SkillFoxx

Type a name, a task or a service

Match with Foxx AI

Access levels of skills and MCP servers

The access level of every catalog entry and the reasons behind it. The level shows what a tool adds to what the agent can already do. It does not rate code quality.

Found: 1417

  • AmoCRM MCP ServerMCP server
    • Creates leads, contacts and notes in a production CRM
    • Holds amoCRM account access tokens
    • HTTP mode without MCP_AUTH_TOKEN exposes the CRM to anyone who reaches the port
  • AmoCRM MCP Server (via REST proxy)MCP server
    • Creates and deletes leads in AmoCRM
    • Stores the client secret and access tokens on a separate backend
  • AmoCRM MCP Server on FastMCP (21 tools)MCP server
    • Can create, update and delete contacts and deals with no extra confirmation
    • The long-lived token sits in .env with no rotation
  • AmoCRM MCP Server with pip install and an auth wizardMCP server
    • Grants CRM access through 17 tools, including data changes
    • OAuth tokens are stored locally in a config.json file
  • An Ozon seller skill bundle: sourcing, logistics, listingSkill
    • ozon-product-creator publishes a new product in a real Ozon seller account by itself
    • Runs through a driven browser inside already-open third-party sessions rather than official API keys
  • Android Automation AgentSkill
    • Performs any action in phone apps, including payments and messaging
    • Sends screen screenshots to an external model
  • Android MCPMCP server
    • The shell tool runs arbitrary commands on the device
    • The server can take any action in the device UI
  • Android MCP Server: control Android through ADBMCP server
    • execute_adb_command runs arbitrary ADB commands on the connected device, including installing and removing apps
    • Screenshots and element lists can contain personal data from the phone
  • Android Remote Control MCPMCP server
    • Full screen control through accessibility services
    • A research project with no warranties
    • The edge release is rolling
  • Answer42MCP server
    • The tools click and fill real forms in the target base, including posting documents
    • Login and password can end up in call arguments if a local credentials file is not used
  • Anthropic Cybersecurity SkillsSkill
    • Includes offensive techniques such as credential extraction
    • Instructions have the agent run security tools on hosts
  • Antigravity CLICLI
    • The agent edits files and runs commands in your terminal; approval of each change stays with you
    • Installation runs a script from Google's site, and interaction data goes to Google under the terms of use
  • Antigravity for Claude CodePlugin
    • Delegated tasks write files and run commands through agy, and project code and content go to Gemini
    • Session hooks inject routing rules into every run, and the migration command changes agy settings
  • Antithesis SkillsSkill
    • Launches runs in Antithesis under your API key, and mutation testing spends the run budget
    • Creates an antithesis/ directory in the project and adds checks to the code under test itself
    • Builds images with docker or podman and starts the harness containers
  • AnyqueryMCP server
    • The server executes SQL written by the model over data from connected apps and databases
    • The gpt mode opens an internet tunnel, while MCP mode requires a token and turns on the sandbox when it is exposed to the network
  • Apollo MCP ServerMCP server
    • Can run mutations against a production API
    • Handles GraphOS keys
  • App Store Connect MCPMCP server
    • Changes subscription prices and creates offers in your developer account
    • Submits app versions for review and release
    • The key opens the developer account and finance reports
  • AppleScript MCP ServerMCP server
    • Gives an agent full access to Mac apps and files
    • Runs shell commands with no built-in limits
    • The remote SSH option needs host credentials
  • Arcads for Claude CodeSkill
    • Calls a paid external service through your account
    • Can publish ads to an external ad account
  • ArgentCLI
    • The assistant taps and types inside a running app and on a device
    • Debugging reads app logs and network requests and evaluates JavaScript in the app
    • The installer edits the editor's MCP configuration and permissions, and telemetry is on by default
  • Argo CD MCP ServerMCP server
    • Can delete and sync applications in clusters
    • Uses an Argo CD API token
  • ArtemisCLI
    • The agent taps across the whole device interface
    • The script installs dependencies itself
    • A model with a key is needed
  • Aseprite MCP ToolsMCP server
    • run_lua_script executes arbitrary Lua code on your machine
    • The server creates, edits and overwrites .aseprite files and exports them to any folder the agent names
    • Installing Aseprite through SteamCMD in the container needs a Steam login, password and Steam Guard code
  • Ask Ads Claude PluginsPlugin
    • The yandex-direct-api plugin gives write access to Direct bids and budgets, even with confirmation
    • The vk-ads plugin can change VK Ads campaigns, banners and budgets
    • The flagship Direct connector is read-only but depends on the third-party Ask Ads cloud infrastructure
  • Atlassian Rovo MCP ServerMCP server
    • Creates and modifies issues and pages in external work systems
    • Accesses corporate data via OAuth
  • Atomic AgentCLI
    • Runs approved shell commands, edits files and drives the browser on the user's machine
    • Stores memory, sessions and provider keys locally, a risk if the machine itself is compromised
    • Can optionally send data out if explicitly enabled, so egress settings should be checked
  • AttestixMCP server
    • Keeps the signing key and DID keys in files on disk: with them identities and credentials are issued in your name
    • The anchoring tools send transactions to the Base network from the BASE_WALLET_KEY wallet and spend funds on gas
    • `discover_agent` and `resolve_did` call addresses the agent supplies, while a guard blocks private addresses and cloud metadata
  • Aura (Mezmo)CLI
    • Reads logs, traces, metrics and deploy history
    • Version 0.2, an early stage
    • A commercial vendor
  • Auth0 MCP ServerMCP server
    • Changes authentication tenant settings and deploys Action code
    • Has access to users and login logs
  • AutoCAD MCPMCP server
    • Runs AutoLISP inside an open AutoCAD LT
    • Creates and changes objects in your drawing
    • Exchange goes through files in the C:/temp folder
  • AutoCAD MCP ProMCP server
    • In COM mode it drives a live AutoCAD and changes the open drawing
    • Hundreds of tools give the agent wide rights over drawing files
    • The author lists the release's weak spots
  • AutoClipSkill
    • Runs FFmpeg and downloads video from links, and writes clips, covers and ZIPs into the data directory
    • Holds a model key and sends subtitles, text, frames or audio to a cloud provider
    • The MCP tools include `publish_clip`, which posts clips through Upload-Post to TikTok, Instagram, YouTube and other accounts
  • AutocontextSkill
    • Runs agents and models through the chosen provider and spends paid calls with keys from environment variables
    • Writes traces, reports, playbooks and artifacts of every run to disk, and traces may contain task and answer contents
    • Starts local MCP, HTTP and WebSocket servers; a non-loopback bind is protected only by a token
  • Autolith: a terminal agent in Common LispCLI
    • The agent runs commands in your terminal and changes its own code
    • Installation goes through a script from the internet, provider keys live in the configuration, and MCP servers widen the agent's permissions
  • Automation MCPMCP server
    • The agent controls the mouse and keyboard of the whole computer and can press any key combination, including system shortcuts
    • Screenshots show the agent everything open on screen, including passwords and private messages
  • Autonomous trading MCP for T-Bank InvestMCP server
    • Once TINKOFF_LIVE_TRADING is explicitly enabled, the server places and cancels real exchange orders with account money
    • Start with TINKOFF_MODE=sandbox and a read-only token, and enable live trading deliberately, one trade at a time
  • AutoresearchSkill
    • Autonomously edits code in a loop, committing and reverting via git
    • Runs shell commands to verify with tests and benchmarks
    • Without guardrail hooks it may perform arbitrary actions in the project
  • Avito Ads MCPMCP server
    • Changes an ad group's budget and bid
    • Can transfer money and bonuses between child accounts, and these operations are flagged as irreversible
  • Avito CLICLI
    • Connects over the Chrome DevTools Protocol to your browser signed in to Avito
    • CDP gives full control of that session, even though the CLI commands only read search and listings
  • Avito MCP for Messenger and ItemsMCP server
    • Can send messages on your behalf when an Avito Pro subscription is present
    • AVITO_SSL_VERIFY=false disables connection certificate verification
  • Avito MCP with an Ads domain and tool searchMCP server
    • Includes the 148 tools of upstream avito-mcp, among them writes, public actions and money operations
    • The default mode is full_access; restrict it with AVITO_MCP_MODE=read_only
    • The new ads domain only reads balance and statistics with Avito Ads keys
  • Avito login MCP server over the mobile APIMCP server
    • Uses Avito's unofficial mobile app protocol instead of a public API, which may violate the service's terms
    • Your account login and password are sent to the server and stored locally alongside the access tokens
  • Awesome Apify SkillsSkill
    • The Apify token starts paid Actors and the cost is charged to your account
    • The lead and email finder skills collect personal contact data: addresses, phone numbers, company names
    • The collection includes the apify-x402-agentic-wallet skill, which relates to payments, so read its SKILL.md before enabling it
  • Awesome Claude Skills by ComposioSkill
    • connect-apps gives the agent actions in email, chat and CRM accounts
    • Requires a third-party gateway API key
    • The list links to third-party skills without uniform review
  • Awesome Persona Distill SkillsSkill
    • Many skills build an imitation of a real person from their personal correspondence: this is third-party personal data, consent is needed and 152-FZ applies
    • Must not be used to pass yourself off as someone else or to pressure anyone
    • Correspondence processing may happen with a third-party model provider
  • AxeCLI
    • An agent with the `run_command` tool executes shell commands in the working directory, and `write_file` and `edit_file` change files
    • `url_fetch` and `web_search` go out to the network, and provider keys sit in `config.toml` or environment variables
    • Runs from cron and git hooks proceed without your approval of each step
  • Azure DevOps MCP serverMCP server
    • Can create and modify work items and wiki pages
    • Acts on behalf of an account with access to code and pipelines
  • Azure MCP ServerMCP server
    • Acts in a cloud subscription on the user's behalf
    • Can create and change resources unless read-only mode is on
  • Azure SkillsPlugin
    • Manages live cloud resources, access and secrets in the Azure subscription
    • Runs deployments and commands that change infrastructure state
  • BSL Jupyter Runtime: interactive 1C notebooksCLI
    • Runs arbitrary BSL code in a live 1C session, including hot-reloading methods without a configuration update
    • Installs a service extension into the infobase and requires disabling safe mode for manual installation

How we set the access level

Methodology

The editors set the level and the reasons from the README, the way the tool runs and the permissions it needs. Reading project files the agent can already see does not raise the level. There is no automatic code audit yet.