Access levels of skills and MCP servers

Broad access

• Timeweb Cloud MCP server with 245 toolsMCP server
  • It covers creating and deleting servers, databases, Kubernetes clusters and domains in a live Timeweb Cloud account
  • The huge tool count increases the risk that an agent touches the wrong service on an unclear request
• Timeweb Cloud MCP: full API coverageMCP server
  • Tools delete servers, databases, Kubernetes clusters and S3 storage in a single call
  • One token grants full access to every section at once; issue a separate token per task if the panel allows it
• Timeweb Cloud domains MCPMCP server
  • timeweb_pay_domain_request charges real money from the account balance and sends the order to the registrar
  • timeweb_update_name_servers fully overwrites a domain's name servers; a mistake can take the domain off its working servers
• Timeweb Cloud plugin with confirmation guardsPlugin
  • ssh_exec and service_control run arbitrary commands on a live server
  • create_server and delete_server change the Timeweb Cloud account's infrastructure and spending
• Tinkoff Invest MCP ServerMCP server
  • Can place and cancel orders on a real brokerage account
  • The trading profile is enabled by default
  • The brokerage token is stored in a config file
• Tmux MCP Server: agent access to tmux sessionsMCP server
  • The execute-command tool runs arbitrary commands in a tmux pane with your user's rights
  • The agent can kill sessions, windows and panes, interrupting processes running there
  • Pane capture exposes everything printed in the terminal, including secrets and tokens
• Tochka Bank MCP serverMCP server
  • Reads company balances, statements and details with a JWT token carrying permissions granted in online banking
  • With the payments permission it creates real rouble payments that go out after a person signs them
• Tochka Bank MCP serverMCP server
  • Can issue invoices and create payments with signing links, and acquiring operations move money immediately
  • The JWT token can be issued with broad permissions by default, so it is worth scoping it to only what is needed
• Tochka Bank MCP: accounts and payments for signingMCP server
  • Drafts real payments by bank details, though sending requires a human's signature
  • Reads balances, statements and company details, sensitive banking data
• Token SaviorMCP server
  • The structural editing tools change project files, and `ts_execute` runs code in a Node.js sandbox
  • The PreToolUse rewriter changes Bash commands before they run, and `ts init` edits the agent's `settings.json`
  • Memory keeps decisions and output of your sessions in a local database, and optional modules send data to the Anthropic API and Telegram
• TokenTrackerCLI
  • The first run writes hooks into the config of Claude Code, Codex, Gemini CLI and other agents
  • It reads agent session files and by default makes network requests: provider quotas using credentials already on the machine, prices, updates and anonymous telemetry
• ToolUniversePlugin
  • The server starts through uvx and runs package code, and the analysis scripts call Python and R on your files
  • The session-start hook deletes tooluniverse-* skill folders from the Claude home directory if they remain from an old install
  • Requests with gene, drug and sample names go to outside data providers, and keys are saved to a .env file
• TourMind Booking SkillsSkill
  • Creates real bookings and runs payment through an external API
  • Handles a TourMind account token that is stored in a file next to the skill
• Tracker report Telegram delivery MCPMCP server
  • The server triggers sending documents to Telegram on behalf of an existing bot
  • It requires matching API keys for two external services; a leak of these would allow delivering arbitrary artifacts
• Trading SkillsMCP server
  • Connects to an Interactive Brokers brokerage account
  • The stop-loss skill can place and cancel real orders
• TradingView MCP BridgeMCP server
  • Controls the installed TradingView app and works with trading data
  • Writes and injects Pine Script, creates and deletes price alerts
  • Reaches undocumented internal APIs through a debug port
• Trail of Bits Skills CuratedPlugin
  • Plugins bring scripts and hooks that run on your machine, and Trail of Bits review reduces that risk without removing it
  • Some plugins run network checks and binary analysis: ffuf web fuzzing and Ghidra, appropriate only on authorized targets
  • Deploy and GitHub plugins (Cloudflare, Netlify, PRs and CI) work with your accounts and repositories
• Trail-code (formerly Graft)CLI
  • Writes files into the repo and edits settings in the home folder (`~/.claude/settings.json`, `~/.claude.json`, `~/.codex` when present), after which hooks fire in every repository you open
  • Reads the logs of your past Claude Code sessions and review comments on merged pull requests, the text is processed by your own Claude Code, so it goes to Anthropic
  • `build --deep` sends file contents to the model provider under your key, and connecting a Trail workspace sends learnings and search records
• Travel Hacking ToolkitPlugin
  • The Southwest, American Airlines, Chase, Amex and TicketsAtWork skills sign in to accounts through a browser in Docker with a login and password from environment variables: automated sign-in may break the rules of airlines and banks and get the account blocked
  • Seats.aero, Duffel, AwardWallet and other API keys live in shell variables, and AwardWallet reads balances and statuses for your loyalty programs
  • The LiteAPI MCP server can book hotels, and the Docker images are pulled from the public ghcr.io registry
• TrellisCLI
  • python3 hooks run in every agent session, and `trellis channel` starts worker agents as separate processes
  • The scripts write journals and the task archive into the repository and commit them to git themselves
  • Spec templates with the `-t` flag are downloaded from GitHub at the registry address
• Twilio MCP ServerMCP server
  • Can send paid messages and place calls
  • Changes number settings and function deployments
• TÂCHES Claude Code ResourcesPlugin
  • The `setup-ralph` skill sets up an autonomous loop where the agent picks tasks, runs checks and makes commits itself
  • The `create-hooks` skill creates hooks with shell commands that fire on session events
  • Commands write files into the project (`TO-DOS.md`, `./prompts`, plans) and run git
• UE-MCPMCP server
  • The agent gets write access to the Unreal project: it creates, changes and deletes assets, actors and Blueprint graphs
  • The server exposes the editor console, Python execution, project builds and starting or stopping the editor itself
  • The bridge runs inside the editor as a compiled C++ plugin, and npm extensions add their own handlers to it, so that code runs too
• Ui.Vision RPAMCP server
  • Drives your browser and, with the XModules components, the desktop with real clicks and keyboard input, including in already open sessions where you are signed in
  • The agent writes and runs JavaScript macros that read pages and screenshots, download files and fill in forms
  • The installer edits the configuration of every MCP client it finds, saving a copy first
• UmaDevCLI
  • Controls Claude Code, Codex and other agents that write and run code in your project, including in `auto` mode
  • Can install a pre-write hook in Claude Code and works with sources, call logs and `.umadev/` files
  • The install script downloads a binary from the network, and the old unscoped npm package had a malicious version
• UnbrowseSkill
  • Signs in to sites with saved logins and can post, send and buy, which is why such actions need your consent
  • Site requests come from your IP, while tasks, the index and sessions are handled by an external cloud service
  • With a plugin it blocks the agent's built-in web search, page fetching and navigation and routes them through itself
• Understand AnythingPlugin
  • Installation for several platforms runs via curl | bash
  • The --auto-update flag installs a post-commit hook
  • Analysis sends large amounts of code to the model
• UniFi MCPMCP server
  • Works with network infrastructure and access systems
  • Requires UniFi controller credentials
  • Mutating operations affect a live network
• UnicaPlugin
  • Creates and modifies metadata, forms and roles in the project
  • Launches the 1C platform and downloads executable engines from releases
• Unified 1C MCP gateway with a dashboardMCP server
  • The write_bsl tool writes BSL code straight into the project
  • Gives access to the data, code and event log of connected 1C infobases, worth starting with a test infobase
• UnityMCPMCP server
  • The C# snippet tool runs code inside the Unity Editor
  • Authoring tools change scenes, assets and prefabs in your project
  • The descriptor and token files let anyone who reads them run code in the editor
• Universal ModderPlugin
  • Launches games, controls the window, mouse and keyboard, stops processes by PID and installs mod loaders into the game folder
  • Reads game memory and executables through reverse engineering tools: ILSpy, Ghidra, Cheat Engine and Frida
  • Holds the fal key and sends the service requests to create images, models, sound and video
• Uniwind skillsSkill
  • The migration skill removes NativeWind packages, the tailwind.config file and type declarations, and changes the Metro and Babel configurations
  • The agent runs the package manager and a code search across the project, and clears the Watchman cache when resetting caches
  • Installing Uniwind Pro requires logging in through a GitHub account and a paid license
• Unofficial read-only Planfix MCP serverMCP server
  • The work account's login and password are stored in a plaintext file
  • The unofficial web-interface workaround can break on a Planfix update or be flagged as unwanted automation
• Unofficial read-only T-Bank CLI and MCPMCP server
  • It uses the bank's unofficial internal API via a browser session, and use may conflict with T-Bank's terms
  • The local file with cookies and session_id grants read access to the personal account and must be stored as carefully as a password
• Unreal Engine MCP ServerMCP server
  • The execute_python tool and console commands run arbitrary code in the editor
  • Changes the contents of your Unreal project
• Unreal Engine Skills for Claude CodePlugin
  • The ProgrammaticToolset.execute_tool_script tool runs arbitrary Python inside the editor and can change, move or delete project content
  • A single call can change assets tracked by version control, and some edits to live objects cannot be undone
  • The server listens on local port 8000 and any process of the same user can connect to it, and the SessionStart hook runs a bash script on session start
• Unreal MCP (GenOrca)MCP server
  • The execute_python tool runs arbitrary Python in Unreal Editor with access to the whole engine and project
  • The agent deletes and renames the project's assets and actors on disk
• UnrealGenAISupportMCP server
  • Runs arbitrary Python scripts and Unreal console commands in the open editor
  • Creates and changes blueprints, materials, levels and project files with no undo
  • For model calls from the game the API keys sit in PS_* environment variables, which is unsafe to ship in a packaged game
• VK Ads MCPMCP server
  • Creates campaigns and changes budgets, spending ad account money
  • Can stop and delete campaigns
• VK Ads MCP All in OneMCP server
  • Creates, edits and deletes campaigns, audiences and lead forms
  • Spends ad budget and uploads contact lists for audiences
  • Stores VK Ads and VK tokens in a local auth.env
• VK Ads MCP serverMCP server
  • Creating, updating and changing campaign status applies immediately in the live account with no sandbox
  • The OAuth token grants access to the ad account's budget and bids
• VK Ads MCP server on top of the myTarget API v2MCP server
  • Creates and changes real campaigns, groups and banners with no sandbox
  • Uploads user lists by email and phone for remarketing audiences
• VK Ads Skill for Claude CodeSkill
  • Can start, stop and delete campaigns and banners
  • Spends the account's ad budget
  • Exports personal data from lead forms
• VK Ads skill for agenciesSkill
  • Creates, edits and bulk-stops clients' ad campaigns
  • Uploads personal data (phones, emails) for remarketing, even if hashed
  • Stores OAuth credentials for multiple client accounts
• VK MCP ServerMCP server
  • Publishes, edits and deletes posts on behalf of a community or user
  • Holds a non-expiring community token
• VK MCP for posting and the wallMCP server
  • Posts to the wall on behalf of the token owner
  • Sends direct messages to other users
• VK community management MCPMCP server
  • Posts, edits and deletes community wall posts
  • Changes the community's cover, avatar and settings
  • The token is obtained via a method the README itself calls a gray area under VK's terms
• VK community posting MCP serverMCP server
  • It publishes posts on behalf of the community, visible to all followers
  • Without MCP_AUTH_TOKEN, anyone who knows the server's address can call it
• VK to Telegram bridge MCPMCP server
  • Publishes content to a Telegram channel on behalf of a bot
  • Reads and forwards VK wall content without human review when bridge_run is called end to end