard. Needs a Wix site with an API key or OAuth; still experimental.
- [Amazon Selling Partner](https://hebbmind.com/plugin/selling-partner-agentic-toolkit.md): [Plugin] Amazon's official seller plugin (beta): connect Seller Central to check sales, traffic and inventory, get stockout alerts and restock suggestions, plan FBA inbound shipments and diagnose suppressed or unsearchable listings. Changes are drafted and need your approval. Needs a seller account.
- [Compact Landing](https://hebbmind.com/skill/compact-landing.md): [Skill] Builds compact, polished landing pages for dev tools, package demos and micro-SaaS. Picks a design fingerprint (composition, palette, type, radius, surfaces, motion) so each run looks different, features a product-native demo, and keeps zero layout shift, focus states and reduced motion.
- [Langfuse Observability Plugin](https://hebbmind.com/plugin/claude-observability-plugin.md): [Plugin] Langfuse's official plugin: uses hooks to send prompts, model calls, token usage and cost, tool calls and subagents from Claude Code sessions to Langfuse as traces for monitoring and review. Needs Langfuse keys (self-hosting supported) and uv or Python 3.10+.
- [HubSpot Agent CLI Skills](https://hebbmind.com/skill/agent-cli-skills.md): [Skill] HubSpot's official skills for running the CRM via the hubspot CLI: look up customers and history, filter audiences, dedupe records, advance deals, build sales reports and route support tickets. Needs the HubSpot Agent CLI (beta) signed in; dry-run bulk edits first; some features need paid plans.
- [AWS Startup Advisor](https://hebbmind.com/plugin/aws-startup-advisor.md): [Plugin] AWS's official plugin for startups: answers AWS Activate credit eligibility and 60+ startup perks, gives architecture and cost advice by funding stage, team size and runway, and plans migrations from GCP, Azure or Heroku. Perk lookups need no AWS account; migrations need your repo.
- [ModelScope MCP Server](https://hebbmind.com/mcp/modelscope-modelscope-mcp-server.md): [MCP] ModelScope's official MCP: search models, datasets, Studio apps, papers and MCP servers and view details, plus text-to-image and image-to-image generation. Needs a ModelScope API token.
- [Pigment AI Plugins](https://hebbmind.com/plugin/ai-plugins.md): [Plugin] Pigment's official plugin: bundles the Pigment MCP and 30+ modeling skills to query business data and compare budget vs. actuals in plain language; with advanced mode on, build budget and forecast models, metrics and boards. Needs an enterprise Pigment workspace with MCP on; have finance review.
- [Salesforce Sales Cloud](https://hebbmind.com/plugin/salesforce-for-sales.md): [Plugin] Salesforce's official sales plugin (beta): daily briefs, meeting prep and follow-up email drafts, team pipeline reviews, forecast and slipped-deal scenarios, and lead triage, confirming before editing records. Needs Salesforce hosted MCP (admin-enabled) and Slack; email and calendar optional.
- [Apideck MCP Server](https://hebbmind.com/mcp/apideck-libraries-mcp.md): [MCP] Apideck's official MCP: one unified API to read and write invoices, ledgers and reports in QuickBooks, Xero, NetSuite and other accounting systems, plus HR, CRM and ATS data. Needs a paid Apideck account (30-day trial), API key and App ID, with your systems connected. An accountant should review.
- [Himalayas Remote Jobs MCP Server](https://hebbmind.com/mcp/himalayas-mcp.md): [MCP] Himalayas' official MCP: employers post remote jobs free (with screening questions), search open-to-work candidates and check salary benchmarks by role and country; job seekers search jobs and manage their profile and application board. Searching needs no account; managing needs a browser login.
- [Semgrep Guardian](https://hebbmind.com/plugin/semgrep-plugin.md): [Plugin] Semgrep's official MCP server plus hooks: every file the agent writes is scanned with Semgrep Code, Supply Chain and Secrets for vulnerabilities, malicious dependencies and hardcoded secrets; the agent rewrites until clean or you dismiss findings. Requires a Semgrep login.
- [Carta Cap Table](https://hebbmind.com/plugin/carta-cap-table.md): [Plugin] Carta's official equity plugin: ask about cap tables, option grants and vesting, SAFE conversions, 409A valuation history and liquidation waterfall scenarios, plus compensation benchmarks and drafting share issuances. Needs a Carta account (OAuth); collects usage telemetry. Have results reviewed.
- [ZoomInfo MCP Plugin](https://hebbmind.com/plugin/zoominfo-mcp-plugin.md): [Plugin] ZoomInfo's official sales intelligence plugin with 14 skills: find target companies and decision makers, enrich leads and accounts, find lookalike customers, score accounts and leads on intent signals, prep account meetings and draft outreach emails. Needs a paid ZoomInfo account with API access.
- [Hunter](https://hebbmind.com/plugin/hunter-io-claude-plugin.md): [Plugin] Hunter.io's official plugin: find and verify work emails by name and company, list a domain's contacts, enrich company data, build lead lists, create outreach email sequences and push them to your CRM. Needs a Hunter account (free plan: 25 searches a month); follow anti-spam and privacy laws.
- [Lovable](https://hebbmind.com/plugin/lovablelabs-mcp.md): [Plugin] Lovable's official plugin: includes the Lovable remote MCP to create, edit, deploy and manage websites and apps in plain language, so founders and PMs can build interactive prototypes fast. Needs a Lovable account; generation and edits use Lovable credits.
- [Burp Suite MCP Server](https://hebbmind.com/mcp/portswigger-mcp-server.md): [MCP] PortSwigger's official Burp Suite extension that lets agents read proxy history, send HTTP requests and create Repeater tabs; with Burp Pro it can also read scan results and use Collaborator. Install from the BApp Store; listens on 127.0.0.1:9876 by default.
- [Airwallex AgentOS](https://hebbmind.com/plugin/airwallex-agentos.md): [Plugin] Airwallex's official plugin: extract details from contracts or POs to create invoices and subscriptions, add beneficiaries from supplier documents, issue employee cards with limits, and summarize multi-currency balances and FX exposure. Needs an Airwallex business account; finance should review.
- [Airwallex CLI](https://hebbmind.com/cli/airwallex-cli.md): [CLI] Airwallex's official CLI: lets agents check multi-currency balances, beneficiaries, transfers and FX, and manage billing customers, invoices, subscriptions, corporate cards and expenses. Needs an Airwallex business account; macOS and Linux. Closed-source beta; confirm real-money actions manually.
- [HubSpot Agent CLI](https://hebbmind.com/cli/agent-cli.md): [CLI] HubSpot's official CLI for AI agents (beta): find and bulk-update contacts, companies, deals and tickets, log calls and meetings, advance deal stages and route conversations, with an official skill pack. Needs a HubSpot account and browser login; writes hit live data, so try --dry-run first.
- [Plain Support](https://hebbmind.com/plugin/plain-support.md): [Plugin] Plain's official plugin: look up customers, threads and SLAs in Claude Code, add internal notes, create and update help center articles, and draft broadcast announcements (saved as drafts, never sent). Needs a Plain API key plus curl and jq; not in a marketplace; clone the repo to load it.
- [Vanta](https://hebbmind.com/plugin/vanta-mcp-plugin.md): [Plugin] Vanta's official plugin: from Claude Code, review control gaps for SOC 2, ISO 27001 and other frameworks, failing tests, vendor risk and policies, and generate fixes for code-level issues. Needs admin access to a paid Vanta account (browser auth); have compliance conclusions reviewed by an expert.

Next page: https://hebbmind.com/tools.md?page=12&profession=algorithm%2Cdata-engineering%2Csecurity%2Cfounder
