# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for Full-stack / Indie or ML / AI or Data engineering or Security or Product / Projects: 879 items.

> - Full-stack / Indie: General software work: coding-agent workflows, code review, debugging and Git collaboration.
> - ML / AI: Model training, evaluation and LLM application development.
> - Data engineering: Data pipelines, warehouse modeling, ETL and data quality.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.
> - Product / Projects: Specs, user research, roadmaps, scheduling and project delivery.

- [JADX AI MCP](https://hebbmind.com/mcp/jadx-ai-mcp.md): [MCP] A JADX decompiler plugin plus companion MCP server that lets agents read an APK's classes, methods, Smali and resources to assist Android reverse engineering and vulnerability hunting. Requires JADX-GUI and uv.
- [Supabase](https://hebbmind.com/skill/supabase.md): [Skill] Supabase's official general skill covering the database, Auth, Edge Functions, Realtime, Storage, vectors and queues, plus supabase-js/SSR integration, the CLI and MCP, migrations and RLS security checks, and it checks the latest docs and changelog before acting.
- [Supabase Postgres Best Practices](https://hebbmind.com/skill/supabase-postgres-best-practices.md): [Skill] Postgres rules ranked by impact: query optimization, indexing, connection pooling, RLS security, schema design and lock troubleshooting, with wrong-vs-right SQL examples, applicable to any Postgres. Maintained by Supabase.
- [Paper Search MCP](https://hebbmind.com/mcp/paper-search-mcp.md): [MCP] Unified search across 20+ academic sources including arXiv, PubMed, bioRxiv, Semantic Scholar and OpenAlex, returning deduplicated, normalized results and downloading full text via open-access channels first. Most sources need no API key.
- [Vexa](https://hebbmind.com/mcp/vexa.md): [MCP] Open-source meeting bot and real-time transcription platform: sends a bot into Google Meet, Teams or Zoom and transcribes live by speaker, with MCP so agents can dispatch bots and read transcripts. Use the hosted service (API key) or self-host.
- [Claude-Supermemory](https://hebbmind.com/plugin/claude-supermemory.md): [Plugin] Supermemory's official Claude Code plugin: hooks save memories automatically when a session ends and recall them on demand, giving persistent memory across sessions and projects, with shared project memory for teams. Needs a Supermemory API key and Node.js 18+.
- [myclaude](https://hebbmind.com/plugin/myclaude.md): [Plugin] Plugin marketplace for multi-agent dev workflows: omo multi-agent orchestration, BMAD agile role flows, requirements-driven development, SPARV and common dev commands, delegating coding tasks to Codex, Claude, Gemini and other backends (their CLIs installed separately). AGPL licensed.
- [Bright Data MCP](https://hebbmind.com/mcp/brightdata-mcp.md): [MCP] Bright Data's official MCP: web search (Google, Bing, Yandex), any page to Markdown, structured data extraction from e-commerce, social and other platforms, and remote browser control. Needs an API token; includes 5,000 free requests a month.
- [ScanCode Toolkit](https://hebbmind.com/cli/scancode-toolkit.md): [CLI] Scans codebases and dependencies for open-source licenses, copyright notices and package manifests, detecting licenses by full-text matching, with output in JSON, SPDX, CycloneDX and more, for open-source compliance reviews.
- [Antigravity CLI](https://hebbmind.com/cli/antigravity-cli.md): [CLI] Google's official terminal coding agent and successor to Gemini CLI: understands your codebase and, with your approval, edits files and runs commands. Shares its engine and settings with the Antigravity 2.0 desktop app. Closed source; sign in with a Google account; free tier included.
- [Figma Console MCP](https://hebbmind.com/mcp/figma-console-mcp.md): [MCP] Lets agents read and write Figma: extract variables, components and styles, create and edit screens, FigJam boards and slides on the canvas, and run accessibility checks and design-system audits. Needs a Figma personal access token, the Figma desktop app, Node.js and the companion plugin.
- [x64dbg MCP Server](https://hebbmind.com/mcp/x64dbg-mcp-server.md): [MCP] A native x64dbg plugin that works as an MCP server, exposing dozens of debugging tools: agents can set breakpoints, step through code, read and write memory, analyze PE structure and locate the OEP of packed binaries. Windows only; install the plugin in x64dbg, then connect with a token.
- [Perplexity API Platform MCP Server](https://hebbmind.com/mcp/modelcontextprotocol.md): [MCP] Perplexity's official MCP with four tools: web search, grounded Q&A, deep research and reasoning, available remotely or run locally. Requires a Perplexity API key.
- [Excalidraw MCP Server](https://hebbmind.com/mcp/mcp-excalidraw.md): [MCP] Gives agents a live local Excalidraw canvas: add, edit and delete elements to draw architecture diagrams and flowcharts, take screenshots to check the result, convert Mermaid and export .excalidraw files. Runs locally with no API key; also ships a CLI and an agent skill.
- [Modern Web Guidance](https://hebbmind.com/plugin/modern-web-guidance.md): [Plugin] Gives agents on-demand guidance for the modern web platform, covering View Transitions, container queries, Popover, INP optimization, accessibility and more, with browser compatibility data so they avoid outdated code. Maintained by the Google Chrome team; currently in preview.
- [MFLUX](https://hebbmind.com/cli/mflux.md): [CLI] Runs open image models like FLUX, Qwen Image and Z-Image locally on a Mac: text-to-image, reference-based edits, inpainting and upscaling, all on-device. Needs Apple Silicon and uv; the first run downloads models and is slow. Check each model's license before commercial use.
- [Wondel.ai Skills](https://hebbmind.com/skill/wondelai-skills.md): [Skill] 65 skills built on methods from business, marketing and design bestsellers like Influence, StoryBrand and The Lean Startup: positioning, copywriting, conversion optimization, sales negotiation, UX review, plus step-by-step startup and site-building guides. Prompt-only, no API key needed.
- [Tavily MCP Server](https://hebbmind.com/mcp/tavily-mcp.md): [MCP] Four tools for real-time web search, page content extraction, site mapping and full-site crawling, available as a remote server or run locally. Maintained by Tavily; needs an API key or OAuth sign-in, and a free account is available.
- [Supabase CLI](https://hebbmind.com/cli/supabase-cli.md): [CLI] Supabase's official CLI: runs the full backend stack locally (Postgres, Auth, Storage, Edge Functions), manages database migrations, generates types and deploys functions. The local stack requires Docker.
- [Deep Research Skills](https://hebbmind.com/skill/deep-research-skills.md): [Skill] Two-stage deep research: drafts an editable outline for the topic, then parallel subagents search the web item by item and compile a Markdown report. Good for literature reviews, competitor research and due diligence. Install by copying files per the README, plus pip install pyyaml.
- [TDD Guard](https://hebbmind.com/plugin/tdd-guard.md): [Plugin] Uses hooks to enforce test-driven development in Claude Code: blocks implementation without a failing test, prevents code beyond what tests require, and can use lint results to push refactoring. Needs Node.js 22+. Still maintained, but the author suggests its successor Probity for new projects.
- [claude-code-video-toolkit](https://hebbmind.com/skill/claude-code-video-toolkit.md): [Skill] A video production workspace for Claude Code: scripting, AI voiceover, music, generated visuals and Remotion rendering to MP4, with explainer and product-demo templates. The full workflow needs the cloned repo and Node.js 18+; AI generation needs your own cloud GPU (e.g. Modal's free tier).
- [Gemini MCP Tool](https://hebbmind.com/mcp/gemini-mcp-tool.md): [MCP] Lets Claude Code and other agents call Antigravity CLI or Gemini CLI, using Gemini's large context window to analyze big files and whole codebases; with Gemini CLI it can also test code in a sandbox. Install and sign in to the CLI first. Not an official Google project.
- [Agent Skills for WordPress](https://hebbmind.com/skill/agent-skills.md): [Skill] WordPress's official skill collection: block development, block themes, plugin architecture, REST API, Interactivity API, WP-CLI, performance profiling and Playground, so agents write code to modern WordPress standards and avoid common security pitfalls.
- [PR Lens](https://hebbmind.com/skill/pr-lens.md): [Skill] Draws a code change or part of a codebase as an animated architecture or data-flow diagram. The agent writes a JSON graph, validates and renders it to SVG with the PR Lens CLI, then pushes it to a prlens.dev canvas or attaches it to a GitHub, GitLab or Bitbucket pull request.
- [ELI5 (coldteadotai)](https://hebbmind.com/skill/coldteadotai-eli5.md): [Skill] Explains a codebase, feature, command or pull request to someone new to it as a PR Lens canvas: one plain sentence first, then a walkthrough that grows the diagram from two boxes to the whole picture, delivered as a shareable link. Requires the PR Lens skill and its npx CLI.
- [Stripe CLI](https://hebbmind.com/cli/stripe-cli.md): [CLI] Stripe's official CLI: forward and trigger webhook events locally, tail API request logs in real time, and create, read, update or delete Stripe objects to debug payment integrations. Needs a Stripe account; run stripe login first.
- [feishu2md](https://hebbmind.com/cli/feishu2md.md): [CLI] Exports Feishu/Lark docs, whole folders or wikis to Markdown with images, so agents can read, migrate or archive them. Requires creating a custom app on the Feishu/Lark Open Platform and configuring its App ID and App Secret.
- [MiniMax CLI (mmx)](https://hebbmind.com/cli/minimax-ai-cli.md): [CLI] MiniMax's official CLI, built for agents: chat with MiniMax models from the terminal and generate images, video and speech, plus speech transcription, image understanding and web search. Works with the international platform. Requires a MiniMax Token Plan subscription.
- [sqlite-utils](https://hebbmind.com/cli/sqlite-utils.md): [CLI] A CLI and Python library by Simon Willison: imports JSON and CSV straight into SQLite with automatic table creation, runs in-memory SQL queries over files, and supports full-text search and table transformations.
- [i18n-tasks](https://hebbmind.com/cli/i18n-tasks.md): [CLI] Translation management for Ruby/Rails: statically analyzes code to find missing and unused keys, normalizes locale files, fills gaps via Google Translate, DeepL or OpenAI, and exports CSV for translators. Requires the i18n gem (Rails default) and Bundler; machine translation needs an API key.
- [Figma Use](https://hebbmind.com/skill/figma-use.md): [Skill] Figma's official skill that teaches agents to run Plugin API scripts via use_figma, creating and editing nodes, components, variables and auto layout directly on the canvas. Load it before any use_figma call. Needs a Figma account and the remote MCP server.
- [figma-generate-diagram](https://hebbmind.com/skill/figma-generate-diagram.md): [Skill] Figma's official skill: the agent writes Mermaid, then uses the Figma MCP to build flowcharts and sequence, state, Gantt and ER diagrams in FigJam for you to tweak by hand. Unsupported types like pie charts and mind maps are flagged upfront. Needs a Figma account and the remote MCP server.
- [figma-use-figjam](https://hebbmind.com/skill/figma-use-figjam.md): [Skill] Figma's official skill for building FigJam boards through the Figma MCP: sticky notes, sections, connectors, shapes and tables for brainstorms, retros and meetings. Needs a Figma account, the remote MCP server and the figma-use skill; canvas writes are free in beta; usage pricing is planned.
- [OSS Review Toolkit (ORT)](https://hebbmind.com/cli/ort.md): [CLI] The Linux Foundation's open-source compliance toolchain: analyzes project dependencies, scans licenses and copyrights, checks known vulnerabilities, flags policy violations and generates SBOMs and notice files. Needs Java 25 or Docker and ideally 8 GB RAM; have legal review license findings.
- [Azure DevOps MCP Server](https://hebbmind.com/mcp/azure-devops-mcp.md): [MCP] Microsoft's official Azure DevOps MCP server: query and act on work items, repos, pull requests, build pipelines, test plans and wikis. Sign in with a Microsoft account that has access on first use; Microsoft recommends the no-install remote version instead.
- [GitLab MCP Server](https://hebbmind.com/mcp/gitlab-mcp.md): [MCP] Community-maintained GitLab MCP server: manage projects, merge requests, issues, pipelines, wikis and releases, with support for self-hosted instances and a read-only mode. Needs a GitLab personal access token or OAuth.
- [MCP Memory Service](https://hebbmind.com/mcp/mcp-memory-service.md): [MCP] Self-hostable long-term memory for agents, offering MCP, a REST API and a web dashboard: semantic search, knowledge graph and automatic memory consolidation. Embeddings are computed locally; choose SQLite, Cloudflare or Milvus as the backend.
- [Stripe Agent Skills](https://hebbmind.com/skill/stripe-skills.md): [Skill] Stripe's official skill collection: payment integration best practices, SDK and API version upgrades, Connect platform onboarding and docs lookup, with content synced automatically from the Stripe docs.
- [Stripe](https://hebbmind.com/plugin/stripe-plugin.md): [Plugin] Stripe's official plugin: bundles the remote Stripe MCP with skills for integration best practices, Connect, Stripe Apps and API upgrades, plus commands that explain errors and list test card numbers. Available in the official Claude and Codex marketplaces.
- [Stripe Best Practices](https://hebbmind.com/skill/stripe-best-practices.md): [Skill] Guides Stripe integration decisions: Checkout vs PaymentIntents, Connect, subscription billing, tax, webhooks and key security, and steers away from deprecated APIs. Maintained by Stripe.
- [Microsoft Learn MCP Server](https://hebbmind.com/mcp/microsoftdocs-mcp.md): [MCP] Searches and reads official Microsoft Learn documentation and code samples for Azure, .NET and more, so agents give fewer outdated answers about Microsoft tech. Maintained by Microsoft; the remote server is free and needs no key.
- [Netlify CLI](https://hebbmind.com/cli/netlify-cli.md): [CLI] Netlify's official CLI: deploy sites, run projects locally with Netlify Dev, manage environment variables, Functions and Blobs, and call the Netlify API directly. Needs Node.js 22.13+ and a Netlify account.
- [WordPress MCP Adapter](https://hebbmind.com/mcp/mcp-adapter.md): [MCP] WordPress's official plugin that turns abilities registered through the Abilities API into MCP tools, resources and prompts, reachable locally over WP-CLI (STDIO) or over HTTP. Needs WordPress 6.9+; abilities are private by default and must be exposed manually.
- [OPC Skills](https://hebbmind.com/skill/opc-skills.md): [Skill] Skills for solo founders: website SEO and AI search optimization (GEO), mining user needs from Reddit, X and GitHub, domain price comparison, Product Hunt search, and logo and banner generation. Some need API keys or tokens for Gemini, twitterapi.io, RequestHunt or Product Hunt.
- [Open-WebSearch](https://hebbmind.com/mcp/open-websearch.md): [MCP] Multi-engine web search MCP with no API key, supporting Bing, DuckDuckGo, Brave, Baidu, Sogou, CSDN, Juejin and more; also fetches page content, CSDN articles and GitHub READMEs. Ships a CLI and a local server too.
- [Slack MCP Server](https://hebbmind.com/mcp/slack-mcp-server.md): [MCP] Community-maintained Slack MCP: reads channel, DM and thread history, searches messages and fetches unread messages; write actions like posting are off by default and must be enabled explicitly. Works with user OAuth or bot tokens over stdio, SSE or HTTP.
- [ELI5](https://hebbmind.com/skill/eli5.md): [Skill] Adapts an explanation to its audience, from a 5-year-old to a high schooler, college student, parent or executive, adjusting vocabulary, analogies, tone and depth. Useful for teachers, parents and explaining expert topics to laypeople. No account or extra software needed.
- [Serverless Devs](https://hebbmind.com/cli/serverless-devs.md): [CLI] Full-lifecycle tool for serverless apps (the s command): describe an app in YAML and deploy it to FaaS platforms such as Alibaba Cloud Function Compute, AWS Lambda and Tencent Cloud SCF, with CI/CD integration. A CNCF Sandbox project; needs cloud provider credentials.
- [CC Safety Net](https://hebbmind.com/plugin/cc-safety-net.md): [Plugin] Before tool calls run, blocks destructive Git and file commands (git reset --hard, rm -rf) and access to sensitive files like SSH keys and .env. Parses command semantics, so bash -c wrappers are caught too. Works with Claude Code, Codex and other coding CLIs; needs Node.js 18+.

Next page: https://hebbmind.com/tools.md?page=14&profession=fullstack%2Calgorithm%2Cdata-engineering%2Csecurity%2Cproduct
