# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for DevOps / SRE or ML / AI or Data engineering or Security: 437 items.

> - DevOps / SRE: Deployment, monitoring, cloud resources and reliability.
> - ML / AI: Model training, evaluation and LLM application development.
> - Data engineering: Data pipelines, warehouse modeling, ETL and data quality.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.

- [Awesome Legal Skills](https://hebbmind.com/skill/awesome-legal-skills.md): [Skill] 250+ human-reviewed legal skills from practicing lawyers, in-house counsel and academics, mostly US and EU law: compliance, GDPR, legal research, litigation, contract review and drafting, the EU AI Act. Install all or pick one; output is a draft for a lawyer to review.
- [Jina AI MCP Server](https://hebbmind.com/mcp/jina-ai-mcp.md): [MCP] Jina AI's official remote MCP: converts web pages and PDFs to Markdown, searches the web, arXiv, SSRN and images, and offers screenshots, reranking and semantic dedup. Reading tools work without a key (rate-limited); search and rerank need a Jina API key.
- [MCP Kali Server](https://hebbmind.com/mcp/mcp-kali-server.md): [MCP] Two parts: an API server on Kali Linux and an MCP bridge, letting agents run nmap, sqlmap, Metasploit, Hydra and other tools, or arbitrary terminal commands, for authorized penetration testing and CTFs. Available in Kali's official repositories.
- [COMET](https://hebbmind.com/cli/comet.md): [CLI] Unbabel's machine-translation quality metric: comet-score rates translations per sentence and overall, XCOMET marks error spans and severity, and CometKiwi works without a reference. Good for spot-checking MT. Needs Python 3.8+; models download from Hugging Face, some need a license; GPU helps.
- [Oh My Paper](https://hebbmind.com/plugin/oh-my-paper.md): [Plugin] A research plugin for Claude Code: commands like /omp:survey, /omp:experiment and /omp:write chain literature review, topic selection, experiments, writing and self-review, with 5 specialized agents and 34 research skills that remember project progress across sessions. Experiments lean toward ML.
- [dbt Agent Skills](https://hebbmind.com/plugin/dbt-agent-skills.md): [Plugin] dbt Labs' official plugin marketplace with dbt and dbt-migration plugins: write models and unit tests, build semantic-layer metrics, govern with dbt Mesh, debug failed jobs, and handle version upgrades and cross-platform migrations. Most skills need an existing dbt project.
- [dbt Agent Skills](https://hebbmind.com/skill/dbt-agent-skills.md): [Skill] dbt Labs' official skills: write and edit dbt models, add unit tests and docs, set up the MetricFlow semantic layer, debug failed jobs, and handle dbt version upgrades and cross-platform migrations. Most skills need dbt installed and an existing project.
- [PaperOrchestra](https://hebbmind.com/skill/paperorchestra.md): [Skill] The five-agent PaperOrchestra pipeline (outline, figures, literature review, section writing, polishing) as skills: turns research ideas, experiment logs and a conference template into a LaTeX paper and checks citations via Semantic Scholar. Needs Python; verify the draft yourself.
- [GeoSQL](https://hebbmind.com/skill/geosql.md): [Skill] Helps agents write geospatial SQL for PostGIS, DuckDB, BigQuery and Snowflake: inspect schemas and keep query costs in check, then render results as interactive maps to review and correct. Needs Python and your own database or warehouse; maps use Dekart, which can run locally in Docker.
- [SonarQube MCP Server](https://hebbmind.com/mcp/sonarqube-mcp-server.md): [MCP] Official SonarSource server: connects to SonarQube Server or Cloud so agents can query code issues, quality gates, security hotspots and dependency risks, and analyze file contents directly. Needs a SonarQube token; Docker is the recommended way to run it.
- [Firecrawl](https://hebbmind.com/skill/firecrawl.md): [Skill] Official Firecrawl skill: drives the Firecrawl CLI to search, scrape, map site URLs, batch-crawl, interact with pages and monitor changes, returning LLM-ready Markdown. Search and scrape have a rate-limited free tier; crawling and monitoring need an account or self-hosted instance.
- [Firecrawl CLI](https://hebbmind.com/cli/firecrawl-cli.md): [CLI] Firecrawl's official CLI: scrape, search, map and crawl sites and interact with pages in a browser from the terminal, with Markdown output; can also install companion skills for coding agents. Needs a Firecrawl account or API key, or point it at a self-hosted instance.
- [Redis MCP Server](https://hebbmind.com/mcp/mcp-redis.md): [MCP] Redis's official MCP server: read and write strings, hashes, lists, streams, JSON and other data structures in natural language, with vector indexing and search and pub/sub. Bring your own Redis instance; runs via uvx.
- [Cloud Run MCP Server](https://hebbmind.com/mcp/cloud-run-mcp.md): [MCP] Lets agents deploy a local folder or file contents straight to Google Cloud Run, list services and view their details and logs, and list or create GCP projects. Maintained by Google; sign in with gcloud and set up Application Default Credentials first.
- [Railway CLI](https://hebbmind.com/cli/railwayapp-cli.md): [CLI] Railway's official CLI: deploy with railway up and manage infrastructure config, with token auth for non-interactive CI runs. The installer can set up the Railway skill and MCP for Claude Code, Codex and others in one step. Needs a Railway account.
- [dbt MCP Server](https://hebbmind.com/mcp/dbt-mcp.md): [MCP] Lets agents read dbt project models, lineage and Semantic Layer metrics, run build, run and test commands, and call the dbt platform Discovery and Admin APIs. Maintained by dbt Labs; Semantic Layer and platform tools need a dbt platform account.
- [DuckDB Skills](https://hebbmind.com/skill/duckdb-skills.md): [Skill] Official DuckDB skills: query local or S3 CSV, Parquet, Excel and JSON files with SQL or plain language, attach databases, convert formats, analyze spatial data and look up documentation. Needs the DuckDB CLI; tested only on macOS and Linux.
- [Chroma MCP Server](https://hebbmind.com/mcp/chroma-mcp.md): [MCP] Chroma's official MCP: lets agents create and manage collections, add documents, and retrieve them with vector search, full-text search and metadata filters. Connects to in-memory or local persistent stores, self-hosted instances or Chroma Cloud.
- [Elastic Agent Skills](https://hebbmind.com/skill/elastic-agent-skills.md): [Skill] Elastic's official skills teaching agents to use Elasticsearch and Kibana correctly: index design, ES|QL queries, search relevance tuning, dashboards, observability troubleshooting and security alert triage. Currently a technical preview.
- [REUSE Tool](https://hebbmind.com/cli/reuse-tool.md): [CLI] Official FSFE command-line tool that checks every file in a project for copyright and license information per the REUSE spec, adds headers in bulk, downloads license texts and generates an SPDX bill of materials. Needs Python; have legal review the results.
- [Argo CD MCP Server](https://hebbmind.com/mcp/mcp-for-argocd.md): [MCP] Manage Argo CD in natural language: list and inspect applications, create, update and delete them and trigger syncs, and view resource trees, workload logs and events. Maintained by Argo Project Labs; needs your Argo CD URL and an API token, with an optional read-only mode.
- [Docker Skills](https://hebbmind.com/skill/docker-skills.md): [Skill] Official Docker skills: containerize projects, optimize and harden Dockerfile builds, orchestrate with Compose, use Docker Sandboxes and Docker Agent, with confirmation guardrails before deletes and other destructive actions.
- [ClickHouse Agent Skills](https://hebbmind.com/skill/clickhouse-agent-skills.md): [Skill] Official ClickHouse skills: best practices for schema design, primary keys, JOINs and inserts ranked by impact, advice on real-time architecture decisions, in-process SQL and pandas-compatible analysis with chDB, and local and cloud deployment workflows.
- [Google Security Operations and Threat Intelligence MCP Server](https://hebbmind.com/mcp/mcp-security.md): [MCP] Google's official security MCP servers for Google SecOps (Chronicle), SecOps SOAR, Google Threat Intelligence and Security Command Center: investigate alerts, hunt threats, look up IOCs and review cloud risks. Needs Google Cloud credentials or a VirusTotal API key.
- [lean-lsp-mcp](https://hebbmind.com/mcp/lean-lsp-mcp.md): [MCP] MCP server for the Lean 4 theorem prover: lets agents read proof goals, diagnostics and definitions and search theorems via LeanSearch and Loogle, helping mathematicians and students with formal proofs. Needs uv and the Lean toolchain; run it from the Lean project root.
- [Prometheus MCP Server](https://hebbmind.com/mcp/prometheus-mcp-server.md): [MCP] Lets agents query Prometheus metrics with PromQL and browse metric metadata and scrape targets to help investigate alerts and performance issues. Supports basic auth, bearer tokens and multi-tenancy; Docker is the recommended way to run it.
- [ElevenLabs Skills](https://hebbmind.com/skill/elevenlabs-skills.md): [Skill] Official ElevenLabs skills: text to speech, speech to text, sound effects and music generation, voice changing, vocal isolation, multilingual dubbing and building voice agents. Needs an ElevenLabs API key.
- [Tavily Agent Skills](https://hebbmind.com/skill/tavily-ai-skills.md): [Skill] Official Tavily skills: let agents search the web, extract page content, discover site URLs, crawl in bulk and run cited deep research through the Tavily CLI (tvly). Install the CLI first; search and extract have a limited no-login tier, other features need sign-in or an API key.
- [Salesforce DX MCP Server](https://hebbmind.com/mcp/salesforcecli-mcp.md): [MCP] Lets agents work with Salesforce orgs authorized on your machine: SOQL queries, metadata deploy and retrieve, Apex test runs and permission set assignment, plus toolsets for LWC development. Maintained by Salesforce; authorize your org with the Salesforce CLI first.
- [Astronomer Data Agents](https://hebbmind.com/plugin/astronomer-agents.md): [Plugin] Astronomer's official data engineering plugin: write Airflow DAGs to best practices, debug pipeline failures, trace data lineage, profile warehouse tables and migrate from Airflow 2 to 3, with a built-in Airflow MCP server and session hooks.
- [Claude Trading Skills (AGIPro)](https://hebbmind.com/skill/agiprolabs-claude-trading-skills.md): [Skill] 68 trading and quant skills focused on crypto and DeFi: market and on-chain data, technical indicators, backtesting, position sizing and risk, prediction markets, and tax tools for cost basis and wash sales. Most need Python and data API keys (often free tiers); get expert review.
- [phd-skills](https://hebbmind.com/plugin/phd-skills.md): [Plugin] Research guardrails for PhD students: reproduce arXiv papers, debug training anomalies with evidence, compare runs at matched epochs, check paper-code consistency, verify BibTeX, find literature gaps and predict reviewer comments. No MCP or extra dependencies; mostly for ML research.
- [FinLab AI](https://hebbmind.com/skill/finlab-ai.md): [Skill] Official FinLab quant skill: lets agents use FinLab data (mainly Taiwan stocks, plus US, Japan, Korea and Hong Kong) to write stock-picking strategies, run backtests and analyze factors. Needs a FinLab account (free tier has a daily data cap), Python 3.10+ and uv. Not investment advice.
- [ComfyUI MCP Server](https://hebbmind.com/mcp/comfyui-mcp-server.md): [MCP] Lets agents run local ComfyUI workflows to generate images, audio and video, regenerate from earlier results with new parameters, check the queue and switch models. Install and start ComfyUI, then clone this repo and run the server with Python (port 9000 by default).
- [Nextcloud MCP Server](https://hebbmind.com/mcp/nextcloud-mcp-server.md): [MCP] Connects to self-hosted or managed Nextcloud so agents can manage files, calendars, contacts, notes, Deck boards and mail, and read PDF and Word content (OCR for scans is opt-in); suits teams that value data ownership. Needs a Nextcloud account with an app password, and uv.
- [Databricks Agent Skills](https://hebbmind.com/skill/databricks-agent-skills.md): [Skill] Official Databricks skills guiding agents to build Lakeflow pipelines and jobs, Apps, Lakebase, Vector Search, Model Serving and AI/BI dashboards on the lakehouse. Needs the Databricks CLI.
- [Databricks Agent Skills](https://hebbmind.com/plugin/databricks-agent-skills.md): [Plugin] Official Databricks plugin with skills for the CLI and auth, Genie data queries, Apps, Lakebase, Lakeflow jobs and pipelines, Model Serving and DABs deployment, plus hooks for prompt routing, session context and auth failure hints. Needs a Databricks account.
- [Apache Doris MCP Server](https://hebbmind.com/mcp/doris-mcp-server.md): [MCP] Apache Doris's official MCP: gives agents read-only access to explore table metadata, run and explain SQL, diagnose slow queries, and check cluster status, load jobs and data governance info. Needs Python 3.12+ and Doris 2.0 or later.
- [QuantConnect Lean CLI](https://hebbmind.com/cli/lean-cli.md): [CLI] QuantConnect's official CLI drives the open-source LEAN engine locally or in the cloud to download data, backtest and optimize quant strategies and deploy them live. Requires a paid-tier QuantConnect organization; strategies in Python or C#; local runs need Docker. Get expert review.
- [Radare2 MCP Server](https://hebbmind.com/mcp/radare2-mcp.md): [MCP] radare2's official MCP server, written in C on the native r2 API: agents open binaries to disassemble, decompile and analyze them, with read-only mode, sandboxing and connections to remote r2 sessions. Install radare2 first, then r2mcp via r2pm.
- [Railway](https://hebbmind.com/plugin/railway.md): [Plugin] Railway's official plugin, bundling the use-railway skill and hosted Railway MCP so agents can create projects, deploy services, set environment variables and databases, and check logs and metrics to debug deployments. Needs a Railway account.
- [Vercel Plugin](https://hebbmind.com/plugin/vercel-plugin.md): [Plugin] Vercel's official plugin: a knowledge graph of the Vercel ecosystem, dozens of skills, expert subagents for deployment and performance, and commands for deploys, env vars and project status, covering Next.js, the AI SDK, storage and CI/CD. Needs Node.js 18+ and Bun; telemetry is opt-out.
- [Hugging Face MCP Server](https://hebbmind.com/mcp/hf-mcp-server.md): [MCP] Hugging Face's official MCP server: lets agents search models, datasets and Spaces on the Hub and call thousands of Gradio AI apps directly. Hosted remotely; sign in with your Hugging Face account or authorize with a token.
- [Lokka](https://hebbmind.com/mcp/lokka.md): [MCP] Query and manage Microsoft 365 and Azure tenants in natural language via Microsoft Graph: create users and security groups, check devices and Conditional Access policies and view cloud costs. Needs a work account with the right permissions; changes apply immediately.
- [ServiceNow MCP Server](https://hebbmind.com/mcp/servicenow-mcp.md): [MCP] Lets agents create, update and resolve incidents in ServiceNow, manage the service catalog, change requests and knowledge articles, and load only the tools each role needs. Needs a ServiceNow account and Python 3.11+ (from source); community-maintained, last updated Oct 2025.
- [Comfy MCP](https://hebbmind.com/mcp/comfy-mcp.md): [MCP] ComfyUI's official MCP: lets agents drive local ComfyUI image and video workflows, list installed nodes, models and templates, submit jobs and fetch results, and start or stop ComfyUI. Needs a machine that can run ComfyUI (usually a GPU) and comfy-cli; partner models consume Comfy credits.
- [Grafana Skills](https://hebbmind.com/skill/grafana-skills.md): [Skill] Grafana Labs' official skills: dashboards and alerting, PromQL, Loki, Tempo, Mimir and Pyroscope queries, Prometheus cardinality troubleshooting, Grafana Cloud management and cost optimization, k6 load testing and plugin development. Some skills need Grafana Cloud.
- [Alibaba Cloud Skills](https://hebbmind.com/skill/alibabacloud-aiops-skills.md): [Skill] Alibaba Cloud's official agent skills: ECS diagnosis and DR, RDS/PolarDB database checks, PAI training and EAS deployment, ACK clusters, RAM permissions, OSS and network troubleshooting, and Model Studio. Needs an AccessKey or aliyun CLI credentials.
- [Firecrawl Plugin for Claude Code](https://hebbmind.com/plugin/firecrawl-claude-plugin.md): [Plugin] Firecrawl's official plugin: brings the Firecrawl CLI in as skills so Claude Code can search the web, scrape pages to Markdown, map site links or crawl whole sites. Install firecrawl-cli and set an API key first; self-hosting supported.
- [On-Call Kit](https://hebbmind.com/skill/anthropics-skills.md): [Skill] Puts Claude in your incident channel: builds triage runbooks from past incidents, investigates alerts read-only and gives an evidence-backed first diagnosis while humans decide fixes, plus handoffs and status reports. Anthropic reference code, no longer maintained; needs Claude Team or Enterprise.

Next page: https://hebbmind.com/tools.md?page=9&profession=devops%2Calgorithm%2Cdata-engineering%2Csecurity
