Tools

Open-source, agent-friendly BI: define metrics and dashboards in YAML and SQL, and rill init generates project instructions and MCP config for Claude Code so agents can build business dashboards and answer questions in natural language. Local use is free; publishing to Rill Cloud needs an account.

AWS's generally available agent toolkit and plugin marketplace: plugins such as aws-core, aws-agents and aws-data-analytics bundle the AWS MCP Server with evaluated skills for IaC, serverless, containers and billing. Calling AWS APIs requires configured credentials.

A JADX decompiler plugin plus companion MCP server that lets agents read an APK's classes, methods, Smali and resources to assist Android reverse engineering and vulnerability hunting. Requires JADX-GUI and uv.

AWS's official skills (Agent Toolkit for AWS) covering IAM, CDK/CloudFormation, serverless, containers, observability, cost management and Bedrock, plus service-specific skills. Running AWS operations requires locally configured credentials.

Supabase's official general skill covering the database, Auth, Edge Functions, Realtime, Storage, vectors and queues, plus supabase-js/SSR integration, the CLI and MCP, migrations and RLS security checks, and it checks the latest docs and changelog before acting.

Postgres rules ranked by impact: query optimization, indexing, connection pooling, RLS security, schema design and lock troubleshooting, with wrong-vs-right SQL examples, applicable to any Postgres. Maintained by Supabase.

Unified search across 20+ academic sources including arXiv, PubMed, bioRxiv, Semantic Scholar and OpenAlex, returning deduplicated, normalized results and downloading full text via open-access channels first. Most sources need no API key.

Python library with a built-in MCP server for US SEC EDGAR data: search 10-K, 10-Q, 8-K and other filings and read XBRL-standardized financial statements, Form 4 insider trades and 13F holdings. Free with no API key; just set an EDGAR_IDENTITY.

Supermemory's official Claude Code plugin: hooks save memories automatically when a session ends and recall them on demand, giving persistent memory across sessions and projects, with shared project memory for teams. Needs a Supermemory API key and Node.js 18+.

Plugin marketplace for multi-agent dev workflows: omo multi-agent orchestration, BMAD agile role flows, requirements-driven development, SPARV and common dev commands, delegating coding tasks to Codex, Claude, Gemini and other backends (their CLIs installed separately). AGPL licensed.

Bright Data's official MCP: web search (Google, Bing, Yandex), any page to Markdown, structured data extraction from e-commerce, social and other platforms, and remote browser control. Needs an API token; includes 5,000 free requests a month.

Scans codebases and dependencies for open-source licenses, copyright notices and package manifests, detecting licenses by full-text matching, with output in JSON, SPDX, CycloneDX and more, for open-source compliance reviews.

Google's official terminal coding agent and successor to Gemini CLI: understands your codebase and, with your approval, edits files and runs commands. Shares its engine and settings with the Antigravity 2.0 desktop app. Closed source; sign in with a Google account; free tier included.

Simon Willison's website screenshot CLI: batch screenshots from YAML, record demo videos, export PDF and HTML, run JavaScript in pages to extract data, and dump accessibility trees. Built on Playwright; install a browser on first use.

A native x64dbg plugin that works as an MCP server, exposing dozens of debugging tools: agents can set breakpoints, step through code, read and write memory, analyze PE structure and locate the OEP of packed binaries. Windows only; install the plugin in x64dbg, then connect with a token.

Perplexity's official MCP with four tools: web search, grounded Q&A, deep research and reasoning, available remotely or run locally. Requires a Perplexity API key.

Gives agents a live local Excalidraw canvas: add, edit and delete elements to draw architecture diagrams and flowcharts, take screenshots to check the result, convert Mermaid and export .excalidraw files. Runs locally with no API key; also ships a CLI and an agent skill.

Gives agents on-demand guidance for the modern web platform, covering View Transitions, container queries, Popover, INP optimization, accessibility and more, with browser compatibility data so they avoid outdated code. Maintained by the Google Chrome team; currently in preview.

Runs open image models like FLUX, Qwen Image and Z-Image locally on a Mac: text-to-image, reference-based edits, inpainting and upscaling, all on-device. Needs Apple Silicon and uv; the first run downloads models and is slow. Check each model's license before commercial use.

Apify's official skill collection: picks from 130+ curated Actors to scrape public data from social networks, maps, e-commerce sites and more, and can also build, package and deploy Actors. Needs an Apify account; a free tier is available.

Four tools for real-time web search, page content extraction, site mapping and full-site crawling, available as a remote server or run locally. Maintained by Tavily; needs an API key or OAuth sign-in, and a free account is available.

Supabase's official CLI: runs the full backend stack locally (Postgres, Auth, Storage, Edge Functions), manages database migrations, generates types and deploys functions. The local stack requires Docker.

Terraform and OpenTofu best practices from Anton Babenko: diagnoses the failure mode first, then guides testing, module structure, state management, CI/CD and security scanning. Works for AWS, Azure and GCP.

Uses hooks to enforce test-driven development in Claude Code: blocks implementation without a failing test, prevents code beyond what tests require, and can use lint results to push refactoring. Needs Node.js 22+. Still maintained, but the author suggests its successor Probity for new projects.