SkillFoxx

Type a name, a task or a service

Match with Foxx AI

Access levels of skills and MCP servers

The access level of every catalog entry and the reasons behind it. The level shows what a tool adds to what the agent can already do. It does not rate code quality.

Found: 1417

  • Finam MCP ServerMCP server
    • The agent can place and cancel real trading orders on the exchange
    • A mistaken order directly moves money on the brokerage account
    • It is worth starting with a demo account rather than a real one
  • Finam MCP serverMCP server
    • Tools can place and cancel exchange orders
    • The token grants access to a real brokerage account
  • Finance Quant SkillsSkill
    • The miniqmt skill places and cancels trade orders through the QMT client, including on a live account
    • pywencai needs session cookies and jqdatasdk and tushare need tokens, which grant access to accounts
    • Skill scripts run Python and call external data sources
  • FinanceMCPMCP server
    • Operates in the financial domain and needs keys for paid data providers
    • Replies are market data, not investment advice; decisions and trades are on you
  • Firebase MCP ServerMCP server
    • Writes to Firestore and Realtime Database as the user
    • Can send push notifications and change Remote Config
  • Firefox DevTools MCPMCP server
    • The agent acts in the browser on your behalf and sees cookies and saved sessions of the profile
    • The evaluate_script tool in the default preset runs JavaScript on open pages
    • Pages of external sites can slip instructions to the agent, and Android mode wipes app data
  • Flopperam Unreal Engine MCPMCP server
    • The agent changes the level, actors and Blueprints of an open Unreal project, and rollback depends on your version control
    • The hosted version sends commands and project data to a third-party service's server with an API key
  • Flow-NextWorkflow
    • Changes code and opens pull requests
    • In auto mode it drives CI and can merge a PR
  • Flutter AI Skills and RulesPlugin
    • The code-review skill installs a PreToolUse hook, protect-token.sh, that checks every Bash command
    • With user consent it posts comments and approves PRs or MRs using GITHUB_TOKEN or GITLAB_TOKEN
    • The other skills are excerpts from the official Flutter and Dart docs
  • Flux MCP ServerMCP server
    • The tools apply manifests, patch and delete cluster resources when the server runs without read-only mode
    • The server acts with the rights from your kubeconfig and reads workload logs and metrics
    • Without masking, Kubernetes Secret values reach the assistant and its model
  • Flyto Core: a workflow engine for agentsMCP server
    • Registry modules drive a browser, write and delete files, call external APIs and handle cryptography, and the categories include Docker, Kubernetes and AWS
    • A YAML scenario runs as a program: check other people's recipes before running them
  • FofaMapMCP server
    • Runs active external asset reconnaissance through FOFA
    • Can run Nuclei scans against external targets after approval
  • ForemanCLI
    • Autonomous worker agents write code, run tests and merge branches in your repository
    • Runs spend money and tokens from your Claude subscription, so limits must be set beforehand
    • foreman init writes skills and agents into .claude/ and state files into .foreman/
  • ForgeCodeCLI
    • The agent reads project files, writes patches and runs shell commands, and `forge commit` makes the commit itself
    • Provider keys sit in a file on disk, and conversation context goes to the chosen model providers
    • `forge setup` changes `.zshrc`, and `:sync` sends file contents to the indexing server
  • Frappe Assistant CoreMCP server
    • The model gets an ERPNext employee's rights, including creating, changing and deleting documents
    • Analysis tools run Python and expose the company's financial and customer data
  • FreeCAD MCPMCP server
    • Executes arbitrary Python code inside FreeCAD
    • Creates and changes documents and models in the application on the host
  • Funplay MCP for CocosMCP server
    • The agent runs arbitrary JavaScript in the editor and scene environment, and the safety checks can be bypassed
    • Tools create and delete nodes, prefabs and asset files in the project with no call approval
    • Screenshots and input simulation work at the Electron level and can see editor window contents
  • Funplay MCP for UnityMCP server
    • `execute_code` runs arbitrary C# in the editor and can change and delete project assets
    • All tools run without confirmation inside the package, and the safety checks are not a sandbox
    • A local HTTP server listens on a 127.0.0.1 port and accepts commands from any connected client
  • Fusion 360 MCPMCP server
    • Runs commands inside your Fusion 360 project
    • Creates and changes solids and model parameters
    • The project is in Beta: behavior may change
  • GKE MCP ServerMCP server
    • Applies manifests and changes cloud clusters
    • Can delete Kubernetes resources
  • GPT-LoadCLI
    • The service stores and decrypts LLM provider API keys and credentials
    • It requires running your own server with network access
  • GPTaku PluginsPlugin
    • Plugins run code and reach the network, and insane-search bypasses site blocks and protections
    • insane-review drives a logged-in ChatGPT web session, and pumasi runs an external Codex CLI
  • GSD CoreWorkflow
    • Installs hooks that run on agent session events
    • Subagents write code, commit and open PRs
  • GSuite MCPMCP server
    • Reads emails and attachments and saves files to disk at a path the agent names
    • Requests full mail access `https://mail.google.com/`, writes replies and sends them at once with `send: true`
    • Creates and deletes calendar events and sends invitations to attendees
  • GTM Cheat CodesSkill
    • Through Zapier MCP the skills work with CRMs, email and meeting recordings, that is with customer and personal data
    • Some scenarios write to systems of record and send messages on your behalf
    • Access to connected systems depends on your Zapier setup, so start with read access
  • Gemini CLICLI
    • The agent runs shell commands and edits files
    • Code and prompts are sent to Google models
    • Requires a Google account or API key
  • Gemini Notebook CLI & MCP ServerMCP server
    • Manages data in the Gemini Notebook account: creates and deletes notebooks and publishes share links
    • Stores and uses Google session cookies to access the account
  • Genie: a task in, a pull request outCLI
    • The agent runs the repository's install and checks, creates branches and opens pull requests, that is, runs commands on your machine
    • By default the installer writes skills into every detected agent folder and delivers saved workflows to ~/.claude/workflows
  • GetCourse account management MCP serverMCP server
    • Can create, pay and refund orders, including real money operations
    • Uses the GetCourse administrator's active browser session
  • GhidrAssistMCPMCP server
    • The agent renames, changes types and structures, and creates, saves and closes Ghidra projects, so it can spoil the results of a long analysis
    • The server accepts HTTP connections on port 8080, and any client that can reach the port gets every enabled tool
    • The optional file import and script tools open file reads outside the project and code execution
  • Ghidra MCP ServerMCP server
    • Tools write into the Ghidra project: renaming, types, comments, structures
    • There are endpoints that run arbitrary Java and Python scripts and a live debugger
    • The server is unauthenticated by default and can be exposed beyond localhost if misconfigured
  • Ghost MCP ServerMCP server
    • Can delete posts, members and webhooks
    • Handles subscriber personal data
  • Ghost OSMCP server
    • Controls any Mac app in your name: presses buttons, types text, sends emails and messages
    • Learning mode reads the keyboard and mouse through a system event tap and stores your actions with the contents of elements
    • The wizard writes a permission for all its tools into Claude Code settings, which switches off confirmations
  • Ghost Security SkillsPlugin
    • The skills download and run scanner binaries on your machine
    • Reaper captures an application's HTTPS traffic during live validation, and secrets from the repository reach the output and the agent's context
  • GitFlic MCP: 66 API toolsMCP server
    • It can create and delete projects, releases and webhooks, and trigger or cancel CI/CD pipelines
    • The access token grants full project access under the rights of the user who created it
  • GitHub Agentic WorkflowsCLI
    • Agents operate on the repository and can make changes via safe-outputs
    • Workflows use engine secrets in GitHub Actions
  • GitHub Copilot CLICLI
    • Runs commands and modifies files
    • Acts on repositories and issues on behalf of your GitHub account
  • GitHub MCP ServerMCP server
    • Can create and modify issues, pull requests and repository files
    • Operates with an access token to the GitHub account
  • GitHub MCP Server for ZedPlugin
    • Requires a GitHub token with repo scope, which grants broad repository access
    • The agent can act in your GitHub account on your behalf
  • GitHub Stacked PRsCLI
    • The commands push branches to GitHub, open PRs and merge them together with every unmerged one below
    • A rebase rewrites the history of local branches, and `sync --prune` deletes local branches of merged PRs
    • `gh stack unstack` removes the stack on GitHub, and all work goes through your GitHub CLI authorization
  • GitLab MCP ServerMCP server
    • Writes to repositories, MRs and issues and can delete data in full mode
    • Uses a GitLab access token
  • GitLab MCP Server (Yoda Digital)MCP server
    • A GitLab token gives the agent access to repositories, branches and pipelines within the token's scope, including merging and deleting
    • A shared network deployment without an OAuth gateway exposes GitLab access to anyone who can reach the server
  • GitVerse MCP: code review and PRsMCP server
    • It can set review verdicts, write and delete comments, and trigger CI pipelines under the token owner's identity
    • The personal token grants repository access under the rights of the user who created it
  • Go client and MCP for Hooppy autoposting aggregatorMCP server
    • Publishes posts simultaneously on multiple platforms on behalf of the Hooppy token owner
    • The token grants access to all pages connected in the Hooppy account
  • GoLive SkillSkill
    • Rights to product accounts: hosting, domain, payments
    • An early alpha of version 0.1
    • Live steps run by confirmation flags
  • GoPeakMCP server
    • The agent runs the Godot project and scripts and can edit and delete scene and resource files
    • The runtime addon allows inspection of the running game and input injection
    • The asset group downloads files from third-party providers over the network
  • Goal WorkflowSkill
    • `/ship-it` commits, pushes a branch, creates a pull request, merges it and closes the issue on GitHub under your `gh` token
    • `/loop-it` implements and merges several issues in a row without stopping for manual review
    • Some skills reach out: text-to-speech sends text to api.marswave.ai with a key, and icons load from itshover.com
  • Godlink MCP: AI agent access to the Godot editorMCP server
    • The agent writes and deletes project files and folders and edits scripts and project settings
    • The tools run the game from the editor, send it input and read logs
    • The server listens on local port 6505 for the link to Godot and on port 6510 for the visualizer, where code is edited right in the browser
  • GodogenSkill
    • Runs game engines, builds and browser capture on your host
    • Calls paid generation APIs and spends credits
    • Executes generated project code
  • Godot MCP Full ControlMCP server
    • Tools read, write and delete project files, and game_eval runs arbitrary GDScript with the privileges of the Godot process
    • The game_http_request and game_websocket tools send network requests from the running game
    • Until GODOT_MCP_ALLOWED_DIRS is set, any project root on the machine is allowed

How we set the access level

Methodology

The editors set the level and the reasons from the README, the way the tool runs and the permissions it needs. Reading project files the agent can already see does not raise the level. There is no automatic code audit yet.