# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for ML / AI or Data analysis or Security: 362 items.

> - ML / AI: Model training, evaluation and LLM application development.
> - Data analysis: Querying, statistical analysis, reporting and visualization.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.

- [phd-skills](https://hebbmind.com/plugin/phd-skills.md): [Plugin] Research guardrails for PhD students: reproduce arXiv papers, debug training anomalies with evidence, compare runs at matched epochs, check paper-code consistency, verify BibTeX, find literature gaps and predict reviewer comments. No MCP or extra dependencies; mostly for ML research.
- [Math Modeling Skills](https://hebbmind.com/skill/math-modeling-skills.md): [Skill] Two skills for the MCM/ICM and China's CUMCM math modeling contests: solver breaks down problems, picks models from a 95+ scenario decision matrix and gives Python or MATLAB templates; paper coaches abstracts, model validation and formatting from winning papers. Needs Python or MATLAB.
- [FinLab AI](https://hebbmind.com/skill/finlab-ai.md): [Skill] Official FinLab quant skill: lets agents use FinLab data (mainly Taiwan stocks, plus US, Japan, Korea and Hong Kong) to write stock-picking strategies, run backtests and analyze factors. Needs a FinLab account (free tier has a daily data cap), Python 3.10+ and uv. Not investment advice.
- [ComfyUI MCP Server](https://hebbmind.com/mcp/comfyui-mcp-server.md): [MCP] Lets agents run local ComfyUI workflows to generate images, audio and video, regenerate from earlier results with new parameters, check the queue and switch models. Install and start ComfyUI, then clone this repo and run the server with Python (port 9000 by default).
- [Massive.com MCP Server](https://hebbmind.com/mcp/mcp-massive.md): [MCP] Official MCP from Massive (formerly Polygon.io): three tools (search, call and SQL query) cover market and fundamentals data for US stocks, options, forex, crypto and futures, with built-in option Greeks and return calculations. Needs an API key; still experimental.
- [AkTools MCP Server](https://hebbmind.com/mcp/mcp-aktools.md): [MCP] Financial data MCP built on open-source AKShare: quotes and financials for China A-shares, Hong Kong and US stocks, A-share limit-up pools, top trader lists and fund flows, plus financial news and crypto prices. Free, no token; needs uv. Trading suggestions are for reference only.
- [QGIS MCP (nkarasiak)](https://hebbmind.com/mcp/nkarasiak-qgis-mcp.md): [MCP] Install the QGIS MCP plugin from the QGIS plugin repository and agents get 125 tools to manage layers, edit features, run processing algorithms, style maps, build layouts and atlases, and run SQL across layers; supports QGIS 3.28 to 4.x. Needs QGIS and uv; no repo download required.
- [Facebook/Meta Ads MCP Server](https://hebbmind.com/mcp/facebook-ads-mcp-server.md): [MCP] Lets agents read delivery data and change history for Facebook and Instagram ad accounts, campaigns, ad sets and creatives to analyze performance and spot underperforming ads; read-only. Needs a Meta access token (the GoMarble installer can generate one); runs from source with Python.
- [Mapbox MCP Server](https://hebbmind.com/mcp/mapbox-mcp-server.md): [MCP] Mapbox's official MCP: geocoding, POI search, driving, walking and cycling directions, travel-time matrices, multi-stop route optimization, isochrones and map rendering, plus offline distance and area calculations. Needs a Mapbox access token; an official hosted endpoint is available.
- [Databricks Agent Skills](https://hebbmind.com/skill/databricks-agent-skills.md): [Skill] Official Databricks skills guiding agents to build Lakeflow pipelines and jobs, Apps, Lakebase, Vector Search, Model Serving and AI/BI dashboards on the lakehouse. Needs the Databricks CLI.
- [Databricks Agent Skills](https://hebbmind.com/plugin/databricks-agent-skills.md): [Plugin] Official Databricks plugin with skills for the CLI and auth, Genie data queries, Apps, Lakebase, Lakeflow jobs and pipelines, Model Serving and DABs deployment, plus hooks for prompt routing, session context and auth failure hints. Needs a Databricks account.
- [DDC Skills for AI Agents in Construction](https://hebbmind.com/skill/ddc-skills-for-ai-agents-in-construction.md): [Skill] 200+ skills for construction firms: export Revit, IFC and DWG quantities to Excel, estimate with international unit rates, produce daily and photo site reports, and track budget and schedule variance. Needs Python 3.9+; Revit/DWG conversion is Windows-only; some need Docker or an OpenAI key.
- [NetSuite AI Companion](https://hebbmind.com/plugin/netsuite-ai-companion.md): [Plugin] Official Oracle NetSuite plugin for the AI Connector: has AI use standard reports and saved searches first, applies debit/credit, multi-subsidiary consolidation and currency rules, and safety-checks SuiteQL to avoid reporting errors. Needs NetSuite with AI Connector; finance should verify.
- [Apache Doris MCP Server](https://hebbmind.com/mcp/doris-mcp-server.md): [MCP] Apache Doris's official MCP: gives agents read-only access to explore table metadata, run and explain SQL, diagnose slow queries, and check cluster status, load jobs and data governance info. Needs Python 3.12+ and Doris 2.0 or later.
- [Tableau MCP](https://hebbmind.com/mcp/tableau-mcp.md): [MCP] Tableau's official MCP: lets agents query published data sources, search workbooks and views and fetch view images. Use the hosted server for Tableau Cloud with OAuth, or run locally with a personal access token for Tableau Server or Cloud.
- [QuantConnect Lean CLI](https://hebbmind.com/cli/lean-cli.md): [CLI] QuantConnect's official CLI drives the open-source LEAN engine locally or in the cloud to download data, backtest and optimize quant strategies and deploy them live. Requires a paid-tier QuantConnect organization; strategies in Python or C#; local runs need Docker. Get expert review.
- [Radare2 MCP Server](https://hebbmind.com/mcp/radare2-mcp.md): [MCP] radare2's official MCP server, written in C on the native r2 API: agents open binaries to disassemble, decompile and analyze them, with read-only mode, sandboxing and connections to remote r2 sessions. Install radare2 first, then r2mcp via r2pm.
- [Hugging Face MCP Server](https://hebbmind.com/mcp/hf-mcp-server.md): [MCP] Hugging Face's official MCP server: lets agents search models, datasets and Spaces on the Hub and call thousands of Gradio AI apps directly. Hosted remotely; sign in with your Hugging Face account or authorize with a token.
- [Lokka](https://hebbmind.com/mcp/lokka.md): [MCP] Query and manage Microsoft 365 and Azure tenants in natural language via Microsoft Graph: create users and security groups, check devices and Conditional Access policies and view cloud costs. Needs a work account with the right permissions; changes apply immediately.
- [Comfy MCP](https://hebbmind.com/mcp/comfy-mcp.md): [MCP] ComfyUI's official MCP: lets agents drive local ComfyUI image and video workflows, list installed nodes, models and templates, submit jobs and fetch results, and start or stop ComfyUI. Needs a machine that can run ComfyUI (usually a GPU) and comfy-cli; partner models consume Comfy credits.
- [Alibaba Cloud Skills](https://hebbmind.com/skill/alibabacloud-aiops-skills.md): [Skill] Alibaba Cloud's official agent skills: ECS diagnosis and DR, RDS/PolarDB database checks, PAI training and EAS deployment, ACK clusters, RAM permissions, OSS and network troubleshooting, and Model Studio. Needs an AccessKey or aliyun CLI credentials.
- [Firecrawl Plugin for Claude Code](https://hebbmind.com/plugin/firecrawl-claude-plugin.md): [Plugin] Firecrawl's official plugin: brings the Firecrawl CLI in as skills so Claude Code can search the web, scrape pages to Markdown, map site links or crawl whole sites. Install firecrawl-cli and set an API key first; self-hosting supported.
- [MCP Server for Google Tag Manager](https://hebbmind.com/mcp/google-tag-manager-mcp-server.md): [MCP] Stape's Google Tag Manager MCP: lets agents view, create and edit tags, triggers and variables in GTM containers, for tracking and conversion setup. Hosted version (routes data via Stape's servers) needs just Google sign-in on first use; or run locally with a service account key.
- [MinerU Open MCP](https://hebbmind.com/mcp/opendatalab-mcp.md): [MCP] MinerU's official MCP: parses PDF, Word, PowerPoint and images into Markdown via the mineru.net cloud API, keeping tables and formulas. The keyless Flash mode works out of the box; add a token for higher quotas and more formats.
- [Opik MCP Server](https://hebbmind.com/mcp/opik-mcp.md): [MCP] Comet's official Opik MCP: query traces and spans of LLM apps in chat, log scores and comments, and manage datasets, experiments and prompt versions. Works with Opik Cloud (API key or browser sign-in) and self-hosted open-source Opik.
- [Alpha Vantage MCP Server](https://hebbmind.com/mcp/alpha-vantage-mcp.md): [MCP] Official Alpha Vantage MCP: exposes its API as tools for stock and options quotes, fundamentals, news sentiment, forex, crypto, commodities, economic indicators and dozens of technical indicators. Needs a free API key; a remote OAuth server is also available.
- [Yahoo Finance MCP Server (yfmcp)](https://hebbmind.com/mcp/yfinance-mcp.md): [MCP] Pulls Yahoo Finance data for free via yfinance: company profiles, financials, analyst estimates, news, option chains, fund holdings and sector rankings, plus candlestick charts. No API key, just uv. Data may be delayed; have investment conclusions reviewed by a professional.
- [mcptools](https://hebbmind.com/mcp/mcptools.md): [MCP] Posit's official R package connecting R to Claude Code and other agents: register your own R functions as tools and run them in your open R session, using its data. Out of the box it only switches sessions; add the btw package for docs lookup and data inspection tools. Requires R.
- [GIS MCP Server](https://hebbmind.com/mcp/gis-mcp.md): [MCP] Wraps Shapely, GeoPandas, PyProj, Rasterio, PySAL and other GIS libraries so agents can run geometry and overlay analysis, reproject coordinates, process rasters (e.g. NDVI), do spatial statistics and make maps, and fetch boundaries, land cover and satellite imagery. Needs Python 3.10+ and uv.
- [GEMBA](https://hebbmind.com/cli/gemba.md): [CLI] Microsoft Translator's translation quality tool: GPT scores each sentence using MQM error categories or a direct score; --list_mqm_errors shows error types and severity. Needs line-aligned source and target files, Python and an OpenAI or Azure OpenAI key (paid); a translator should still review.
- [Financial Modeling Prep MCP Server](https://hebbmind.com/mcp/financial-modeling-prep-mcp-server.md): [MCP] Gives agents 250+ Financial Modeling Prep endpoints: financials, valuation and technical indicators, insider and congressional trades, SEC filings and earnings calendars. Needs an FMP API key (free tier); connect to the author's hosted URL or run locally on Node.js 25.3+. Results need expert review.
- [Microsoft Clarity MCP Server](https://hebbmind.com/mcp/clarity-mcp-server.md): [MCP] Microsoft's official MCP: query Clarity traffic, behavior metrics and session recordings in plain language, filtered by device, browser, country and more, to dig into landing page conversion. Needs Clarity installed on your site, a data export API token and Node.js.
- [FRED MCP Server](https://hebbmind.com/mcp/fred-mcp-server.md): [MCP] Connects to the St. Louis Fed's FRED database: search and pull 800,000+ macroeconomic time series (GDP, unemployment, inflation, interest rates) with built-in year-over-year and period-over-period changes. For macro research, investing and teaching. Needs a free FRED API key and Node.js.
- [SonarQube](https://hebbmind.com/plugin/sonarqube-agent-plugins.md): [Plugin] Sonar's official plugin bringing SonarQube checks into the agent coding loop: secrets-scanning hook, issue fixing, quality gates, coverage and dependency risk; with Vortex analysis on, every edit is checked. Needs SonarQube (free Community Build works), the sonar CLI and Docker.
- [Google Ads API Developer Assistant](https://hebbmind.com/plugin/google-ads-api-developer-assistant.md): [Plugin] Official Google Ads API assistant: ask in plain language, generate and validate GAQL queries, run them to export account data to CSV, and debug offline conversion uploads. Account-changing code is generated, not run. Needs a developer token, credentials file and Python 3.10+.
- [Wolfram AgentTools](https://hebbmind.com/mcp/agenttools.md): [MCP] Wolfram's official agent tools: use the Wolfram Language and Wolfram|Alpha for symbolic and numeric math and scientific and statistical data, for teaching and research. The command runs the official Docker image with a free developer license; Wolfram 15+ users can install it in the app.
- [PostHog](https://hebbmind.com/plugin/ai-plugin.md): [Plugin] PostHog's official plugin with a built-in MCP and 30+ skills: query product analytics, feature flags, A/B experiments, dashboards and error tracking from chat, and optionally send Claude Code sessions to LLM Analytics. Needs OAuth sign-in with a PostHog account.
- [Twelve Data MCP Server](https://hebbmind.com/mcp/twelvedata-mcp.md): [MCP] Twelve Data's official MCP: real-time and historical prices for stocks, ETFs, forex and crypto, 60+ technical indicators, plus financials, dividends, fund holdings, company news and SEC filings. Hosted; sign in with your Twelve Data account in the browser, no API key to copy.
- [MLflow Skills](https://hebbmind.com/plugin/mlflow-skills.md): [Plugin] MLflow's official skills plugin: lets coding agents add MLflow Tracing to LLM apps, analyze failed traces, build evaluation datasets and scorers, and query token and latency metrics, closing the instrument, evaluate, iterate loop. Needs MLflow 3.8+.
- [Pinecone Plugin for Claude Code](https://hebbmind.com/plugin/pinecone-claude-code-plugin.md): [Plugin] Pinecone's official plugin: bundles the Pinecone MCP server and /pinecone skill commands to create vector indexes, upsert data, search in plain language, or build a document Q&A assistant with citations from Claude Code. Needs a Pinecone API key (free sign-up); Assistant features also need uv.
- [Agent Skills for Healthcare & Life Sciences](https://hebbmind.com/skill/hcls-agent-skills.md): [Skill] 42 official AWS skills for healthcare and life sciences: medical coding and terminology mapping, FHIR/HL7 parsing, claims and prior authorization rules, medical imaging, pharmacoepidemiology and genomics, per US standards. Some need local software. Not for clinical decisions; expert review required.
- [Vault MCP Server](https://hebbmind.com/mcp/vault-mcp-server.md): [MCP] HashiCorp's official MCP: lets agents manage Vault mounts, read and write KV secrets, enable PKI, create issuers and roles, and issue certificates. Needs a reachable Vault server and token; HashiCorp recommends using it only in trusted local environments.
- [CoinGecko MCP Server](https://hebbmind.com/mcp/coingecko-mcp-server.md): [MCP] CoinGecko's official MCP: query prices, market caps, exchanges and price history for 10,000+ crypto assets, plus on-chain DEX data. Connect to the free keyless public server (shared rate limits) or use a Pro API key for higher limits and the full toolset. For research only, not investment advice.
- [Alibaba Cloud DataWorks MCP Server](https://hebbmind.com/mcp/alibabacloud-dataworks-mcp-server.md): [MCP] Alibaba Cloud's official MCP server: through the DataWorks Open API, agents manage data development nodes and workflows, operate scheduled instances, query Data Map metadata and lineage, and configure data quality rules. Needs an Alibaba Cloud AccessKey.
- [Auth0](https://hebbmind.com/plugin/auth0.md): [Plugin] Helps agents add Auth0 authentication to apps: detects 35+ frameworks and covers login, MFA, SSO, RBAC, JWT validation, migration from other auth providers, and tenant security audits. Maintained by Auth0; needs an Auth0 account (free sign-up).
- [Trivy MCP Server](https://hebbmind.com/mcp/trivy-mcp.md): [MCP] Trivy's MCP plugin: lets agents scan local projects, container images and remote repositories for vulnerabilities and misconfigurations in plain language, optionally checking policy compliance via the Aqua platform. Requires Trivy; maintained by Aqua Security.
- [EODHD Claude Skills](https://hebbmind.com/plugin/eodhd-claude-skills.md): [Plugin] EODHD's official plugin (remote MCP, 7 workflow skills, an analyst subagent): quotes, fundamentals and macro data from 70+ exchanges worldwide, company briefs, stock screening and portfolio risk analysis. Needs an EODHD account; free tier: 20 calls/day, basic US data only. Not investment advice.
- [Amplitude](https://hebbmind.com/plugin/amplitude.md): [Plugin] Amplitude's official plugin with a remote MCP and nearly 30 analysis skills: build charts and dashboards in plain language, interpret A/B experiments, summarize user feedback, and generate daily or weekly data briefs. Needs an Amplitude account with data (free plan exists); browser sign-in.
- [Snowflake Cortex Code](https://hebbmind.com/plugin/cortex-code.md): [Plugin] Snowflake's official plugin: detects Snowflake-related requests and hands them to the Cortex Code CLI, whose 55+ built-in skills handle SQL, dynamic tables, data governance and more. Needs the cortex CLI installed and a Snowflake connection configured.
- [GitGuardian MCP Server](https://hebbmind.com/mcp/ggmcp.md): [MCP] GitGuardian's official MCP: scans code for leaked secrets with 500+ detectors, and lets agents triage and remediate incidents, generate honeytokens and open fix PRs. Needs a GitGuardian account; the hosted endpoint with OAuth sign-in is recommended.

Next page: https://hebbmind.com/tools.md?page=8&profession=algorithm%2Cdata%2Csecurity
