SkillFoxx

Type a name, a task or a service

Match with Foxx AI

Access levels of skills and MCP servers

The access level of every catalog entry and the reasons behind it. The level shows what a tool adds to what the agent can already do. It does not rate code quality.

Found: 1417

  • BabysitterCLI
    • Directs agents and runs steps that execute code
    • Can run complex multi-step processes autonomously between checkpoints
  • Banana ClaudeSkill
    • Makes paid requests to the external Gemini API, and each attempt costs money
    • Handles a sensitive Google key and writes generated files to disk
  • Bankr SkillsSkill
    • The bankr skill controls wallets: transfers, token swaps and trading with real money
    • The bk_ key gives access to EVM and Solana wallets
    • Some skills execute onchain transactions and take payments through x402
  • Basecamp CLICLI
    • Creates and changes todos, cards, messages and comments in a work account, and mentions can notify people
    • Stores access tokens and can print them with auth token
    • The plugin installs hooks into Claude Code and Codex, and the binary installs from an internet script
  • BeaconCLI
    • Records prompts, replies, commands, file edits and tool output of all your agents, and text with a secret of no recognizable shape may be stored as is
    • Changes the settings of Claude Code, Cursor, Codex and other agents: it connects hooks, plugins and skills and then records sessions continuously in the background
    • The wizard offers sending the log to Beacon Cloud by default, and the skills can upload a session to beacon.sh and call an evaluator service
  • BeelzebubCLI
    • Opens network listeners, including on privileged ports, and accepts traffic from strangers, so it belongs on an isolated host
    • Records attackers' commands and request data and can forward it to RabbitMQ or a cloud platform
    • Go plugins run in-process with the same privileges
  • Beever AtlasMCP server
    • Reads work conversations in full, which can hold personal data and trade secrets
    • Stores Slack, Discord and Teams tokens, and messages go to the chosen LLM provider for fact extraction
    • The trigger_sync tool starts channel syncs, and an MCP key opens the knowledge base to anyone who holds it
  • BetterDB MCPMCP server
    • `add_connection` and `test_connection` take database login details, and `remove_connection` deletes connections
    • `cache_approve_proposal` applies a threshold or time-to-live change to a production Valkey immediately
    • Slow command and client logs reach the agent's chat with whatever they record
  • Binance Skills HubSkill
    • Binance API keys open a real account: balance and history, and with granted permissions spot and futures orders
    • The binance-agentic-wallet skill can transfer tokens, swap them and place limit orders
    • The default environment is live (prod), and a wrong agent command costs real money
  • Binary Ninja MCPMCP server
    • Opens a local HTTP port that can read and change the analysis database of the open binary
    • Renaming functions and editing comments or types writes straight into Binary Ninja's data with no separate confirmation
  • Bitrix ConsoleCLI
    • Includes commands to drop the database and truncate tables entirely
    • Commands to deactivate or remove users and modules change the live site configuration
  • Bitrix Framework code indexerMCP server
    • The optional bitrix_tinker tool executes arbitrary PHP code with write access on the local machine
    • Optional DB access, with the write flag enabled, changes project data directly in MySQL
  • Bitrix24 Agent Skill PackSkill
    • Gives the agent transactional write access to the portal's CRM, tasks, chats and business processes
    • The webhook stores its secret key in the URL; rights depend on what was granted when it was created
  • Bitrix24 CLICLI
    • Can irreversibly delete deals, leads, contacts and companies via the *-delete commands
    • The CLI's rights equal whatever the webhook or OAuth app was granted during setup
  • Bitrix24 MCPMCP server
    • Creates and changes deals, contacts and tasks in a live portal
    • Sends messages to employees on behalf of the webhook user
  • Bitrix24 MCP BridgeMCP server
    • It acts as the logged-in user through their live session
    • Some tools and the generic bitrix_call perform mutating operations
    • The extension loads in developer mode and gets access to the portal tab
  • Bitrix24 MCP ServerMCP server
    • Changes deal stages in the live CRM
    • The webhook URL with its secret grants access to client personal data
  • Bitrix24 MCP ServerMCP server
    • callBitrixMethod calls any REST method and can change CRM data
    • The Bitrix24 webhook grants access to customer data in the portal
  • Bitrix24 MCP Server (NeedMoarr)MCP server
    • It can create tasks, calendar events and send messages as the webhook
    • The webhook with broad permissions is stored only in an env variable
    • It reads chat and task correspondence
  • Bitrix24 MCP Server (gunnit)MCP server
    • Creates and updates contacts, companies, leads, deals and tasks in the live CRM
    • The webhook URL with its secret grants access to client and employee data
  • Bitrix24 MCP Server (mvnikita83-byte)MCP server
    • It creates and changes leads, deals and tasks in a live CRM
    • The webhook sits in a hosting env variable with no rotation
    • There is no read/write separation
  • Bitrix24 MCP Server (qwito)MCP server
    • Full CRUD on deals, leads, contacts and companies, including deletion
    • A broad-permission webhook is stored in the client config
    • Monitoring tools read specific employees' activity
  • Bitrix24 MCP Server on an OAuth appMCP server
    • Creates, updates and closes tasks, and creates and edits knowledge base pages
    • The OAuth app gets portal rights according to the scopes granted at creation
  • Bitrix24 MCP Server on fast-bitrix24MCP server
    • Tools create and update leads, deals, contacts and companies
    • Access is defined entirely by the webhook's scopes; there is no separate read-only mode
  • Bitrix24 MCP Server: Multi-tenant RemoteMCP server
    • Tools create, update and complete tasks in a live Bitrix24 portal
    • Each user hands the server their own webhook through the OAuth flow
  • Bitrix24 MCP Server: tasks and listsMCP server
    • It can create, update and complete tasks, and archive them in bulk
    • The webhook grants access to users, departments and lists under the rights of the employee who created it
  • Bitrix24 MCP bridge for Claude via a webhookMCP server
    • It can create and update CRM records and tasks under the webhook owner's rights
    • The access secret is embedded in the URL: anyone with the link has CRM access
  • Bitrix24 MCP by Bit2BeatMCP server
    • Creates, updates and deletes CRM records in a live portal
    • Applies configuration to another portal and calls any REST method
    • Sends messages to employees and starts business processes
  • Bitrix24 MCP for task planningMCP server
    • Creates, updates and moves tasks across kanban columns in a live portal
    • Rights equal the inbound webhook's read and write tasks scope
  • Bitrix24 MCP server for Open WebUIMCP server
    • Delete tools for companies, contacts, leads, deals and invoices run with no confirmation
    • Issuing invoices directly affects the client's financial documents
  • Bitrix24 MCP server templateMCP server
    • Creates, changes and deletes task data in a production portal
    • The webhook grants access with its creator's permissions
    • With a GitHub token set, the agent can file issues in a public repository
  • Bitrix24 MCP server with call transcriptionMCP server
    • Creates and modifies tasks, deals, and notes in the live portal
    • Downloads call recordings containing personal client data for local processing
  • Bitrix24 MCP server with real callsMCP server
    • Executes real CRM, task, document and business process calls, not just documentation reads
    • Destructive actions need no confirmation unless BX24_CONFIRM_DESTRUCTIVE is enabled
  • Bitrix24 MCP server with write confirmationMCP server
    • Can create, update and delete deals, tasks and CRM records, though confirmation is on by default
    • Can start and stop business processes, including deleting a process along with its data
  • Bitrix24 MCP server: tasks, CRM and listsMCP server
    • The CRM module can create, update and comment on deals and contacts once confirm=true is passed
    • MCP_EXTRA_MODULES runs arbitrary third-party code with the server process's permissions
  • Bitrix24 MCP server: tasks, chats and knowledge baseMCP server
    • It can create and update tasks, send messages and files to chats, and create or delete knowledge base documents
    • The universal bitrix_call lets you invoke any REST API method, including ones that change CRM data
  • Bitrix24 MCP via Keycloak and VaultMCP server
    • Tools can read and change Bitrix24 data as the user
    • The service is exposed to the internet on ports 80 and 443
    • It needs Vault and Keycloak secrets with access to portal keys
  • Bitrix24 MCP with a chat bot layerMCP server
    • Replies to employees in the portal's group chats on behalf of the registered bot
    • Creates and changes deals, leads and tasks in a live portal
  • Bitrix24 MCP with a local CRM cacheMCP server
    • Creates contacts, deals and leads and changes deal stages in a live portal
    • Keeps a copy of CRM data, including customer data, in its own local database
  • Bitrix24 MCP with confirmation-gated writesMCP server
    • With write_with_confirmation mode enabled, it can create and change CRM entities after confirmation
    • Stores encrypted portal users' OAuth tokens in its own PostgreSQL database
  • Bitrix24 MCP with two access tiersMCP server
    • The admin endpoint can call any Bitrix24 method without limits
    • The generic bitrix_call gives direct REST API access
    • Secrets are passed in a header or URL with no rotation
  • Bitrix24 Tools: catalog CLI utilitiesCLI
    • It can bulk-delete products from the Bitrix24 catalog irreversibly
    • The import creates and updates product entries on a schedule without human confirmation
  • Bitrix24 for IvaMCP server
    • Installs an Iva agent plugin that runs as a systemd service and calls Bitrix24 through a webhook
    • Searches employees and reads their profiles and departments, which is personal data
    • Technically cannot change tasks
  • Bitrix24 for OpenClawPlugin
    • The webhook gives the agent broad access to the portal's CRM, tasks, drive and chats
    • The agent acts on behalf of users
    • A public HTTPS endpoint for incoming events is required
  • Bitrix24 portal MCP serverMCP server
    • Through OAuth or a token, the agent can change tasks, deals, meetings and send mail on behalf of the portal
    • Access runs within the authorized employee's rights, so a leaked token exposes the same rights
  • Bitrix24 task MCP with subtasks and deadline shiftingMCP server
    • Bulk deadline shifting changes due dates on many tasks in one call
    • It can complete, delete and delegate tasks as the webhook
    • The task-scoped webhook is stored in the client config
  • BitrixMCP: a deterministic Bitrix24 serverMCP server
    • In read,write mode with dry_run off, it can create and update deals, tasks and activities
    • OAuth mode stores decryptable employee access tokens on the server
  • Blender MCPMCP server
    • Runs arbitrary Python code in Blender
    • Telemetry is on by default
  • Blender MCP (Node.js)MCP server
    • The agent sends arbitrary Python code to Blender and it runs with the permissions of your Blender
    • The add-on listens on a TCP port on the local machine and accepts commands without checking the sender
  • Blender MCP (bpy.dev)MCP server
    • The agent runs arbitrary Python code in Blender and in separate processes, with no OS sandbox
    • The command-line tools open and save .blend files on disk

How we set the access level

Methodology

The editors set the level and the reasons from the README, the way the tool runs and the permissions it needs. Reading project files the agent can already see does not raise the level. There is no automatic code audit yet.