SkillFoxx

Type a name, a task or a service

Match with Foxx AI

Access levels of skills and MCP servers

The access level of every catalog entry and the reasons behind it. The level shows what a tool adds to what the agent can already do. It does not rate code quality.

Found: 1417

  • VKontakte MCP server for MakeMCP server
    • It can publish, pin and repost posts and stories on behalf of a profile or group
    • It can moderate a community: block and unblock users
  • Vault MCP ServerMCP server
    • Reads and writes secrets that end up in the model context
    • Can delete mounts and secrets
    • Issues PKI certificates
  • Vercel PluginPlugin
    • Deploy and env commands change the project and environment variables on Vercel
    • The plugin installs hooks and sends telemetry by default
  • VestigeMCP server
    • The installer edits agent configuration and installs a hook before every tool call, and the gate in enforce mode can stop a command you need
    • Install scripts are downloaded from the network and run on the system, and curl | sh runs them without preview
  • VexJoy AgentPlugin
    • Installs and runs hooks and scripts in your environment
    • Runs tests, edits code and opens PRs
    • The /d router calls an external service with keys
  • VexaMCP server
    • A bot joins calls and records conversations, requiring participant consent
    • It works with meeting content and the workspace
    • The hosted service needs an API key and is billed
  • Vibe-TradingMCP server
    • Works with financial data and can connect to real brokerage accounts
    • Multi-agent teams spend external LLM tokens and can produce inaccurate recommendations
  • VibeKitCLI
    • The proxy passes all of the agent's HTTP and HTTPS traffic through itself
    • Session logs and statistics pile up on disk in `~/.vibekit` and hold the agent's working record
    • With the `--sandbox` flag it starts Docker or Podman containers and mounts host folders
  • VibiumCLI
    • Controls a browser: clicks, fills forms and can run JavaScript on a page through `eval`
    • `run` and `check` send page content to an external model provider using the key in `~/.config/vibium/ai.env`
    • Installation downloads Chrome and a binary, and `vibium setup` writes files into the agent's skills directories
  • VidMoat MCPMCP server
    • Video, captions and frames go to the vendor's server, rendering runs in its cloud, and the assistant receives frames and project text and passes them to its own provider
    • Write, generation and render tools change projects and spend credits, so grant only the permissions you need at sign-in
    • Third-party plugin operators can add tools and receive their arguments
  • Volcengine MCP ServersMCP server
    • Access keys open control of real cloud resources, including servers and databases
    • The billing, IAM and certificate servers work with credentials and rights of the whole account
    • Some tools start, renew or change paid resources
  • Vox AI Motion Graphics GeneratorSkill
    • Sends your photos, presenter recordings and texts to the MuAPI cloud service, and voice cloning works from your voice sample
    • Spends money on paid image, video and music model calls through your key
    • Runs ffmpeg and Python scripts that write files into the `out/` folder
  • Voximplant MCP serverMCP server
    • Can trigger real outbound calls and send SMS on behalf of the account
    • The API key gives access to call recordings and billing
  • VulnClawCLI
    • Actively attacks targets: scans, verifies and exploits vulnerabilities
    • Runs arbitrary shell commands and Python code, gated by confirmation by default but with a full-access mode
  • WB Agent: a Wildberries seller Telegram botWorkflow
    • The flag-gated auto-reply mode publishes model-generated replies to buyers without a human in the loop for each review
    • The AI agent works with prices, purchases and dashboard settings, though mutations require a signed confirmation
  • WB MCP ServerMCP server
    • Changes prices, bids and ad budget in live seller accounts
    • Stores tokens for several stores
    • The unauthenticated dashboard is dangerous on an open network
  • WB Skills: a CLI skill for Wildberries sellersSkill
    • There are commands for shipping, canceling orders and replying to reviews, though SKILL.md rules require confirmation for them
  • WEEEK MCP generated from OpenAPI, with CRMMCP server
    • Can create and change deals, contacts and organizations in the WEEEK CRM
    • The token grants full access to both tasks and commercial CRM data
  • WEPPY Roblox AI ToolkitMCP server
    • The agent edits scripts, instances and terrain across all connected Studio windows
    • Asset uploads go through Roblox Open Cloud, and the installer runs as a script from GitHub
  • WSL ManagerMCP server
    • MCP tools run commands inside distros and VMs
    • It can connect to distros over SSH
  • WWmcpMCP server
    • Payment servers create payments, refunds and payouts
    • CRM, accounting and inventory servers change live data
    • Each server receives secret service keys
  • WassetteMCP server
    • The project is early and not for production
    • The server loads and runs components
  • WeChat Article SearchSkill
    • The Node.js script goes to the network and parses Sogou search pages, which may breach the service's rules
    • With frequent requests the IP address may be temporarily blocked
    • The `-o` flag writes a file to the given path
  • WeChat Article SkillsSkill
    • Reads aws.env with model keys and the account AppSecret and sends them to the WeChat API and model APIs
    • Creates posts in a live account and, in published mode, sends the article to subscribers
    • Uploads article text, cover and illustrations to WeChat servers and to external models
  • WeChat Intelligence HubSkill
    • Reads private chats and the local WeChat database and handles encryption keys
    • The experimental access helper may restart and re-sign a copy of WeChat
  • WeaveCLI
    • Changes how merges work in every repository when `weave setup --global` is used: writes to `~/.gitconfig` and global Git attributes
    • The `weave_edit` and `weave_land` tools write code to disk and stage files on the agent's decision
    • `weave land --onto` publishes the result to a remote branch by fast-forward
  • Web AccessSkill
    • The agent drives the user's browser with active logged-in sessions
    • Can act on websites and upload files
    • Reads local browser bookmarks and history
  • WebAsk MCPMCP server
    • The key acts with the workspace owner's rights, and 24 tools are irreversible: deleting surveys, answers, webhooks and roles
    • Respondents' answers, including phone numbers and emails, are third-party personal data: the agent reads them and can export and forward them to CRMs, webhooks and messengers
    • The tools change live surveys, mailings and team settings, not a draft copy
  • WebCodexMCP server
    • A cloud assistant reads files, edits code and runs commands with the Runner account permissions on your machine
    • share opens a public HTTPS address guarded only by a temporary credential, and the key-in-URL mode raises the chance of a leak through logs
  • Webflow MCP ServerMCP server
    • Changes content and pages of live sites
    • Uses OAuth access or a token for workspace sites
  • Webnovel WriterPlugin
    • The plugin installs Claude Code hooks that fire in every session and intercept file writes and Bash commands
    • The agent runs Python scripts and writes many files into the book directory: chapters, state, index and backups
    • Chapter text and queries go to external embedding and reranking services if you set keys
  • Weeek MCP ServerMCP server
    • Can delete users, projects, tasks and deals
    • SSE mode exposes the workspace API over the network
  • Wenyan MCPMCP server
    • Publishes material to an external WeChat account and uploads images there
    • Handles the WECHAT_APP_SECRET application secret
  • WhatsApp MCP ServerMCP server
    • Sends messages and files on your behalf from a personal WhatsApp account
    • Reads all personal chats, which creates an exfiltration risk under prompt injection
  • WhoDBMCP server
    • Connects to databases and can modify data
    • Runs queries with the connected database user's permissions
    • AI features send content to the chosen provider
  • WikiSkillCLI
    • Runs the agent with automatic approval of actions, for Codex the `--full-auto` flag, and the agent writes files inside the workspace
    • Rollback uses `git reset --hard` inside the workspace, so unsaved work must not live there
    • Every iteration calls a paid model on all tasks of the bench
  • Wildberries MCPMCP server
    • Changes prices and stock in a live seller account
    • Creates and closes FBS supplies and publishes review replies
    • Holds the seller API token
  • Wildberries MCP server (search + execute)MCP server
    • 235 actions cover orders, supplies, prices, and finance, some modify seller data
    • Order cancellations and supply operations are irreversible
  • Wildberries MCP server on FastMCP from OpenAPIMCP server
    • The server is generated straight from the API spec, so write scopes like discounts and prices can change the seller's data
  • Wildberries MCP server with 116 toolsMCP server
    • The tools change prices, create supplies, and work with the seller's orders and documents
  • Wildberries MCP server with plan and confirmMCP server
    • 56 tools cover the seller's prices, orders, ad budget and financial documents
    • The two-step confirmation reduces the risk of an accidental change but does not remove it
  • Wildberries Promotion MCP serverMCP server
    • The pause and delete campaign tools change the seller's live ad bids and spend
  • Wildberries Seller API MCP serverMCP server
    • 108 of 307 methods write data: prices, discounts, supplies, product cards
    • It can send buyer chat messages on the seller's behalf
    • 12 methods are irreversible, start with a read-only token if the API supports it
  • Wildberries and Ozon marketplaces MCP serverMCP server
    • The universal wb_request and ozon_request tools can call a write method at any API path
    • Stores Wildberries and Ozon keys as Cloudflare Workers secrets
  • Wildberries for ClaudeMCP server
    • With the permission enabled and a write-capable token the agent can change ad bids and product prices
    • Start with a read-only token, as the README itself recommends
  • Wildberries seller MCP serverMCP server
    • The prices module can change the seller's Wildberries product prices
  • WinUtil CN MCPMCP server
    • In write mode it installs apps and changes the registry, service start types and DNS on chosen adapters
    • It switches pip, npm, yarn and go package sources, which changes where code is installed from
    • Installs and tool calls go online, and backups are written to the Windows shared data folder
  • Windows-MCPMCP server
    • Gives the agent direct control of the Windows desktop: clicks, input, opening apps and file operations
    • Runs PowerShell commands and accesses the registry, and remote transports expose it over the network
  • WooYun LegacyPlugin
    • Provides offensive business-logic testing methodology for payment and authorization systems
    • Ships real cases and attack patterns and is meant only for authorized testing
  • Word MCP LiveMCP server
    • Edits and saves your Word documents
    • Leaves comments and tracked changes in your name
    • Works with a live Word on your computer

How we set the access level

Methodology

The editors set the level and the reasons from the README, the way the tool runs and the permissions it needs. Reading project files the agent can already see does not raise the level. There is no automatic code audit yet.