Tools

A JADX decompiler plugin plus companion MCP server that lets agents read an APK's classes, methods, Smali and resources to assist Android reverse engineering and vulnerability hunting. Requires JADX-GUI and uv.

Unified search across 20+ academic sources including arXiv, PubMed, bioRxiv, Semantic Scholar and OpenAlex, returning deduplicated, normalized results and downloading full text via open-access channels first. Most sources need no API key.

Python library with a built-in MCP server for US SEC EDGAR data: search 10-K, 10-Q, 8-K and other filings and read XBRL-standardized financial statements, Form 4 insider trades and 13F holdings. Free with no API key; just set an EDGAR_IDENTITY.

Bright Data's official MCP: web search (Google, Bing, Yandex), any page to Markdown, structured data extraction from e-commerce, social and other platforms, and remote browser control. Needs an API token; includes 5,000 free requests a month.

Simon Willison's website screenshot CLI: batch screenshots from YAML, record demo videos, export PDF and HTML, run JavaScript in pages to extract data, and dump accessibility trees. Built on Playwright; install a browser on first use.

Runs open image models like FLUX, Qwen Image and Z-Image locally on a Mac: text-to-image, reference-based edits, inpainting and upscaling, all on-device. Needs Apple Silicon and uv; the first run downloads models and is slow. Check each model's license before commercial use.

Apify's official skill collection: picks from 130+ curated Actors to scrape public data from social networks, maps, e-commerce sites and more, and can also build, package and deploy Actors. Needs an Apify account; a free tier is available.

Four tools for real-time web search, page content extraction, site mapping and full-site crawling, available as a remote server or run locally. Maintained by Tavily; needs an API key or OAuth sign-in, and a free account is available.

Terraform and OpenTofu best practices from Anton Babenko: diagnoses the failure mode first, then guides testing, module structure, state management, CI/CD and security scanning. Works for AWS, Azure and GCP.

App Store Optimization and app marketing skills: keyword research, title and description optimization, competitor tracking, review management, launch and ad planning. Works from general knowledge alone; add an Appeeky API key or MCP for real App Store data (free accounts get 100 credits a month).

Helps app marketers and translators plan multilingual App Store listings: prioritize countries, research keywords per market, rewrite title, subtitle, keywords and description, and flag screenshot and cultural issues rather than translating literally. Guidance only, no account needed.

MiniMax's official CLI, built for agents: chat with MiniMax models from the terminal and generate images, video and speech, plus speech transcription, image understanding and web search. Works with the international platform. Requires a MiniMax Token Plan subscription.

A CLI and Python library by Simon Willison: imports JSON and CSV straight into SQLite with automatic table creation, runs in-memory SQL queries over files, and supports full-text search and table transformations.

A native Go MCP server for Kubernetes and OpenShift: talks to the API server directly to create, read, update and delete any resource, view pod logs, exec commands and install Helm charts, without needing kubectl. Supports multiple clusters.

Turns Figma designs into production code in your project, using the design screenshot as the visual target and reusing existing components, design tokens and Code Connect mappings first. Maintained by Figma; needs the Figma MCP server (free plans get only 6 calls a month).

Figma's official plugin: connects the remote Figma MCP server and bundles skills for design-to-code, Code Connect, and generating designs and libraries, letting agents read design context and write to the canvas. Needs a Figma account; Starter plans and View/Collab seats get 6 calls a month.

Figma's official skill collection: implement designs as code, map components with Code Connect, generate design-system libraries from code, and build screens and FigJam diagrams on the canvas. Needs the Figma MCP server; canvas writes are in beta and currently free.

The Linux Foundation's open-source compliance toolchain: analyzes project dependencies, scans licenses and copyrights, checks known vulnerabilities, flags policy violations and generates SBOMs and notice files. Needs Java 25 or Docker and ideally 8 GB RAM; have legal review license findings.

Unofficial Freshservice CLI built with Printing Press: lets AI check an IT agent's queue, flag tickets near SLA breach, search tickets and the knowledge base, gauge team workload, spot recurring issues and KB gaps, and manage changes and assets. Needs a Freshservice account and API key.

Unofficial Intercom CLI built with Printing Press, covering the full REST API: sync conversations and contacts for offline search, bulk-tag conversations about one incident, see customer overviews and SLA reports, and pull or push help articles. US, EU and AU regions; needs an access token.

Microsoft's official Azure DevOps MCP server: query and act on work items, repos, pull requests, build pipelines, test plans and wikis. Sign in with a Microsoft account that has access on first use; Microsoft recommends the no-install remote version instead.

Community-maintained GitLab MCP server: manage projects, merge requests, issues, pipelines, wikis and releases, with support for self-hosted instances and a read-only mode. Needs a GitLab personal access token or OAuth.

Self-hostable long-term memory for agents, offering MCP, a REST API and a web dashboard: semantic search, knowledge graph and automatic memory consolidation. Embeddings are computed locally; choose SQLite, Cloudflare or Milvus as the backend.

AI localization: deploy the server to your own Vercel account (Postgres and AI Gateway included; enable deployment protection afterwards), then run npx languine@selfhosted translate to translate locale files with LLMs. A GitHub Action can open PRs. Needs a Vercel account and Node.js.