# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for DevOps / SRE or ML / AI or Data engineering or GIS / Surveying or Security: 447 items.

> - DevOps / SRE: Deployment, monitoring, cloud resources and reliability.
> - ML / AI: Model training, evaluation and LLM application development.
> - Data engineering: Data pipelines, warehouse modeling, ETL and data quality.
> - GIS / Surveying: Spatial data and analysis, QGIS mapping, remote sensing, geocoding, routing and map services.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.

- [Comfy MCP](https://hebbmind.com/mcp/comfy-mcp.md): [MCP] ComfyUI's official MCP: lets agents drive local ComfyUI image and video workflows, list installed nodes, models and templates, submit jobs and fetch results, and start or stop ComfyUI. Needs a machine that can run ComfyUI (usually a GPU) and comfy-cli; partner models consume Comfy credits.
- [Grafana Skills](https://hebbmind.com/skill/grafana-skills.md): [Skill] Grafana Labs' official skills: dashboards and alerting, PromQL, Loki, Tempo, Mimir and Pyroscope queries, Prometheus cardinality troubleshooting, Grafana Cloud management and cost optimization, k6 load testing and plugin development. Some skills need Grafana Cloud.
- [Alibaba Cloud Skills](https://hebbmind.com/skill/alibabacloud-aiops-skills.md): [Skill] Alibaba Cloud's official agent skills: ECS diagnosis and DR, RDS/PolarDB database checks, PAI training and EAS deployment, ACK clusters, RAM permissions, OSS and network troubleshooting, and Model Studio. Needs an AccessKey or aliyun CLI credentials.
- [On-Call Kit](https://hebbmind.com/skill/anthropics-skills.md): [Skill] Puts Claude in your incident channel: builds triage runbooks from past incidents, investigates alerts read-only and gives an evidence-backed first diagnosis while humans decide fixes, plus handoffs and status reports. Anthropic reference code, no longer maintained; needs Claude Team or Enterprise.
- [Firecrawl Plugin for Claude Code](https://hebbmind.com/plugin/firecrawl-claude-plugin.md): [Plugin] Firecrawl's official plugin: brings the Firecrawl CLI in as skills so Claude Code can search the web, scrape pages to Markdown, map site links or crawl whole sites. Install firecrawl-cli and set an API key first; self-hosting supported.
- [MinerU Open MCP](https://hebbmind.com/mcp/opendatalab-mcp.md): [MCP] MinerU's official MCP: parses PDF, Word, PowerPoint and images into Markdown via the mineru.net cloud API, keeping tables and formulas. The keyless Flash mode works out of the box; add a token for higher quotas and more formats.
- [Opik MCP Server](https://hebbmind.com/mcp/opik-mcp.md): [MCP] Comet's official Opik MCP: query traces and spans of LLM apps in chat, log scores and comments, and manage datasets, experiments and prompt versions. Works with Opik Cloud (API key or browser sign-in) and self-hosted open-source Opik.
- [GIS MCP Server](https://hebbmind.com/mcp/gis-mcp.md): [MCP] Wraps Shapely, GeoPandas, PyProj, Rasterio, PySAL and other GIS libraries so agents can run geometry and overlay analysis, reproject coordinates, process rasters (e.g. NDVI), do spatial statistics and make maps, and fetch boundaries, land cover and satellite imagery. Needs Python 3.10+ and uv.
- [MongoDB](https://hebbmind.com/plugin/mongodb.md): [Plugin] MongoDB's official plugin: runs the MongoDB MCP locally via npx and adds skills for query generation, index tuning, schema design, and full-text and vector search. Connects to self-hosted or Atlas databases with a connection string.
- [MongoDB Agent Skills](https://hebbmind.com/skill/mongodb-agent-skills.md): [Skill] MongoDB's official skill library covering document model design, driver connection setup, query optimization, natural-language query generation, Atlas full-text and vector search, and stream processing. Works alongside the MongoDB MCP Server.
- [Alibaba Cloud Observability MCP Server](https://hebbmind.com/mcp/alibabacloud-observability-mcp-server.md): [MCP] Official Alibaba Cloud MCP: query logs, metrics and traces from SLS, CloudMonitor and ARMS, with time-series comparison and natural-language-to-SQL. Needs an AccessKey; some AI tools are billed per call. The install uses the Python version (main branch is now a Go binary).
- [GEMBA](https://hebbmind.com/cli/gemba.md): [CLI] Microsoft Translator's translation quality tool: GPT scores each sentence using MQM error categories or a direct score; --list_mqm_errors shows error types and severity. Needs line-aligned source and target files, Python and an OpenAI or Azure OpenAI key (paid); a translator should still review.
- [FHIR MCP Server](https://hebbmind.com/mcp/fhir-mcp-server.md): [MCP] Connects any FHIR-compliant EHR server (e.g. the Epic sandbox or HAPI) to agents to search, read, create and update patient clinical data in plain language, with SMART on FHIR auth. By WSO2. Needs a FHIR server URL, access token and uv; clinicians must review results.
- [TencentCloud CLI (TCCLI)](https://hebbmind.com/cli/tencentcloud-cli.md): [CLI] Tencent Cloud's official CLI: call any Tencent Cloud API by product and action name to manage resources (e.g. tccli cvm DescribeZones), with multiple profiles, role credentials and JSON or table output for scripting. Needs a SecretId and SecretKey.
- [Alibaba Cloud Ops MCP Server](https://hebbmind.com/mcp/alibaba-cloud-ops.md): [MCP] Alibaba Cloud's official ops MCP: manage ECS, RDS, OSS, VPC and other resources in plain language, view CloudMonitor metrics, and analyze a project and deploy it to ECS. Needs an Alibaba Cloud AccessKey and uv.
- [Alibaba Cloud ACK MCP Server](https://hebbmind.com/mcp/alibabacloud-ack-mcp-server.md): [MCP] Lets agents inspect Alibaba Cloud ACK clusters, run kubectl operations, query Prometheus metrics, control-plane and audit logs, and run resource diagnostics and health checks. Maintained by Alibaba Cloud; needs an AccessKey and cluster RBAC permissions.
- [MCP Server Plugin for Jenkins](https://hebbmind.com/mcp/mcp-server-plugin.md): [MCP] Jenkins plugin that turns Jenkins itself into an MCP server: agents can list jobs, trigger and rerun builds, page through and search build logs, and view test results and SCM info. Hosted in the official jenkinsci organization; authenticates with a Jenkins API token over Basic auth.
- [SonarQube](https://hebbmind.com/plugin/sonarqube-agent-plugins.md): [Plugin] Sonar's official plugin bringing SonarQube checks into the agent coding loop: secrets-scanning hook, issue fixing, quality gates, coverage and dependency risk; with Vortex analysis on, every edit is checked. Needs SonarQube (free Community Build works), the sonar CLI and Docker.
- [Neon Postgres](https://hebbmind.com/plugin/neon-postgres.md): [Plugin] Neon's official plugin combining the Neon MCP and skills to manage serverless Postgres: projects and branches, object storage, Functions and the AI Gateway. Signs in to Neon via OAuth the first time you use the MCP.
- [GeoServer MCP Server](https://hebbmind.com/mcp/geoserver-mcp.md): [MCP] Connects to GeoServer's REST API so agents can manage workspaces, data stores, layers and styles, run CQL spatial queries, and access features and render maps via WMS/WFS, for publishing and maintaining map services. Needs a running GeoServer with an admin account, Python 3.10+ and uv.
- [render-deploy](https://hebbmind.com/skill/render-deploy.md): [Skill] Analyzes your codebase and generates a render.yaml Blueprint, or creates services directly through the Render MCP, to deploy apps to Render. Maintained by Render and included in OpenAI's curated skills. Needs a Render account and code pushed to GitHub, GitLab or Bitbucket.
- [MLflow Skills](https://hebbmind.com/plugin/mlflow-skills.md): [Plugin] MLflow's official skills plugin: lets coding agents add MLflow Tracing to LLM apps, analyze failed traces, build evaluation datasets and scorers, and query token and latency metrics, closing the instrument, evaluate, iterate loop. Needs MLflow 3.8+.
- [Pulumi Agent Skills](https://hebbmind.com/plugin/pulumi-agent-skills.md): [Plugin] Pulumi's official plugin marketplace: write infrastructure as code in TypeScript, Python, Go and more, migrate from Terraform, CDK, CloudFormation or ARM, and manage ESC secrets and config. Works with both Claude Code and Codex.
- [Pulumi Agent Skills](https://hebbmind.com/skill/pulumi-agent-skills.md): [Skill] Pulumi's official skills: Pulumi program best practices, components and the Automation API, ESC secrets and config, debugging failed pulumi up runs, and migrating from Terraform, CDK, CloudFormation or ARM to Pulumi.
- [Pinecone Plugin for Claude Code](https://hebbmind.com/plugin/pinecone-claude-code-plugin.md): [Plugin] Pinecone's official plugin: bundles the Pinecone MCP server and /pinecone skill commands to create vector indexes, upsert data, search in plain language, or build a document Q&A assistant with citations from Claude Code. Needs a Pinecone API key (free sign-up); Assistant features also need uv.
- [Vault MCP Server](https://hebbmind.com/mcp/vault-mcp-server.md): [MCP] HashiCorp's official MCP: lets agents manage Vault mounts, read and write KV secrets, enable PKI, create issuers and roles, and issue certificates. Needs a reachable Vault server and token; HashiCorp recommends using it only in trusted local environments.
- [TomTom Maps MCP Server](https://hebbmind.com/mcp/tomtom-maps-mcp.md): [MCP] TomTom's official MCP: geocoding and reverse geocoding, fuzzy and nearby search, single and multi-stop routing, reachable range, live traffic incidents, and static or dynamic maps. Needs a TomTom developer account and API key; use the hosted server (public preview) or run locally via npx.
- [Auth0](https://hebbmind.com/plugin/auth0.md): [Plugin] Helps agents add Auth0 authentication to apps: detects 35+ frameworks and covers login, MFA, SSO, RBAC, JWT validation, migration from other auth providers, and tenant security audits. Maintained by Auth0; needs an Auth0 account (free sign-up).
- [Alibaba Cloud DataWorks MCP Server](https://hebbmind.com/mcp/alibabacloud-dataworks-mcp-server.md): [MCP] Alibaba Cloud's official MCP server: through the DataWorks Open API, agents manage data development nodes and workflows, operate scheduled instances, query Data Map metadata and lineage, and configure data quality rules. Needs an Alibaba Cloud AccessKey.
- [Trivy MCP Server](https://hebbmind.com/mcp/trivy-mcp.md): [MCP] Trivy's MCP plugin: lets agents scan local projects, container images and remote repositories for vulnerabilities and misconfigurations in plain language, optionally checking policy compliance via the Aqua platform. Requires Trivy; maintained by Aqua Security.
- [Netlify Skills](https://hebbmind.com/plugin/context-and-tools.md): [Plugin] Netlify's official plugin with skills for Functions, Edge Functions, Blobs, databases, forms, caching, netlify.toml configuration and deploys, plus the hosted Netlify MCP (OAuth sign-in on first use).
- [GitGuardian MCP Server](https://hebbmind.com/mcp/ggmcp.md): [MCP] GitGuardian's official MCP: scans code for leaked secrets with 500+ detectors, and lets agents triage and remediate incidents, generate honeytokens and open fix PRs. Needs a GitGuardian account; the hosted endpoint with OAuth sign-in is recommended.
- [Snowflake Cortex Code](https://hebbmind.com/plugin/cortex-code.md): [Plugin] Snowflake's official plugin: detects Snowflake-related requests and hands them to the Cortex Code CLI, whose 55+ built-in skills handle SQL, dynamic tables, data governance and more. Needs the cortex CLI installed and a Snowflake connection configured.
- [Tencent Cloud COS MCP Server](https://hebbmind.com/mcp/cos-mcp.md): [MCP] Lets agents upload, download and list files in Tencent Cloud Object Storage (COS), and use Cloud Infinite for image processing, QR code recognition, document-to-PDF conversion, video frame capture and natural-language search. Maintained by Tencent Cloud; needs a SecretId and SecretKey.
- [Earthdata MCP](https://hebbmind.com/mcp/earthdata-mcp.md): [MCP] NASA's official MCP for its Common Metadata Repository: find Earth science and remote sensing datasets in plain language, check that data files exist for a given place and time, and get access services, related tools and citation info. No account to connect; downloads need an Earthdata login.
- [Supabase Agent Plugin](https://hebbmind.com/plugin/supabase-plugin.md): [Plugin] Supabase's official plugin: Supabase and Postgres best-practice skills plus the Supabase remote MCP to manage projects, run SQL, design schemas and RLS policies, and handle auth and storage. Needs a Supabase account.
- [Langfuse Observability Plugin](https://hebbmind.com/plugin/claude-observability-plugin.md): [Plugin] Langfuse's official plugin: uses hooks to send prompts, model calls, token usage and cost, tool calls and subagents from Claude Code sessions to Langfuse as traces for monitoring and review. Needs Langfuse keys (self-hosting supported) and uv or Python 3.10+.
- [ModelScope MCP Server](https://hebbmind.com/mcp/modelscope-modelscope-mcp-server.md): [MCP] ModelScope's official MCP: search models, datasets, Studio apps, papers and MCP servers and view details, plus text-to-image and image-to-image generation. Needs a ModelScope API token.
- [AWS Startup Advisor](https://hebbmind.com/plugin/aws-startup-advisor.md): [Plugin] AWS's official plugin for startups: answers AWS Activate credit eligibility and 60+ startup perks, gives architecture and cost advice by funding stage, team size and runway, and plans migrations from GCP, Azure or Heroku. Perk lookups need no AWS account; migrations need your repo.
- [3DCityDB MCP Server](https://hebbmind.com/mcp/3dcitydb-mcp-server.md): [MCP] From TUM's Chair of Geoinformatics (a 3DCityDB co-developer): query CityGML 3D city models in 3DCityDB v5 in plain language, covering both spatial and semantic attributes, with read-only SQL. Needs a deployed 3DCityDB database and Python; register it from the folder with your .env config.
- [Grafana AI Marketplace](https://hebbmind.com/plugin/ai-marketplace.md): [Plugin] Grafana's official plugin marketplace with three plugins: the hosted Grafana Cloud MCP, the local mcp-grafana and Grafana Assistant, covering dashboards, data sources, Prometheus and Loki queries, alerting and incident management. Works with Claude Code and Codex.
- [OpenCage Geocoding MCP Server](https://hebbmind.com/mcp/opencage-geocoding-mcp.md): [MCP] OpenCage's official MCP: geocode addresses and place names, reverse geocode coordinates (with admin area, time zone and more), and check API quota. For small lookups; use its CLI for batches. Needs an OpenCage API key (free trial), Node.js 20+, and manual setup from a repo clone.
- [Semgrep Guardian](https://hebbmind.com/plugin/semgrep-plugin.md): [Plugin] Semgrep's official MCP server plus hooks: every file the agent writes is scanned with Semgrep Code, Supply Chain and Secrets for vulnerabilities, malicious dependencies and hardcoded secrets; the agent rewrites until clean or you dismiss findings. Requires a Semgrep login.
- [Datadog](https://hebbmind.com/plugin/claude-code-plugin.md): [Plugin] Preconfigures the Datadog MCP in Claude Code to query logs, metrics, traces, dashboards and monitors in plain language while troubleshooting production. Maintained by Datadog; needs a Datadog account (OAuth or API key). In preview.
- [PagerDuty](https://hebbmind.com/plugin/claude-code-plugins.md): [Plugin] PagerDuty's official plugin: analyzes your current git diff against the service's past incidents and change events, gives a 0-5 risk score and suggestions before you commit, and can create PagerDuty SRE Agent skills (early access program required). Needs a PagerDuty API token.
- [Vanta](https://hebbmind.com/plugin/vanta-mcp-plugin.md): [Plugin] Vanta's official plugin: from Claude Code, review control gaps for SOC 2, ISO 27001 and other frameworks, failing tests, vendor risk and policies, and generate fixes for code-level issues. Needs admin access to a paid Vanta account (browser auth); have compliance conclusions reviewed by an expert.
- [Sentry for Claude Code](https://hebbmind.com/plugin/plugin-claude.md): [Plugin] Sentry's official plugin: skills for SDK setup across platforms, production issue debugging, Sentry-aware code review and alert configuration, plus the hosted Sentry MCP to query errors and stack traces. Needs a Sentry account.
