# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for Full-stack / Indie or ML / AI or Security: 663 items. > - Full-stack / Indie: General software work: coding-agent workflows, code review, debugging and Git collaboration. > - ML / AI: Model training, evaluation and LLM application development. > - Security: Code audits, vulnerability triage, penetration testing and compliance. - [QuantConnect Lean CLI](https://hebbmind.com/cli/lean-cli.md): [CLI] QuantConnect's official CLI drives the open-source LEAN engine locally or in the cloud to download data, backtest and optimize quant strategies and deploy them live. Requires a paid-tier QuantConnect organization; strategies in Python or C#; local runs need Docker. Get expert review. - [Radare2 MCP Server](https://hebbmind.com/mcp/radare2-mcp.md): [MCP] radare2's official MCP server, written in C on the native r2 API: agents open binaries to disassemble, decompile and analyze them, with read-only mode, sandboxing and connections to remote r2 sessions. Install radare2 first, then r2mcp via r2pm. - [Railway](https://hebbmind.com/plugin/railway.md): [Plugin] Railway's official plugin, bundling the use-railway skill and hosted Railway MCP so agents can create projects, deploy services, set environment variables and databases, and check logs and metrics to debug deployments. Needs a Railway account. - [Postman MCP Server](https://hebbmind.com/mcp/postman-mcp-server.md): [MCP] Postman's official MCP server: lets agents manage workspaces, collections, environments and API specs, help with API testing and generate client code from API definitions. The remote version uses OAuth; the local version needs a Postman API key. - [Vercel Plugin](https://hebbmind.com/plugin/vercel-plugin.md): [Plugin] Vercel's official plugin: a knowledge graph of the Vercel ecosystem, dozens of skills, expert subagents for deployment and performance, and commands for deploys, env vars and project status, covering Next.js, the AI SDK, storage and CI/CD. Needs Node.js 18+ and Bun; telemetry is opt-out. - [Hugging Face MCP Server](https://hebbmind.com/mcp/hf-mcp-server.md): [MCP] Hugging Face's official MCP server: lets agents search models, datasets and Spaces on the Hub and call thousands of Gradio AI apps directly. Hosted remotely; sign in with your Hugging Face account or authorize with a token. - [Lokka](https://hebbmind.com/mcp/lokka.md): [MCP] Query and manage Microsoft 365 and Azure tenants in natural language via Microsoft Graph: create users and security groups, check devices and Conditional Access policies and view cloud costs. Needs a work account with the right permissions; changes apply immediately. - [Comfy MCP](https://hebbmind.com/mcp/comfy-mcp.md): [MCP] ComfyUI's official MCP: lets agents drive local ComfyUI image and video workflows, list installed nodes, models and templates, submit jobs and fetch results, and start or stop ComfyUI. Needs a machine that can run ComfyUI (usually a GPU) and comfy-cli; partner models consume Comfy credits. - [Alibaba Cloud Skills](https://hebbmind.com/skill/alibabacloud-aiops-skills.md): [Skill] Alibaba Cloud's official agent skills: ECS diagnosis and DR, RDS/PolarDB database checks, PAI training and EAS deployment, ACK clusters, RAM permissions, OSS and network troubleshooting, and Model Studio. Needs an AccessKey or aliyun CLI credentials. - [Firecrawl Plugin for Claude Code](https://hebbmind.com/plugin/firecrawl-claude-plugin.md): [Plugin] Firecrawl's official plugin: brings the Firecrawl CLI in as skills so Claude Code can search the web, scrape pages to Markdown, map site links or crawl whole sites. Install firecrawl-cli and set an API key first; self-hosting supported. - [i18next CLI](https://hebbmind.com/cli/i18next-cli.md): [CLI] i18next's official CLI: finds hard-coded strings in JS/TS code, extracts translation keys, checks which locales are missing entries and syncs locale files; init --yes sets up non-interactively, and a bundled agent skill guides app internationalization. Needs a Node.js project using i18next. - [Backlog MCP Server](https://hebbmind.com/mcp/backlog-mcp-server.md): [MCP] Nulab's official Backlog MCP: lets agents manage Backlog projects, issues and comments, milestones and wikis, and view Git repositories and pull requests. Needs your Backlog space URL and a personal API key, plus Node.js or Docker. - [MinerU Open MCP](https://hebbmind.com/mcp/opendatalab-mcp.md): [MCP] MinerU's official MCP: parses PDF, Word, PowerPoint and images into Markdown via the mineru.net cloud API, keeping tables and formulas. The keyless Flash mode works out of the box; add a token for higher quotas and more formats. - [Opik MCP Server](https://hebbmind.com/mcp/opik-mcp.md): [MCP] Comet's official Opik MCP: query traces and spans of LLM apps in chat, log scores and comments, and manage datasets, experiments and prompt versions. Works with Opik Cloud (API key or browser sign-in) and self-hosted open-source Opik. - [Web Perf](https://hebbmind.com/skill/web-perf.md): [Skill] Diagnoses page-load and interaction performance from Chrome DevTools traces, network evidence and source code, covering Core Web Vitals, LCP and layout shifts. Separates measured values from estimates and hypotheses, and re-measures fixes under equivalent conditions. - [CodeRabbit](https://hebbmind.com/plugin/coderabbitai-skills.md): [Plugin] Lets agents run the CodeRabbit CLI to review local changes, listing bugs and security issues by severity, and fix unresolved CodeRabbit comments on a PR after you confirm each one. Maintained by CodeRabbit; needs the CLI installed and signed in. Free tier available. - [MongoDB](https://hebbmind.com/plugin/mongodb.md): [Plugin] MongoDB's official plugin: runs the MongoDB MCP locally via npx and adds skills for query generation, index tuning, schema design, and full-text and vector search. Connects to self-hosted or Atlas databases with a connection string. - [MongoDB Agent Skills](https://hebbmind.com/skill/mongodb-agent-skills.md): [Skill] MongoDB's official skill library covering document model design, driver connection setup, query optimization, natural-language query generation, Atlas full-text and vector search, and stream processing. Works alongside the MongoDB MCP Server. - [Miro](https://hebbmind.com/plugin/miro.md): [Plugin] Miro's official plugin with the Miro remote MCP and three skills: draw codebase explanations on a board, run visual code reviews on the board, and turn board docs, diagrams and prototypes into development specs. Needs OAuth with a Miro account. - [Alpaca Skills](https://hebbmind.com/skill/alpaca-skills.md): [Skill] Official skills from US broker Alpaca: teach agents to backtest, place and check paper trades, plus developer guides for Broker API account opening, funding and reconciliation. Needs an Alpaca API key (paper trading uses no real money) and the Alpaca CLI; results need professional review. - [GEMBA](https://hebbmind.com/cli/gemba.md): [CLI] Microsoft Translator's translation quality tool: GPT scores each sentence using MQM error categories or a direct score; --list_mqm_errors shows error types and severity. Needs line-aligned source and target files, Python and an OpenAI or Azure OpenAI key (paid); a translator should still review. - [Slack MCP and Skills Plugin](https://hebbmind.com/plugin/slack-skills-plugin.md): [Plugin] Slack's official plugin: connects the Slack-hosted MCP to search messages and files, send or schedule messages, and read and write canvases. Includes commands for channel summaries and standup reports, plus skills for building Slack apps. Requires workspace admin approval. - [SonarQube](https://hebbmind.com/plugin/sonarqube-agent-plugins.md): [Plugin] Sonar's official plugin bringing SonarQube checks into the agent coding loop: secrets-scanning hook, issue fixing, quality gates, coverage and dependency risk; with Vortex analysis on, every edit is checked. Needs SonarQube (free Community Build works), the sonar CLI and Docker. - [Twilio MCP](https://hebbmind.com/mcp/twilio-labs-mcp.md): [MCP] From Twilio Labs: exposes Twilio's public APIs (SMS, voice, phone numbers, Serverless and more) as MCP tools generated from its OpenAPI specs, with filtering by service or tag. Needs a Twilio API key; marked as a proof of concept. - [Slopgent](https://hebbmind.com/skill/slopgent.md): [Skill] Shapes the agent's own replies rather than your documents: separates what changed from what was verified, cuts invented confidence, leads with the action and keeps load-bearing caveats. Manually invoked and stays on until you say stop; a script can enable it in CLAUDE.md or AGENTS.md. - [Neon Postgres](https://hebbmind.com/plugin/neon-postgres.md): [Plugin] Neon's official plugin combining the Neon MCP and skills to manage serverless Postgres: projects and branches, object storage, Functions and the AI Gateway. Signs in to Neon via OAuth the first time you use the MCP. - [PostHog](https://hebbmind.com/plugin/ai-plugin.md): [Plugin] PostHog's official plugin with a built-in MCP and 30+ skills: query product analytics, feature flags, A/B experiments, dashboards and error tracking from chat, and optionally send Claude Code sessions to LLM Analytics. Needs OAuth sign-in with a PostHog account. - [render-deploy](https://hebbmind.com/skill/render-deploy.md): [Skill] Analyzes your codebase and generates a render.yaml Blueprint, or creates services directly through the Render MCP, to deploy apps to Render. Maintained by Render and included in OpenAI's curated skills. Needs a Render account and code pushed to GitHub, GitLab or Bitbucket. - [MLflow Skills](https://hebbmind.com/plugin/mlflow-skills.md): [Plugin] MLflow's official skills plugin: lets coding agents add MLflow Tracing to LLM apps, analyze failed traces, build evaluation datasets and scorers, and query token and latency metrics, closing the instrument, evaluate, iterate loop. Needs MLflow 3.8+. - [Prisma Skills](https://hebbmind.com/skill/prisma-skills.md): [Skill] Prisma's official skills: the Prisma ORM CLI, Client query API, connection setup for various databases, a v6 to v7 upgrade guide, and deployment workflows for Prisma Postgres and Compute. - [Pinecone Plugin for Claude Code](https://hebbmind.com/plugin/pinecone-claude-code-plugin.md): [Plugin] Pinecone's official plugin: bundles the Pinecone MCP server and /pinecone skill commands to create vector indexes, upsert data, search in plain language, or build a document Q&A assistant with citations from Claude Code. Needs a Pinecone API key (free sign-up); Assistant features also need uv. - [Vault MCP Server](https://hebbmind.com/mcp/vault-mcp-server.md): [MCP] HashiCorp's official MCP: lets agents manage Vault mounts, read and write KV secrets, enable PKI, create issuers and roles, and issue certificates. Needs a reachable Vault server and token; HashiCorp recommends using it only in trusted local environments. - [Auth0](https://hebbmind.com/plugin/auth0.md): [Plugin] Helps agents add Auth0 authentication to apps: detects 35+ frameworks and covers login, MFA, SSO, RBAC, JWT validation, migration from other auth providers, and tenant security audits. Maintained by Auth0; needs an Auth0 account (free sign-up). - [Trivy MCP Server](https://hebbmind.com/mcp/trivy-mcp.md): [MCP] Trivy's MCP plugin: lets agents scan local projects, container images and remote repositories for vulnerabilities and misconfigurations in plain language, optionally checking policy compliance via the Aqua platform. Requires Trivy; maintained by Aqua Security. - [Paddle MCP Server](https://hebbmind.com/mcp/paddle-mcp-server.md): [MCP] Official MCP for Paddle, the merchant of record: manage products and prices, customers, subscriptions, transactions and refunds from chat, download invoice PDFs and generate financial reports. Needs a Paddle Billing account and API key; start in sandbox with read-only or non-destructive tools. - [Weblate Client (wlc)](https://hebbmind.com/cli/wlc.md): [CLI] Official CLI for Weblate, the open-source translation platform: check translation progress for projects and components, upload and download translation files, lock components, and commit or push repository changes. Hosted or self-hosted; needs the server URL, an API key and Python. - [Netlify Skills](https://hebbmind.com/plugin/context-and-tools.md): [Plugin] Netlify's official plugin with skills for Functions, Edge Functions, Blobs, databases, forms, caching, netlify.toml configuration and deploys, plus the hosted Netlify MCP (OAuth sign-in on first use). - [Postman Plugin for Claude Code](https://hebbmind.com/plugin/postman-claude-code-plugin.md): [Plugin] Postman's official plugin: sets up the Postman MCP server so Claude Code can sync collections, run API tests and diagnose failures, generate client code, create mocks and docs, and run OWASP API security checks. Needs a Postman account. - [GitGuardian MCP Server](https://hebbmind.com/mcp/ggmcp.md): [MCP] GitGuardian's official MCP: scans code for leaked secrets with 500+ detectors, and lets agents triage and remediate incidents, generate honeytokens and open fix PRs. Needs a GitGuardian account; the hosted endpoint with OAuth sign-in is recommended. - [Tencent Cloud COS MCP Server](https://hebbmind.com/mcp/cos-mcp.md): [MCP] Lets agents upload, download and list files in Tencent Cloud Object Storage (COS), and use Cloud Infinite for image processing, QR code recognition, document-to-PDF conversion, video frame capture and natural-language search. Maintained by Tencent Cloud; needs a SecretId and SecretKey. - [Supabase Agent Plugin](https://hebbmind.com/plugin/supabase-plugin.md): [Plugin] Supabase's official plugin: Supabase and Postgres best-practice skills plus the Supabase remote MCP to manage projects, run SQL, design schemas and RLS policies, and handle auth and storage. Needs a Supabase account. - [Langfuse Observability Plugin](https://hebbmind.com/plugin/claude-observability-plugin.md): [Plugin] Langfuse's official plugin: uses hooks to send prompts, model calls, token usage and cost, tool calls and subagents from Claude Code sessions to Langfuse as traces for monitoring and review. Needs Langfuse keys (self-hosting supported) and uv or Python 3.10+. - [ModelScope MCP Server](https://hebbmind.com/mcp/modelscope-modelscope-mcp-server.md): [MCP] ModelScope's official MCP: search models, datasets, Studio apps, papers and MCP servers and view details, plus text-to-image and image-to-image generation. Needs a ModelScope API token. - [Browser Use](https://hebbmind.com/plugin/browser-use.md): [Plugin] Browser Use's official plugin: connects the Browser Use MCP so Claude can drive your local Chrome or a cloud browser to browse, extract data, fill forms, test sites and take screenshots. Needs uv; cloud browsers need sign-in or an API key. - [AWS Startup Advisor](https://hebbmind.com/plugin/aws-startup-advisor.md): [Plugin] AWS's official plugin for startups: answers AWS Activate credit eligibility and 60+ startup perks, gives architecture and cost advice by funding stage, team size and runway, and plans migrations from GCP, Azure or Heroku. Perk lookups need no AWS account; migrations need your repo. - [Weblate MCP Server](https://hebbmind.com/mcp/weblate-mcp.md): [MCP] Community MCP for Weblate, the open-source translation platform (self-hosted or hosted): translators can find untranslated or needs-editing strings in plain language, write translations in bulk, and check per-language progress and change history. Needs your Weblate API URL and token, and Node.js. - [Semgrep Guardian](https://hebbmind.com/plugin/semgrep-plugin.md): [Plugin] Semgrep's official MCP server plus hooks: every file the agent writes is scanned with Semgrep Code, Supply Chain and Secrets for vulnerabilities, malicious dependencies and hardcoded secrets; the agent rewrites until clean or you dismiss findings. Requires a Semgrep login. - [Linear Monitor](https://hebbmind.com/skill/linear-monitor.md): [Skill] Health-checks Linear projects for targets at risk of slipping, In Progress issues with no comment in over 7 days, orphan issues without milestones, and common anti-patterns. Reads and comments only, never mass-creates or restructures. Can run from a Cursor Automation. Needs the Linear MCP. - [Linear Setup](https://hebbmind.com/skill/linear-setup.md): [Skill] Bootstraps Linear tracking for a repo: checks for an existing project, anchors milestones to a North Star, backfills Done work only with evidence from the CHANGELOG, roadmap or git log, wires blockedBy links, and writes the protocol into CLAUDE.md, AGENTS.md or Cursor rules. Needs the Linear MCP. - [Linear Sync](https://hebbmind.com/skill/linear-sync.md): [Skill] Syncs, audits or rescues an existing Linear project against repo reality: enumerates issues, milestones, labels and docs, scores it on a 20-point rubric with a gap list, asks per category before any write, fixes orphans, milestones and dependencies, then re-scores. Needs the Linear MCP. Next page: https://hebbmind.com/tools.md?page=14&profession=fullstack%2Calgorithm%2Csecurity