MCP Marketplace
Connect external tools and services to your Cendriix agents through the MCP (Modular Capability Provider) marketplace. With 150+ pre-built MCPs available, agents can interact with databases, cloud providers, analytics platforms, and more — all through a one-click install.
How MCPs work
An MCP is a containerised plugin that exposes a set of typed tools to Cendriix agents. When an agent needs to interact with an external service (e.g. query a database, create a Jira ticket, deploy to Vercel), it invokes the appropriate MCP tool. The MCP handles authentication, rate limiting, and error handling.
Installing an MCP
All marketplace MCPs follow the same installation flow:
- Navigate to Settings → Integrations → MCPs and switch to the Catalog tab
- Find the MCP you want to install (use the search bar or browse by category)
- Click Install — this is a one-click operation
- The MCP appears in your Installed tab with a health status indicator
Authentication
MCPs support three authentication methods:
| Auth method | How it works |
|---|---|
| None | No credentials needed — the MCP works out of the box (e.g. Fetch, Filesystem, Playwright) |
| API Key | Provide your API key in the MCP configuration after install. The key is stored encrypted in AWS Secrets Manager |
| OAuth | Click “Authorize” to complete the OAuth flow with the service provider. Tokens are managed and refreshed automatically |
| Bearer Token | Provide a bearer/service token for self-hosted or on-premise services |
Testing your MCP
After installation, verify the MCP is working:
- Click the installed MCP card to open the detail view
- Click Test Connection — this runs a health check and displays:
- Connection status (healthy / unreachable)
- Available tools with descriptions
- Response latency
- If the test fails, check that your credentials are correct and the service is reachable
Blast radius
Each MCP has a blast radius indicating the risk level of its tools:
| Level | Meaning | Examples |
|---|---|---|
| read-only | Only reads data, cannot modify anything | Datadog metrics, Grafana dashboards, Amplitude analytics |
| moderate | Can create/update records but not delete infrastructure | Jira issues, Slack messages, GitHub PRs |
| high | Can modify infrastructure or access sensitive data | Kubernetes deployments, Docker containers, Terraform runs |
Agents respect blast radius levels — high-risk tool calls require explicit approval through HITL gates.
Removing an MCP
- Click the installed MCP card
- Click Remove in the detail modal
- Confirm the removal — this revokes all tool access immediately
Available MCPs
AI & Machine Learning
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| Anthropic | API Key | moderate | create_message, count_tokens, list_models, create_batch |
| Cohere | API Key | read-only | generate, embed, rerank, classify, summarize |
| Hugging Face | API Key | read-only | inference, list_models, get_model_info, list_datasets, text_generation |
| Ollama | None | read-only | generate, chat, list_models, pull_model, show_model_info |
| OpenAI | API Key | moderate | chat_completion, create_embedding, list_models, create_image, transcribe_audio |
| Replicate | API Key | moderate | run_model, get_prediction, list_models, create_prediction, cancel_prediction |
Analytics
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| Amplitude | API Key | read-only | run_chart_query, get_event_segmentation, list_cohorts, get_funnel_data, get_retention |
| Mixpanel | API Key | read-only | query_events, get_funnel, get_retention, get_segmentation, list_cohorts |
| Pendo | API Key | read-only | get_feature_usage, list_guides, get_page_views, list_segments, get_nps_scores |
| PostHog | API Key | read-only | query_events, list_feature_flags, get_insights, list_persons, get_session_recordings |
| Segment | API Key | moderate | track_event, identify_user, list_sources, get_source_schema, list_destinations |
CI/CD & DevOps
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| Argo CD | Bearer | high | list_applications, sync_application, get_app_status, rollback_application, list_clusters |
| Buildkite | API Key | moderate | trigger_build, list_builds, get_build_log, cancel_build, list_pipelines |
| CircleCI | API Key | moderate | trigger_pipeline, list_pipelines, get_job_logs, cancel_pipeline, list_projects |
| Docker | Bearer | high | list_containers, run_container, stop_container, list_images, build_image, inspect_container |
| GitHub Actions | OAuth | high | trigger_workflow, list_runs, get_run_logs, cancel_run, list_workflows |
| Terraform Cloud | API Key | high | list_workspaces, trigger_run, get_run_status, get_plan_output, apply_run |
Cloud Infrastructure
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| AWS | API Key | high | describe_instances, list_s3_buckets, invoke_lambda, describe_stacks, get_log_events |
| Azure | OAuth | high | list_resource_groups, describe_vm, deploy_template, get_metrics, list_functions |
| Cloudflare | API Key | moderate | purge_cache, list_zones, create_dns_record, deploy_worker, get_analytics |
| DigitalOcean | API Key | high | list_droplets, create_droplet, list_databases, deploy_app, get_account |
| Firebase | API Key | high | get_document, set_document, query_collection, list_users, send_notification |
| Fly.io | API Key | high | list_apps, deploy_app, get_logs, scale_machines, list_volumes |
| Google Cloud Platform | OAuth | high | list_instances, describe_bucket, invoke_function, get_logs, list_clusters |
| Heroku | OAuth | high | list_apps, deploy_app, get_logs, scale_dynos, list_addons |
| Kubernetes | Bearer | high | get_pods, get_deployments, get_services, describe_resource, get_logs, apply_manifest |
| Netlify | OAuth | moderate | list_sites, deploy_site, get_deploy_status, list_forms, get_submissions |
| Railway | API Key | high | list_projects, deploy_service, get_logs, list_deployments, get_variables |
| Render | API Key | high | list_services, deploy_service, get_logs, list_databases, get_deploy_status |
Code Platforms
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| Bitbucket | OAuth | moderate | create_pull_request, list_repos, merge_pull_request, create_issue, run_pipeline |
| GitHub | OAuth | moderate | create_issue, merge_pr, comment_on_pr, search_code, list_repos |
| GitLab | OAuth | moderate | create_merge_request, list_issues, push_file, run_pipeline, search_code |
Communication
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| Discord | OAuth | moderate | send_message, list_channels, create_thread, pin_message, search_messages |
| Gmail | OAuth | moderate | send_email, search_emails, list_threads, reply_to_email, create_label |
| Microsoft Teams | OAuth | moderate | send_message, list_channels, create_meeting, upload_file, search_messages |
| Slack | OAuth | moderate | send_message, list_channels, upload_file, create_channel, search_messages |
| Telegram | API Key | moderate | send_message, get_updates, send_photo, get_chat, set_webhook |
Content Management
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| Contentful | OAuth | moderate | get_entries, create_entry, get_content_types, publish_entry, upload_asset |
| Sanity | API Key | moderate | query_groq, create_document, patch_document, list_datasets, upload_image |
| WordPress | OAuth | moderate | list_posts, create_post, update_post, list_pages, upload_media |
Customer Support
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| HubSpot | OAuth | moderate | search_contacts, create_deal, update_contact, list_tickets, create_note |
| Intercom | OAuth | moderate | list_conversations, reply_to_conversation, create_note, search_contacts, close_conversation |
| Salesforce | OAuth | high | run_soql, create_record, update_record, list_objects, get_record |
| Zendesk | API Key | moderate | list_tickets, create_ticket, update_ticket, add_comment, search_tickets |
Databases
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| Amazon Redshift | API Key | moderate | run_query, list_schemas, describe_table, copy_from_s3, get_query_status |
| BigQuery | OAuth | moderate | run_query, list_datasets, describe_table, create_table, export_to_gcs |
| Cassandra | API Key | moderate | execute_cql, describe_keyspace, list_tables, get_schema, query_table |
| ChromaDB | None | moderate | add_documents, query_collection, get_collection, create_collection, delete_collection |
| DynamoDB | API Key | moderate | get_item, put_item, query_table, scan_table, describe_table |
| Elasticsearch | API Key | moderate | search, index_document, get_document, create_index, aggregate |
| MongoDB | Bearer | high | find_documents, insert_document, update_documents, aggregate, list_collections |
| MySQL | API Key | high | query, execute, describe_table, list_tables, list_databases |
| Neon | API Key | moderate | run_sql, list_databases, list_branches, create_branch, describe_table_schema |
| Pinecone | API Key | moderate | upsert_vectors, query_vectors, delete_vectors, describe_index, list_indexes |
| PostgreSQL | Bearer | high | run_query, list_tables, describe_table, insert_row, run_migration |
| Qdrant | API Key | moderate | upsert_points, search_points, get_collection, create_collection, delete_points |
| Redis | Bearer | moderate | redis_get, redis_set, redis_delete, redis_keys, redis_info, redis_subscribe |
| Snowflake | API Key | moderate | run_query, list_databases, describe_table, create_task, get_query_history |
| Supabase | API Key | moderate | query, insert, update, list_tables, manage_auth_users, list_storage_buckets |
| Weaviate | API Key | moderate | add_objects, search_objects, get_schema, create_class, hybrid_search |
DevOps
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| LaunchDarkly | API Key | high | list_flags, get_flag_status, toggle_flag, list_environments, get_flag_targeting |
Documentation
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| Coda | API Key | moderate | list_docs, create_row, update_row, run_formula, search_docs |
| Confluence | OAuth | moderate | search_pages, create_page, update_page, add_comment, list_spaces |
| DeepWiki | None | read-only | read_wiki_structure, read_wiki_contents, ask_question |
| Google Drive | OAuth | moderate | search_files, read_file, create_file, share_file, list_folder |
| Notion | OAuth | moderate | create_page, update_page, search_pages, create_database_entry, query_database |
E-commerce
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| Shopify | OAuth | moderate | list_products, get_orders, update_inventory, list_customers, create_product |
Fintech
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| Plaid | API Key | read-only | get_accounts, get_transactions, get_balance, list_institutions, get_identity |
Issue Trackers
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| Asana | OAuth | moderate | create_task, update_task, list_projects, add_comment, complete_task |
| ClickUp | OAuth | moderate | create_task, update_task, list_tasks, create_list, assign_task |
| Jira | OAuth | moderate | create_issue, update_issue, search_issues, add_comment, transition_issue |
| Linear | OAuth | moderate | create_issue, update_issue, list_issues, create_project, assign_issue |
IT Service Management
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| ServiceNow | OAuth | moderate | create_incident, list_incidents, update_ticket, get_knowledge_article, list_change_requests |
Marketing
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| Mailchimp | OAuth | moderate | list_campaigns, create_campaign, send_campaign, list_subscribers, add_subscriber |
| SendGrid | API Key | moderate | send_email, list_templates, create_template, get_stats, validate_email |
| Twilio | API Key | moderate | send_sms, make_call, list_messages, send_whatsapp, lookup_number |
| Vercel | API Key | moderate | list_deployments, trigger_deployment, get_deployment_logs, list_projects, cancel_deployment |
Media
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| Spotify | OAuth | read-only | search_tracks, get_playlist, get_artist, get_album, get_recommendations |
| Twitch | OAuth | read-only | get_streams, get_users, get_clips, search_channels, get_chat_messages |
| YouTube | OAuth | read-only | search_videos, get_video_details, list_playlists, get_comments, get_channel_info |
Observability
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| Datadog | API Key | read-only | query_metrics, list_monitors, get_logs, create_incident, mute_monitor |
| Elastic Observability | API Key | read-only | search_logs, get_apm_traces, list_services, query_metrics, get_alerts |
| Grafana | API Key | read-only | query_datasource, list_dashboards, get_alert_rules, create_annotation, get_panel_data |
| Honeycomb | API Key | read-only | query_dataset, list_datasets, create_query, get_trace, list_columns |
| New Relic | API Key | read-only | run_nrql, list_applications, get_alert_violations, create_deployment_marker, get_apm_summary |
| OpsGenie | API Key | moderate | list_alerts, create_alert, acknowledge_alert, close_alert, get_on_call |
| PagerDuty | OAuth | moderate | list_incidents, create_incident, acknowledge_incident, resolve_incident, get_on_call |
| Prometheus | API Key | read-only | query_instant, query_range, list_metrics, get_targets, list_alerts |
| Sentry | OAuth | read-only | list_issues, get_event_detail, resolve_issue, assign_issue, list_projects |
| Splunk | API Key | read-only | search, get_results, list_saved_searches, get_alerts, list_indexes |
Payments
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| Square | OAuth | high | list_payments, create_payment, list_customers, create_refund, get_order |
| Stripe | API Key | high | list_customers, create_payment_intent, list_charges, create_refund, retrieve_subscription |
Productivity
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| Airtable | OAuth | moderate | list_records, create_record, update_record, list_bases, get_table_schema |
| Monday.com | API Key | moderate | list_boards, get_items, create_item, update_item, list_workspaces |
| Todoist | OAuth | moderate | list_tasks, create_task, complete_task, list_projects, update_task |
| Trello | OAuth | moderate | list_boards, get_cards, create_card, move_card, add_comment |
Security
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| Auth0 | API Key | high | list_users, get_user, create_user, list_connections, get_login_stats |
| HashiCorp Vault | API Key | high | read_secret, list_secrets, write_secret, list_mounts, get_health |
Support
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| Freshdesk | API Key | moderate | list_tickets, create_ticket, update_ticket, list_contacts, reply_to_ticket |
Utilities
| MCP | Auth | Blast radius | Tools |
|---|---|---|---|
| Fetch | None | read-only | fetch, fetch_html, fetch_json, fetch_text |
| Figma | OAuth | read-only | get_file, list_components, get_comments, export_asset, list_projects |
| Filesystem | None | high | read_file, write_file, list_directory, search_files, get_file_info, move_file |
| Playwright | None | moderate | browser_navigate, browser_screenshot, browser_click, browser_type, browser_snapshot, browser_execute_javascript |
| Puppeteer | None | moderate | puppeteer_navigate, puppeteer_screenshot, puppeteer_click, puppeteer_fill, puppeteer_evaluate |
| Storybook | API Key | read-only | list_stories, get_story, get_component, list_addons, get_build_status |
HR & Enterprise
| MCP | Auth | Blast Radius | Tools |
|---|---|---|---|
| BambooHR | API Key | moderate | list_employees, get_employee, list_time_off, get_directory, list_reports |
| Gusto | OAuth | moderate | list_employees, run_payroll, get_pay_stubs, list_benefits, get_company |
| Workday | OAuth | moderate | list_workers, get_worker, list_organizations, get_compensation, list_job_postings |
| Deel | API Key | moderate | list_contracts, create_contract, list_invoices, get_payment_status, list_people |
E-Commerce
| MCP | Auth | Blast Radius | Tools |
|---|---|---|---|
| WooCommerce | API Key | moderate | list_products, get_orders, update_inventory, list_customers, create_coupon |
| BigCommerce | OAuth | moderate | list_products, create_product, get_orders, list_customers, update_inventory |
Marketing & Ads
| MCP | Auth | Blast Radius | Tools |
|---|---|---|---|
| Google Ads | OAuth | moderate | list_campaigns, get_campaign_stats, create_campaign, update_budget, get_keywords |
| Facebook Ads | OAuth | moderate | list_campaigns, get_ad_insights, create_campaign, list_audiences, get_ad_creative |
| LinkedIn Ads | OAuth | moderate | list_campaigns, get_analytics, create_campaign, list_audiences, get_conversions |
CRM
| MCP | Auth | Blast Radius | Tools |
|---|---|---|---|
| Zoho CRM | OAuth | moderate | list_records, create_record, update_record, search_records, get_analytics |
| Copper | API Key | moderate | list_leads, create_lead, list_opportunities, update_record, search_contacts |
| Close | API Key | moderate | list_leads, create_lead, list_activities, send_email, search_leads |
Business Intelligence
| MCP | Auth | Blast Radius | Tools |
|---|---|---|---|
| Tableau | OAuth | read-only | list_workbooks, get_view_data, list_datasources, query_view, list_projects |
| Looker | OAuth | read-only | run_query, list_dashboards, get_look, list_explores, get_sql_runner |
| Power BI | OAuth | read-only | list_reports, execute_query, list_datasets, refresh_dataset, list_dashboards |
Data Integration
| MCP | Auth | Blast Radius | Tools |
|---|---|---|---|
| dbt Cloud | API Key | moderate | trigger_run, get_run_status, list_jobs, get_model_docs, list_environments |
| Fivetran | API Key | moderate | list_connectors, trigger_sync, get_sync_status, list_destinations, get_connector_schema |
| Airbyte | API Key | moderate | list_sources, trigger_sync, get_job_status, list_connections, list_destinations |
Identity & Security
| MCP | Auth | Blast Radius | Tools |
|---|---|---|---|
| SonarQube | API Key | read-only | get_project_status, list_issues, get_metrics, list_rules, get_quality_gate |
| Okta | OAuth | high | list_users, get_user, list_groups, list_applications, get_system_log |
| OneLogin | OAuth | high | list_users, create_user, list_apps, list_roles, get_events |
| Clerk | API Key | moderate | list_users, get_user, list_sessions, list_organizations, verify_token |
| CrowdStrike | OAuth | high | list_detections, get_host, search_iocs, list_incidents, get_threat_intel |
Productivity & Project Management
| MCP | Auth | Blast Radius | Tools |
|---|---|---|---|
| Smartsheet | OAuth | moderate | list_sheets, get_sheet, add_rows, update_rows, search_sheets |
| Teamwork | OAuth | moderate | list_projects, create_task, list_tasks, log_time, get_project_stats |
| Calendly | OAuth | moderate | list_events, get_event, list_event_types, list_invitees, cancel_event |
| Miro | OAuth | moderate | list_boards, create_sticky_note, list_items, create_frame, search_boards |
| Canva | OAuth | moderate | list_designs, create_design, get_design, list_templates, export_design |
Support
| MCP | Auth | Blast Radius | Tools |
|---|---|---|---|
| Front | OAuth | moderate | list_conversations, reply_to_conversation, list_inboxes, create_comment, search_contacts |
| Help Scout | OAuth | moderate | list_conversations, create_conversation, list_customers, reply_to_thread, list_mailboxes |
Payments & Fintech
| MCP | Auth | Blast Radius | Tools |
|---|---|---|---|
| PayPal | OAuth | high | create_order, capture_payment, list_transactions, create_refund, get_dispute |
| Braintree | API Key | high | create_transaction, list_transactions, create_customer, create_refund, list_subscriptions |
Documentation
| MCP | Auth | Blast Radius | Tools |
|---|---|---|---|
| GitBook | API Key | moderate | list_spaces, get_page, search_content, create_page, update_page |
| ReadMe | API Key | moderate | list_docs, get_doc, create_doc, list_categories, search_docs |
Social & Communication
| MCP | Auth | Blast Radius | Tools |
|---|---|---|---|
| X (Twitter) | OAuth | moderate | post_tweet, search_tweets, get_timeline, get_user, list_followers |
| OAuth | moderate | create_post, get_profile, list_connections, get_company, search_people | |
| OAuth | moderate | list_media, create_media, get_insights, list_comments, reply_to_comment | |
| OAuth | moderate | list_pins, create_pin, list_boards, get_analytics, search_pins | |
| TikTok | OAuth | read-only | list_videos, get_video_info, get_user_info, get_analytics, search_videos |
| WhatsApp Business | API Key | moderate | send_message, send_template, get_messages, list_templates, get_media |
Monitoring & Incidents
| MCP | Auth | Blast Radius | Tools |
|---|---|---|---|
| Statuspage | API Key | moderate | list_incidents, create_incident, update_component, get_page_status, list_subscribers |
| Better Stack | API Key | moderate | list_monitors, create_monitor, list_incidents, get_uptime, list_heartbeats |
| incident.io | API Key | moderate | list_incidents, create_incident, update_incident, list_actions, get_post_mortem |
Databases
| MCP | Auth | Blast Radius | Tools |
|---|---|---|---|
| CockroachDB | API Key | high | run_query, list_clusters, list_databases, get_cluster_health, list_backups |
| PlanetScale | API Key | high | list_databases, create_branch, create_deploy_request, run_query, get_schema |
| Turso | API Key | moderate | list_databases, create_database, run_query, list_groups, get_stats |
Cloud Storage
| MCP | Auth | Blast Radius | Tools |
|---|---|---|---|
| Google Cloud Storage | OAuth | moderate | list_buckets, list_objects, get_object, upload_object, delete_object |
| Backblaze B2 | API Key | moderate | list_buckets, list_files, upload_file, download_file, get_bucket_info |
CI/CD
| MCP | Auth | Blast Radius | Tools |
|---|---|---|---|
| Travis CI | API Key | moderate | list_builds, trigger_build, get_build_log, list_repos, cancel_build |
Streaming
| MCP | Auth | Blast Radius | Tools |
|---|---|---|---|
| Twitch EventSub | OAuth | moderate | list_subscriptions, create_subscription, delete_subscription, get_events, list_event_types |
Building a custom MCP
If the marketplace doesn’t have what you need, you can build your own MCP. See Build an MCP for the developer guide covering manifest schemas, tool handlers, authentication, and publishing.
See also
- Connectors — native connectors for core engineering services (SCM, CI/CD, cloud, observability)
- Policies & Guardrails — configure HITL gates and blast radius controls
- Build an MCP — developer guide for creating custom MCPs
Last updated on