SkillFoxx

Type a name, a task or a service

Match with Foxx AI

Access levels of skills and MCP servers

The access level of every catalog entry and the reasons behind it. The level shows what a tool adds to what the agent can already do. It does not rate code quality.

Found: 1417

  • SpicyAPI SkillSkill
    • Swapping the face of a real person without consent is unlawful: Article 152.1 of the Russian Civil Code protects a citizen's image, and intimate material with another person's face carries criminal liability
    • The service returns adult content without filtering: requests are not reviewed for content, and the mature and policyTier fields on a model record only classify and block nothing
    • Prompts, uploaded files and results go to the SpicyAPI server and to the agent's model, and every created task charges money from the balance
  • SponsioPlugin
    • Intercepts every agent tool call and can block, warn or queue it according to its own rules
    • The Claude Code plugin writes hooks into project settings and a contract tree into the user's home directory
  • Spotify MCP ServerMCP server
    • Spotify access and refresh tokens are stored in spotify-config.json next to the Client Secret
    • The agent can create and edit playlists, remove liked tracks and change playback on your devices
    • Requests 15 Spotify scopes, including profile data and follows
  • SquadraSkill
    • Agent windows run commands and checks in your repository and Squadra writes them to a shared registry
    • Reads Claude Code and Codex session files to count token usage
    • Paid store plugins and MCP plugins such as Playwright connect third-party services on your command
  • Square MCP ServerMCP server
    • Handles payments, refunds and orders
    • Can change data in a live merchant account
  • StackQLMCP server
    • Can create and change real cloud resources
    • Handles provider credentials
  • StashPlugin
    • With recording on, the agent's work history goes to a Stash server
    • Sessions can contain code, secrets and personal data that end up in history and the wiki
  • Story UICLI
    • Component code goes to the AI provider
    • Writes story files into the project
  • Strava MCPMCP server
    • Stores the Strava Client Secret and tokens as open JSON in the home folder
    • Reads personal data such as heart rate, power, routes and workout photos and passes it to the model
    • Requests the `profile:write` scope and can star and unstar segments
  • Stripe AIMCP server
    • Can create and change payment objects, subscriptions and invoices
    • Handles money and customer data
  • StrixSkill
    • Actively attacks the given targets; running without permission is illegal
    • Executes arbitrary commands and exploits in a sandbox
    • Sends code and data to an LLM provider or the Strix cloud
  • Structurizr MCP serverMCP server
    • The tools create, update and delete workspaces on a Structurizr server
    • The server API key is passed as a call parameter and is visible in the agent's request
  • SubtaskCLI
    • Subagents write code and commits in your repository's branches
    • Claude merges task branches into the main one at your request
    • Installation runs a script downloaded from the internet
  • Supabase CLICLI
    • db push changes the cloud database schema
    • Deploys Edge Functions code to the cloud
  • Supabase MCP ServerMCP server
    • Can change schema and data in a cloud database
    • Gets account access via OAuth
  • Super DevCLI
    • Writes rule, command and skill files into the project's agent configuration, and into the home directory if you choose the user scope
    • Following this pipeline the agent writes code, runs checks and prepares delivery, so it gets broad access to the project
    • Installs a set of Python dependencies, including a web server and network request libraries
  • Super Video Maker SkillSkill
    • The skill runs Python tools and FFmpeg, installs dependencies and writes files to the working folder
    • It works with HeyGen, OpenAI, Replicate and ElevenLabs keys from a .env file
    • Each generation spends money on provider accounts, and S3 upload uses AWS keys
  • Superpowers ChromePlugin
    • The agent acts in a live Chrome with your signed-in sessions: it clicks, fills forms and runs JavaScript with the eval command
    • Screenshots, HTML and console output of pages are saved to disk, and pages can hold personal data and secrets
    • Chrome opens a debugging port on the local address 127.0.0.1 that any program on the machine can connect to
  • SwarmVaultCLI
    • The `swarmvault install` command changes agent settings, writes hooks that start background commands after edits, and edits `.mcp.json`, `.gitignore` and `tsconfig.json`
    • It copies source content into `raw/` and builds a wiki from it, and with a cloud provider it sends source text to a third-party service
    • The MCP server exposes the store contents to any connected client, including project code and notes
  • T-Bank Invest MCP server in C#MCP server
    • The agent gets withdrawal limits, margin indicators and broker reports for a real account
    • The token is read-only but grants access to accounts, portfolio and the full operation history
  • T-Bank Invest MCP server in GoMCP server
    • The server handles a secret: it does not start without a T-Invest token
    • The token grants access to real accounts and a portfolio, and disabling TLS certificate verification weakens connection security
  • T-Bank Invest MCP server, read-onlyMCP server
    • Brokerage and trading services are always flagged high risk in this catalog due to the sensitivity of financial data
    • The server cannot trade or withdraw funds, but the token grants access to the full portfolio and operation history
  • T-Bank Invest plugin for OpenClawPlugin
    • The token opens real accounts, the portfolio and the operation history
    • With allowTrading=true, the plugin places and cancels real exchange orders
  • T-Bank MCPMCP server
    • Operates a real bank account and can transfer money and pay for purchases
    • Stores bank session tokens on disk
    • Unofficial client for the bank app, not affiliated with T-Bank
    • May download Chromium for checkout
  • T-Invest MCP serverMCP server
    • A token with trading rights lets the agent place real market and limit orders and change the portfolio composition
    • Start with a read-only token and add trading rights deliberately, after checking how the agent behaves
  • TAKTWorkflow
    • Agents work with the shell and directory files
    • There are no GitHub releases
  • TIA Portal MCP ServerMCP server
    • An agent creates and changes blocks and tags in a TIA Portal project, and the project can control real equipment
    • The server starts TIA processes and writes configuration into the Claude, Cursor and VS Code client files
  • TUIOSCLI
    • Every pane runs a shell with your permissions, and an agent with the admin or fan grant can start other processes and helpers through TUIOS
    • Writes hooks into agent settings, can optionally answer permission requests for you, and with ssh access enabled it opens sessions on other machines
    • Sessions live in a background daemon along with pane contents and typed text, and terminals often show secrets
  • Tableau MCPMCP server
    • Some tools change data: they publish sources, delete content, run flows and edit refresh tasks
    • Local mode acts with the rights of the PAT owner
    • Datasource queries hand business data from Tableau to the agent
  • TabularisMCP server
    • The agent runs queries against connected databases
    • Change queries affect real data
  • TapoMCP server
    • Controls physical devices at home
    • A Tapo account login and password are needed
    • The project is unofficial
  • TehProf Support MCP: helpdesk with a Bitrix24 CRM proxyMCP server
    • On paid tiers it can create tickets, reply as an operator and change statuses
    • The Bitrix24 CRM proxy exposes portal contacts, deals and tasks
  • Telegram API MCPMCP server
    • The agent can post and delete messages and ban members as the bot
    • Includes payment and gift methods paid in Telegram Stars
    • Requires a secret bot token
  • Telegram Checklist for HermesSkill
    • The session file equals a key to the Telegram account
    • User account automation falls under Telegram rules
    • Creating a checklist needs Telegram Premium
  • Telegram MCP ServerMCP server
    • The session string grants full Telegram account access
    • Can send and delete messages and change chat members and settings
  • Telegram MCP by chaindeadMCP server
    • The agent reads your personal dialogs, groups and channels under your account, and the conversations reach the model
    • The Telegram session is stored on disk, and anyone who gets it gets access to the account
    • The author warns that misuse of the Telegram API may get the account suspended
  • Terraform MCP ServerMCP server
    • With a token it can create and delete workspaces and manage runs
    • May expose Terraform data to the model and MCP client
    • HTTP mode needs careful TLS, CORS and allowlist setup
  • TesseraCLI
    • Runs agents with access to your projects and creates worktrees, commits, branch publishes and pull requests
    • Offers remote phone access to sessions, files and git, with a local account created for it
    • A lead agent launches workers and sends them prompts on its own
  • TestDriverMCP server
    • Performs real UI actions and can run commands
    • Sends the app and data to the vendor cloud
    • Requires a secret access key
  • TesterSkill
    • Runner scripts perform real user actions in 1C, including data changes through the interface
    • The agent gets access to the whole application's main menu and commands, not to an isolated sandbox
  • The Agentic StartupPlugin
    • The install script runs through curl and sh and edits Claude Code settings, so read it beforehand
    • The implementation and refactoring commands change project files and run tests, and some flows reach branches, commits and pull requests
  • Tianshu HarnessCLI
    • The agent runs shell commands, edits and rolls back project files and calls the chosen model providers over the network; in `/yolo` mode confirmations are off
    • Provider keys are stored on the machine, and the Codex sign-in goes through a ChatGPT account
    • Remote approval from a phone or tablet is switched on separately: the agent session becomes reachable from another device
  • Tidewave PhoenixMCP server
    • Runs arbitrary code in a running application
    • The agent gets wide access to the application and its data
    • Suitable for a development environment only
  • Tilda MCPMCP server
    • With full access the agent changes store prices, stock, discounts and orders and publishes the site on the owner's behalf
    • A key can be permanent, so start with limited access and a short term
  • Tilda MCP Server: landing page generationMCP server
    • Publishes and edits pages on a live Tilda account on the user's behalf
    • Stores Tilda authorization cookies in environment variables or a session file
  • Tilda MCP with bulk editing via CDPMCP server
    • Write tools publish changes to the live site immediately by default
    • Replacements use regular expressions, an imprecise pattern can change more than intended
  • Tilda editor MCP server via a Firefox sessionMCP server
    • Uses the user's active browser session, including access to Firefox session-restore data
    • Writes changes directly to real pages and can delete blocks with no undo
  • Timeweb Cloud CLI (twc)CLI
    • The token grants access to the cloud account and billable resources
    • Commands can create and delete servers and other resources
  • Timeweb Cloud MCP ServerMCP server
    • The agent can create and modify servers, databases, domains, mail and other account resources
    • Some operations are marked BILLABLE and cause charges, even though they require confirmation
    • The token grants access within its key's permissions, so a separate scoped key for the agent is worth issuing
  • Timeweb Cloud MCP over the twc CLIMCP server
    • Tools stop and reboot servers, and timeweb_run_cli runs any twc command with no restrictions
    • Start with a key or session with minimal necessary rights and review commands before letting the agent run them

How we set the access level

Methodology

The editors set the level and the reasons from the README, the way the tool runs and the permissions it needs. Reading project files the agent can already see does not raise the level. There is no automatic code audit yet.