Tools

Generates editable draw.io architecture diagrams, ER diagrams, UML and BPMN flows from natural language or from Terraform, SQL DDL, OpenAPI specs and code repos, with incremental sync and multi-format export. Native export needs the draw.io desktop app.

Universal psql-style SQL command line: one tool to connect to PostgreSQL, MySQL, SQLite, SQL Server, Oracle and dozens of other SQL and NoSQL databases, with support for copying data between databases.

Lets agents run terminal commands on your machine, manage long-running processes, and read, write, search and diff-edit files. Extends the official Filesystem server; collects pseudonymized telemetry by default (no file contents or command arguments), which you can turn off in config.

Processes CSV, TSV, JSON and other structured data like awk, sed, cut, join and sort, but by field name, for cleaning, aggregation, format conversion and pretty-printing. The command is mlr; written in Go with no runtime dependencies.

Open-source research agent: one command runs literature reviews, deep research, paper reviews, paper-code consistency checks and replication plans, searching arXiv, PubMed and more with sources recorded. Good for grad students writing reviews. Run feynman setup to sign in to a model provider.

Official AWS MCP that queries CloudWatch metrics, alarms and logs, analyzes log anomaly patterns and recommends alarm settings, helping agents with root cause analysis. Requires AWS credentials.

Lets agents query AWS bills, cost trends, budgets and spending anomalies, and recommends Savings Plans, Reserved Instances and rightsizing. Maintained by AWS; requires AWS credentials.

Official AWS MCP that searches and reads AWS documentation, converts it to Markdown for agents to cite, and suggests related pages. No AWS credentials needed; requires uv.

Official AWS MCP that validates CloudFormation templates for syntax and security compliance, diagnoses deployment failures, and searches CloudFormation and CDK docs, code samples and best practices. Replaces the deprecated Cloud Control API server; needs AWS credentials.

Official AWS MCP to create and manage EKS clusters, deploy apps, manage Kubernetes resources, and read pod logs and events for troubleshooting. Read-only by default; writes need --allow-write and reading logs needs --allow-sensitive-data-access.

Drafts employee policies such as remote work, parental leave and PTO, generates state or country supplements where rules differ, and flags laws in flux. Mostly US states; needs web access for regulations and is best installed with the employment-legal plugin. Lawyer review required. By Anthropic.

Anthropic's official legal plugin marketplace: 13 plugins covering commercial contracts, privacy, product counsel, M&A, employment, regulatory, AI governance, litigation and IP, plus plugins for law school clinics and law students. All output is a draft for attorney review.

Anthropic's official employment law plugin: reviews hiring and termination risk by jurisdiction, classifies workers, tracks leave deadlines, manages internal investigations, and drafts policies with state supplements. Focused on US state law; output needs attorney review.

Privacy compliance plugin: decides whether processing activities need a PIA or DPIA, generates privacy impact assessments, reviews DPAs from the controller or processor side, and drafts DSAR responses within statutory deadlines. Official from Anthropic.

Pre-termination check for high-risk factors (recent complaints, protected leave, discrimination or retaliation, thin documentation), reviews severance and separation agreements, and looks up state final-pay deadlines. US-focused; needs web or a legal database. Lawyer review required. By Anthropic.

Answers wage and hour questions for a specific state or country, such as worker classification, overtime, meal and rest breaks, leave and final pay, citing the law for each point and flagging when judgment is needed. US-focused; needs web or a legal database. Lawyer review required. By Anthropic.

Anthropic's official AI governance plugin: tiers AI use cases against your internal register, runs impact assessments across applicable laws such as the EU AI Act, reviews vendor AI terms for training-data and liability risk, and periodically checks for drift between AI policy and practice.

When revising an employee handbook, compares proposed changes clause by clause with the current version, finds knock-on effects (such as PTO changes affecting final pay) and state supplement changes, and flags risks of cutting existing benefits. US-focused; needs legal review. By Anthropic.

Extracts the main content of a web page, stripping comments, sidebars, headers and footers, and outputs clean HTML or Markdown with metadata like title, author and publish date, saving tokens when agents read the web. Built for Obsidian Web Clipper by kepano; still in development.

Rendering engine that lays out HTML and CSS and exports PDF, supporting paged media and other print style standards, ideal for generating reports, invoices and receipts in bulk. Written in Python; depends on the system Pango library.

NVIDIA's open-source LLM vulnerability scanner that probes for prompt injection, jailbreaks, data leakage, hallucination and harmful content, supporting OpenAI, Hugging Face, Bedrock and most REST-accessible models. Scanning cloud models needs their API keys.

Annotate and review agent-generated plans, docs and code diffs in the browser, then send feedback back to the agent in one click. Hooks into plan mode and supports Claude Code, Codex and other agents. Run the official install script to set up the CLI first.

Official skill for Anarlog (formerly Hyprnote), an open-source, local-first meeting notes app: lets agents query notes, summaries, transcripts, attendees and action items from local data, with no meeting bot needed. Requires the Anarlog desktop app and CLI; remote cloud access needs Pro.

Tencent's open-source browser bridge: through the bsk CLI and a Chrome/Edge extension, agents use your logged-in accounts in a separate visible window to browse, fill forms and take full-page screenshots, and correlate network requests with console output to debug sites.