{
  "title": "Gearlist",
  "updated": "2026-11-05",
  "resources": [
    {
      "id": "agent-deck",
      "name": "Agent Deck",
      "category": "Agent tools",
      "url": "https://agentdeck.site/",
      "description": "A Mac interface for coding agent sessions, project context and skills.",
      "for_whom": "Developers coordinating coding sessions.",
      "access_notes": "Sessions may run tools with access to local files and connected services.",
      "source_url": "https://agentdeck.site/",
      "source_checked": "2026-10-25",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "hunk",
      "name": "Hunk",
      "category": "Agent tools",
      "url": "https://hunk.dev/",
      "description": "A terminal interface for reviewing code changes with agent notes beside the diff.",
      "for_whom": "Developers reviewing agent generated changes.",
      "access_notes": "Review changes before applying them; installation and repository access are separate decisions.",
      "source_url": "https://hunk.dev/",
      "source_checked": "2026-10-25",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "jevgrep",
      "name": "Jevgrep",
      "category": "Agent tools",
      "url": "https://github.com/dzhng/jevgrep",
      "description": "Search a codebase with a question and receive relevant files and source excerpts.",
      "for_whom": "Coding agents and developers exploring an unfamiliar repository.",
      "access_notes": "Requires an AI provider connection; check what repository content is sent to that provider.",
      "source_url": "https://github.com/dzhng/jevgrep",
      "source_checked": "2026-10-25",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "needle",
      "name": "Needle",
      "category": "Agent tools",
      "url": "https://github.com/cactus-compute/needle",
      "description": "Models and runtimes for local tool calling, structured extraction and embeddings.",
      "for_whom": "Developers building applications on devices.",
      "access_notes": "Your application defines and executes the tools; constrain their permissions.",
      "source_url": "https://github.com/cactus-compute/needle",
      "source_checked": "2026-10-25",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "found-by-ai-mcp",
      "name": "Are you found by AI? MCP server",
      "category": "MCP and integrations",
      "url": "https://github.com/techhorizonlabs/foundbyai-mcp",
      "description": "Connect an MCP client to saved AI visibility measurements and evidence.",
      "for_whom": "Businesses and agencies using their own AI to inspect visibility data.",
      "access_notes": "Account access is scoped by the connection. Review the rescan action separately from read tools.",
      "source_url": "https://github.com/techhorizonlabs/foundbyai-mcp",
      "source_checked": "2026-10-25",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": true
    },
    {
      "id": "gogcli",
      "name": "gogcli",
      "category": "MCP and integrations",
      "url": "https://gogcli.sh/",
      "description": "A command line interface for Google Workspace services with structured output.",
      "for_whom": "People and agents automating Workspace tasks.",
      "access_notes": "OAuth scopes can allow reads and writes. Choose the account and access needed for the task.",
      "source_url": "https://gogcli.sh/",
      "source_checked": "2026-10-25",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "ciso-ai",
      "name": "CISO AI",
      "category": "Security and governance",
      "url": "https://cisoai.au/",
      "description": "Security briefings, analysis and governance resources.",
      "for_whom": "Teams following security developments and governance topics.",
      "access_notes": "Read the linked primary sources and check dates before using advice in an operational decision.",
      "source_url": "https://cisoai.au/",
      "source_checked": "2026-10-25",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "node9",
      "name": "node9",
      "category": "Security and governance",
      "url": "https://node9.ai/",
      "description": "Access control for AI agents. It decides what Claude Code, Codex, Gemini, Cursor and MCP servers may do, and can block or review risky actions.",
      "for_whom": "People running coding agents against Slack, GitHub, email, files or databases.",
      "access_notes": "Install with brew tap node9-ai/node9 && brew install node9, or npm install -g node9-ai. Needs Node.js 22 or later. Local protection needs no account. Optional dashboard login. Apache-2.0.",
      "source_url": "https://github.com/node9-ai/node9-proxy",
      "source_checked": "2026-10-27",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "clawseccheck",
      "name": "ClawSecCheck",
      "category": "Security and governance",
      "url": "https://github.com/gl0di/clawseccheck",
      "description": "A local, read-only security audit for an OpenClaw agent. It looks for config, prompt-injection and supply-chain risks and can vet a skill before install.",
      "for_whom": "People running OpenClaw who want a local A to F grade without sending config off the machine.",
      "access_notes": "Python 3.10 or later. Install with pipx from the GitHub repo. The scanner reports and does not change OpenClaw config. Official docs say the scanner makes no network calls. MIT.",
      "source_url": "https://github.com/gl0di/clawseccheck",
      "source_checked": "2026-10-27",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "guardstein",
      "name": "GuardStein",
      "category": "Security and governance",
      "url": "https://guardstein.com/",
      "description": "A document and deal room service that describes browser encryption and controlled sharing.",
      "for_whom": "Teams evaluating document sharing for deals and reviews.",
      "access_notes": "Encryption claims are the provider's. Review its security model and recovery process before uploading sensitive documents.",
      "source_url": "https://guardstein.com/",
      "source_checked": "2026-10-25",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "raft",
      "name": "Raft",
      "category": "Platforms",
      "url": "https://github.com/botiverse/raft-source",
      "description": "A shared workspace where people and persistent AI agents collaborate in messages and tasks.",
      "for_whom": "Teams working with agents across projects and machines.",
      "access_notes": "Source available under FSL, not an unrestricted open source licence. Agents need explicit access to their tools and data.",
      "source_url": "https://github.com/botiverse/raft-source",
      "source_checked": "2026-10-25",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "x402",
      "name": "x402",
      "category": "Protocols",
      "url": "https://x402.org/",
      "description": "An open protocol for payments over HTTP using the 402 response.",
      "for_whom": "Developers building services that charge per request.",
      "access_notes": "Connecting a payment client can spend funds. Set explicit transaction limits.",
      "source_url": "https://x402.org/",
      "source_checked": "2026-10-25",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "thl-open",
      "name": "THL Open",
      "category": "Skills and learning",
      "url": "https://github.com/techhorizonlabs/thl-open",
      "description": "Agent skills and reporting tools for AI readiness audits and fix plans.",
      "for_whom": "Agencies, consultants and teams evaluating their own or authorised client sites.",
      "access_notes": "Skills may use external services or scan a site. Obtain target permission and review dependencies before running them.",
      "source_url": "https://github.com/techhorizonlabs/thl-open",
      "source_checked": "2026-10-25",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": true
    },
    {
      "id": "mcp-registry",
      "name": "Official MCP Registry",
      "category": "Platforms",
      "url": "https://registry.modelcontextprotocol.io",
      "description": "The official hosted registry of publicly available Model Context Protocol servers, with a REST API and server.json metadata.",
      "for_whom": "MCP clients, aggregators and people looking up a server by name.",
      "access_notes": "The registry is in preview. Breaking changes or data resets may occur before general availability. Listing a server is not a security audit. Installing a listed server still needs its own credentials and terms.",
      "source_url": "https://modelcontextprotocol.io/registry/about",
      "source_checked": "2026-10-26",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "omniroute",
      "name": "OmniRoute",
      "category": "Platforms",
      "url": "https://github.com/cheaper-inference/OmniRoute",
      "description": "A local AI gateway that routes coding tools to many provider accounts through one OpenAI-compatible endpoint.",
      "for_whom": "People who already have provider accounts and want one local endpoint with fallback.",
      "access_notes": "Install with npm install -g omniroute. It runs locally (default http://localhost:20128). Bring your own provider credentials. OmniRoute does not grant tokens. MIT.",
      "source_url": "https://github.com/cheaper-inference/OmniRoute",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "github-mcp-server",
      "name": "GitHub MCP Server",
      "category": "MCP and integrations",
      "url": "https://github.com/github/github-mcp-server",
      "description": "GitHub's official MCP server for repositories, issues, pull requests and Actions.",
      "for_whom": "Agents and developers working on GitHub data they are allowed to access.",
      "access_notes": "Needs a GitHub OAuth login or personal access token. Scopes can read and write repositories. Use a read-only token unless a write is required.",
      "source_url": "https://github.com/github/github-mcp-server",
      "source_checked": "2026-10-26",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "gitmcp",
      "name": "GitMCP",
      "category": "MCP and integrations",
      "url": "https://gitmcp.io/",
      "description": "A remote MCP server that turns a public GitHub project into documentation an agent can query.",
      "for_whom": "People pointing an agent at a public repository without cloning it.",
      "access_notes": "Works on public GitHub content. Last upstream push observed 2026-05-08. Confirm the target repo is public before connecting.",
      "source_url": "https://github.com/idosal/git-mcp",
      "source_checked": "2026-10-26",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "xerj",
      "name": "XERJ",
      "category": "MCP and integrations",
      "url": "https://xerj.org",
      "description": "A local-first search engine and MCP server that indexes code, docs, logs and PDFs for agents.",
      "for_whom": "People who want cited local search and agent memory without a hosted search cluster.",
      "access_notes": "Installer is curl -fsSL https://xerj.org/get | sh. Read the script before running it. The binary indexes local paths and can serve an Elasticsearch-compatible API on localhost. Apache-2.0.",
      "source_url": "https://github.com/xerj-org/xerj",
      "source_checked": "2026-10-27",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "agents-md",
      "name": "AGENTS.md",
      "category": "Skills and learning",
      "url": "https://agents.md",
      "description": "An open markdown format at the root of a repository that tells coding agents how the project works.",
      "for_whom": "Repository maintainers and coding agents.",
      "access_notes": "A file in a clone. It does not grant credentials. Agents that read it will follow those instructions, so keep secrets out of it.",
      "source_url": "https://github.com/agentsmd/agents.md",
      "source_checked": "2026-10-26",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "npx-skills",
      "name": "npx skills",
      "category": "Skills and learning",
      "url": "https://github.com/vercel-labs/skills",
      "description": "A command line installer that copies Agent Skills (SKILL.md folders) into the skill directories of local coding agents.",
      "for_whom": "People installing portable skills into Claude Code, Codex, Cursor and similar agents.",
      "access_notes": "Writes files onto the machine. Treat a skill as untrusted code and instructions until you have read it. Example: npx skills add techhorizonlabs/thl-open.",
      "source_url": "https://github.com/vercel-labs/skills",
      "source_checked": "2026-10-26",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "anthropic-skills",
      "name": "Anthropic skills",
      "category": "Skills and learning",
      "url": "https://github.com/anthropics/skills",
      "description": "Public Agent Skills from Anthropic for coding agents that read SKILL.md.",
      "for_whom": "People installing first-party examples of the Agent Skills format.",
      "access_notes": "Public git clone or npx skills add. GitHub licence field was empty on 26 October 2026. Read the repository licence files before reuse.",
      "source_url": "https://github.com/anthropics/skills",
      "source_checked": "2026-10-26",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "firecrawl",
      "name": "Firecrawl",
      "category": "Agent tools",
      "url": "https://github.com/firecrawl/firecrawl",
      "description": "Crawl and scrape sites into markdown and structured data for agents.",
      "for_whom": "Agents and developers who need page content from the public web.",
      "access_notes": "The hosted API needs a key and spends credits. AGPL-3.0 on the open repository. Do not scrape sites that forbid it. LinkedIn and similar sites may be blocked.",
      "source_url": "https://github.com/firecrawl/firecrawl",
      "source_checked": "2026-10-26",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "rea",
      "name": "REA",
      "category": "Agent tools",
      "url": "https://github.com/morluto/rea",
      "description": "A local MCP and CLI for investigating application behaviour, from JavaScript bundles to native binaries.",
      "for_whom": "Developers and coding agents inspecting software they are allowed to analyse.",
      "access_notes": "Install with npx rea-agents@latest setup. Setup shows a plan and asks before writing agent config or installing Hopper. Native and runtime workflows can execute or attach to programs. DISCLAIMER.md forbids DRM circumvention and copying proprietary software. MIT. npm package rea-agents. MCP registry name io.github.morluto/rea.",
      "source_url": "https://github.com/morluto/rea",
      "source_checked": "2026-10-26",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "opencli",
      "name": "OpenCLI",
      "category": "Agent tools",
      "url": "https://opencli.info/",
      "description": "A CLI and Chrome Browser Bridge that lets agents navigate, click, fill forms and extract from sites through a logged-in Chrome profile.",
      "for_whom": "People whose agents need to operate websites they are already signed into, or reuse site-specific CLI adapters.",
      "access_notes": "Install npm package @jackwener/opencli (Node.js 20.18.1 or later) or the desktop app, plus the OpenCLI Chrome extension. Browser commands act through the signed-in Chrome profile, including cookies for the target site. Treat that as the same access the person has in the browser. Apache-2.0. Skills install with npx skills add jackwener/opencli.",
      "source_url": "https://github.com/jackwener/OpenCLI",
      "source_checked": "2026-10-27",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "graphify",
      "name": "Graphify",
      "category": "Agent tools",
      "url": "https://www.graphify.com",
      "description": "Turns a codebase, docs, SQL schemas, configs and PDFs into a local queryable knowledge graph for coding agents.",
      "for_whom": "People whose agents need a map of a repository without sending the tree to a hosted vector store.",
      "access_notes": "Install the CLI with uv tool install graphifyy, then graphify install. It reads local project files and writes graphify-out. Apache-2.0.",
      "source_url": "https://github.com/Graphify-Labs/graphify",
      "source_checked": "2026-10-27",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "opencontext",
      "name": "OpenContext",
      "category": "Agent tools",
      "url": "https://0xranx.github.io/OpenContext/en/",
      "description": "A local GUI and CLI that stores project context, skills and notes so a coding agent can reuse them across sessions.",
      "for_whom": "People who already run Claude Code, Codex or OpenCode and want a persistent memory for that work.",
      "access_notes": "Install with npm install -g @aicontextlab/cli, then oc init in a project. Desktop app from GitHub releases. MIT.",
      "source_url": "https://github.com/0xranx/OpenContext",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "stash",
      "name": "Stash",
      "category": "Agent tools",
      "url": "https://joinstash.ai",
      "description": "Captures agent runs and human corrections, then serves that history back as knowledge, skills, REST, MCP and a CLI.",
      "for_whom": "Teams whose agents should remember lessons from earlier work.",
      "access_notes": "Python client is pip install stash-sdk. It reads STASH_API_KEY and optional STASH_URL. The GitHub repo is MIT. Hosted and self-hosted paths are separate accounts.",
      "source_url": "https://github.com/Fergana-Labs/stash",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "browsentic",
      "name": "Browsentic",
      "category": "Agent tools",
      "url": "https://browsentic.com",
      "description": "An agentic browser harness: a desktop app, npm CLI and Chrome or Firefox extension that lets an agent drive a signed-in browser.",
      "for_whom": "People whose agents need to use the browser they already use, including logged-in sites.",
      "access_notes": "Installer is curl -fsSL https://browsentic.com/install.sh | sh. Read the script before running it. Or npx browsentic@latest setup. The extension acts through the signed-in browser. Apache-2.0.",
      "source_url": "https://github.com/imshaikot/browsentic",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "trail-code",
      "name": "Trail-code",
      "category": "Agent tools",
      "url": "https://github.com/trailhq/Trail-Code",
      "description": "A local map of a codebase plus team learnings, so coding agents go to the right files and pick up earlier decisions.",
      "for_whom": "People running Claude Code, Cursor, Codex or similar on a repository they control.",
      "access_notes": "Install with npm install -g @trailhq/trail-code && trail init. It reads the repo on the machine and writes .trail/. MIT.",
      "source_url": "https://github.com/trailhq/Trail-Code",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "obsidian-wiki",
      "name": "obsidian-wiki",
      "category": "Agent tools",
      "url": "https://github.com/Ar9av/obsidian-wiki",
      "description": "A local markdown vault an agent can grow, lint and query as a digital brain.",
      "for_whom": "People who want durable notes an agent can read and write in a folder they own.",
      "access_notes": "Install with pip install obsidian-wiki, then obsidian-wiki setup --vault ~/brain. MIT. The vault is local files.",
      "source_url": "https://github.com/Ar9av/obsidian-wiki",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "earshot",
      "name": "earshot",
      "category": "Agent tools",
      "url": "https://github.com/Leonxlnx/earshot",
      "description": "A local CLI, Python API and MCP server that lets coding agents describe, score and generate sound on CPU.",
      "for_whom": "People whose agents make or review audio, film or game sound without a GPU.",
      "access_notes": "Python 3.10 or later and ffmpeg on PATH. Clone the repo, venv, CPU torch, then pip install -e \".[mcp,llm,dev]\". First model use downloads about 1.1 GB into a local cache. MIT.",
      "source_url": "https://github.com/Leonxlnx/earshot",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "prompt-director",
      "name": "PromptDirector",
      "category": "Agent tools",
      "url": "https://github.com/wchao6891/PromptDirector",
      "description": "A free local-first Chrome extension that saves images, prompts and references from the web for later reuse.",
      "for_whom": "People collecting visual and prompt references while they browse.",
      "access_notes": "Chrome Web Store listing iahakaahijddcjjldidbclicedibgpjm. Optional local video component. Apache-2.0. Treat saved pages as the same access the signed-in browser has.",
      "source_url": "https://github.com/wchao6891/PromptDirector",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "hyperresearch",
      "name": "Hyperresearch",
      "category": "Skills and learning",
      "url": "https://github.com/jordan-gibbs/hyperresearch",
      "description": "A deep research skill and CLI that collects web and scholarly sources into a persistent vault and writes a cited report.",
      "for_whom": "People running long research jobs in Claude Code or Codex, or using the hosted site.",
      "access_notes": "pip install writes skills, hooks and project files. Runs need network and write access. Hosted product at hyperresearch.ai is a separate account. MIT. Check what the vault stores before pointing it at private material.",
      "source_url": "https://github.com/jordan-gibbs/hyperresearch",
      "source_checked": "2026-10-27",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "tech-horizon-academy",
      "name": "Tech Horizon Academy",
      "category": "Skills and learning",
      "url": "https://academy.techhorizonlabs.com/",
      "description": "A free academy of Claude skills, prompts and AI tools for Australian small businesses.",
      "for_whom": "Australian operators and the agents they run.",
      "access_notes": "Public site. Skills and prompts are instructions; tools in the directory may need their own accounts. Indexes on 27 Oct 2026: 67 skills, 206 tools, 1217 prompt titles. Indexes are names and notes, not skill bodies or prompt text. Some academy tool pages carry partner flags; Gearlist omits referral parameters.",
      "source_url": "https://academy.techhorizonlabs.com/skills",
      "source_checked": "2026-10-27",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": true
    },
    {
      "id": "claude-academy",
      "name": "Claude Academy",
      "category": "Skills and learning",
      "url": "https://academy.claude.com/",
      "description": "Anthropic's official courses on Claude, Claude Code, MCP, skills and the Claude API.",
      "for_whom": "People learning Claude products and MCP.",
      "access_notes": "Free courses at academy.claude.com. Some lessons need a Claude account.",
      "source_url": "https://academy.claude.com/courses",
      "source_checked": "2026-10-27",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "claude-plugins-official",
      "name": "Claude plugins official",
      "category": "Skills and learning",
      "url": "https://github.com/anthropics/claude-plugins-official",
      "description": "Anthropic's official Claude Code plugin marketplace. 315 plugins counted on 27 Oct 2026, mostly partner connectors.",
      "for_whom": "Claude Code users installing plugins with /plugin.",
      "access_notes": "Claude Code adds this marketplace on first interactive session. A plugin can install MCP servers and write config. Review a plugin before enabling it. Names and homepages are in indexes/claude-plugins-official.json. Not a security audit of each plugin.",
      "source_url": "https://code.claude.com/docs/en/plugins/anthropic-marketplaces",
      "source_checked": "2026-10-27",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "supabase-mcp",
      "name": "Supabase MCP",
      "category": "MCP and integrations",
      "url": "https://supabase.com/docs/guides/ai-tools/mcp",
      "description": "Supabase's official remote MCP server for docs, account, database, functions and related project tools.",
      "for_whom": "Developers whose agents need to work on a Supabase project they control.",
      "access_notes": "Remote URL https://mcp.supabase.com/mcp with OAuth. Can list, query and change project data. Read Supabase's MCP security notes and restrict feature groups before connecting production.",
      "source_url": "https://supabase.com/docs/guides/ai-tools/mcp",
      "source_checked": "2026-10-27",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "skillsmp",
      "name": "SkillsMP",
      "category": "Skills and learning",
      "url": "https://skillsmp.com/",
      "description": "A community index of Agent Skills scraped from GitHub. Not run by Anthropic.",
      "for_whom": "People searching for community skills at their own risk.",
      "access_notes": "Unvetted. Individual skills keep their upstream licences. Anonymous API is rate limited. Treat a listed skill as untrusted code until you have read it. Optional paid API plans.",
      "source_url": "https://skillsmp.com/",
      "source_checked": "2026-10-27",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "notion-mcp",
      "name": "Notion MCP",
      "category": "MCP and integrations",
      "url": "https://developers.notion.com/guides/mcp/overview",
      "description": "Notion's hosted MCP server for searching, reading, creating and updating pages and databases in a workspace the user can access.",
      "for_whom": "People whose agents need live Notion context they already have permission to see.",
      "access_notes": "Remote URL https://mcp.notion.com/mcp with OAuth. Can read and write workspace content. Workspace owners can manage which clients connect. Prefer the hosted server over the unmaintained self-hosted repo.",
      "source_url": "https://developers.notion.com/guides/mcp/get-started-with-mcp",
      "source_checked": "2026-10-27",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "cloudflare-mcp",
      "name": "Cloudflare MCP",
      "category": "MCP and integrations",
      "url": "https://developers.cloudflare.com/agents/model-context-protocol/cloudflare/servers-for-cloudflare/",
      "description": "Cloudflare's hosted API MCP server covering DNS, Workers, R2, Zero Trust and the rest of the Cloudflare API, plus docs search.",
      "for_whom": "People whose agents work on a Cloudflare account they control.",
      "access_notes": "Remote URL https://mcp.cloudflare.com/mcp with OAuth, or a scoped API token as a bearer. Can change account configuration. Grant the smallest permission set. Other product-specific Cloudflare MCP URLs exist; this is the main API server.",
      "source_url": "https://developers.cloudflare.com/agents/model-context-protocol/cloudflare/servers-for-cloudflare/",
      "source_checked": "2026-10-27",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "omniseek",
      "name": "OmniSeek",
      "category": "MCP and integrations",
      "url": "https://github.com/Battam1111/omniseek",
      "description": "A local MCP add-on that searches places web search often misses, including Bilibili, Zhihu and scholarly papers.",
      "for_whom": "People whose agents need those sources in Claude Code, Cursor or Codex.",
      "access_notes": "Install with uv tool install omniseek, then claude mcp add omniseek -- omniseek. Runs on your computer. Apache-2.0. Python 3.11 or later.",
      "source_url": "https://github.com/Battam1111/omniseek",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "ecc",
      "name": "ECC",
      "category": "Agent tools",
      "url": "https://ecc.tools",
      "description": "An agent harness that adds planning, review, memory, skills and AgentShield security scanning to Claude Code and other coding agents.",
      "for_whom": "People running Claude Code, Codex or similar who want that workflow installed once rather than restated every session.",
      "access_notes": "Guided setup is npx ecc-universal@2.2.3 setup (Node.js 18 or later). Claude Code plugin is ecc@ecc from github.com/affaan-m/ECC. Install only from those official sources. Hooks run with the agent's permissions. OSS is MIT. ECC Pro GitHub App is a separate paid product for private repos.",
      "source_url": "https://github.com/affaan-m/ECC",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "agent-reach",
      "name": "Agent Reach",
      "category": "Agent tools",
      "url": "https://github.com/Panniantong/Agent-Reach",
      "description": "A CLI that gives coding agents read access to platforms generic web search misses, including GitHub, YouTube, Bilibili, V2EX and login-walled social sites.",
      "for_whom": "People whose agents need those sources, including Chinese platforms and logged-in feeds.",
      "access_notes": "Point the agent at https://raw.githubusercontent.com/Panniantong/Agent-Reach/main/docs/install.md. The PyPI package named agent-reach is a different project. Login channels copy that site's Chrome session into a dedicated local browser; they do not read the password store. Prefer a secondary account. MIT.",
      "source_url": "https://github.com/Panniantong/Agent-Reach",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "ruflo",
      "name": "Ruflo",
      "category": "Agent tools",
      "url": "https://github.com/ruvnet/ruflo",
      "description": "An agent harness around Claude Code and Codex: plugins, a console, optional MCP, and coordinated multi-agent workflows.",
      "for_whom": "People who want swarm, memory and policy tools on top of an existing coding agent.",
      "access_notes": "Prefer npx ruflo@latest init wizard, or in Claude Code /plugin marketplace add ruvnet/ruflo. There is also curl -fsSL https://cdn.jsdelivr.net/gh/ruvnet/ruflo@main/scripts/install.sh | bash. Read the script before running it. Mods run with your account's permissions; review them before installing. MIT.",
      "source_url": "https://github.com/ruvnet/ruflo",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "anthropic-cybersecurity-skills",
      "name": "Anthropic Cybersecurity Skills",
      "category": "Skills and learning",
      "url": "https://github.com/mukul975/Anthropic-Cybersecurity-Skills",
      "description": "An independent community library of 818 cybersecurity skills in the agentskills.io format, mapped to MITRE ATT&CK, NIST CSF 2.0 and related frameworks. Not affiliated with Anthropic.",
      "for_whom": "Security practitioners whose agents need structured playbooks for authorised testing, defence and education.",
      "access_notes": "Install with npx skills add mukul975/Anthropic-Cybersecurity-Skills. Apache-2.0. Includes offensive and dual-use techniques. Use only on systems you own or have written permission to test. A listed skill is not a security audit of your environment.",
      "source_url": "https://github.com/mukul975/Anthropic-Cybersecurity-Skills",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "context-mode",
      "name": "Context Mode",
      "category": "MCP and integrations",
      "url": "https://github.com/mksglu/context-mode",
      "description": "An MCP server and hooks layer that sandboxes large tool output, keeps a local session index, and can run analysis scripts so agents do not dump whole files into context.",
      "for_whom": "People running Claude Code or other supported clients whose context windows fill with tool output.",
      "access_notes": "In Claude Code: /plugin marketplace add mksglu/context-mode then /plugin install context-mode@context-mode. MCP-only: claude mcp add context-mode -- npx -y context-mode. ctx_execute can run code on your machine. Elastic License 2.0: you may not offer it as a hosted service that exposes its features.",
      "source_url": "https://github.com/mksglu/context-mode",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "agentglass",
      "name": "agentglass",
      "category": "Agent tools",
      "url": "https://sirallap.github.io/agentglass/",
      "description": "A local desktop workspace that gathers coding-agent terminals, diffs, pull requests, approvals and a browser they can drive into one window.",
      "for_whom": "People running Claude Code, Codex, Gemini CLI or OpenCode on their own machine, often several at once.",
      "access_notes": "Download from GitHub releases. macOS builds are unsigned. Opening it is your call. Data stays in local SQLite. Agents run with your permissions. It controls what they can approve, but it doesn't sandbox them. MIT.",
      "source_url": "https://github.com/SirAllap/agentglass",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "jcodemunch-mcp",
      "name": "jCodeMunch MCP",
      "category": "MCP and integrations",
      "url": "https://github.com/jgravelle/jcodemunch-mcp",
      "description": "A local MCP server that indexes a codebase with tree-sitter and returns the function or class an agent asked for, instead of whole files.",
      "for_whom": "People whose coding agents spend context reading large files in Claude Code, Cursor, Codex or other MCP clients.",
      "access_notes": "Install with uv tool install jcodemunch-mcp, then jcodemunch-mcp init. Indexes live at ~/.code-index/. Free for personal use. Commercial use needs a paid licence. Default install sends an anonymous savings counter; set share_savings false to opt out.",
      "source_url": "https://github.com/jgravelle/jcodemunch-mcp",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "oya-browser",
      "name": "Oya Browser",
      "category": "Agent tools",
      "url": "https://oyabrowser.com",
      "description": "A browser people and agents share: desktop app, Node SDK, remote MCP, and optional self-host, with human takeover when a task needs it.",
      "for_whom": "People whose agents need a signed-in browser they can watch and take over.",
      "access_notes": "Desktop app from oyabrowser.com. SDK is npm install @oya-ai/browser with OYA_API_KEY. Remote MCP is https://oyabrowser.com/mcp/pool with that key. Self-host installer is curl -fsSL https://raw.githubusercontent.com/OyadotAI/oya-browser/main/install.sh | sh. Read the script before running it. Can reuse logins imported from Chrome, Arc, Brave, Edge or Firefox. SDK and CLI are MIT. The rest of the project is under the Sustainable Use License.",
      "source_url": "https://github.com/OyadotAI/oya-browser",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "orchestkit",
      "name": "OrchestKit",
      "category": "Skills and learning",
      "url": "https://orchestkit.dev",
      "description": "A free Claude Code plugin of skills, agents and hooks for review, testing, security and memory, with a smaller pack for Cursor and Codex.",
      "for_whom": "People who want those playbooks and quality gates on Claude Code or a compatible host.",
      "access_notes": "Claude Code: claude plugin marketplace add yonatangross/orchestkit && claude plugin install ork@orchestkit, then /ork:setup. Hooks read tool events and write local metrics under ~/.local/state/orchestkit/. Prompt text is not recorded. Network telemetry is off unless you set a destination. MIT.",
      "source_url": "https://github.com/yonatangross/orchestkit",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "apra-fleet",
      "name": "apra-fleet",
      "category": "Agent tools",
      "url": "https://github.com/Apra-Labs/apra-fleet",
      "description": "A local control plane that registers real machines as fleet members and runs durable multi-agent workflows across Claude, Codex, Copilot and other providers.",
      "for_whom": "People coordinating coding agents on more than one machine they already own.",
      "access_notes": "Requires Node.js 22.16 or later. npm install -g @apralabs/apra-fleet, then apra-fleet install and apra-fleet start. MCP is http://localhost:7523/mcp by default. Secrets are entered out of band and never shown to the model. Apache-2.0.",
      "source_url": "https://github.com/Apra-Labs/apra-fleet",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "codegraph",
      "name": "CodeGraph",
      "category": "Agent tools",
      "url": "https://colbymchenry.github.io/codegraph/",
      "description": "A local code knowledge graph that answers with symbols, call paths and blast radius so coding agents spend fewer file reads.",
      "for_whom": "People whose Claude Code, Cursor, Codex, Gemini, OpenCode, Copilot or similar agent needs a live map of a repository.",
      "access_notes": "Install with npm i -g @colbymchenry/codegraph, then codegraph install and, in each project, codegraph init. The README also offers curl -fsSL https://raw.githubusercontent.com/colbymchenry/codegraph/main/install.sh | sh. Read the script before running it. Indexes live in .codegraph/ as local SQLite. The installer asks about anonymous usage telemetry; turn it off with codegraph telemetry off. Hosted product waitlist is getcodegraph.com. MIT.",
      "source_url": "https://github.com/colbymchenry/codegraph",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "ux-ui-agent-skills",
      "name": "UX/UI Agent Skills",
      "category": "Skills and learning",
      "url": "https://plugin87.github.io/ux-ui-agent-skills/",
      "description": "A design-system kit for coding agents (also called XIAS): tokens, 26 skills, 52 objective gates, and a library of design-system specs.",
      "for_whom": "People whose agents design or review UI in Claude Code, Codex, Cursor, Gemini CLI or an MCP client.",
      "access_notes": "Claude Code: /plugin marketplace add plugin87/ux-ui-agent-skills then /plugin install ux-ui-agent-skills@ux-ui-agent-skills. Other hosts: npx ux-ui-agent-skills init, or Homebrew plugin87/tap/ux-ui-agent-skills. MCP is claude mcp add ux-ui-gates -- npx -y --package=ux-ui-agent-skills ux-ui-mcp. 34 of the 52 gates open a real browser using Chrome on the machine or npx playwright install chrome. Live demo needs no install. MIT.",
      "source_url": "https://github.com/plugin87/ux-ui-agent-skills",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "ai-marketing-skills",
      "name": "AI Marketing Skills",
      "category": "Skills and learning",
      "url": "https://github.com/ericosiu/ai-marketing-skills",
      "description": "Open-source Claude Code skills for growth experiments, sales pipeline, content ops, outbound, SEO, finance and related marketing workflows, published by Single Grain.",
      "for_whom": "Marketing and sales teams whose coding agent should run those playbooks.",
      "access_notes": "Clone the repo, then copy each skill directory (SKILL.md plus any scripts, references or agents) into your agent's skills folder. Categories also ship Python scripts; pip install -r requirements.txt and fill .env with the API keys that category needs. Local usage logs live at ~/.ai-marketing-skills/analytics/. Remote telemetry stays off until you opt in. MIT.",
      "source_url": "https://github.com/ericosiu/ai-marketing-skills",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "jev-ultrafast",
      "name": "Jev Ultrafast",
      "category": "Agent tools",
      "url": "https://github.com/browser-use/jev-ultrafast",
      "description": "A local Chrome agent from Browser Use. One model chooses each click or field, and a smaller model writes text only when a field needs typing.",
      "for_whom": "People who want a Chrome agent for a single goal, with a local inspector they can pause before a click.",
      "access_notes": "Clone the repo, uv sync, then set TYPESAFE_API_KEY and TEXT_MODEL_API_KEY in .env. TEXT_MODEL_API_KEY is an OpenRouter key in the example. Chrome connects through Browser Harness; allow remote debugging when prompted. Owned tabs share your existing Chrome profile. Local inspector is http://127.0.0.1:8766. MIT.",
      "source_url": "https://github.com/browser-use/jev-ultrafast",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "boop",
      "name": "Boop",
      "category": "Agent tools",
      "url": "https://github.com/chrisgreg/boop",
      "description": "A self-hosted notification inbox: apps POST events, they land in local SQLite, and an iOS app you build can show them on your phone.",
      "for_whom": "Developers and agents that need a private event inbox they run themselves.",
      "access_notes": "Clone then docker compose up, or run a GitHub release binary. Data lives in a local SQLite file. APNs credentials are optional. Set BOOP_ADMIN_USER and BOOP_ADMIN_PASSWORD for the web UI, or put the server behind your own proxy. Read-only MCP is POST /mcp with BOOP_MCP_TOKEN; Settings can turn that endpoint off. You build and sign the iOS app. MIT.",
      "source_url": "https://github.com/chrisgreg/boop",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "solid-glass",
      "name": "Solid Glass",
      "category": "Skills and learning",
      "url": "https://deeplethe.github.io/solid-glass",
      "description": "A shadcn/ui stylesheet and component registry for agent workspaces: status, composer, tool steps, diffs and related screens.",
      "for_whom": "People building agent UIs on React 19, Tailwind CSS 4 and shadcn/ui.",
      "access_notes": "Start from a shadcn/ui project, then npx shadcn@latest add deeplethe/solid-glass/solid-glass and import the stylesheet after Tailwind and shadcn. Extra components such as status-glyph install the same way. MIT.",
      "source_url": "https://github.com/deeplethe/solid-glass",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "overmind",
      "name": "Overmind",
      "category": "Platforms",
      "url": "https://www.overmindlab.ai/",
      "description": "A hosted or self-hosted platform that turns production traces into evals, prompt experiments and fine-tuned models for an agent you already run.",
      "for_whom": "Teams who want to train and score a specialised agent from their own traces.",
      "access_notes": "SDK and CLI: pip install overmind, then overmind init and overmind sync. Hosted console is console.overmindlab.ai with a project API key. MCP is https://api.overmindlab.ai/api/mcp/ with X-Api-Key. Self-host is docker compose; the API needs OpenRouter, Modal, AWS and Hugging Face keys before it boots. SDK and CLI are MIT. The platform is AGPL-3.0. SDK and CLI send anonymous usage to PostHog; opt out with OVERMIND_ANALYTICS_ENABLED=false or DO_NOT_TRACK=1.",
      "source_url": "https://github.com/overmind-core/overmind",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "laya",
      "name": "Laya",
      "category": "Agent tools",
      "url": "https://nandhakishorm.github.io/laya/",
      "description": "A local decision model that answers typed choice, score and yes/no questions over text in one forward pass, with a router that picks a checkpoint per request.",
      "for_whom": "People whose agents need typed choice, score or yes/no answers over text.",
      "access_notes": "Python 3.10 or later. python -m pip install laya. The first predict downloads a Hugging Face checkpoint. Optional MCP: pip install \"laya[mcp]\" then laya-mcp-server. Optional HTTP playground: pip install \"laya[serve]\". Apache-2.0.",
      "source_url": "https://github.com/NandhaKishorM/laya",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "product-launch-motion",
      "name": "Product Launch Motion",
      "category": "Skills and learning",
      "url": "https://github.com/AbubakrChan/product-launch-motion",
      "description": "A Claude Code skill that reads a website URL and renders a local launch film with Playwright, FFmpeg and music-timed springs.",
      "for_whom": "People who want a product launch video directed from their site inside Claude Code.",
      "access_notes": "npx skills add AbubakrChan/product-launch-motion. Needs Claude Code, Node 20 or later, Playwright, FFmpeg, and Python with numpy. Renders on the local machine. MIT on the skill and references. The sample films belong to Cheerful, and the MIT licence doesn't cover them.",
      "source_url": "https://github.com/AbubakrChan/product-launch-motion",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "jev-seo",
      "name": "jev-seo",
      "category": "Skills and learning",
      "url": "https://github.com/AgriciDaniel/jev-seo",
      "description": "A local Python CLI and Claude Code skill that crawls a site, scores technical rules, optionally has the Jev model from TypeSafe judge each page, and writes a PDF, Excel tracker and Markdown from one audit record.",
      "for_whom": "People who want a live site audit with ranked, evidence-linked fixes from a homepage URL.",
      "access_notes": "Python 3.10 or later. git clone, then python3 -m venv and pip install -r requirements.txt. WeasyPrint needs Pango. Set TYPESAFE_API_KEY in .env for Jev judgments; without it the audit still runs as a partial audit. Optional PAGESPEED_API_KEY, and for --full DATAFORSEO_USERNAME and DATAFORSEO_PASSWORD. Optional Playwright Chromium for JavaScript-only pages. Reports land under jev-seo-reports/. Claude Code: ln -s the clone into ~/.claude/skills/jev-seo. MIT. Bundled fonts are SIL. Jev citability answers are model judgments of a page.",
      "source_url": "https://github.com/AgriciDaniel/jev-seo",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "monid",
      "name": "Monid",
      "category": "MCP and integrations",
      "url": "https://monid.ai/",
      "description": "A hosted MCP, CLI and skill for discovering, inspecting and running third-party data endpoints against one Monid balance. The public repo is the MIT Deno connector framework those endpoints are written in.",
      "for_whom": "Teams who want one billed catalog of agent tools, or to add a connector as a pull request.",
      "access_notes": "Hosted MCP is https://mcp.monid.ai/v1 and signs in with a Monid account. Skill setup is the public file https://monid.ai/SKILL.md plus an API key from app.monid.ai. CLI is npm install -g @monid-ai/cli, then monid keys add. Hosted runs spend a prepaid balance or x402 USDC (a stablecoin payment), priced per call or per result on each endpoint. Local clone needs Deno 2.x; deno task check and deno task test run offline, and engine:run needs that provider's vendor key. MIT.",
      "source_url": "https://github.com/monid-ai/monid",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "browserskill",
      "name": "BrowserSkill",
      "category": "Agent tools",
      "url": "https://github.com/Tencent/BrowserSkill",
      "description": "A CLI, Chromium extension and agent skill that drives Chrome or Edge through the profile you are already signed into, in a separate Agent Window.",
      "for_whom": "People whose agents need to read, click and fill sites they already use, without a separate browser account.",
      "access_notes": "Installer is curl -fsSL https://raw.githubusercontent.com/Tencent/BrowserSkill/main/install.sh | sh. Read the script before running it. Then install the Chrome or Edge extension, enable the local connection, and run bsk install-skill. The Agent Window shares that profile's website logins. Optional remote pairing uses authenticated WSS from the browser. MIT.",
      "source_url": "https://github.com/Tencent/BrowserSkill",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "seomator-seo-audit",
      "name": "SEOmator SEO Audit",
      "category": "Skills and learning",
      "url": "https://github.com/seo-skills/seo-audit-skill",
      "description": "A local CLI, Electron app and Claude Code skill that crawls a site, scores technical, content and AI-crawler checks, and writes console, JSON, HTML, Markdown or LLM XML reports.",
      "for_whom": "People who want a local site audit they can run from a terminal, a desktop window or Claude Code.",
      "access_notes": "Node.js 20.3 or later. npm install -g @seomator/seo-audit, then seomator audit URL. For Core Web Vitals, npx playwright install chromium. Audits land in ~/.seomator by default; seomator serve binds loopback with a per-launch token. Claude Code: npx skills add seo-skills/seo-audit-skill. MIT. This entry covers the open-source audit engine only.",
      "source_url": "https://github.com/seo-skills/seo-audit-skill",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "page-agent",
      "name": "Page Agent",
      "category": "Agent tools",
      "url": "https://alibaba.github.io/page-agent/",
      "description": "An in-page JavaScript library that lets an LLM read the DOM as text and act on the page it is embedded in.",
      "for_whom": "People adding a copilot to a site they control, or trying one in the optional Chrome extension.",
      "access_notes": "npm install page-agent, then construct PageAgent with a model, baseURL and apiKey. The demo CDN script uses a free testing LLM API for evaluation only; that path processes data in Mainland China and is not for production. Bring your own key for real use. Optional Chrome extension sends task text and cleaned HTML to the configured LLM. MIT.",
      "source_url": "https://github.com/alibaba/page-agent",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "hallmark",
      "name": "Hallmark",
      "category": "Skills and learning",
      "url": "https://www.usehallmark.com/",
      "description": "A design skill that picks a theme, builds a self-contained HTML page from your brief, and lints it in a browser for contrast, layout and common machine-made tells.",
      "for_whom": "People who want a coding agent to design a page with a named theme and a local lint pass.",
      "access_notes": "npx skills add nutlope/hallmark -g. Needs Node 18 or later. Browser checks need puppeteer-core and Chrome; static checks still run without them. MIT. Bundled photo index points at Wikimedia Commons; each photograph keeps its own licence and is credited on the page.",
      "source_url": "https://github.com/Nutlope/hallmark",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "openbot",
      "name": "OpenBot",
      "category": "Platforms",
      "url": "https://www.copilotkit.ai/openbot",
      "description": "A self-hosted AG-UI coworker app. Each bot gets its own computer, browser logins and files, and every action is decided and recorded before it runs.",
      "for_whom": "Teams that want a clone-and-own agent workspace on their own infrastructure, with their own model keys.",
      "access_notes": "Clone https://github.com/CopilotKit/OpenBot. Needs Docker, Bun 1.3 or later, a CopilotKit Intelligence project, and a model key. Default OPENBOT_SINGLE_USER admits every request as one administrator until you turn sign-in on. Credentials are encrypted at rest. Published image ghcr.io/copilotkit/openbot. MIT. Marked beta.",
      "source_url": "https://github.com/CopilotKit/OpenBot",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "superpowers",
      "name": "Superpowers",
      "category": "Skills and learning",
      "url": "https://github.com/obra/superpowers",
      "description": "A skills pack that makes a coding agent specify, plan, test and review before it writes code.",
      "for_whom": "People who want a spec-plan-TDD workflow in Claude Code, Codex, Cursor and other coding agents.",
      "access_notes": "Claude Code: /plugin install superpowers@claude-plugins-official. Other harnesses have their own plugin install in the README. Optional visual companion loads a logo from primeradiant.com with the Superpowers version; set SUPERPOWERS_DISABLE_TELEMETRY to turn that off. MIT.",
      "source_url": "https://github.com/obra/superpowers",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "officecli",
      "name": "OfficeCLI",
      "category": "Agent tools",
      "url": "https://officecli.ai",
      "description": "A single-binary CLI that creates, reads and edits Word, Excel and PowerPoint files without installing Microsoft Office.",
      "for_whom": "People whose agents need to build or change Office documents on a machine that has no Office suite.",
      "access_notes": "Installer is curl -fsSL https://raw.githubusercontent.com/iOfficeAI/OfficeCLI/main/install.sh | bash. Read the script before running it. Also brew install officecli, npm install -g @officecli/officecli, or GitHub Releases. officecli install puts the binary on PATH and writes a skill into coding agents it finds. Auto-update is on by default; officecli config autoUpdate false or OFFICECLI_SKIP_UPDATE=1 turns it off. Config lives in ~/.officecli. Built-in MCP: officecli mcp claude. Apache-2.0.",
      "source_url": "https://github.com/iOfficeAI/OfficeCLI",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "spec-kit",
      "name": "Spec Kit",
      "category": "Skills and learning",
      "url": "https://github.github.io/spec-kit/",
      "description": "A GitHub toolkit that gives a coding agent spec-driven build, bug-fix and idea-assessment processes, plus templates you can replace with your own.",
      "for_whom": "People who want a coding agent to work from a written spec, a bug report, or an idea assessment rather than jumping straight to code.",
      "access_notes": "Python 3.11 or later and uv. uv tool install specify-cli, then specify init my-project --integration copilot (or another listed agent). Bug-fix and assessment extensions are specify extension add bug and specify extension add assess. Community catalog listings are unvetted. MIT.",
      "source_url": "https://github.com/github/spec-kit",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "opencode",
      "name": "OpenCode",
      "category": "Agent tools",
      "url": "https://opencode.ai",
      "description": "An open source coding agent you run in a terminal, with a desktop app and a read-only plan mode.",
      "for_whom": "People who want a local coding agent they can switch between full-access build and read-only plan.",
      "access_notes": "Installer is curl -fsSL https://opencode.ai/v2/install | bash. Read the script before running it. Also npm i -g @opencode/cli@latest or brew install anomalyco/tap/opencode-v2. The script installs to $HOME/.opencode/bin. OpenCode 1 and OpenCode 2 both use the opencode command and cannot sit side by side under that name. Needs API keys for the models you use. MIT.",
      "source_url": "https://github.com/anomalyco/opencode",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "orca",
      "name": "Orca",
      "category": "Platforms",
      "url": "https://onorca.dev",
      "description": "A desktop app that runs coding agents side by side, each in its own git worktree, with a phone companion to watch and steer them.",
      "for_whom": "People who want several CLI coding agents working in parallel on one machine, with a phone app to follow them.",
      "access_notes": "Download from https://onorca.dev/download or GitHub Releases. macOS Homebrew is brew install --cask stablyai/orca/orca; a bare brew install --cask orca is a different Plotly app. Mobile companion is on the App Store and as an Android APK. The README points to privacy and telemetry docs for usage data and how to opt out. MIT.",
      "source_url": "https://github.com/stablyai/orca",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "marketing-skills",
      "name": "Marketing Skills",
      "category": "Skills and learning",
      "url": "https://marketing-skills.com",
      "description": "A pack of marketing skills for coding agents covering conversion, copy, SEO, ads, analytics and growth.",
      "for_whom": "Technical marketers and founders who want a coding agent to help with CRO, copy, SEO and measurement.",
      "access_notes": "npx skills add coreyhaines31/marketingskills. From inside Claude Code, pass -a claude-code so it lands in .claude/skills. Claude Code plugin: /plugin marketplace add coreyhaines31/marketingskills then /plugin install marketing-skills. MIT. Verified partners fund the library and sit beside the integrations; the README says they do not change what the core skills recommend.",
      "source_url": "https://github.com/coreyhaines31/marketingskills",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "archify",
      "name": "Archify",
      "category": "Skills and learning",
      "url": "https://archify.si",
      "description": "A skill that turns a description or a repository into a self-contained interactive HTML diagram you can open in a browser.",
      "for_whom": "People who want a coding agent to draw an architecture, sequence or explainer page they can share as one file.",
      "access_notes": "npx skills add tt-a1i/archify -g. Optional preview binds a random port on 127.0.0.1. Archify may GET a stable-release manifest to show an update reminder; set ARCHIFY_UPDATE_CHECK_DISABLED=1 to turn that off. Third-party paid services listed in the README are run by those providers. Apache-2.0.",
      "source_url": "https://github.com/tt-a1i/archify",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "crawl4ai",
      "name": "Crawl4AI",
      "category": "Agent tools",
      "url": "https://docs.crawl4ai.com",
      "description": "An open-source crawler that turns a page into LLM-ready Markdown, with a CLI, Python library and a Docker server.",
      "for_whom": "People who want to scrape pages into Markdown on their own machine.",
      "access_notes": "pip install -U crawl4ai, then crawl4ai-setup to install the browser. CLI is crwl URL -o markdown. Docker server listens on port 11235 and needs CRAWL4AI_API_TOKEN; without a token it answers only inside the container. Optional hosted cloud at crawl4ai.com uses its own key and has a free plan alongside paid ones. Apache-2.0, plus a clause that any public use must credit the project in a README, About page or acknowledgments.",
      "source_url": "https://github.com/unclecode/crawl4ai",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "serviette",
      "name": "serviette",
      "category": "Platforms",
      "url": "https://github.com/pathwaycom/serviette",
      "description": "A RAG server that watches a folder of documents, keeps a vector index live, and serves a chat UI plus REST API with cited answers.",
      "for_whom": "People who want answers from their own files that stay current as those files change, on a machine they control.",
      "access_notes": "pip 23.1 or later. pip install serviette. Needs a free Pathway licence in PATHWAY_LICENSE_KEY from pathway.com/framework/get-license (GitHub or LinkedIn sign-in). Default server binds localhost:8989 with no built-in auth. Local embeddings extra is serviette[local]. MIT.",
      "source_url": "https://github.com/pathwaycom/serviette",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "deerflow",
      "name": "DeerFlow",
      "category": "Platforms",
      "url": "https://deerflow.tech",
      "description": "A self-hosted agent harness that runs sub-agents, skills, memory and sandboxes for long research and coding jobs.",
      "for_whom": "People who want a local super-agent stack they can configure with their own model keys.",
      "access_notes": "Clone https://github.com/bytedance/deer-flow then make setup. Docker is make docker-init and make docker-start. Python 3.12 or later and Node 22 or later for a local run. The Docker stack and local start bind to 127.0.0.1. Treat Gateway admin as code execution on the host. Set BIND_HOST only after you have put auth in place. MIT.",
      "source_url": "https://github.com/bytedance/deer-flow",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "last30days",
      "name": "last30days",
      "category": "Skills and learning",
      "url": "https://github.com/mvanhorn/last30days-skill",
      "description": "A research skill that searches Reddit, Hacker News, GitHub, Polymarket and optional social APIs, then writes a cited brief from the last 30 days.",
      "for_whom": "People who want a coding agent to brief them on a person, product or topic from recent public conversation.",
      "access_notes": "Claude Code: /plugin marketplace add mvanhorn/last30days-skill then /plugin install last30days. Other hosts: npx skills add mvanhorn/last30days-skill -g. Reddit, HN, Polymarket and GitHub work with no keys. Extra sources need API keys or a logged-in browser. Needs Python 3.12 or later. MIT.",
      "source_url": "https://github.com/mvanhorn/last30days-skill",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "openclaw",
      "name": "OpenClaw",
      "category": "Platforms",
      "url": "https://openclaw.ai",
      "description": "A self-hosted assistant gateway that meets you in the chat apps you already use, with native apps for macOS, iOS, Android, Windows and Linux.",
      "for_whom": "People who want one local assistant that can talk on WhatsApp, Slack, Telegram and other channels, using their own model keys.",
      "access_notes": "Installer is curl -fsSL https://openclaw.ai/install.sh | bash. Read the script before running it. Also npm install -g openclaw@latest --allow-scripts=openclaw. Needs Node 24.22.1 or later, or Node 26.12.1 or later. After npm, run openclaw onboard --install-daemon. Daily version check is on by default; anonymous feature statistics are opt-in; update.checkOnStart: false turns both off. Tools run on the host unless you configure sandboxing. Treat inbound messages as untrusted. MIT.",
      "source_url": "https://github.com/openclaw/openclaw",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "deepseek-harness",
      "name": "DeepSeek Harness",
      "category": "Platforms",
      "url": "https://deepseek-harness.github.io/deepseek-harness/",
      "description": "An open-source agent harness from DeepSeek where every capability is a plugin, with a local web UI.",
      "for_whom": "People who want to run DeepSeek's plugin-based agent stack on their own machine.",
      "access_notes": "npx @deepseek-ai/dsh web. Default web UI is http://127.0.0.1:3080. Marked developer preview with expected breaking changes. The SAFETY notice says it can execute model-generated code, load plugins, and has not been security audited. MIT.",
      "source_url": "https://github.com/deepseek-ai/deepseek-harness",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "mattpocock-skills",
      "name": "Matt Pocock Skills",
      "category": "Skills and learning",
      "url": "https://github.com/mattpocock/skills",
      "description": "A pack of engineering skills for coding agents covering grilling, specs, TDD, architecture and pull-request shape.",
      "for_whom": "People who want a coding agent to interview them, write a spec, then implement with tests and a review.",
      "access_notes": "Claude Code: claude plugin install mattpocock-skills@claude-plugins-official. Other hosts: npx skills@latest add mattpocock/skills. Pick the plugin or the copied files for each agent; installing both puts every skill in twice. Run /setup-matt-pocock-skills once per repo. MIT.",
      "source_url": "https://github.com/mattpocock/skills",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "career-ops",
      "name": "career-ops",
      "category": "Skills and learning",
      "url": "https://career-ops.org",
      "description": "A local job-search skill that scores a listing against your CV, drafts the application, and leaves Submit to you.",
      "for_whom": "People who want a coding agent to filter and prepare applications on their own machine.",
      "access_notes": "npx @santifer/career-ops init, then open your coding agent in that folder. Claude Code plugin: /plugin marketplace add career-ops-hq/career-ops then /plugin install career-ops@career-ops. Data stays in the workspace (plugin installs use ~/career-ops-data). It drafts CVs, cover letters and emails; it never POSTs an application or sends mail. MIT.",
      "source_url": "https://github.com/career-ops-hq/career-ops",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "gstack",
      "name": "gstack",
      "category": "Skills and learning",
      "url": "https://github.com/garrytan/gstack",
      "description": "A skills pack that turns a coding agent into a sprint team: office hours, architecture, review, browser QA and a ship command.",
      "for_whom": "People who want named specialist skills on Claude Code, Codex, OpenCode and other hosts.",
      "access_notes": "Needs Git, Bun 1.4.2 or later, and Node on Windows. git clone --single-branch --depth 1 https://github.com/garrytan/gstack.git ~/.claude/skills/gstack && cd ~/.claude/skills/gstack && ./setup. Other hosts: ./setup --host auto. Team mode runs a silent hourly update check. MIT.",
      "source_url": "https://github.com/garrytan/gstack",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "hindsight",
      "name": "Hindsight",
      "category": "Agent tools",
      "url": "https://hindsight.vectorize.io",
      "description": "An agent memory server that retains, recalls and reflects, so an agent can learn across sessions.",
      "for_whom": "People who want long-term memory for a coding agent or a custom agent they run themselves.",
      "access_notes": "Docker image ghcr.io/vectorize-io/hindsight:latest publishes API on localhost:8888 and UI on localhost:9999, and needs an LLM provider: an API key, a local model such as Ollama, or an existing Claude, ChatGPT, Cursor or Copilot subscription. Also pip install hindsight-api. MCP is http://localhost:8888/mcp/{bank_id}/. Coding agents: npx @vectorize-io/hindsight-coding-agents install all. CLI installer is curl -fsSL https://hindsight.vectorize.io/get-cli | bash. Read the script before running it. Optional hosted cloud is a paid product. MIT.",
      "source_url": "https://github.com/vectorize-io/hindsight",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "huginn",
      "name": "Huginn",
      "category": "Platforms",
      "url": "https://github.com/huginn/huginn",
      "description": "A self-hosted agent system that watches the web, mail and feeds, then takes actions you define.",
      "for_whom": "People who want IFTTT-style automations on a server they control, with their data staying there.",
      "access_notes": "Quick try: docker run -it -p 3000:3000 ghcr.io/huginn/huginn then open http://localhost:3000 and log in as admin with the password printed once in the container log. Production needs MySQL or PostgreSQL and a web process plus a worker. MIT.",
      "source_url": "https://github.com/huginn/huginn",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "agency-agents",
      "name": "The Agency",
      "category": "Skills and learning",
      "url": "https://github.com/msitarzewski/agency-agents",
      "description": "A large roster of specialist agent files for coding tools, covering engineering, design, sales, marketing and operations.",
      "for_whom": "People who want to drop named specialist agents into Claude Code, Cursor, Codex and other hosts.",
      "access_notes": "Native app at https://agencyagents.app, or brew install --cask msitarzewski/agency-agents/agency-agents. From a clone: ./scripts/install.sh --tool claude-code, or --tool with another listed host. Install a subset with --division or --agent. OpenCode currently registers about 119 agents and drops the rest. MIT.",
      "source_url": "https://github.com/msitarzewski/agency-agents",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "agent-tars",
      "name": "Agent TARS",
      "category": "Platforms",
      "url": "https://agent-tars.com",
      "description": "A multimodal agent stack with a CLI and web UI, plus a desktop GUI agent that can operate a local or remote computer and browser.",
      "for_whom": "People who want a vision-capable agent that can drive a browser or desktop, using their own model keys.",
      "access_notes": "Needs Node 22 or later. npx @agent-tars/cli@latest, or npm install @agent-tars/cli@latest -g, then agent-tars --provider anthropic --model MODEL --apiKey KEY. The same repository ships UI-TARS Desktop. Treat computer and browser operators as full desktop control. Apache-2.0.",
      "source_url": "https://github.com/bytedance/UI-TARS-desktop",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "copilotkit",
      "name": "CopilotKit",
      "category": "Platforms",
      "url": "https://docs.copilotkit.ai",
      "description": "An SDK that puts an agent into a web, mobile or chat UI, with shared state, generative UI and human-in-the-loop pauses.",
      "for_whom": "Teams adding an agent to an app they already ship, or connecting one agent to Slack, Teams and similar channels.",
      "access_notes": "From the app root: npx --yes copilotkit@latest onboard start. New project: npx copilotkit@latest create. Optional skills: npx copilotkit@latest skills install. CopilotKit Intelligence is a separate hosted or self-hosted product. MIT.",
      "source_url": "https://github.com/CopilotKit/CopilotKit",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "unsloth",
      "name": "Unsloth",
      "category": "Agent tools",
      "url": "https://unsloth.ai/docs",
      "description": "A local app to run and train models, and to point coding agents at those models with one command.",
      "for_whom": "People who want Claude Code, Codex or OpenCode to use a model on their own machine.",
      "access_notes": "Desktop builds are on GitHub Releases. Studio installer is curl -fsSL https://unsloth.ai/install.sh | sh. Read the script before running it. Also brew install --cask unsloth. Point an agent with unsloth start claude (or codex, opencode, dsh, openclaw). Default studio is local; --secure or a non-loopback bind asks for an admin password. Core package is Apache-2.0; Unsloth Studio UI is AGPL-3.0.",
      "source_url": "https://github.com/unslothai/unsloth",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "claude-for-financial-services",
      "name": "Claude for Financial Services",
      "category": "Skills and learning",
      "url": "https://github.com/anthropics/financial-services",
      "description": "Reference agents and skills for investment banking, equity research, private equity and fund ops, drafted for a human to sign off.",
      "for_whom": "Firms that want Claude to draft models, memos and reconciliations under a qualified reviewer's control.",
      "access_notes": "Claude Code: claude plugin marketplace add anthropics/financial-services, then claude plugin install financial-analysis@claude-for-financial-services and the named agents you need. Cowork: Settings, Plugins, Add plugin, paste the repo URL. The README says nothing here is investment, legal, tax or accounting advice, and agents do not execute trades or post to a ledger. MCP data connectors may need a provider subscription. Apache-2.0.",
      "source_url": "https://github.com/anthropics/financial-services",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "llmfit",
      "name": "llmfit",
      "category": "Agent tools",
      "url": "https://github.com/AlexsJones/llmfit",
      "description": "A terminal tool that scores which local LLMs will fit your RAM, CPU and GPU, with a TUI and an optional web API.",
      "for_whom": "People choosing a local model for a coding agent or a laptop they already have.",
      "access_notes": "Installer is curl -fsSL https://llmfit.axjns.dev/install.sh | sh. Read the script before running it. Also brew install AlexsJones/llmfit/llmfit, winget install --exact --id AlexsJones.llmfit, or uvx llmfit. Default llmfit opens the TUI. llmfit serve --host 0.0.0.0 --port 8787 binds the API on every interface. MIT.",
      "source_url": "https://github.com/AlexsJones/llmfit",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "claude-code-templates",
      "name": "Claude Code Templates",
      "category": "Skills and learning",
      "url": "https://aitmpl.com",
      "description": "A catalog of Claude Code agents, commands, hooks, settings and MCP installs you can browse and add with one npx command.",
      "for_whom": "People who want a ready-made Claude Code stack of agents, commands and MCP installs.",
      "access_notes": "npx claude-code-templates@latest, then pick components, or pass --agent, --command, --mcp, --hook or --setting with --yes. The CLI sends anonymous usage tracking to aitmpl.com by default; set CCT_NO_TRACKING=true to turn it off. Analytics, chats and health-check are extra flags on the same CLI. Bundled third-party skills keep their original licences. MIT.",
      "source_url": "https://github.com/davila7/claude-code-templates",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "sim",
      "name": "Sim",
      "category": "Platforms",
      "url": "https://www.sim.ai",
      "description": "A workspace to build, deploy and monitor agents and workflows, with a visual builder, tables, files and a knowledge base.",
      "for_whom": "Teams that want a self-hosted or hosted agent workspace with MCP access from Claude Code and Codex.",
      "access_notes": "Cloud at sim.ai. Self-host: npx sim-setup. Read the script before running it. Then open http://localhost:3000. Needs Node 20 or later and Docker. Chat on a self-hosted install uses a Chat API key from sim.ai. Cloud MCP is https://mcp.sim.ai/mcp. Apache-2.0.",
      "source_url": "https://github.com/simstudioai/sim",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "book-to-skill",
      "name": "book-to-skill",
      "category": "Skills and learning",
      "url": "https://github.com/virgiliojr94/book-to-skill",
      "description": "A converter that turns a book, folder or set of documents you already have into a structured agent skill with on-demand chapters.",
      "for_whom": "People who want a coding agent to answer from a book or internal docs they own.",
      "access_notes": "npx skills add virgiliojr94/book-to-skill. Then /book-to-skill ./my-book.pdf. Extraction runs on your machine and the tool uploads nothing, but if your agent uses a cloud model, the text goes to that provider like any prompt. The MIT licence covers the converter. Books you process keep their own copyright. Keep generated skills of copyrighted books private. MIT.",
      "source_url": "https://github.com/virgiliojr94/book-to-skill",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "beads",
      "name": "Beads",
      "category": "Agent tools",
      "url": "https://beads.gascity.com/",
      "description": "A graph issue tracker for coding agents, with a CLI that stores tasks in a Dolt database so agents can claim ready work.",
      "for_whom": "Teams whose coding agents need a shared, dependency-aware task list across machines.",
      "access_notes": "Installer is curl -fsSL https://raw.githubusercontent.com/gastownhall/beads/main/scripts/install.sh | bash. Read the script before running it. Also brew install beads or npm install -g @beads/bd. Then bd init in your project, which writes AGENTS.md and installs Claude Code, Codex and Cursor integrations unless you pass --skip-agents or --stealth. MIT.",
      "source_url": "https://github.com/gastownhall/beads",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "picoclaw",
      "name": "PicoClaw",
      "category": "Agent tools",
      "url": "https://picoclaw.io",
      "description": "A small Go assistant that runs on a laptop or a cheap Linux board, with a local Web UI and chat-app channels.",
      "for_whom": "People who want a local assistant on modest hardware, using their own model keys.",
      "access_notes": "Download from picoclaw.io or GitHub Releases. picoclaw-launcher opens http://localhost:18800. The -public flag listens on every interface. Needs an LLM API key or a local model such as Ollama. Tools can read files and run commands on the host. Treat inbound messages as untrusted. Do not deploy to production before v1.0. PicoClaw has issued no official token; listings on token sites are scams. Official site is picoclaw.io. MIT.",
      "source_url": "https://github.com/sipeed/picoclaw",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "changedetection",
      "name": "changedetection.io",
      "category": "Agent tools",
      "url": "https://changedetection.io",
      "description": "A self-hosted watcher that checks web pages and notifies you when the content changes.",
      "for_whom": "People who want price, restock or page-content alerts from sites they choose to monitor.",
      "access_notes": "Self-host: docker run -d -p 127.0.0.1:5000:5000 -v datastore-volume:/datastore --name changedetection.io dgtlmoon/changedetection.io then open http://127.0.0.1:5000. Also pip3 install changedetection.io. Hosted cloud is a paid product. Optional AI rules send page diffs to the LLM provider you configure. Follow each site's terms and robots.txt. Apache-2.0.",
      "source_url": "https://github.com/dgtlmoon/changedetection.io",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "video-use",
      "name": "video-use",
      "category": "Skills and learning",
      "url": "https://github.com/browser-use/video-use",
      "description": "A coding-agent skill that transcribes a folder of takes and cuts a video from them.",
      "for_whom": "People who want Claude Code or Codex to edit talking-head or launch videos from local files.",
      "access_notes": "git clone https://github.com/browser-use/video-use then symlink the repo into your agent's skills directory. Needs ffmpeg and an ElevenLabs API key for transcription. uv sync or pip install -e . Hosted product is on a waitlist at video-use.com. MIT.",
      "source_url": "https://github.com/browser-use/video-use",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "archivebox",
      "name": "ArchiveBox",
      "category": "Platforms",
      "url": "https://archivebox.io",
      "description": "A self-hosted archiver that saves pages you give it as HTML, PDF, PNG, WARC and other ordinary files.",
      "for_whom": "People who want a local copy of bookmarks, research pages or public web content they choose to keep.",
      "access_notes": "Installer is curl -fsSL https://get.archivebox.io | bash. Read the script before running it. Also docker compose from docker-compose.archivebox.io, or uv tool install archivebox. Docker -p 5797:5797 and archivebox server 0.0.0.0:5797 bind every interface. Pages are submitted to archive.org by default. MIT.",
      "source_url": "https://github.com/ArchiveBox/ArchiveBox",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "brag",
      "name": "/brag",
      "category": "Skills and learning",
      "url": "https://github.com/latent-spaces/brag",
      "description": "An agent skill that turns the project you just built into a short launch video with music and share copy.",
      "for_whom": "Builders who want a coding agent to produce a shareable launch clip from the current repo.",
      "access_notes": "npx skills add https://github.com/latent-spaces/brag --skill brag. Claude Code: /plugin marketplace add latent-spaces/brag then /plugin install brag@brag. Needs Node 22 or later and ffmpeg. Hyperframes via npx hyperframes. Hosted shortcut is letsbrag.app. Bundled music is CC BY 4.0 from ende.app. MIT.",
      "source_url": "https://github.com/latent-spaces/brag",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "codexbar",
      "name": "CodexBar",
      "category": "Agent tools",
      "url": "https://codexbar.app",
      "description": "A macOS menu bar app, Linux desktop app and CLI that shows remaining usage windows across AI coding providers.",
      "for_whom": "People who need to see when Codex, Claude and other coding-plan quotas reset.",
      "access_notes": "macOS 14 or later: brew install --cask codexbar, or download from GitHub Releases. Linux: Qt desktop plus CLI via brew install steipete/tap/codexbar. Reuses existing provider sessions, cookies and API keys, and stores no passwords. Full Disk Access is optional for Safari cookies. Optional CLI serve defaults to 127.0.0.1:8080; a non-loopback bind needs a dashboard token and --allow-plain-http. MIT.",
      "source_url": "https://github.com/steipete/CodexBar",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "anymd",
      "name": "anymd",
      "category": "MCP and integrations",
      "url": "https://sylphxai.github.io/anymd/",
      "description": "A local Rust MCP server and CLI that turns PDFs, Office files, HTML, images, audio and video into Markdown for agents.",
      "for_whom": "People whose coding agents need to read local documents as Markdown.",
      "access_notes": "npx -y @sylphx/anymd setup. Needs Node 18 or later. Also brew install sylphxai/tap/anymd, pip, Docker or cargo. Local MIT binary needs no API key. OCR and ASR model downloads need explicit opt-in. Confine the MCP server with --allow-dir. Hosted Sylphx AI parse is a paid metered service that uses the same crates. anymd Pro is an optional one-time purchase for cite-check and video timelines. MIT.",
      "source_url": "https://github.com/SylphxAI/anymd",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "scrapegraph-ai",
      "name": "ScrapeGraphAI",
      "category": "Agent tools",
      "url": "https://github.com/ScrapeGraphAI/Scrapegraph-ai",
      "description": "A Python library that uses an LLM and graph pipelines to extract structured data from pages and local documents.",
      "for_whom": "People who want a self-hosted scraper driven by a prompt.",
      "access_notes": "pip install scrapegraphai then playwright install. Needs an LLM API key or a local model such as Ollama. The library sends anonymous usage metrics by default; set SCRAPEGRAPHAI_TELEMETRY_ENABLED=false to turn it off. This entry covers the MIT Python library. The managed cloud API is a paid product with a separate SDK. Follow each site's terms and robots.txt. MIT.",
      "source_url": "https://github.com/ScrapeGraphAI/Scrapegraph-ai",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "compound-engineering",
      "name": "Compound Engineering",
      "category": "Skills and learning",
      "url": "https://github.com/EveryInc/compound-engineering-plugin",
      "description": "A plugin of skills that runs a brainstorm, plan, build, review and capture-what-you-learned loop on a coding agent.",
      "for_whom": "Teams who want each change to leave notes the next agent can read.",
      "access_notes": "Claude Code: /plugin marketplace add EveryInc/compound-engineering-plugin then /plugin install compound-engineering. Cursor: /add-plugin compound-engineering. Codex CLI: codex plugin marketplace add EveryInc/compound-engineering-plugin then codex plugin add compound-engineering@compound-engineering-plugin. Existing installs must refresh the marketplace before /plugin update. /lfg can push, open a PR and watch CI; it merges only if you grant that. MIT.",
      "source_url": "https://github.com/EveryInc/compound-engineering-plugin",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "omlx",
      "name": "oMLX",
      "category": "Platforms",
      "url": "https://omlx.ai",
      "description": "A local LLM inference server for Apple Silicon, with a menu bar app, OpenAI-compatible API and SSD-backed KV cache.",
      "for_whom": "People who want coding agents and chat apps to call models that run on a Mac they already have.",
      "access_notes": "Needs macOS 15 or later and Apple Silicon. Download the .dmg from GitHub Releases, or brew tap jundot/omlx then brew install jundot/omlx/omlx. Default server is http://localhost:8000/v1. A non-loopback bind (--host 0.0.0.0) needs a main API key. Optional MCP via pip install mcp then omlx restart. Apache-2.0.",
      "source_url": "https://github.com/jundot/omlx",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "ego-lite",
      "name": "ego lite",
      "category": "Agent tools",
      "url": "https://lite.ego.app",
      "description": "A desktop browser that gives coding agents their own Spaces while they share your real logins and cookies through ego-browser.",
      "for_whom": "People who want an agent to use signed-in sites in a separate Space.",
      "access_notes": "macOS and Windows. npx skills add citrolabs/ego-lite, or download the app from lite.ego.app. On first launch it can migrate Chrome logins, cookies, extensions and bookmarks, and agents then use those sessions. Browsing data stays on the device. The app collects simple product signals such as whether it is the default browser. This entry covers the MIT skill repo. The browser is a separate free download. MIT.",
      "source_url": "https://github.com/citrolabs/ego-lite",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "eigent",
      "name": "Eigent",
      "category": "Agent tools",
      "url": "https://www.eigent.ai",
      "description": "An open-source desktop app that runs a single agent or a multi-agent workforce with browser, terminal, files and MCP on your machine.",
      "for_whom": "People who want a local Cowork-style desktop that can operate files, a browser and a terminal.",
      "access_notes": "Download from eigent.ai/download. Local deployment is docker compose in server/ plus npm run dev with VITE_USE_LOCAL_PROXY=true pointing at localhost:3001. Needs Node 18 to 22. Quick start git clone then npm install && npm run dev uses Eigent cloud and needs an account. Built-in browser and terminal toolkits can operate the desktop and signed-in sites. Cloud model providers receive the text you send them. Developer uvicorn --host 0.0.0.0 binds every interface. Apache-2.0.",
      "source_url": "https://github.com/eigent-ai/eigent",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "watch",
      "name": "/watch",
      "category": "Skills and learning",
      "url": "https://github.com/bradautomates/claude-video",
      "description": "An agent skill that turns a video URL or local file into timestamped frames and a transcript.",
      "for_whom": "People who want a coding agent to inspect a video as evidence.",
      "access_notes": "Claude Code: /plugin marketplace add bradautomates/claude-video then /plugin install watch@claude-video. Also npx skills add bradautomates/claude-video -g --skill watch. Needs Python 3.10 or later, ffmpeg and yt-dlp. Default Gemini engine uploads videos to Google; --engine local keeps extraction on the machine. Cookie files and --cookies-from-browser are opt-in. Claude Chat and Cowork are unsupported. MIT.",
      "source_url": "https://github.com/bradautomates/claude-video",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "mcp",
      "name": "Model Context Protocol",
      "category": "Protocols",
      "url": "https://modelcontextprotocol.io",
      "description": "An open protocol that connects LLM applications to tools, resources and data sources.",
      "for_whom": "People building hosts, clients or servers that speak MCP.",
      "access_notes": "Spec and docs at modelcontextprotocol.io. Official org is github.com/modelcontextprotocol. Python SDK (MIT): uv add \"mcp[cli]\" or pip install \"mcp[cli]\", Python 3.11 or later. TypeScript SDK at github.com/modelcontextprotocol/typescript-sdk. Public servers are listed in the Official MCP Registry already in this catalog. The servers repo keeps only steering-group reference servers. New spec and code contributions are Apache-2.0; some older MIT remains; docs excluding the spec are CC BY 4.0.",
      "source_url": "https://github.com/modelcontextprotocol/modelcontextprotocol",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "a2a",
      "name": "Agent2Agent (A2A)",
      "category": "Protocols",
      "url": "https://a2a-protocol.org",
      "description": "An open protocol for independent agents to discover each other and collaborate on tasks without exposing internal state.",
      "for_whom": "People connecting agents built on different frameworks.",
      "access_notes": "pip install a2a-sdk. Also official Go, JavaScript, Java, .NET and Rust SDKs. Spec v1.0 at a2a-protocol.org. Linux Foundation project, donated by Google. Apache-2.0.",
      "source_url": "https://github.com/a2aproject/A2A",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "agent-client-protocol",
      "name": "Agent Client Protocol",
      "category": "Protocols",
      "url": "https://agentclientprotocol.com",
      "description": "An open protocol that connects a code editor to a coding agent so they can share files, tools and a session.",
      "for_whom": "People wiring an editor such as Zed or JetBrains to a coding agent, or shipping either side of that pair.",
      "access_notes": "Spec at agentclientprotocol.com. Current stable protocol version is 1. TypeScript: npm install @agentclientprotocol/sdk. Rust: cargo add agent-client-protocol. Also official Python, Java and Kotlin SDKs. Apache-2.0.",
      "source_url": "https://github.com/agentclientprotocol/agent-client-protocol",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "opendataloader-pdf",
      "name": "OpenDataLoader PDF",
      "category": "Agent tools",
      "url": "https://opendataloader.org",
      "description": "A local PDF parser that turns documents into Markdown, JSON with bounding boxes, HTML or a Tagged PDF.",
      "for_whom": "People feeding PDFs to an agent or auto-tagging untagged files for accessibility.",
      "access_notes": "pip install -U opendataloader-pdf. Needs Java 11 or later and Python 3.11 or later. Also npm @opendataloader/pdf and Java Maven. Default conversion runs locally. Hybrid mode (pip install \"opendataloader-pdf[hybrid]\") starts a backend on port 5002 and sends complex pages to that AI backend. Auto-tagging to Tagged PDF is Apache-2.0. PDF/UA export is an enterprise add-on. Apache-2.0.",
      "source_url": "https://github.com/opendataloader-project/opendataloader-pdf",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "scrapling",
      "name": "Scrapling",
      "category": "Agent tools",
      "url": "https://github.com/D4Vinci/Scrapling",
      "description": "A Python scraping library with HTTP fetchers, stealth browsers, spiders and an MCP server for agents.",
      "for_whom": "People who want a coding agent or a script to fetch pages, render JavaScript and export Markdown or JSON.",
      "access_notes": "pip install scrapling. Browser fetchers need pip install \"scrapling[fetchers]\" then scrapling install. MCP extra is pip install \"scrapling[ai]\". StealthyFetcher can drive a browser, keep login sessions and solve Cloudflare challenges. robots_txt_obey is optional on spiders. Follow each site's terms and robots.txt. BSD-3-Clause.",
      "source_url": "https://github.com/D4Vinci/Scrapling",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "buzz",
      "name": "Buzz",
      "category": "Platforms",
      "url": "https://github.com/block/buzz",
      "description": "A self-hosted workspace where humans and agents share signed events on a relay you run.",
      "for_whom": "Teams who want agents in the same rooms as people, with their own keys and an audit trail.",
      "access_notes": "Download the desktop app from GitHub Releases, or git clone then just setup && just dev. Needs Docker. Default relay is ws://localhost:3000. Agents use buzz-cli with BUZZ_PRIVATE_KEY; they can open repos, send patches and run workflows on that relay. The Windows installer is unsigned. Apache-2.0.",
      "source_url": "https://github.com/block/buzz",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "opensandbox",
      "name": "OpenSandbox",
      "category": "Platforms",
      "url": "https://open-sandbox.ai",
      "description": "A sandbox runtime that gives agents isolated Docker or Kubernetes environments for commands, files, browsers and desktops.",
      "for_whom": "People who want coding agents to run sandboxes on their own infrastructure.",
      "access_notes": "uvx opensandbox-server init-config ~/.sandbox.toml --example docker then uvx opensandbox-server. Needs Docker and Python 3.10 or later. SDK: pip install opensandbox. CLI: pip install opensandbox-cli. MCP: pip install opensandbox-mcp then opensandbox-mcp --domain localhost:8080 --protocol http. Apache-2.0.",
      "source_url": "https://github.com/opensandbox-group/OpenSandbox",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "vphone-cli",
      "name": "vphone-cli",
      "category": "Agent tools",
      "url": "https://github.com/Lakr233/vphone-cli",
      "description": "A tool that runs a virtual iPhone on an Apple Silicon Mac for research, reverse engineering and debugging.",
      "for_whom": "People who need a local iOS guest on a Mac they already have.",
      "access_notes": "Needs a physical Apple Silicon Mac on macOS 15 or later. Download the notarized vphone-launchpad zip from GitHub Releases. Host setup uses Recovery commands csrutil enable --without debug and csrutil allow-research-guests enable. Optional API is --api-listen 127.0.0.1:8765 with a printed token. The project issues no token; listings on token sites are scams. MIT.",
      "source_url": "https://github.com/Lakr233/vphone-cli",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "data-formulator",
      "name": "Data Formulator",
      "category": "Agent tools",
      "url": "https://data-formulator.ai",
      "description": "A local workspace where an agent explores data, branches questions and draws charts from files, databases and warehouses you connect.",
      "for_whom": "Analysts who want an agent to load data, keep a visual thread of questions and share a report.",
      "access_notes": "uvx data_formulator, or pip install data_formulator then python -m data_formulator. Opens http://localhost:5567. Needs an LLM API key or a local model via LiteLLM. Desktop preview builds from GitHub Actions are unsigned. Connectors can reach files, databases and warehouses you configure. MIT.",
      "source_url": "https://github.com/microsoft/data-formulator",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "openwiki",
      "name": "OpenWiki",
      "category": "Skills and learning",
      "url": "https://github.com/langchain-ai/openwiki",
      "description": "A CLI that turns a repository into a linked Markdown wiki your coding agent can search, with facts tracked back to source lines.",
      "for_whom": "Teams who want agents to search a living wiki of the code.",
      "access_notes": "npm install -g openwiki. Needs Node 22.22.0 or later. Then openwiki integrations install claude (or codex, cursor, opencode). Uses the coding agent's existing model session. openwiki visualize serves 127.0.0.1 only; the graph page still loads libraries from a public CDN. Native CLI init writes provider keys to ~/.openwiki/.env. MIT.",
      "source_url": "https://github.com/langchain-ai/openwiki",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "rowboat",
      "name": "Rowboat",
      "category": "Agent tools",
      "url": "https://www.rowboatlabs.com",
      "description": "A local desktop assistant that indexes email, meetings and notes into a Markdown knowledge graph, with optional shared Spaces.",
      "for_whom": "People who want an assistant that keeps its vault on the machine and can still join a team room.",
      "access_notes": "Download from rowboatlabs.com/downloads or GitHub Releases. Indexes email, meetings, Slack and assistant chats into a local Markdown vault. Meeting notes tap the mic and speaker. The built-in browser is isolated from your main browser. Optional keys live in ~/.rowboat/config. Hosted Spaces sign in with Google or Microsoft. Self-host Harbor with pnpm in apps/harbor; default port 4272. Without AUTH_ISSUER Harbor uses dev tokens that must stay off the public internet. Apache-2.0.",
      "source_url": "https://github.com/rowboatlabs/rowboat",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "experiential",
      "name": "Experiential",
      "category": "Platforms",
      "url": "https://platform.experientiallabs.ai",
      "description": "An OpenAI-compatible gateway that routes hosted, BYOK and local models, with spend limits and traffic-based routing.",
      "for_whom": "Teams who want one API in front of several model providers, with a budget per identity.",
      "access_notes": "pip install experiential then exp. Local gateway is http://127.0.0.1:8000/v1. Hosted API is api.experientiallabs.ai. Anonymous PostHog product telemetry is on by default; exp config telemetry disable turns it off. exp capture (experimental, macOS) installs an extension and certificate to read your Codex and Claude Code desktop traffic, and sends those traces to your Experiential account. Apache-2.0.",
      "source_url": "https://github.com/experientiallabs/experiential",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "qm",
      "name": "QM",
      "category": "Platforms",
      "url": "https://github.com/yc-software/qm",
      "description": "A multiplayer agent harness for Slack and the web, with a personal sandbox per person and shared rooms.",
      "for_whom": "Startups who want each person to have their own agent workspace, plus shared rooms on Slack and the web.",
      "access_notes": "npm exec --yes --package=@yc-software/qm@latest -- qm init . --org <slug> --target <fly-or-aws>. Needs Node 24.15 or later. The agent acts with that person's credentials. Default security posture is Auto, which blocks private-network access. Strict pauses every harness tool call. Dangerous drops those gates. Sessions need DATABASE_URL and SESSION_STORE=postgres to survive restart. A third-party hosted version runs at agent37.com/qm. MIT.",
      "source_url": "https://github.com/yc-software/qm",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "cloudflare-os",
      "name": "Cloudflare OS",
      "category": "Platforms",
      "url": "https://os.cloudflare.app",
      "description": "An early-access workspace where agents build sandboxed apps (Gadgets) behind Gatekeepers that log and queue side-effect approvals.",
      "for_whom": "Companies who want an internal agent workspace with sandboxed apps and a security layer they can copy.",
      "access_notes": "pnpm run-local then visit http://localhost:8787. Needs pnpm. Early-access v2. Deploy to a Cloudflare account at os.cloudflare.app/deploy. Gadgets are sandboxed. Gatekeepers log actions and can queue side-effect approvals. Agents get only the resources you introduce. Apache-2.0.",
      "source_url": "https://github.com/cloudflare/cloudflare-os",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "orchestrator",
      "name": "Orchestrator.inc",
      "category": "Agent tools",
      "url": "https://orchestrator.inc",
      "description": "A local desktop workspace that runs a fleet of coding agents, each on its own branch and worktree, through plan, CI, review and merge.",
      "for_whom": "People who want several coding agents on one repo, each on its own branch.",
      "access_notes": "Download from orchestrator.inc/download or GitHub Releases. Local workers keep code on your machine. Clone to the cloud runs workers in hosted GitHub workspaces. Pair a phone from Settings, Connect Mobile. Product telemetry records an installation ID and GitHub username (and AO Cloud email if you sign in); turn it off in Settings, General, Privacy, Share usage analytics. Apache-2.0.",
      "source_url": "https://github.com/OrchestratorInc/agent-orchestrator",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "openai-mcp-extensions",
      "name": "OpenAI MCP Extensions",
      "category": "MCP and integrations",
      "url": "https://github.com/openai/mcp-extensions",
      "description": "An SDK and spec that add ChatGPT-specific MCP capabilities so plugins can open from the sidebar, handle files and take composer mentions.",
      "for_whom": "People building ChatGPT plugins that need more than a plain MCP server.",
      "access_notes": "npm install @openai/mcp-extensions, or pip install openai-mcp-extensions. For ChatGPT plugin developers. Try Bits & Bolts Remote from ChatGPT's plugin list. Apache-2.0.",
      "source_url": "https://github.com/openai/mcp-extensions",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "claude-obsidian",
      "name": "claude-obsidian",
      "category": "Skills and learning",
      "url": "https://github.com/AgriciDaniel/claude-obsidian",
      "description": "A Claude Code plugin and Agent Skills pack that turns inbox sources into a linked Markdown wiki you can open in Obsidian.",
      "for_whom": "People who keep research in an Obsidian vault and want Claude to file, cite and query it.",
      "access_notes": "claude plugin marketplace add AgriciDaniel/claude-obsidian then claude plugin install claude-obsidian@agricidaniel-claude-obsidian. Needs Python 3.11 or later. Notes Claude reads are sent to Claude like any other prompt. Web research and remote models stay off until you allow them for a task. The vault stays as local Markdown. The plugin has no telemetry. MIT.",
      "source_url": "https://github.com/AgriciDaniel/claude-obsidian",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "openwhispr",
      "name": "OpenWhispr",
      "category": "Agent tools",
      "url": "https://openwhispr.com",
      "description": "A desktop dictation app with local or cloud speech-to-text, a voice assistant, meeting transcription and notes.",
      "for_whom": "People who want a hotkey that turns speech into text in any app, with the option to keep audio on the machine.",
      "access_notes": "Download from GitHub Releases, or brew install --cask openwhispr. macOS, Windows and Linux. Dictation, note recording and audio upload each pick their own engine. Local keeps audio on the device. OpenWhispr Cloud sends audio to their servers, keeps the transcript text and discards the recording. Bring-your-own-key sends audio to the provider you configured. Microphone is required. Accessibility pastes at the cursor. Screen Recording is needed for meeting system audio, and for Share screen context, which is off unless you turn it on and then sends one screenshot of the display under your cursor with that voice-agent request. Cloud backup is off by default. Shared notes and team-space notes always sync to the cloud. Usage analytics is off by default. MIT.",
      "source_url": "https://github.com/OpenWhispr/openwhispr",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "moltworker",
      "name": "moltworker",
      "category": "Platforms",
      "url": "https://github.com/cloudflare/moltworker",
      "description": "An experimental Cloudflare Worker that runs OpenClaw inside a Cloudflare Sandbox container.",
      "for_whom": "People who want OpenClaw hosted on Cloudflare Workers, with pairing and Access in front.",
      "access_notes": "Experimental proof of concept. Needs a Workers Paid plan for Sandbox containers. npm install, then npx wrangler secret put ANTHROPIC_API_KEY (or the AI Gateway secrets) and MOLTBOT_GATEWAY_TOKEN, then npm run deploy. Open the Control UI with ?token=YOUR_GATEWAY_TOKEN. Cloudflare Access plus device pairing at /_admin/ are required before the Control UI works. Optional R2 keeps pairing and history across container restarts. SANDBOX_SLEEP_AFTER defaults to never; a timeout such as 10m sleeps the container to cut cost. DEV_MODE=true is local only and skips Access and pairing. Apache-2.0.",
      "source_url": "https://github.com/cloudflare/moltworker",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "skill-recorder",
      "name": "Skill Recorder",
      "category": "Agent tools",
      "url": "https://github.com/microsoft/skill-recorder",
      "description": "A desktop app that records a work session on your screen and turns it into a reusable agent skill or scheduled automation.",
      "for_whom": "People who want an agent to repeat a task they can demonstrate once.",
      "access_notes": "Copy the commit-pinned install command from the latest GitHub Release. It pipes a script; read the script before running it. macOS is the primary target; Windows 11 x64 and ARM64 are supported. Needs Screen Recording. Recording stays on the machine. Analyze sends the event timeline, screen images, narration text and requested terminal excerpts to GitHub Copilot in the cloud. Needs a GitHub account with Copilot access. Keep secrets out of recordings. MIT.",
      "source_url": "https://github.com/microsoft/skill-recorder",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "cloudflare-agents",
      "name": "Cloudflare Agents",
      "category": "Agent tools",
      "url": "https://developers.cloudflare.com/agents/",
      "description": "An SDK for persistent, stateful agents on Cloudflare Durable Objects, with MCP, scheduling, workflows and sandboxed code.",
      "for_whom": "Developers who want agents that keep state on Cloudflare and wake only when they have work.",
      "access_notes": "npm install agents, or npm create cloudflare@latest -- --template cloudflare/agents-starter. Needs a Durable Object binding and a SQLite migration in wrangler.jsonc. Agents hibernate when idle. MCP can act as a server or a client. Sandboxed execution runs generated code in an isolated Worker. x402 pay-per-call is optional. MIT.",
      "source_url": "https://github.com/cloudflare/agents",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "agentos",
      "name": "agentOS",
      "category": "Platforms",
      "url": "https://rivet.dev/agentos",
      "description": "A WebAssembly sandbox that gives each agent files, processes, a shell and networking inside one compact runtime.",
      "for_whom": "People who want agent code isolated from the host process, with explicit mounts and network rules.",
      "access_notes": "Library: npm install @rivet-dev/agentos-core, then AgentOs.create() in your backend. The sidecar is a separate Rust process. Guest code reaches host files, environment or the network only through mounts, host functions or network allow rules you add. Hosted: npm install @rivet-dev/agentos, set RIVET_NAMESPACE and RIVET_TOKEN from the Rivet dashboard, and keep the token on the backend. Browser clients need a JWT scoped to that VM. Preview URLs expire. Apache-2.0.",
      "source_url": "https://github.com/rivet-dev/agentos",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "pxpipe",
      "name": "pxpipe",
      "category": "Agent tools",
      "url": "https://github.com/teamchong/pxpipe",
      "description": "A local proxy that rewrites bulky coding-agent request context into PNG pages so the model reads them as images.",
      "for_whom": "People who want a local proxy in front of Claude Code, Codex or Gemini CLI to cut request tokens.",
      "access_notes": "npx pxpipe-proxy listens on 127.0.0.1:47821. pxpipe warp wraps a client such as claude, agy or opencode. The dashboard is http://127.0.0.1:47821/. Requests still go to the provider after imaging. Events log to ~/.pxpipe/events.jsonl. Exact strings in imaged history can be misread; keep recent turns as text. MIT.",
      "source_url": "https://github.com/teamchong/pxpipe",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "anti-slop",
      "name": "antislop",
      "category": "Skills and learning",
      "url": "https://github.com/miqdadbadjuber/anti-slop",
      "description": "Agent skills that filter generic AI UI, copy and comments, with a delivery gate before you ship.",
      "for_whom": "People who want a coding agent to reject generic output before it lands in the repo.",
      "access_notes": "npx antislop-ai. The npm name antislop is a different package. Also npx skills add miqdadbadjuber/anti-slop. Optional mode preference is ~/.config/antislop/settings.json. There is no antislop coin, token or fundraise. MIT.",
      "source_url": "https://github.com/miqdadbadjuber/anti-slop",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "codex-chatgpt-web",
      "name": "Codex ChatGPT Web",
      "category": "Agent tools",
      "url": "https://github.com/miuuyy/codex-chatgpt-web",
      "description": "A local launcher that signs into ChatGPT in an embedded browser so Codex can pick those web models, including a full harness that connects ChatGPT tools back to the current Codex task.",
      "for_whom": "People who already use Codex and a ChatGPT account and want those web models in the Codex picker.",
      "access_notes": "Download from GitHub Releases, or pipe the published install-launcher.sh or install-launcher.ps1. Read the script before running it. Unofficial browser automation. Sign in to ChatGPT in the embedded browser. Browser state is a login artifact; the loopback listener is reachable by other processes as the same local user. Builds are unsigned, so Gatekeeper or SmartScreen may warn. Full harness uses an outbound OpenAI tunnel-client and ChatGPT Developer Mode with a connector named Codex Native2, Authentication None and Allow all actions. --auto-approve-tool-calls clicks Allow once. Conversations stay in ChatGPT history. Follow OpenAI's terms. MIT.",
      "source_url": "https://github.com/miuuyy/codex-chatgpt-web",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "portkiller",
      "name": "PortKiller",
      "category": "Agent tools",
      "url": "https://github.com/productdevbook/port-killer",
      "description": "A menu-bar and system-tray app that lists listening TCP ports and can terminate the process behind one click.",
      "for_whom": "Developers who need to free a local port, or keep kubectl port-forwards and Cloudflare tunnels in view.",
      "access_notes": "macOS 15+: brew install --cask productdevbook/tap/portkiller, or a .dmg from GitHub Releases. Windows 10+: extract the zip from Releases. Killing a process is immediate. Kubernetes port-forwards use your kubectl context. Cloudflare Tunnels lists active tunnels. MIT.",
      "source_url": "https://github.com/productdevbook/port-killer",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "clawrouter",
      "name": "ClawRouter",
      "category": "Agent tools",
      "url": "https://github.com/BlockRunAI/ClawRouter",
      "description": "A local LLM router that picks a model per request and can pay the gateway with a wallet signature over x402, or with a BlockRun API key.",
      "for_whom": "People running agents that need a local OpenAI-compatible proxy with per-call billing.",
      "access_notes": "npx @blockrun/clawrouter listens on localhost:8402. It picks the model locally, then sends each request through BlockRun's gateway, which bills it. First run generates a wallet locally. Paid models spend USDC from that wallet per call, or sign up at user.blockrun.ai and run clawrouter login with a brk_live_ key. Free models need no wallet. The OpenClaw plugin path is curl -fsSL https://blockrun.ai/ClawRouter-update | bash; read the script before running it. Outbound voice and phone tools bill the wallet automatically. MIT.",
      "source_url": "https://github.com/BlockRunAI/ClawRouter",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "opencreator",
      "name": "OpenCreator",
      "category": "Agent tools",
      "url": "https://github.com/krillinai/OpenCreator",
      "description": "A local creator workspace around Codex CLI for video, images, voice, translation and agent conversations.",
      "for_whom": "People who want Codex-backed creative tools on the machine, with data and attachments local by default.",
      "access_notes": "Download the desktop installer from GitHub Releases (macOS Apple Silicon, macOS Intel, Windows x64). First launch can reuse a local Codex ChatGPT sign-in or API key. Web from source is pnpm web:dev at http://127.0.0.1:19861/. The daemon listens on loopback only. Video downloads from some platforms need cookies. Follow each site's terms. Apache-2.0.",
      "source_url": "https://github.com/krillinai/OpenCreator",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "claude-devtools",
      "name": "claude-devtools",
      "category": "Agent tools",
      "url": "https://github.com/matt1398/claude-devtools",
      "description": "A desktop app that reads Claude Code session logs already on the machine and reconstructs tool calls, thinking, tokens and subagent trees.",
      "for_whom": "People who want to inspect Claude Code sessions stored in ~/.claude/.",
      "access_notes": "brew install --cask claude-devtools, or a GitHub Release for macOS, Linux or Windows. Docker compose up serves http://localhost:3456 with ~/.claude mounted read-only. The standalone server defaults HOST to 0.0.0.0 and has no outbound network calls. SSH remote sessions read ~/.ssh/config. File reads stay in the project root and ~/.claude. MIT.",
      "source_url": "https://github.com/matt1398/claude-devtools",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "phone-harness",
      "name": "phone-harness",
      "category": "Agent tools",
      "url": "https://github.com/ShawnPana/phone-harness",
      "description": "A CLI and skill that lets a coding agent tap, type and read a real iPhone or Android, or a Phone Harness Cloud device.",
      "for_whom": "People who want an agent to operate a physical phone they already have, or a hosted cloud phone.",
      "access_notes": "uv tool install --python 3.12 --upgrade --force phone-harness, then phone-harness skill. iPhone: macOS 15+, iPhone Mirroring paired to an iOS 18+ iPhone, Accessibility and Screen Recording. Android: adb with USB or wireless debugging. Cloud: phone-harness cloud login, then cloud start. A cloud Android bills by the minute. A cloud iPhone has no per-minute charge. The harness never types a PIN. PHONE_HARNESS_NO_UPDATE_CHECK=1 skips the daily PyPI check. MIT.",
      "source_url": "https://github.com/ShawnPana/phone-harness",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "openhuman",
      "name": "OpenHuman",
      "category": "Agent tools",
      "url": "https://github.com/tinyhumansai/openhuman",
      "description": "A desktop app, terminal app and Rust library for running agent fleets with MCP, skills, memory and computer control.",
      "for_whom": "People who want a desktop agent harness, or a Rust library that runs many agents on one machine.",
      "access_notes": "Download the desktop app from GitHub Releases (macOS dmg, Windows msi or exe, Linux deb or AppImage), or brew install --cask openhuman. The curl install script is curl -fsSL https://raw.githubusercontent.com/tinyhumansai/openhuman/main/scripts/install.sh | bash; read the script before running it. The agent can drive a Chrome browser and desktop apps, and it asks before actions it cannot undo. Memory items go to CortexDB: TinyHumans hosted memory needs sign-in, or you point it at your own endpoint; with neither, memory is off. The OpenHuman backend brokers LLM calls, OAuth tokens and some search. Privacy Mode keeps a run local. GPL-3.0.",
      "source_url": "https://github.com/tinyhumansai/openhuman",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "pixel-agents",
      "name": "Pixel Agents",
      "category": "Agent tools",
      "url": "https://github.com/pixel-agents-hq/pixel-agents",
      "description": "A VS Code extension and CLI that shows Claude Code sessions as pixel characters in a shared office view.",
      "for_whom": "People who want to watch Claude Code terminals as characters in a pixel office.",
      "access_notes": "Install the VS Code extension from the Marketplace or Open VSX, or run npx pixel-agents. The CLI defaults to 127.0.0.1. Binding 0.0.0.0 exposes the UI and WebSocket on the local network. The printed URL carries a token that can install hooks and launch agents; treat it as a secret. Hooks write into ~/.claude/settings.json. Settings, Skip Permissions turns on Claude Code --dangerously-skip-permissions for every agent from that host. MIT.",
      "source_url": "https://github.com/pixel-agents-hq/pixel-agents",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "browseros-neo",
      "name": "BrowserOS neo",
      "category": "Agent tools",
      "url": "https://github.com/browseros-ai/BrowserOS",
      "description": "A second browser for coding agents. It can import Chrome logins and run each agent in its own tab, with session replay on disk.",
      "for_whom": "People who want Claude Code, Codex or another MCP agent to drive a logged-in browser on the machine.",
      "access_notes": "brew tap browseros-ai/tap then brew install --cask browseros-neo, or a download from cdn.browseros.com for macOS, Windows or Linux. One click imports Chrome logins, bookmarks and extensions. Agents then use those accounts. Sessions and screenshots live under ~/.browserclaw/. It runs on 127.0.0.1. Anonymous product events (connect, disconnect, version, OS) go to PostHog until you turn them off in Settings. Prompts go to the AI vendor you already use. AGPL-3.0.",
      "source_url": "https://github.com/browseros-ai/BrowserOS",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "geo-seo-claude",
      "name": "GEO-SEO Claude",
      "category": "Skills and learning",
      "url": "https://github.com/zubair-trabzada/geo-seo-claude",
      "description": "A Claude Code skill pack that audits a URL for AI-search citability, crawler access, schema and llms.txt.",
      "for_whom": "People who want Claude Code to score a site for AI citation and crawler access.",
      "access_notes": "curl -fsSL https://raw.githubusercontent.com/zubair-trabzada/geo-seo-claude/main/install.sh | bash; read the script before running it. Needs Python 3.10+ and Claude Code. Dependencies go into ~/.claude/skills/geo/.venv/. /geo audit fetches the target URL. Optional Playwright takes screenshots. Prospect files live in ~/.geo-prospects/ and stay after uninstall. MIT.",
      "source_url": "https://github.com/zubair-trabzada/geo-seo-claude",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "mcpproxy",
      "name": "MCPProxy",
      "category": "MCP and integrations",
      "url": "https://mcpproxy.app",
      "description": "A local proxy that sits in front of many MCP servers, holds new tools until you approve them, and gives agents a small discovery set.",
      "for_whom": "People who want many MCP servers behind one localhost endpoint, with a review gate before agents can call new tools.",
      "access_notes": "brew install --cask smart-mcp-proxy/mcpproxy/mcpproxy, or brew install smart-mcp-proxy/mcpproxy/mcpproxy for the CLI, or a GitHub Release for macOS, Windows or Linux. mcpproxy serve listens on 127.0.0.1:8080. Config and data live under ~/.mcpproxy/. New servers stay quarantined until you review and approve them. Update checks query GitHub Releases on startup and every 4 hours until you set update_check.enabled to false or MCPPROXY_DISABLE_AUTO_UPDATE=true. JavaScript code execution is on by default. The tray Unix socket is trusted without the API key until you set enable_socket to false. MIT.",
      "source_url": "https://github.com/smart-mcp-proxy/mcpproxy-go",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "solo-agent",
      "name": "Solo Agent",
      "category": "Platforms",
      "url": "https://soloagent.team",
      "description": "A local-first workspace where humans and coding agents share channels, tasks, teams and memory.",
      "for_whom": "People who run Claude Code, Codex, OpenCode, Hermes or OpenClaw and want them in one workspace.",
      "access_notes": "git clone then make dev. Needs Go 1.25+, Node.js 20+, Docker and at least one supported agent CLI on PATH. make dev starts PostgreSQL in Docker on port 5432, a Go API on 8080, a daemon on 8081 and the UI on 3000. Register at http://localhost:3000. Signup stays on until you set ALLOW_SIGNUP=false. LLM_PROVIDER defaults to local, so agents are your installed CLIs. Workspace data lives in PostgreSQL. MIT.",
      "source_url": "https://github.com/solo-agent/solo",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "agent-relay",
      "name": "Agent Relay",
      "category": "Agent tools",
      "url": "https://agentrelay.com",
      "description": "Messaging, MCP and workflow infrastructure so coding agents on one machine, or across machines, can share channels and history.",
      "for_whom": "People who want Claude Code, Codex or other local agents to talk through shared channels.",
      "access_notes": "npm install -g agent-relay, or curl -fsSL https://raw.githubusercontent.com/AgentWorkforce/relay/main/install.sh | bash; read the script before running it. Needs Node.js 22 or 24. relay init defaults to this machine at http://127.0.0.1:8787. Hosted mode creates a workspace on Agent Relay Cloud so agents on other machines can join; treat the workspace key as a secret. It adds an MCP server to Claude Code, Codex, OpenCode, Grok CLI, Pi or Devin (project files or global configs). Local data lives under ~/.agentworkforce/relay/local. The project workspace key is kept out of git via .git/info/exclude. Apache-2.0.",
      "source_url": "https://github.com/AgentWorkforce/relay",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "plur",
      "name": "PLUR",
      "category": "MCP and integrations",
      "url": "https://plur.ai",
      "description": "Local-first shared memory for coding agents, stored as plain YAML engrams under ~/.plur/.",
      "for_whom": "People who want corrections and conventions to persist across Claude Code, Codex, Cursor, OpenCode and similar tools.",
      "access_notes": "npm install -g @plur-ai/cli@latest @plur-ai/mcp@latest, then plur init and plur doctor. Needs Node.js 20+. For Claude Code, init writes the MCP server into ~/.claude.json and hooks into ~/.claude/settings.json. plur doctor downloads a local search model when downloads are allowed; without it, search uses keywords. An optional openai-3-large embedder sends text to OpenAI. plur dashboard is loopback-only. plur sync to a personal git remote pushes private engrams; use a private repo. Apache-2.0.",
      "source_url": "https://github.com/plur-ai/plur",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "maestro",
      "name": "Maestro",
      "category": "Skills and learning",
      "url": "https://maestroskills.dev",
      "description": "A workflow skill pack with 25 commands, seven domain references, a memory layer and an MCP server for coding agents.",
      "for_whom": "People who want Cursor, Claude Code, Codex, OpenCode or similar tools to follow a shared workflow skill.",
      "access_notes": "npx skills add sharpdeveye/maestro copies skills into the provider folders in the project. For a live MCP server, add npx -y maestro-workflow-mcp to the client config (stdio). npx maestro-workflow-mcp --http --port 3001 serves /mcp on that port on every interface. /capture writes .maestro/ with context.md, decisions.jsonl, audit.jsonl and session files; session data is gitignored by default. MIT.",
      "source_url": "https://github.com/sharpdeveye/maestro",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "chums",
      "name": "Chums",
      "category": "Agent tools",
      "url": "https://chums.club",
      "description": "Watch and iPhone apps that talk to Claude Code and Codex sessions running on your Mac, with a local hub.",
      "for_whom": "People who want Claude Code or Codex on an Apple silicon Mac to take voice and approvals from an Apple Watch and iPhone.",
      "access_notes": "git clone https://github.com/lcoutodemos/chums then bin/chums-setup, bin/chums-hub, bin/chums-tunnel, bin/chums-install and bin/chums-agents install. Needs macOS 15.6, watchOS 26, iOS 26, Xcode 26, Node.js 20.11, Tailscale Funnel and Claude Code or Codex. The hub listens on 127.0.0.1:7717 and 127.0.0.1:7718. Funnel publishes the watch API at a public https://chums-hub.<tailnet>.ts.net URL; treat the watch token in ~/.chums/config.json as a secret, keep the file mode 0600, and do not share a built app. Funnel hostnames appear in certificate transparency logs. Default agents can use the home folder. Optional openai TTS in config sends reply text to OpenAI. Apache-2.0.",
      "source_url": "https://github.com/lcoutodemos/chums",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "closedloop-claude-plugins",
      "name": "ClosedLoop Claude Plugins",
      "category": "Skills and learning",
      "url": "https://www.closedloop.ai/docs",
      "description": "Open-source Claude Code plugins for plan-first coding, review and self-learning, grounded in the repo.",
      "for_whom": "People who want Claude Code or Codex plugins for planning, implementation and pull-request review.",
      "access_notes": "curl -fsSL https://raw.githubusercontent.com/closedloop-ai/claude-plugins/main/install.sh | bash; read the script before running it. Needs Claude Code, Python 3.11+ and jq. It registers the closedloop-ai marketplace and installs code, code-review, platform and self-learning at user scope under ~/.claude/plugins, with auto-update on. claude /plugin marketplace install closedloop is the interactive path. Codex: codex plugin marketplace add https://github.com/closedloop-ai/claude-plugins then add closedloop-core@closedloop-ai. /code-review:start writes inline GitHub pull-request comments. self-learning writes under .learnings/; org share uses CLAUDE_ORG_ID. bootstrap writes .claude/agents and .closedloop-ai/. The README calls this an engineering preview for trusted environments. Apache-2.0.",
      "source_url": "https://github.com/closedloop-ai/claude-plugins",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "plausible-mcp",
      "name": "Plausible MCP",
      "category": "MCP and integrations",
      "url": "https://plausible-mcp.sentry.dev",
      "description": "An MCP server that queries Plausible Analytics for traffic, conversions and period comparisons.",
      "for_whom": "People who want a coding agent to read Plausible stats with a Plausible API key.",
      "access_notes": "Hosted: claude mcp add --transport http plausible https://plausible-mcp.sentry.dev/mcp --header \"Authorization: Bearer YOUR_PLAUSIBLE_API_KEY\". Queries go to that Sentry-hosted server with your key. Tools are read-only. Local: Node.js 20+, git clone, pnpm install and pnpm build, then node dist/index.js with PLAUSIBLE_API_KEY. PLAUSIBLE_BASE_URL points at a self-hosted Plausible. The hosted /internal path is for Sentry staff. MIT.",
      "source_url": "https://github.com/getsentry/plausible-mcp",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "openbrowser",
      "name": "OpenBrowser",
      "category": "Agent tools",
      "url": "https://docs.openbrowser.me",
      "description": "A CodeAgent and MCP server that drives a Chromium browser over CDP, with a CLI daemon and an optional hosted dashboard.",
      "for_whom": "People who want Claude Code, Codex or another MCP client to browse, scrape and fill forms on their machine.",
      "access_notes": "pip install openbrowser-ai, brew install openbrowser-ai, or curl -fsSL https://raw.githubusercontent.com/billy-enrizky/openbrowser-ai/main/install.sh | sh; read the script before running it. Needs Python 3.12+. uvx openbrowser-ai --mcp is the stdio MCP server. Default MCP profiles live under ~/.config/openbrowser/profiles/. The CLI daemon uses a Unix socket and ~/.config/openbrowser/profiles/daemon. Agent mode needs an LLM API key. The hosted dashboard at openbrowser.me stores cookies and scheduled tasks. MIT.",
      "source_url": "https://github.com/billy-enrizky/openbrowser-ai",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "hybridclaw",
      "name": "HybridClaw",
      "category": "Platforms",
      "url": "https://hybridclaw.io",
      "description": "A self-hosted assistant runtime with a local gateway, sandbox, web chat and TUI, plus HybridAI Cloud as a hosted path.",
      "for_whom": "People who want a local assistant on Node 22 with their own model keys, or the HybridAI Cloud workspace.",
      "access_notes": "npm install -g @hybridaione/hybridclaw, or curl -fsSL https://raw.githubusercontent.com/HybridAIOne/hybridclaw/main/scripts/install.sh | bash; read the script before running it. Needs Node.js 22.23.4 or later, below 23. hybridclaw onboarding then hybridclaw gateway. Default bind is 127.0.0.1:9090; web chat is http://127.0.0.1:9090/chat. Config is ~/.hybridclaw/config.json. Provider keys live in the encrypted store under ~/.hybridclaw/credentials.json. Docker is the default sandbox. Hosted path is hybridclaw.io. Set ops.webApiToken before exposing the gateway beyond loopback. Treat inbound channel messages as untrusted. MIT.",
      "source_url": "https://github.com/HybridAIOne/hybridclaw",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "quicksand",
      "name": "Quicksand",
      "category": "Security and governance",
      "url": "https://microsoft.github.io/quicksand/",
      "description": "An async Python API that boots QEMU Linux VMs so agents can run commands, mounts and a desktop without root or Docker.",
      "for_whom": "People who want coding agents to work inside a local virtual machine.",
      "access_notes": "pip install 'quick-sandbox[qemu,alpine]', or pip install quick-sandbox then quicksand install qemu alpine. Desktop images: quicksand install ubuntu-desktop or alpine-desktop. Sandboxes are network-isolated by default; NetworkMode.FULL gives internet. Host directories can be mounted into the guest. Bidirectional port forwards map host and guest TCP ports. MIT.",
      "source_url": "https://github.com/microsoft/quicksand",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "harnessrouter",
      "name": "HarnessRouter",
      "category": "Platforms",
      "url": "https://harnessrouter.ai",
      "description": "A self-hosted gateway that runs Codex, Claude Code and other harnesses through one OpenAI Responses-compatible API.",
      "for_whom": "People who want one local console and API in front of several coding-agent harnesses, using their own model keys.",
      "access_notes": "docker run -d --name harnessrouter -p 127.0.0.1:3000:3000 -v harnessrouter:/data harnessrouter/harnessrouter. Needs Docker and about 4 GB of disk. Console is http://127.0.0.1:3000. Default Console login is harnessrouter / harnessrouter; change it before exposing the instance. First launch installs harness CLIs into the volume. Provider keys go under Bring your own key. Product API keys are created in the Console and belong in a backend, not a browser. Gateway :8080 and Runner :8081 stay on loopback inside the container. Hosted path is harnessrouter.ai. Apache-2.0.",
      "source_url": "https://github.com/HarnessRouter/harnessrouter",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "skills-manager",
      "name": "Skills Manager",
      "category": "Skills and learning",
      "url": "https://github.com/yibie/skills-manager",
      "description": "A native macOS app that discovers, installs and mounts agent skills across Claude Code, Cursor, Codex and dozens of other coding agents.",
      "for_whom": "People who keep skills in several coding agents on a Mac and want one local library they can mount on demand.",
      "access_notes": "macOS 14 or later. Download Skills Manager 2.0.0 from GitHub Releases and drag it to Applications. The zip is Developer ID signed and Apple-notarized; SHA-256 8da1f38838119864e593e9e591355dd53b5d407e4a7383aac68f095efdac1ad5. There is no Skills Manager backend. Discover refreshes from skills.sh and caches under ~/.skills-manager/. Installing from Discover downloads the GitHub skill package into the Library and links it into agents. Try sends the skill to your own Claude, OpenAI, OpenRouter, Ollama or LM Studio endpoint. Local Ollama and LM Studio endpoints are rewritten to 127.0.0.1. The TUI is npm exec skills-manager from tui/. MIT.",
      "source_url": "https://github.com/yibie/skills-manager",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "clui-cc",
      "name": "Clui CC",
      "category": "Agent tools",
      "url": "https://github.com/lcoutodemos/clui-cc",
      "description": "A macOS overlay for Claude Code with multi-tab sessions, a permission UI, voice input and a skills marketplace.",
      "for_whom": "People who run Claude Code on a Mac and want a floating desktop UI for approvals, tabs and voice.",
      "access_notes": "git clone https://github.com/lcoutodemos/clui-cc.git then double-click install-app.command; read the script before running it. Needs macOS 13+, Node 18+ (20 or 22 recommended), Xcode Command Line Tools, Python setuptools, and an authenticated Claude Code CLI. The packaged app is unsigned. Opening it is your call (System Settings, Privacy and Security, Open Anyway). Whisper is required and the installer installs it. Permission hooks listen on 127.0.0.1:19836. Marketplace catalog fetches anthropics GitHub repos; skill auto-install writes ~/.claude/skills/. Prompts go through your local Claude Code CLI. The README says there is no telemetry. MIT.",
      "source_url": "https://github.com/lcoutodemos/clui-cc",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "god",
      "name": "GOD",
      "category": "Platforms",
      "url": "https://xiaoluolyg.github.io/GOD/",
      "description": "A local control room for language-agent societies: pause a run, ask a resident, inject the next step, and export a replay pack.",
      "for_whom": "People who want to inspect and steer a town of LLM agents from one browser on their machine.",
      "access_notes": "git clone https://github.com/XiaoLuoLYG/GOD.git then ./scripts/god.sh start (Windows: .\\scripts\\god.cmd start). The first run installs dependencies and opens a browser wizard. Paste an OpenAI-compatible API key, base URL and model name. The control room prints a URL such as http://127.0.0.1:5174/pixel-replay/god_town/1. .env stores local model and port settings. The model endpoint is the external service. Curated browser replays on the public site need no install or API key. Apache-2.0. Bundled AgentSociety and JiuwenClaw checkouts keep their own licences.",
      "source_url": "https://github.com/XiaoLuoLYG/GOD",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "autonomous-company",
      "name": "Autonomous Company",
      "category": "Agent tools",
      "url": "https://github.com/MaxMiksa/Autonomous-Company",
      "description": "A local loop of 14 expert-persona agents that research, decide and write code on a Mac or Windows WSL host, with a Product Center dashboard.",
      "for_whom": "People who want Claude Code or Codex CLI to keep a continuous company loop under goals, permissions and budgets they set.",
      "access_notes": "git clone then make start (Claude Code default) or ENGINE=codex make start. Needs Python 3.10+, Git, make, and an authenticated Claude Code or Codex CLI. Product Center is http://127.0.0.1:8810/center (make center). Daemon mode uses launchd on macOS and systemd --user on WSL. CLAUDE_PERMISSION_MODE=bypassPermissions is the documented way to stop permission prompts; the README says prompt rules are not a sandbox and each cycle spends model quota. Optional Cursor and OpenAI-compatible adapters need explicit config. MIT.",
      "source_url": "https://github.com/MaxMiksa/Autonomous-Company",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "edgeever",
      "name": "EdgeEver",
      "category": "Platforms",
      "url": "https://edgeever.org",
      "description": "An open-source notes and knowledge workspace with three-pane editing, multi-device sync, and a native remote MCP so agents can create and edit notes in the same account.",
      "for_whom": "People who want a self-hosted or Cloudflare-hosted notebook that coding agents can read and write through MCP.",
      "access_notes": "Cloudflare: fork the repo, create D1 edgeever and R2 edgeever-resources, then a Worker from main. Set the runtime Secret EDGE_EVER_AUTH_PASSWORD; upstream recommends 32 characters or longer. Username defaults to admin via EDGE_EVER_AUTH_USERNAME. Notes and attachments then live in that Cloudflare account. Docker: curl -fsSL https://edgeever.org/install.sh | bash (read the script before running it). The installer writes ~/edgeever, pulls ghcr.io/tianma-if/edgeever, generates an administrator password, and serves http://localhost:8787. Daily auto-update is crontab 04:17 unless EDGE_EVER_AUTO_UPDATE=false. Profile -> API / MCP issues a token with full CRUD on notes, notebooks, tags, attachments, history, templates and AI instructions. BYOK sends note text to the model endpoint you configure. The public demo at https://demo.edgeever.org resets daily; keep private notes off it. AGPL-3.0.",
      "source_url": "https://github.com/tianma-if/edgeever",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "screenwriting-skills",
      "name": "Screenwriting Skills",
      "category": "Skills and learning",
      "url": "https://github.com/jtydhr88/screenwriting-skills",
      "description": "Twenty-six agent skills for screenwriting, television writing and dramaturgy, following the agentskills.io format for Claude Code and Codex.",
      "for_whom": "Writers and agents drafting features, series or stage work who want craft checklists beside the script.",
      "access_notes": "Claude Code: /plugin marketplace add jtydhr88/screenwriting-skills then /plugin install screenwriting@screenwriting-skills. Skills run as /screenwriting:<skill>. Codex: codex plugin marketplace add jtydhr88/screenwriting-skills then install Screenwriting Skills from Plugins. Manual copy writes plugins/screenwriting/skills/* into ~/.claude/skills/ or ~/.agents/skills/ (or the project .claude/skills / .agents/skills). Skill bodies are Chinese; the agent answers in the language you asked. sw-workflow keeps project state in story-bible.md. MIT covers the skill architecture; quotations from the listed books and scripts stay with their rights holders (NOTICE).",
      "source_url": "https://github.com/jtydhr88/screenwriting-skills",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "cookiy-user-research",
      "name": "Cookiy User Research",
      "category": "Skills and learning",
      "url": "https://github.com/cookiy-ai/user-research-skill",
      "description": "An MIT agent skill that plans user research, synthesises interview transcripts, and can run interviews and surveys through Cookiy AI.",
      "for_whom": "Product and research people who want an agent to plan studies or launch them on Cookiy.",
      "access_notes": "Claude Code: /plugin marketplace add cookiy-ai/user-research-skill then /plugin install user-research@cookiy-ai then /reload-plugins. Invoke /user-research-cookiy. Cowork and Claude Desktop need network egress; allow s-api.cookiy.ai. Other agents: npx cookiy-ai or npm install -g @cookiyai/cookiy-cli (Node.js 18+). Planning and local transcript synthesis run in the agent. Running interviews or surveys needs a Cookiy login: the CLI prints a login URL, the human pastes an access token into cookiy save-token. On Cookiy, recruiting, synthetic interviews, report generation and discussion guide generation cost money from a wallet that charges your saved card when the balance is short; run cookiy user info for limits. MIT for the skill.",
      "source_url": "https://github.com/cookiy-ai/user-research-skill",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "short-video-maker",
      "name": "Short Video Maker",
      "category": "MCP and integrations",
      "url": "https://github.com/gyoridavid/short-video-maker",
      "description": "A local MCP and REST server that turns English narration scenes into captioned short videos with Kokoro speech, Whisper captions, Pexels B-roll and Remotion.",
      "for_whom": "People generating English short-form videos on their own machine or Docker host.",
      "access_notes": "Needs a free Pexels API key, about 4 GB RAM, 2 vCPU and 5 GB disk. Docker tiny image: docker run -it --rm --name short-video-maker -p 3123:3123 -e PEXELS_API_KEY= gyoridavid/short-video-maker:latest-tiny. Web UI and REST at http://localhost:3123. MCP SSE at /mcp/sse. Videos land in ~/.ai-agents-az-video-generator with npm, or /app/data in Docker. English voiceover only. Windows is unsupported. MIT.",
      "source_url": "https://github.com/gyoridavid/short-video-maker",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "anythingmcp",
      "name": "AnythingMCP",
      "category": "MCP and integrations",
      "url": "https://github.com/HelpCode-ai/anythingmcp",
      "description": "A self-hosted MCP gateway that turns REST, OpenAPI, SOAP, GraphQL, OData or SQL systems into MCP tools, with a catalog of ready connectors.",
      "for_whom": "Teams who want Claude, ChatGPT or Copilot to call existing APIs and ERPs through one MCP URL they host.",
      "access_notes": "Needs Docker 24+ and openssl. mkdir anythingmcp && cd anythingmcp, then curl the official docker-compose.quickstart.yml, write JWT_SECRET and ENCRYPTION_KEY with openssl rand -hex 32, then docker compose up -d. UI is http://localhost:3000; the first registered account is admin. MCP is http://localhost:4000/mcp. Keep the generated .env: ENCRYPTION_KEY decrypts stored connector credentials. Quickstart binds 127.0.0.1. Connector keys are stored encrypted and forwarded to the APIs you attach (SAP, shops, databases). SQL tools are read-only by default. The optional hosted trial at https://cloud.anythingmcp.com runs on the maintainers' servers in Frankfurt, Germany, and holds your connector credentials there. AGPL-3.0 for the open tree; ee/ directories use a separate commercial licence.",
      "source_url": "https://github.com/HelpCode-ai/anythingmcp",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "shader-skills",
      "name": "Shader Skills",
      "category": "Skills and learning",
      "url": "https://github.com/gokayfem/shader-skills",
      "description": "An agent skill plus a 186-function GLSL library, bundler and checker for Shadertoy and WebGL2 procedural shaders.",
      "for_whom": "People writing SDF raymarching, terrain, water, clouds or generative GLSL with a coding agent.",
      "access_notes": "Claude Code: claude plugin marketplace add gokayfem/shader-skills then claude plugin install shader-skills@shader-skills. Other agents: npx skills add gokayfem/shader-skills (Node.js 22.20 or later; -g for a global install). Manual copy writes skills/shader-art-coding into ~/.claude/skills/ or ~/.agents/skills/. Python 3 glsl_tools.py search, bundle and check use the standard library; check compiles when glslangValidator is installed. Local harness: python3 tests/build_harness.py && python3 tests/serve.py then http://127.0.0.1:8765/build/harness.html. Targets Shadertoy, WebGL2 and GLSL ES 3.00. MIT.",
      "source_url": "https://github.com/gokayfem/shader-skills",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "mirofish",
      "name": "MiroFish",
      "category": "Platforms",
      "url": "https://github.com/666ghj/MiroFish",
      "description": "A multi-agent simulation engine that builds a digital world from seed documents and runs thousands of persona agents so you can rehearse what-if outcomes.",
      "for_whom": "People who want to simulate public opinion, policy or story trajectories with an LLM swarm on their own machine.",
      "access_notes": "Needs Node.js 18+, Python 3.11 or 3.12, and uv. Copy .env.example to .env. Set LLM_API_KEY, LLM_BASE_URL and LLM_MODEL_NAME for any OpenAI-compatible endpoint, plus ZEP_API_KEY from https://app.getzep.com/. Your seed documents and agent memory are sent to Zep Cloud, and prompts go to the LLM endpoint you set. npm run setup:all then npm run dev. Frontend is http://localhost:3000; backend is http://localhost:5001. Docker: docker compose up -d with the same .env. Upstream says LLM use is high; try fewer than 40 rounds first. AGPL-3.0.",
      "source_url": "https://github.com/666ghj/MiroFish",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "plane",
      "name": "Plane",
      "category": "Platforms",
      "url": "https://github.com/makeplane/plane",
      "description": "An AGPL project-management app for work items, cycles, modules, views, pages and analytics, as a self-hosted or cloud Linear-style workspace.",
      "for_whom": "Teams who want issues, sprints and docs on a stack they can host.",
      "access_notes": "Cloud sign-up is https://app.plane.so. Community self-host: mkdir plane-selfhost && cd plane-selfhost, curl -fsSL -o setup.sh https://github.com/makeplane/plane/releases/latest/download/setup.sh, chmod +x setup.sh, then ./setup.sh action 1. Edit plane.env WEB_URL and CORS_ALLOWED_ORIGINS (defaults http://localhost on ports 80 and 443), then ./setup.sh action 2 to start. Commercial installer: curl -fsSL https://prime.plane.so/install/ | sh - (read the script before running it); that edition starts on a free plan with 12 seats. Needs 2 CPU cores and 4 GB RAM. Instance admins configure the host in God mode. Self-hosted Plane sends telemetry to Plane by default: the admin's name and email, the instance ID, anonymised usage counts and performance data including stack traces. Turn it off in God mode under General Settings, Telemetry. AGPL-3.0.",
      "source_url": "https://github.com/makeplane/plane",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "searxng",
      "name": "SearXNG",
      "category": "Platforms",
      "url": "https://docs.searxng.org/",
      "description": "A self-hosted metasearch engine that queries the search services you enable and returns aggregated results without a SearXNG user account.",
      "for_whom": "People who want a private search front-end they can host, or who will use a public instance they trust.",
      "access_notes": "Self-host with Docker or Podman: mkdir -p ./searxng/core-config && cd ./searxng, curl -fsSL -O https://raw.githubusercontent.com/searxng/searxng/master/container/docker-compose.yml -O https://raw.githubusercontent.com/searxng/searxng/master/container/.env.example, cp .env.example .env, then docker compose up -d. Compose publishes 0.0.0.0:8080. Edit core-config/settings.yml. Manual run: docker run --name searxng -d -p 8888:8080 -v ./config/:/etc/searxng/ -v ./data/:/var/cache/searxng/ docker.io/searxng/searxng:latest then http://localhost:8888. Each query is sent to the engines you enable. A public instance operator sees the queries you type. AGPL-3.0.",
      "source_url": "https://github.com/searxng/searxng",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "invidious",
      "name": "Invidious",
      "category": "Platforms",
      "url": "https://invidious.io/",
      "description": "An AGPL YouTube front-end for videos, subscriptions and comments, as a self-hosted instance or a public one.",
      "for_whom": "People who want a lighter YouTube player they can host, or who will pick a public instance they trust.",
      "access_notes": "Public instances are listed at https://instances.invidious.io; that operator holds your subscriptions, history and watch requests, and the instance fetches video from YouTube. Self-host: git clone https://github.com/iv-org/invidious.git && cd invidious. Generate two 16-character keys with pwgen 16 1, put them in docker-compose.yml as hmac_key and invidious_companion_key (companion SERVER_SECRET_KEY must match). Default compose binds 127.0.0.1:3000. Needs about 20 GB disk and 2 GB RAM; restart at least daily. Playback needs Invidious companion. AGPL-3.0.",
      "source_url": "https://github.com/iv-org/invidious",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "gallery-dl",
      "name": "gallery-dl",
      "category": "Agent tools",
      "url": "https://github.com/mikf/gallery-dl",
      "description": "A command-line downloader for image galleries and collections from hundreds of hosts, with JSON config, cookies and OAuth for logged-in sites.",
      "for_whom": "People pulling galleries, manga or artist collections onto their own disk from supported hosts.",
      "access_notes": "Needs Python 3.8+ and Requests. python -m pip install -U gallery-dl. macOS: brew install gallery-dl. Run gallery-dl URL. Config is ~/.config/gallery-dl/config.json (Linux/macOS) or %APPDATA%\\gallery-dl\\config.json (Windows). Login cookies, passwords and OAuth tokens are sent to the host you download from. Active development is on Codeberg: https://codeberg.org/mikf/gallery-dl. GPL-2.0.",
      "source_url": "https://github.com/mikf/gallery-dl",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "simplex-chat",
      "name": "SimpleX Chat",
      "category": "Platforms",
      "url": "https://simplex.chat/",
      "description": "An AGPL messenger that connects people with one-off invitation links or QR codes, using SMP relays instead of user accounts.",
      "for_whom": "People who want encrypted chat on iOS, Android or a terminal, with relays they can pick or host.",
      "access_notes": "Mobile: App Store, Google Play, F-Droid (https://app.simplex.chat) or the APK from GitHub Releases. Terminal: curl -o- https://raw.githubusercontent.com/simplex-chat/simplex-chat/stable/install.sh | bash (read the script before running it). Connect by scanning a QR code or opening an smp invitation link. Encrypted messages travel through the SMP relays you choose; the default public relays are operated by SimpleX Chat Ltd. AGPL-3.0.",
      "source_url": "https://github.com/simplex-chat/simplex-chat",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "convertx",
      "name": "ConvertX",
      "category": "Platforms",
      "url": "https://github.com/C4illin/ConvertX",
      "description": "A self-hosted file converter that wraps Inkscape, Calibre, LibreOffice, FFmpeg, ImageMagick and other engines behind a web UI.",
      "for_whom": "People converting documents, images, e-books or video on a machine they control.",
      "access_notes": "Docker: map port 3000 and volume ./data:/app/data, set PUID to your host user id, then open http://localhost:3000 and create the first account. Anyone who can reach that URL can register that first account. Set JWT_SECRET. HTTP_ALLOWED=true only on a non-HTTPS local connection. Files land in ./data on the host; AUTO_DELETE_EVERY_N_HOURS defaults to 24. ALLOW_UNAUTHENTICATED and ACCOUNT_REGISTRATION stay off on a public host. AGPL-3.0.",
      "source_url": "https://github.com/C4illin/ConvertX",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "docuseal",
      "name": "DocuSeal",
      "category": "Platforms",
      "url": "https://www.docuseal.com/",
      "description": "An AGPL platform for building PDF forms, collecting signatures and storing completed documents, self-hosted or on DocuSeal Cloud.",
      "for_whom": "Teams who want fill-and-sign workflows on a host they run, or on DocuSeal's cloud.",
      "access_notes": "Cloud sign-up is https://docuseal.com/sign_up; completed documents then live on DocuSeal LLC servers. Self-host: docker run --name docuseal -p 3000:3000 -v.:/data docuseal/docuseal then http://localhost:3000. Compose: curl https://raw.githubusercontent.com/docusealco/docuseal/master/docker-compose.yml > docker-compose.yml then sudo HOST=your-domain-name.com docker compose up. SQLite is the default; set DATABASE_URL for PostgreSQL or MySQL. Disk or S3/GCS/Azure for files. AGPL-3.0 with Section 7(b) additional terms: keep DocuSeal attribution in interactive UIs.",
      "source_url": "https://github.com/docusealco/docuseal",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "midday",
      "name": "Midday",
      "category": "Platforms",
      "url": "https://midday.ai",
      "description": "An AGPL business workspace for invoicing, time tracking, inbox matching, file vault and an assistant, for freelancers and solo operators.",
      "for_whom": "Freelancers and contractors who want invoices, time and bank feeds in one product they can host or run on Midday Cloud.",
      "access_notes": "Cloud is https://app.midday.ai, run by Midday Labs AB; your invoices, transactions and files are then processed in Sweden. Bank connections go through GoCardless (EU), Plaid (Canada and US) or Teller (US). Hosted analytics use OpenPanel. Local: git clone https://github.com/midday-ai/midday.git then bun i; you need a Supabase account, which holds the database, files and sign-in, and an Upstash account for its key-value store (https://docs.midday.ai/local-development). AGPL-3.0 for non-commercial use. For commercial use, Midday Labs AB asks for a commercial licence at engineer@midday.ai.",
      "source_url": "https://github.com/midday-ai/midday",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "logto",
      "name": "Logto",
      "category": "Platforms",
      "url": "https://logto.io/",
      "description": "Open-source OIDC and OAuth 2.1 identity infrastructure with multi-tenancy, SSO, RBAC and SDKs for 30-plus frameworks.",
      "for_whom": "Teams adding sign-in, organisations and MCP-ready auth to a SaaS or agent product.",
      "access_notes": "Cloud is https://cloud.logto.io; identity data then lives on Logto Cloud. Local Docker Compose: curl -fsSL https://raw.githubusercontent.com/logto-io/logto/HEAD/docker-compose.yml | docker compose -p logto -f - up. That compose bundles Postgres and drops data if you run it again. npm init @logto@latest needs Node.js 26+ and PostgreSQL 14+. Core is http://localhost:3001; Admin Console is http://localhost:3002. The welcome page creates one admin account with username and password. Recommended host: 2 vCPU, 8 GiB RAM, 256 GiB disk. MPL-2.0.",
      "source_url": "https://github.com/logto-io/logto",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "leantime",
      "name": "Leantime",
      "category": "Platforms",
      "url": "https://leantime.io",
      "description": "An AGPL project-management system for goals, tasks, timesheets, wikis and canvases, designed for neurodivergent teams.",
      "for_whom": "Small teams who want kanban, gantt, goals and docs on a host they run.",
      "access_notes": "Cloud is https://leantime.io; project data then lives on Leantime's hosted service. Self-host needs PHP 8.2+ and MySQL 8.0+ or MariaDB 10.6+. Docker: docker run -d --restart unless-stopped -p 8080:8080 with LEAN_DB_HOST, LEAN_DB_USER, LEAN_DB_PASSWORD, LEAN_DB_DATABASE and LEAN_EMAIL_RETURN, then open http://localhost:8080/install. Files can go to local disk or S3. Plugins need the plugins volume mounted and writable by www-data. Self-hosted Leantime sends a daily anonymous usage summary (counts and versions) to telemetry.leantime.io by default; set LEAN_ALLOW_TELEMETRY=false to stop it. AGPL-3.0.",
      "source_url": "https://github.com/Leantime/leantime",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "fluxer",
      "name": "Fluxer",
      "category": "Platforms",
      "url": "https://fluxer.app",
      "description": "An AGPL instant-messaging and VoIP app for friends, groups and communities, with desktop, mobile and a browser client.",
      "for_whom": "People who want chat and calls on Fluxer's hosted service or on an instance they run.",
      "access_notes": "Hosted: https://web.fluxer.app or the desktop and mobile apps; messages then live on Fluxer's servers. Self-host: curl -fsSL https://fluxer.dev/install.sh | sh (read the script before running it). Windows: irm https://fluxer.dev/install.ps1 | iex (read the script before running it). Needs 2 CPU cores, 4 GB RAM, 20 GB disk, a domain A record, TCP 80, 443 and 7881, and UDP 443 and 7882. rexctl creates one admin account in the terminal or with a setup token. AGPL-3.0-or-later for the source; artwork is CC BY-SA 4.0.",
      "source_url": "https://github.com/fluxerapp/fluxer",
      "source_checked": "2026-10-28",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "suwayomi-server",
      "name": "Suwayomi Server",
      "category": "Platforms",
      "url": "https://github.com/Suwayomi/Suwayomi-Server",
      "description": "A Java manga reader server that runs Mihon (Tachiyomi) extensions, with a bundled web UI, library, downloads and OPDS.",
      "for_whom": "People who want a self-hosted manga library that talks to the same sources as Mihon.",
      "access_notes": "OS bundles (Windows, macOS, Linux) ship JRE, Electron and a launcher from GitHub Releases. Docker: ghcr.io/suwayomi/tachidesk, default http://localhost:4567. Jar needs JRE 21+: java -jar Suwayomi-Server-vX.Y.Z-rxxxx.jar. Library, backups and downloads live on the host. Installed extensions fetch chapters from the manga sites you enable; optional FlareSolverr and trackers (MyAnimeList, AniList, MangaUpdates) send data to those services. MPL-2.0.",
      "source_url": "https://github.com/Suwayomi/Suwayomi-Server",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "seo-machine",
      "name": "SEO Machine",
      "category": "Skills and learning",
      "url": "https://github.com/TheCraigHewitt/seomachine",
      "description": "A Claude Code workspace of slash commands, agents and 26 marketing skills for researching, writing and optimising long-form blog posts.",
      "for_whom": "People drafting SEO articles in Claude Code who will fill in brand, keyword and competitor context files.",
      "access_notes": "git clone https://github.com/TheCraigHewitt/seomachine.git && cd seomachine && pip install -r data_sources/requirements.txt then claude. Needs Claude Code (Claude Pro, Max, Team, Enterprise, or Anthropic Console API billing) and a DataForSEO account. Optional Google Analytics 4 and Search Console credentials. Keyword and SERP calls go to DataForSEO. Fill context/brand-voice.md and the other context templates before writing. Docker: docker-compose build && docker-compose run seomachine bash. MIT.",
      "source_url": "https://github.com/TheCraigHewitt/seomachine",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "openalice",
      "name": "OpenAlice",
      "category": "Agent tools",
      "url": "https://openalice.ai",
      "description": "A local AI trading workspace that connects Claude Code, Codex, OpenCode and similar agents to market data, research folders and broker accounts.",
      "for_whom": "People who want agents to research markets on their machine, with optional paper or live trading they approve.",
      "access_notes": "Desktop app for macOS and Windows from GitHub Releases; a broker account is optional for research. Source: git clone https://github.com/TraderAlice/OpenAlice.git && pnpm install && pnpm dev. State is ~/.openalice; workspaces are local Git directories. Broker credentials are sealed at rest. Agents and market-data providers still send prompts and quotes to their own services. Trading execution is beta: start with simulator, paper, demo or testnet; you review and approve live orders. AGPL-3.0.",
      "source_url": "https://github.com/TraderAlice/OpenAlice",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "openexecutive",
      "name": "Open Executive",
      "category": "Platforms",
      "url": "https://github.com/SenteLabsAI/OpenExecutive",
      "description": "An Apache-licensed FastAPI and Next.js executive persona backed by nine specialist agents, with local RAG, episodic memory and optional chat and mail connectors.",
      "for_whom": "Teams who want a self-hosted executive assistant that drafts in one voice and leaves messages on approval cards unless Handle it for me is on.",
      "access_notes": "git clone https://github.com/SenteLabsAI/OpenExecutive.git && make install, copy .env.example to .env, set ANTHROPIC_API_KEY, then make dev. UI is http://localhost:3000; API is http://localhost:8000. Needs Python 3.11+ and Node 22.6+. First boot downloads an embedding model of about 90 MB. Local make dev with blank AUTH_GOOGLE_ID accepts connections from this computer only. Company documents and memory are stored on the host (ChromaDB and SQLite); prompts, retrieved document chunks and memory go to the Anthropic API. Slack, mail, Telegram, Google Chat and similar connectors send messages through those services when you set their tokens. Apache-2.0.",
      "source_url": "https://github.com/SenteLabsAI/OpenExecutive",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "mailflare",
      "name": "Mailflare",
      "category": "Platforms",
      "url": "https://mailflare.co",
      "description": "An AGPL custom-domain inbox with calendar, booking, Drive and an MCP mail assistant, running on Cloudflare Workers or Docker.",
      "for_whom": "People who want mailboxes on their own domain, on a Cloudflare account or a Docker host they run.",
      "access_notes": "Cloudflare: Deploy to Cloudflare with Worker name mailflare, then open /setup to create the first admin account. CF_TOKEN is a scoped API token that can edit DNS and Email Routing on the zones you connect, and Email Sending if you send through Cloudflare. Docker: git clone https://github.com/hieunc229/mailflare.git && cd mailflare && cp .env.docker.example .env.docker && docker compose up -d --build. Setup is http://localhost:3000/setup. On Cloudflare, mailbox records live in D1 and files live in R2 (or B2 or S3) in that account. Docker stores SQLite, mail and backups in the mailflare-data volume. Send and receive through Cloudflare Email, Resend, Amazon SES or SMTP. The assistant sends mailbox content to the AI provider you set under Admin, Agent. MCP is Streamable HTTP at /mcp on your origin with a Bearer key; request_send still needs confirmation in Mailflare. Optional Pro and Team licence keys are checked with Paymug. AGPL-3.0.",
      "source_url": "https://github.com/hieunc229/mailflare",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "openscience",
      "name": "OpenScience",
      "category": "Platforms",
      "url": "https://openscience.sh",
      "description": "An Apache-licensed research workbench that plans, searches literature, runs code and experiments, and writes up results with a visible trace.",
      "for_whom": "Researchers who want a local workbench that keeps project files on the machine and sends model calls to a provider they choose.",
      "access_notes": "Desktop app for macOS, Windows and Linux from https://openscience.sh/download. CLI: npm install -g @synsci/openscience then openscience. Or npx synsci. Or curl -fsSL https://openscience.sh/install | bash (read the script before running it). First launch of the GUI asks you to sign in to a Synthetic Sciences account. Project files stay in the connected folder. Prompts go to the model provider you connect, a local endpoint, or Ace Wallet pay as you go. Ace auto reload is a separate opt-in that charges a saved card. Search, database connectors and remote compute send queries and selected files to those services. While signed in, session traces are shared by default, including sessions that use your own keys or a local model; turn that off under Customize, Permissions, Data and privacy. Apache-2.0.",
      "source_url": "https://github.com/synthetic-sciences/openscience",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "thinking-orbs",
      "name": "thinking-orbs",
      "category": "Agent tools",
      "url": "https://libraries.dev/orbs",
      "description": "A React canvas library of nine dotted thought-orb animations for agent status, in two sizes, with automatic light and dark themes.",
      "for_whom": "People building agent chat UIs who want a status glyph instead of a spinner.",
      "access_notes": "npm install thinking-orbs. Needs React 18 or newer. Import ThinkingOrb and set a state such as searching, working or solving, with size 64 or 20. The package is a canvas component; it does not call a model. Demo is https://libraries.dev/orbs. MIT.",
      "source_url": "https://github.com/Jakubantalik/thinking-orbs",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "piik",
      "name": "Piik",
      "category": "Platforms",
      "url": "https://piik.tv",
      "description": "An MIT screen-sharing app for one host and up to 20 viewers, with browser watch, optional remote control, voice and a self-hosted server.",
      "for_whom": "Friends who want a private watch-together room they can run themselves.",
      "access_notes": "Hosted demo is https://demo.piik.tv, P2P only; video and audio travel between participants. App: download Piik App from https://piik.tv, then choose Public invite or Local room. Self-host: extract the Server archive from GitHub Releases and run ./piik-server (Linux) or ./piik-server.exe (Windows). Local UI is http://localhost:8787. Room records stay in SQLite. Docker: download compose.yaml and .env.example from the repo, set your domain, then docker compose up -d. Default is P2P with STUN on UDP 3478; optional SFU on UDP 7882 forwards video and audio through the server. Remote control, once you approve it, lets viewers use the host keyboard, mouse or a supported gamepad. MIT.",
      "source_url": "https://github.com/TNTcraftHIM/Piik",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "legal-templates",
      "name": "Legal Templates",
      "category": "Skills and learning",
      "url": "https://github.com/General-Legal/legal-templates",
      "description": "CC0 attorney-drafted startup templates in LLM-oriented markdown and original Word files, covering NDAs, DPAs, privacy policies, MSAs and related forms.",
      "for_whom": "Founders and agents who need a starting draft of common technology-company contracts.",
      "access_notes": "git clone https://github.com/General-Legal/legal-templates.git and open the markdown under templates/ or the files in docx-originals/. Fill the marked fields before you use a document. General Legal says the templates are for general reference only, are not legal advice, and that it does not review your changes. The templates are CC0 1.0; the authors ask you to keep the General Legal footnote. CC0-1.0.",
      "source_url": "https://github.com/General-Legal/legal-templates",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "whiteboard",
      "name": "Whiteboard",
      "category": "Platforms",
      "url": "https://dev.fast",
      "description": "An MIT desktop canvas where humans and coding agents draw software maps, traces and semantic diffs against a local checkout.",
      "for_whom": "Developers who want an agent to diagram a change beside the local repository.",
      "access_notes": "macOS, Windows and Linux installers from https://dev.fast/install. On macOS: brew install --cask devdotfast/tap/whiteboard. Connect Claude Code, Codex or another coding agent from the welcome screen. Whiteboards stay in ~/.dev/review-api.db. Anonymous telemetry is on by default and goes to PostHog as feature counts, durations and versions under a random installation ID; it omits source code, diffs, paths, prompts and model output. Turn it off in Settings under Share anonymous usage data, or set DO_NOT_TRACK=1. After a crash, the next launch uploads the dump to bug.dev.fast, and it can contain process memory including open source text; with telemetry off, dumps are deleted without upload. whiteboard share uploads a copy of that whiteboard, traces and referenced source to the /dev/fast share service. Trace capture is off until you allow a repository. MIT.",
      "source_url": "https://github.com/devdotfast/whiteboard",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "seekdb",
      "name": "seekdb",
      "category": "Agent tools",
      "url": "https://www.seekdb.ai",
      "description": "An Apache-licensed OceanBase search database that unifies vector, text and structured data for hybrid search and in-database AI functions.",
      "for_whom": "Teams who want agent memory and RAG on a local file or a MySQL-compatible server.",
      "access_notes": "pip install -U pyseekdb. Needs Python 3.11 or later. Embedded mode on Linux and macOS: import pyseekdb then client = pyseekdb.Client() writes a local database (for example ./seekdb.db). Windows uses server mode only. AI_EMBED, AI_COMPLETE and similar SQL functions send text to the embedding or LLM service you register. Data stays in that local file or on the seekdb or OceanBase server you connect to. Apache-2.0.",
      "source_url": "https://github.com/oceanbase/seekdb",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "itsaplan",
      "name": "It's a Plan",
      "category": "Platforms",
      "url": "https://itsaplan.dev",
      "description": "An AGPL self-hosted issue tracker where people and agents share the same board, with REST, webhooks and MCP.",
      "for_whom": "Teams who want Linear-style tracking on their own Postgres, with agents as assignees.",
      "access_notes": "git clone https://github.com/croffasia/itsaplan.git && bun install && bun run setup, then answer Try it. UI is http://localhost:3001; API is http://localhost:3000. Production: copy .env.example to .env, set the secrets and public URLs, then docker compose up -d behind TLS. The first account is instance admin. Issues live in Postgres; files live in RustFS. Agent prompts go to the model or CLI you configure. A daily telemetry snapshot goes to https://telemetry.itsaplan.dev by default (counts as ranges, plus which features and integrations are on); set TELEMETRY_DISABLED=1 or DO_NOT_TRACK=1 to stop it. MCP is on the API origin. AGPL-3.0; the runner package is Apache-2.0.",
      "source_url": "https://github.com/croffasia/itsaplan",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "openwork",
      "name": "openwork",
      "category": "Platforms",
      "url": "https://github.com/langchain-ai/openwork",
      "description": "A LangChain desktop UI for deepagentsjs, with filesystem tools, planning and subagent delegation.",
      "for_whom": "People who want a desktop harness that can read the workspace and run shell commands after you approve the tool call.",
      "access_notes": "npx openwork, or npm install -g openwork then openwork. Needs Node.js 18 or later. From source: git clone https://github.com/langchain-ai/openwork.git && npm install && npm run dev. Set Anthropic, OpenAI or Google keys in the settings panel. Agents can read the filesystem and run shell commands; review each tool call and only open workspaces you trust. Prompts go to the model provider you choose. MIT.",
      "source_url": "https://github.com/langchain-ai/openwork",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "cashclaw",
      "name": "CashClaw",
      "category": "Agent tools",
      "url": "https://moltlaunch.com",
      "description": "An MIT Node agent that quotes, does and gets paid for marketplace tasks, then stores what it learned for the next job.",
      "for_whom": "Operators who want a local process that takes Moltlaunch tasks, or a fork they can point at their own clients.",
      "access_notes": "npm install -g cashclaw-agent moltlaunch then cashclaw. Setup is http://localhost:3777. Needs a Moltlaunch wallet (mltl) and an Anthropic, OpenAI or OpenRouter key. Quotes and payouts are in ETH on Base through that wallet. Optional AgentCash calls charge USDC from ~/.agentcash/wallet.json. State is ~/.cashclaw. Auto-quote and auto-work are on by default, so it quotes and submits work without asking; turn them off in Settings to approve each job. When idle it runs study sessions every 30 minutes by default, which call your LLM. Prompts go to the LLM you set. MIT.",
      "source_url": "https://github.com/moltlaunch/cashclaw",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "page-mascot",
      "name": "page-mascot",
      "category": "Skills and learning",
      "url": "https://koboyo.com/page-mascot",
      "description": "An MIT React mascot that tracks the pointer, with a skill that draws the two sprite sheets and drops the component on a page.",
      "for_whom": "People who want a small character on a site, or an agent that can draw one from a prompt.",
      "access_notes": "npm i page-mascot. Put two sprite sheets on the page and pass them as directions and reactions. Skill: npx skills add nilbuild/page-mascot --skill page-mascot --global --yes, then /page-mascot. Drawing a new character needs an image tool; Claude Code uses OPENAI_API_KEY for the OpenAI images API, and a photo you attach is sent there. MIT.",
      "source_url": "https://github.com/nilbuild/page-mascot",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "alumnium",
      "name": "Alumnium",
      "category": "MCP and integrations",
      "url": "https://alumnium.ai",
      "description": "An MIT AI test harness over Appium, Maestro, Playwright or Selenium, as a library and as MCP.",
      "for_whom": "Testers who want an agent to drive a browser or a phone with do, get and check.",
      "access_notes": "MCP: curl -LsSf https://alumnium.ai/install.sh | sh (read the script before running it), then claude mcp add alumnium --env OPENAI_API_KEY=... -- alumnium mcp. Libraries: pip install alumnium, npm install alumnium, or the Java artifact. Agentic mode (default) sends page text, accessibility trees and screenshots to the model you set. Direct mode skips the model and lets your coding agent call driver actions. Browser profiles live in ~/.alumnium/profiles. MIT.",
      "source_url": "https://github.com/alumnium-hq/alumnium",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "ztm",
      "name": "ZTM",
      "category": "Platforms",
      "url": "https://github.com/flomesh-io/ztm",
      "description": "An Apache-licensed zero-trust mesh of HTTP/2 tunnels, with a hub, agents, TLS certificates and apps for tunnel, proxy, script and terminal.",
      "for_whom": "People who want a small private mesh across home, work and a cloud box, without a SaaS overlay.",
      "access_notes": "Download the CLI or desktop app from GitHub Releases. Hub: ztm start hub --listen 0.0.0.0:8888 --names YOUR_PUBLIC_IP:8888 --permit root.json. Agent: ztm start agent, then ztm join MESH --as NAME --permit root.json. GUI is http://localhost:7777 after the agent starts. Hub state is ~/.ztm/ztm-hub.db; agent state is ~/.ztm/ztm.db. Traffic is TLS. The permit file is the join key. Apache-2.0.",
      "source_url": "https://github.com/flomesh-io/ztm",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "codag",
      "name": "Codag",
      "category": "Agent tools",
      "url": "https://codag.ai",
      "description": "An MIT VS Code extension that graphs LLM calls and agent frameworks in a checkout, with a local Gemini backend for workflow labels.",
      "for_whom": "Engineers who want a map of which files call which models, beside the source.",
      "access_notes": "Run the backend first: git clone https://github.com/michaelzixizhou/codag.git, copy backend/.env.example to backend/.env, set GEMINI_API_KEY, then make setup and docker compose up -d. Backend is http://localhost:52104. Then install Codag from the VS Code Marketplace. On activation it writes .mcp.json (or .cursor/mcp.json) into the workspace. Selected files go to Gemini 2.5 Flash for workflow labels. Live edits stay on the machine (tree-sitter). MIT.",
      "source_url": "https://github.com/michaelzixizhou/codag",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "deepinnovator",
      "name": "DeepInnovator",
      "category": "Agent tools",
      "url": "https://huggingface.co/T1anyu/DeepInnovator",
      "description": "An MIT training recipe and Apache-2.0 14B Qwen2.5-Instruct model that proposes research ideas from scientific literature.",
      "for_whom": "Researchers who want a local 14B model that drafts next research ideas, or who want to rerun the paper's RL recipe.",
      "access_notes": "Inference: pip install transformers torch, then load T1anyu/DeepInnovator with AutoModelForCausalLM.from_pretrained. The weights are about 15 billion parameters in BF16; Hugging Face documents GPU load. Training: git clone https://github.com/HKUDS/DeepInnovator.git, pip install openai omegaconf python-dotenv feedparser requests PyPDF2 tqdm python-dateutil datasets numpy torch transformers, set OPENAI_API_KEY and OPENAI_API_BASE in .env, then cd recipe/DeepInnovator/data_preparation and bash run.sh 100 ./data/arxiv_data. train_rl.sh needs a CUDA GPU. Data preparation sends paper text to the OpenAI-compatible API you set. GitHub recipe MIT. Hugging Face weights Apache-2.0.",
      "source_url": "https://github.com/HKUDS/DeepInnovator",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "codevibes",
      "name": "CodeVibes",
      "category": "Platforms",
      "url": "https://github.com/danish296/codevibes",
      "description": "An MIT GitHub-repo auditor that scores security, bugs and quality with DeepSeek and a 0 to 100 Vibe Score.",
      "for_whom": "Developers who want an AI pass over a GitHub repo for secrets, injection and quality.",
      "access_notes": "Self-host: git clone https://github.com/danish296/codevibes.git, npm install, then cd codevibes-backend && npm install, copy .env.example to .env, set DEEPSEEK_API_KEY, JWT_SECRET and a 32-character ENCRYPTION_KEY. Backend: npm run dev at http://localhost:3001. Frontend: npm run dev at http://localhost:8080. History is SQLite at codevibes-backend/data/codevibes.db. Repo files go to DeepSeek. Private repos need a GitHub token or GitHub OAuth (GITHUB_CLIENT_ID and GITHUB_CLIENT_SECRET). MIT.",
      "source_url": "https://github.com/danish296/codevibes",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "chatpack",
      "name": "Chatpack",
      "category": "Agent tools",
      "url": "https://docs.chatpack.dev",
      "description": "An MIT chat backend you mount in your app for 1:1 and group messages, permissions, read-state and SSE delivery.",
      "for_whom": "Developers who need conversations in an existing app and already have auth and a database.",
      "access_notes": "npm install @chatpack/core @chatpack/adapter-memory. Create chatpack({ storage, auth }) where auth returns { id } from your session cookie or null. Mount chat.handler() on a catch-all under /api/chat (Next.js app/api/chat/[...chatpack]/route.ts). Live events are GET /api/chat/stream as EventSource; cookie sessions work for SSE. Production: @chatpack/adapter-drizzle with DATABASE_URL Postgres, or @chatpack/adapter-prisma on PostgreSQL 16. Messages live in the database you attach. Optional npm install @chatpack/client react with credentials include. Agent skill: npx skills add chddaniel/chatpack. Docs MCP: npx -y @chatpack/mcp (stdio, bundled docs, no network). Docs https://docs.chatpack.dev. API is 0.x. MIT.",
      "source_url": "https://github.com/chddaniel/chatpack",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "hands",
      "name": "Hands",
      "category": "Platforms",
      "url": "https://hands.build",
      "description": "An MIT Cloudflare-native release platform for draft-first app builds, staged rollouts, share pages, crash reports and in-app feedback.",
      "for_whom": "Teams shipping Android, iOS, HarmonyOS or Electron builds who want agents and CI to publish through one API.",
      "access_notes": "Hosted dashboard https://app.hands.build and API https://hands.build, run by Oranix on Cloudflare Workers, D1 and R2. Login with Raft. CLI: npm install -g @botiverse/hands-cli, then hands login (browser JWT saved at $XDG_CONFIG_HOME/quiver/auth.json) or CI HANDS_API=https://hands.build with HANDS_AUTH_TOKEN or HANDS_BEARER_TOKEN. Builds, crash reports, feedback and installable artifacts go to that Cloudflare account. Self-host: git clone https://github.com/botiverse/hands.git, pnpm install, pnpm --filter @botiverse/hands-worker dev at http://127.0.0.1:8787, pnpm --filter @botiverse/hands-admin dev at http://localhost:5173 (proxies /api to 8787). Docker is needed for the APK parser container. Set RAFT_CLIENT_ID in worker config and wrangler secret put RAFT_CLIENT_SECRET. The production Worker config turns Cloudflare observability traces on (5 percent head sample, persist). MIT.",
      "source_url": "https://github.com/botiverse/hands",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "codemap-ai",
      "name": "CodeMap AI",
      "category": "Agent tools",
      "url": "https://code-map-ai-mu.vercel.app",
      "description": "An MIT repo map: paste a GitHub URL and get file-dependency and function-call graphs plus issue mapping, parsed with ts-morph and tree-sitter.",
      "for_whom": "Developers, especially first-time open source contributors, who need a starting map of a large GitHub repository.",
      "access_notes": "Hosted: https://code-map-ai-mu.vercel.app, the GitHub homepage of Ayansh0209/CodeMap-Ai (LICENSE Copyright 2026 Aayansh Singh). Paste a GitHub repo URL; that host downloads the tarball. Self-host: Node.js 20+, Redis and a GitHub token. cd backend && npm install, copy backend/.env.example to backend/.env, set REDIS_URL, GITHUB_TOKEN and PORT=5000. cd frontend && npm install. Terminal 1: cd backend && npm run dev at http://localhost:5000. Terminal 2: cd backend && npm run worker. Terminal 3: cd frontend && npm run dev at http://localhost:3000. The backend downloads the GitHub tarball and extracts it locally. BullMQ plus Redis runs the parse. ts-morph covers JS, TS, JSX and TSX; web-tree-sitter WASM covers Python, Go, C and C++. Graph artifacts go to S3-compatible storage (Backblaze B2, Cloudflare R2, Supabase) when R2_ACCESS_KEY_ID, R2_SECRET_ACCESS_KEY, R2_BUCKET_NAME and R2_ENDPOINT or R2_ACCOUNT_ID are set; otherwise gzipped Redis. GEMINI_API_KEY enables issue mapping and chat on the parsed graph; selected file content goes to Gemini or Vertex AI. Without FIREBASE_SERVICE_ACCOUNT_BASE64 every request is anonymous trial; set it, or drop backend/firebase.json for local, for GitHub sign-in. README says the project is evolving and issue mapping can be wrong. MIT.",
      "source_url": "https://github.com/Ayansh0209/CodeMap-Ai",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "antiproton",
      "name": "Antiproton",
      "category": "Platforms",
      "url": "https://antiproton.ai",
      "description": "An Apache-2.0 Cloudflare-native multi-tenant runtime for autonomous agents, with Durable Object SQLite per tenant, V8 isolates and on-demand Run9 containers.",
      "for_whom": "Teams who want agents to call real APIs and sandboxes while keeping credentials out of the model context.",
      "access_notes": "Hosted UI https://antiproton.ai and admin https://admin.antiproton.ai, run by botiverse on Cloudflare Workers, Durable Objects, D1 and R2. Custom domain antiproton.botiverse.dev sits behind Cloudflare Access. GitHub sign-in; UI_ALLOW_ANONYMOUS is 0; GITHUB_OPEN_SIGNUP is 1 so a GitHub account registers on first sign-in. Self-host: git clone https://github.com/botiverse/antiproton.git, npm install, Node.js 24+. cd cf && npx wrangler dev. npx wrangler secret put ANTHROPIC_API_KEY, or OPENROUTER_API_KEY or DEEPSEEK_API_KEY. Production deploy: cf/scripts/deploy-pinned.sh from origin/master. Default HARNESS_MODEL is deepseek-flash. USER_MODELS are deepseek-flash and gpt-5.6-luna through Cloudflare AI Gateway once AI_GATEWAY_TOKEN is set. Credentials stay behind the tool gateway and never enter model context prompts, tool outputs or execution logs. Three tiers: Durable Object plus SQLite per tenant and agent; V8 Dynamic Worker with globalOutbound null; Run9 containers with a 30 minute idle lease and a 5 minute warning. TRACE_INGEST_URL and TRACE_INGEST_TOKEN are unset so trace forwarding is off. Cloudflare observability is enabled. Raft provision APIs can create hosted agents. Daily spend limits apply on the operator model accounts. Docs: docs/agents-api.md, docs/agent-surface.md, docs/plugins.md, docs/runbook.md. Default branch is master. Apache-2.0.",
      "source_url": "https://github.com/botiverse/antiproton",
      "source_checked": "2026-10-29",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "ai-phone",
      "name": "ai-phone",
      "category": "Agent tools",
      "url": "https://github.com/oxnw/ai-phone",
      "description": "A local SIP phone daemon that lets an agent receive and place calls through a CLI on an Apple Silicon Mac.",
      "for_whom": "Developers evaluating local voice agents and a phone interface for an existing agent.",
      "access_notes": "macOS on Apple Silicon, Python 3.11 to 3.13, Homebrew and uv. Source install builds a native PJSIP binding and setup downloads several GB of model files. The README recommends 16 GB RAM for the default 4B model, with a 2B option for 8 GB. English and one call at a time. Local SIP testing needs no paid carrier; telephone numbers and calls need a SIP trunk or carrier account and incur charges. Local speech stays on the Mac, but audio travels over SIP/RTP; remote language models and external cloud agents receive any call text passed to them. AGPL-3.0-or-later; bundled PJSIP interface files are GPLv2-or-later. The README says local call tests have run, and live carrier and end-to-end agent tests are still pending.",
      "source_url": "https://github.com/oxnw/ai-phone/blob/dfa54f4744658740054e823008a3be0a7f904f8a/README.md",
      "source_checked": "2026-10-30",
      "verification": "Official documentation and selected source reviewed; not independently run or call-tested",
      "thl_project": false
    },
    {
      "id": "billionmail",
      "name": "BillionMail",
      "category": "Platforms",
      "url": "https://github.com/Billionmail/BillionMail",
      "description": "A self-hosted mail server and email campaign platform with contact groups, templates, tracking and a sending API.",
      "for_whom": "Teams evaluating a Linux mail and newsletter stack they operate themselves.",
      "access_notes": "Linux amd64 or arm64 with Docker and Docker Compose. The stack includes PostgreSQL, Redis, Postfix, Dovecot, Rspamd and Roundcube; the management container has a Docker socket mount and network capabilities. Requires domain and DNS configuration. Self-hosting, maintenance and any external SMTP relay or AI provider have their own costs. SMTP relay is configurable per sending domain. AI features can call configured model providers, and an image-upload path uses the BillionMail CDN. AGPL-3.0. CVE-2026-111367 affects releases through 4.9; the reviewed dev source still has deterministic fallback generation for subscription signing secrets. A fixed deployment image has not been verified. Separate contact groups or domains do not by themselves keep one client's data apart from another's. We list it for its documentation and source only.",
      "source_url": "https://github.com/Billionmail/BillionMail/blob/fc36c76c050c3775c5e899faf7403cf0262d2744/README.md",
      "source_checked": "2026-10-30",
      "verification": "Official documentation and selected source reviewed; not installed, independently run or delivery-tested",
      "thl_project": false
    },
    {
      "id": "fun-isometric",
      "name": "fun-isometric",
      "category": "Skills and learning",
      "url": "https://github.com/kelvinkn17/skills",
      "description": "An agent skill and canvas kit for drawing animated isometric stickers, with a React component and video export.",
      "for_whom": "Designers and developers who want animated icons they can adapt to a project palette.",
      "access_notes": "Install with npx skills add kelvinkn17/skills@fun-isometric, then start a new agent session. Needs Node.js 22 or later. Rendering and checks use Bun and Playwright Chromium, which downloads on first use into ~/.cache/fun-isometric. Video export also needs ffmpeg. The output is a canvas icon module or alpha video with a still poster. The skill adds instructions and runnable rendering tools to the agents you select. MIT.",
      "source_url": "https://github.com/kelvinkn17/skills/blob/7c8a7526306e09855c0d4f66130cbaa87422cb8d/README.md",
      "source_checked": "2026-10-30",
      "verification": "Official documentation and licence reviewed; not installed or independently tested",
      "thl_project": false
    },
    {
      "id": "n8n",
      "name": "n8n",
      "category": "Platforms",
      "url": "https://github.com/n8n-io/n8n",
      "description": "A visual workflow platform that combines integrations, AI models, code and approval steps.",
      "for_whom": "Teams who want to connect existing services in workflows they can host or run in n8n Cloud.",
      "access_notes": "Self-host with Docker using docker.n8n.io/n8nio/n8n; the editor runs on port 5678 and the n8n_data volume persists data under /home/node/.n8n. Workflows use the credentials and data access of the connected services; model and service charges still apply. n8n Cloud has its own account and plan. Source-available under the Sustainable Use License for internal business, personal or non-commercial use, with separate enterprise terms for designated code. Check the licence before embedding it in a customer product or offering hosted access.",
      "source_url": "https://github.com/n8n-io/n8n/blob/21e9955261c5a97b3620f6ecabecc53944b70318/README.md",
      "source_checked": "2026-10-30",
      "verification": "Official documentation and licence reviewed; not installed or independently tested",
      "thl_project": false
    },
    {
      "id": "dify",
      "name": "Dify",
      "category": "Platforms",
      "url": "https://github.com/langgenius/dify",
      "description": "A visual platform for AI applications, agents, document retrieval and model workflows, with APIs for applications.",
      "for_whom": "Teams building AI applications with a visual workflow and document knowledge base.",
      "access_notes": "Self-host with Docker Compose 2.24 or later. The README specifies at least 2 CPU cores and 4 GiB RAM. From the docker directory, configure .env and start Compose; initialise through /install. Dify Cloud needs an account and has its own plan. Documents and conversation data are processed by the deployment and whichever models, tools or observability services you configure. Model-provider charges still apply. The modified Apache-2.0 licence restricts operating a multi-tenant environment without written authorisation or a commercial licence, and removing frontend logos or copyright notices. A workspace is a tenant under these terms.",
      "source_url": "https://github.com/langgenius/dify/blob/7e15fac03242a9e6a3a1e5010b06956c7aa101a2/README.md",
      "source_checked": "2026-10-30",
      "verification": "Official documentation and licence reviewed; not installed or independently tested",
      "thl_project": false
    },
    {
      "id": "langflow",
      "name": "Langflow",
      "category": "Platforms",
      "url": "https://github.com/langflow-ai/langflow",
      "description": "A visual builder for AI agents and workflows that can expose flows through APIs and MCP.",
      "for_whom": "Developers who want to design and serve AI workflows visually.",
      "access_notes": "The README supports a desktop app for Windows and macOS, a Python package, or Docker. Python 3.10 to 3.14; install with uv pip install langflow -U, then uv run langflow run. Local UI is http://127.0.0.1:7860. Set LANGFLOW_SUPERUSER_PASSWORD before startup. Official release packages and Docker images require authentication by default; development branches retain automatic login. Flow components can use connected files, models, databases and service credentials, with provider charges where applicable. MIT.",
      "source_url": "https://github.com/langflow-ai/langflow/blob/b5c54a64e685b7e50fd3bc76e965ad718fc2dea3/README.md",
      "source_checked": "2026-10-30",
      "verification": "Official documentation and licence reviewed; not installed or independently tested",
      "thl_project": false
    },
    {
      "id": "crewai",
      "name": "CrewAI",
      "category": "Platforms",
      "url": "https://github.com/crewAIInc/crewAI",
      "description": "A Python framework for composing agent teams and controlled workflows with tools, memory and model integrations.",
      "for_whom": "Python developers building agent workflows in their own application.",
      "access_notes": "Requires Python 3.10 to 3.13 and uv. Install the CLI with uv tool install crewai. Models and tool integrations need their own configuration, credentials and any provider fees. The framework can run tools with the access the host gives them. Its README describes usage telemetry, disabled with OTEL_SDK_DISABLED=true. Enabling share_crew additionally shares detailed agent and task execution data. MIT.",
      "source_url": "https://github.com/crewAIInc/crewAI/blob/97bbfb64811775a965304bda45c8ec0e8e4ef3a2/README.md",
      "source_checked": "2026-10-30",
      "verification": "Official documentation and licence reviewed; not installed or independently tested",
      "thl_project": false
    },
    {
      "id": "ragflow",
      "name": "RAGFlow",
      "category": "Platforms",
      "url": "https://github.com/infiniflow/ragflow",
      "description": "A document retrieval and agent platform that parses documents and supplies retrieved context to language models.",
      "for_whom": "Teams evaluating searchable document collections and retrieval workflows they operate.",
      "access_notes": "Self-host through Docker and Docker Compose; the reviewed README quickstart selects release candidate v1.0.0-rc2. Recommended starting host: 4 CPU cores, 16 GB RAM and 50 GB disk, with more resources for local models or higher load. Docker 24 or later and Compose 2.26.1 or later. Configure an LLM, embedding model and reranker, including endpoint and API key as needed. Uploaded documents are processed and stored by the deployment, and configured model services may receive document or query content. Provider and hosting costs apply. Apache-2.0.",
      "source_url": "https://github.com/infiniflow/ragflow/blob/6f571fda64cb4eb712aa6c06b3209a4b0553a27c/README.md",
      "source_checked": "2026-10-30",
      "verification": "Official documentation and licence reviewed; not installed or independently tested",
      "thl_project": false
    },
    {
      "id": "open-webui",
      "name": "Open WebUI",
      "category": "Platforms",
      "url": "https://github.com/open-webui/open-webui",
      "description": "A self-hosted chat interface for local and remote models, including Ollama and OpenAI-compatible services.",
      "for_whom": "Teams who want a web interface for model access and document chat on infrastructure they operate.",
      "access_notes": "Use the official Docker image ghcr.io/open-webui/open-webui, or install the Python package with Python 3.12. The Docker quickstart serves the UI on localhost:3000 and persists the database and uploads in the open-webui volume at /app/backend/data. Local or remote model endpoints determine where prompts and documents go and whether provider charges apply. Offline use needs local models and assets prepared first. The current Open WebUI License includes branding-preservation requirements, with exceptions including deployments of at most 50 end users in a rolling 30-day period or written permission. Earlier components retain their original terms. Check the licence before rebranding.",
      "source_url": "https://github.com/open-webui/open-webui/blob/f7ac7ee10962ddec0017f5c29b6740d9b9c5faca/README.md",
      "source_checked": "2026-10-30",
      "verification": "Official documentation and licence reviewed; not installed or independently tested",
      "thl_project": false
    },
    {
      "id": "awesome-ai-apps",
      "name": "Awesome AI Apps",
      "category": "Skills and learning",
      "url": "https://github.com/Arindam200/awesome-ai-apps",
      "description": "A collection of 138 runnable LLM apps and agents, from framework starters to multi-agent systems, with tutorials.",
      "for_whom": "Builders who want working examples of agents, RAG apps and MCP tools.",
      "access_notes": "Each project brings its own dependencies and model provider keys; review a project before running it.",
      "source_url": "https://github.com/Arindam200/awesome-ai-apps",
      "source_checked": "2026-11-03",
      "verification": "Repository README reviewed; projects not run",
      "thl_project": false
    },
    {
      "id": "awesome-openclaw-usecases",
      "name": "Awesome OpenClaw Use Cases",
      "category": "Skills and learning",
      "url": "https://github.com/hesamsheikh/awesome-openclaw-usecases",
      "description": "A community collection of real-life OpenClaw use cases, grouped by area such as social media and productivity.",
      "for_whom": "OpenClaw users looking for ideas on what to automate.",
      "access_notes": "The list links to community skills and plugins; its own README warns some may have security vulnerabilities, so review each before installing.",
      "source_url": "https://github.com/hesamsheikh/awesome-openclaw-usecases",
      "source_checked": "2026-11-03",
      "verification": "Repository README reviewed; linked skills not installed",
      "thl_project": false
    },
    {
      "id": "abn-lookup-web-services",
      "name": "ABN Lookup web services",
      "category": "APIs and data",
      "url": "https://abr.business.gov.au/Tools/WebServices",
      "description": "The Australian Business Register's free API for searching ABNs and business names and validating ABN details.",
      "for_whom": "Agents and apps that verify or pre-fill Australian business details.",
      "access_notes": "Free. Requires registering and accepting the web services agreement to receive an authentication GUID by email; keep the GUID out of code and chats. JSON support is limited to ABN and name searches.",
      "source_url": "https://abr.business.gov.au/Tools/WebServices",
      "source_checked": "2026-11-03",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "data-gov-au-api",
      "name": "data.gov.au API",
      "category": "APIs and data",
      "url": "https://data.gov.au/data/api/3/action/status_show",
      "description": "The CKAN API behind data.gov.au, for searching and downloading Australian government datasets, including ASIC's business names dataset.",
      "for_whom": "Agents and analysts working with Australian public data.",
      "access_notes": "No key needed to search and read public datasets. Each dataset carries its own licence; check it before reuse.",
      "source_url": "https://data.gov.au/data/dataset/asic-business-names",
      "source_checked": "2026-11-03",
      "verification": "Official documentation reviewed; public search endpoint queried",
      "thl_project": false
    },
    {
      "id": "abs-data-api",
      "name": "ABS Data API",
      "category": "APIs and data",
      "url": "https://www.abs.gov.au/about/data-services/application-programming-interfaces-apis/data-api-user-guide",
      "description": "The Australian Bureau of Statistics API for population, economic and industry statistics in SDMX formats.",
      "for_whom": "Agents and apps that need Australian statistics by region or industry.",
      "access_notes": "Free and open without an API key since 29 November 2024; responses are SDMX, so set the Accept header for JSON or CSV.",
      "source_url": "https://www.abs.gov.au/about/data-services/application-programming-interfaces-apis/data-api-user-guide",
      "source_checked": "2026-11-03",
      "verification": "Official documentation reviewed; dataflow endpoint queried",
      "thl_project": false
    },
    {
      "id": "claude-code-best-practice",
      "name": "Claude Code Best Practice",
      "category": "Skills and learning",
      "url": "https://github.com/shanraisshan/claude-code-best-practice",
      "description": "A reference repository that maps Claude Code features such as subagents, commands, skills, hooks, MCP, settings and memory to written practice notes and working examples, with a list of 83 tips from the Claude Code team and community.",
      "for_whom": "Claude Code users who want worked examples of agents, commands, skills and hooks to adapt for their own setup.",
      "access_notes": "Reading needs nothing beyond a public clone. Running the /weather-orchestrator example needs Claude Code and a Claude account. The clone's .claude/settings.json allows Bash(*), Edit(*), Write(*) and WebFetch for any domain, and its .mcp.json declares Playwright, Context7 and DeepWiki servers run through npx. Review both before opening the folder in Claude Code. The README carries sponsor links. MIT.",
      "source_url": "https://github.com/shanraisshan/claude-code-best-practice",
      "source_checked": "2026-11-03",
      "verification": "Repository README, .claude/settings.json and .mcp.json reviewed; not installed",
      "thl_project": false
    },
    {
      "id": "tooljet",
      "name": "ToolJet",
      "category": "Platforms",
      "url": "https://github.com/ToolJet/ToolJet",
      "description": "A visual builder for internal tools, admin panels and dashboards that run on existing databases, APIs and SaaS systems, with an MCP server that lets coding agents build and edit ToolJet apps.",
      "for_whom": "Teams building internal apps over their own data who want people and coding agents working in the same app builder.",
      "access_notes": "Use ToolJet Cloud with an account, or self-host on Docker, Kubernetes, AWS, GCP, Azure and the other documented targets. The README's quick-try image is tooljet/try:ee-lts-latest on port 80. Each data source needs its own credentials, which apps use to run queries. The MCP server is marked beta and runs agent operations on your own model subscription. AI app generation, workflows and the agent builder are listed under the Enterprise edition, whose code sits in non-public submodules (frontend/ee, server/ee). The repository is AGPL-3.0, which requires offering source for modified versions run as a network service.",
      "source_url": "https://github.com/ToolJet/ToolJet",
      "source_checked": "2026-11-03",
      "verification": "Repository README, licence and submodule list reviewed; not installed",
      "thl_project": false
    },
    {
      "id": "aci-dev",
      "name": "ACI.dev",
      "category": "MCP and integrations",
      "url": "https://github.com/aipotheosis-labs/aci",
      "description": "An open-source tool-calling platform that gives agents over 600 pre-built app integrations, with managed OAuth and secrets, natural-language permission boundaries and tool discovery, through a unified MCP server or Python and TypeScript SDKs.",
      "for_whom": "Developers giving an agent or agentic IDE authenticated access to many SaaS tools, for themselves or for their own end users.",
      "access_notes": "Use the managed service at aci.dev with an account and API key, or run the platform locally: Python 3.12+, Docker Compose, PostgreSQL with pgvector and an OpenAI API key, with PropelAuth for the dev portal. Each linked app needs OAuth consent or API credentials from the account the agent will act on, held in ACI's secrets management. The unified MCP server is a separate repository, aipotheosis-labs/aci-mcp. Apache-2.0.",
      "source_url": "https://github.com/aipotheosis-labs/aci",
      "source_checked": "2026-11-03",
      "verification": "Repository README and backend README reviewed; not installed",
      "thl_project": false
    },
    {
      "id": "future-agi",
      "name": "Future AGI",
      "category": "Platforms",
      "url": "https://github.com/future-agi/future-agi",
      "description": "A self-hostable platform for tracing, evaluating, simulating and guarding LLM and agent applications, with an OpenAI-compatible gateway and prompt optimisation.",
      "for_whom": "Teams running agents in production who want traces, evals and guardrails in one system they can host themselves.",
      "access_notes": "Future AGI Cloud needs an account. Self-host clones the repository and runs ./bin/install, which writes secrets to .env and pulls about 800 MB of images. The default Standalone setup needs Docker Compose v2.24 or newer with 2 vCPUs and 4 GB of memory; a Helm chart is also published. Apps send traces with an API key and secret key; add LLM provider keys when you need them. Self-hosted installs send telemetry by default, including the email addresses of owner, admin and staff accounts. Opting out with --no-telemetry or FUTURE_AGI_TELEMETRY_DISABLED=true still sends one registration without email addresses; block api.futureagi.com to send nothing. The core is Apache-2.0, but code in ee/ directories is under the Future AGI Enterprise License and needs a paid subscription for production use.",
      "source_url": "https://github.com/future-agi/future-agi",
      "source_checked": "2026-11-03",
      "verification": "Repository README, LICENSE-EE and NOTICE reviewed; not installed",
      "thl_project": false
    },
    {
      "id": "xero-mcp-server",
      "name": "Xero MCP Server",
      "category": "MCP and integrations",
      "url": "https://github.com/XeroAPI/xero-mcp-server",
      "description": "Xero's MCP server for reading and writing accounting and payroll data, including contacts, invoices, quotes, payments, bank transactions, manual journals, reports and timesheets.",
      "for_whom": "Businesses and bookkeepers who want an agent to query or update a Xero organisation.",
      "access_notes": "Runs locally with Node.js 18 or later through npx -y @xeroapi/xero-mcp-server@latest. Authenticate with a Xero Custom Connection (XERO_CLIENT_ID and XERO_CLIENT_SECRET) or a bearer token from your own OAuth flow (XERO_CLIENT_BEARER_TOKEN). Xero's developer docs say Custom Connections are only for organisations in Australia, New Zealand, the UK and the US and need an additional monthly subscription, but connect to the Demo Company free for development. The tools can create invoices, payments, bank transactions and manual journals and approve timesheets, so narrow XERO_SCOPES and start on the Demo Company. Payroll queries need an NZ or UK organisation. MIT.",
      "source_url": "https://github.com/XeroAPI/xero-mcp-server",
      "source_checked": "2026-11-03",
      "verification": "Repository README and Xero Custom Connections documentation reviewed; not installed",
      "thl_project": false
    },
    {
      "id": "awesome-seo",
      "name": "awesome-seo",
      "category": "Skills and learning",
      "url": "https://github.com/i365dev/awesome-seo",
      "description": "A curated reading list of SEO guides and tools, with a section on AI search, crawler controls and agent accessibility that points to Google, OpenAI, Anthropic and Cloudflare documentation.",
      "for_whom": "People who run websites and want sourced starting points for search and AI crawler questions.",
      "access_notes": "Reading needs nothing. Linked tools and services carry their own accounts and terms. The list says it is not an advertising channel and does not accept unsolicited vendor or self-promotional listings. Maintained by i365, a digital product studio. MIT.",
      "source_url": "https://github.com/i365dev/awesome-seo",
      "source_checked": "2026-11-03",
      "verification": "Repository README reviewed; not installed",
      "thl_project": false
    },
    {
      "id": "claude-code-training",
      "name": "Claude Code Training",
      "category": "Skills and learning",
      "url": "https://github.com/kousen/claude-code-training",
      "description": "Ken Kousen's Claude Code course: a Slidev deck, progressive hands-on labs, an instructor guide, copyable skills and hook examples, and sample projects in Python, TypeScript and Java.",
      "for_whom": "Developers and trainers learning or teaching Claude Code workflows.",
      "access_notes": "Slides are published at https://kousen.github.io/claude-code-training/ with a PDF on GitHub Releases; running the deck locally needs pnpm. The labs need Claude Code signed in with a Claude subscription or an ANTHROPIC_API_KEY, plus Python, JavaScript or TypeScript, and Java toolchains. Docker is optional. The clone's .claude/settings.json runs bun hook scripts on agent events and a status line command, so review it before opening the folder in Claude Code. MIT.",
      "source_url": "https://github.com/kousen/claude-code-training",
      "source_checked": "2026-11-03",
      "verification": "Repository README and .claude/settings.json reviewed; not installed",
      "thl_project": false
    },
    {
      "id": "oz-skills",
      "name": "Oz Skills",
      "category": "Skills and learning",
      "url": "https://github.com/warpdotdev/oz-skills",
      "description": "Warp's set of 15 Agent Skills for Warp agents and Oz, covering CI fixes, pull requests, docs updates, GitHub issue triage, MCP server building, Terraform style, web accessibility and performance audits, Playwright testing and BigQuery analysis.",
      "for_whom": "Warp users, or anyone running agents that read SKILL.md folders, who want ready-made engineering skills.",
      "access_notes": "Copy a skill folder from .agents/skills/ into a project's .agents/skills/ or into ~/.agents/skills/. Skills act through tools you already have: the gh CLI for pull requests and CI fixes, BigQuery and dbt for the data skills, Chrome DevTools MCP for performance audits and Playwright for web app tests. The ci-fix skill pushes to a fix branch. Most skills are MIT; mcp-builder and webapp-testing carry their own Apache-2.0 LICENSE.txt.",
      "source_url": "https://github.com/warpdotdev/oz-skills",
      "source_checked": "2026-11-03",
      "verification": "Repository README and each SKILL.md header reviewed; not installed",
      "thl_project": false
    },
    {
      "id": "agent-beacon",
      "name": "Beacon",
      "category": "Agent tools",
      "url": "https://github.com/Asymptote-Labs/agent-beacon",
      "description": "A local-first memory layer that captures session history from Claude Code, Cursor, Codex, OpenCode and other harnesses, then turns reviewed workflows and corrections into knowledge later agents retrieve through MCP or Agent Skills.",
      "for_whom": "Developers who switch between coding agents and want what one session learned to carry into the next.",
      "access_notes": "Install with Homebrew (asymptote-labs/tap), a Linux .deb or .rpm installer script, or a Windows MSI; read the script or verify the package checksum first. Beacon records prompts, responses, tool calls, commands, file activity, approvals, MCP activity and token usage to ~/.beacon/endpoint/logs/runtime.jsonl. Interactive setup signs in through beacon.sh and preselects Beacon Cloud; confirming it forwards session history to Asymptote Labs, so choose Local to keep it on the machine. Unless turned off, the wizard installs Beacon Skills into ~/.agents/skills and ~/.claude/skills, and the Cloud option registers an MCP server in your harnesses. Optional forwarding to Splunk, Datadog, S3 and other destinations. MIT.",
      "source_url": "https://github.com/Asymptote-Labs/agent-beacon",
      "source_checked": "2026-11-03",
      "verification": "Repository README reviewed; not installed",
      "thl_project": false
    },
    {
      "id": "openmuse",
      "name": "OpenMuse",
      "category": "Platforms",
      "url": "https://github.com/CopilotKit/openmuse",
      "description": "An alpha personal agent app for iOS, Android and web, built on CopilotKit and AG-UI, with a persistent Chromium browser, an optional Linux workspace, task plans with approvals, and Gmail and Calendar adapters.",
      "for_whom": "Developers who want a self-hosted personal agent template to fork and extend.",
      "access_notes": "Needs Node 24, pnpm 11.19.0 and a CopilotKit Intelligence project key in every mode; Intelligence is a separate service outside the MIT licence. A model needs an OpenAI, Anthropic or Google key. Gmail and Calendar need your own Google OAuth client plus live mode with an access key and token encryption key, and each send or calendar change waits for review. Web search is on by default and sends model-generated queries and context to Parallel's Search MCP; set WEB_SEARCH_ENABLED=false to turn it off. The CopilotKit SDK sends runtime telemetry to PostHog. The optional Linux computer needs Docker. The Render blueprint runs the API and browser on Standard instances. One owner behind a shared access key; not multi-tenant. MIT.",
      "source_url": "https://github.com/CopilotKit/openmuse",
      "source_checked": "2026-11-03",
      "verification": "Repository README reviewed; not installed",
      "thl_project": false
    },
    {
      "id": "agent-lightning",
      "name": "Agent Lightning",
      "category": "Platforms",
      "url": "https://github.com/microsoft/agent-lightning",
      "description": "Microsoft's reinforcement learning framework for training the model behind an agent while the agent keeps running in its real harness, through a gateway that captures interactions as training data.",
      "for_whom": "Machine learning teams who want to train an open-weight model on their own agent's tasks.",
      "access_notes": "Needs a CUDA GPU machine. The README example runs uv sync and a verl setup script for CUDA 13.0, and the trainer uses verl and vLLM. Agents run locally or as Kubernetes Jobs. The Calc-X example needs one GPU. Releases before v1.0 live on the v0.x branch. MIT.",
      "source_url": "https://github.com/microsoft/agent-lightning",
      "source_checked": "2026-11-03",
      "verification": "Repository README reviewed; not installed",
      "thl_project": false
    },
    {
      "id": "moneyprinterturbo",
      "name": "MoneyPrinterTurbo",
      "category": "Agent tools",
      "url": "https://github.com/harry0703/MoneyPrinterTurbo",
      "description": "A Python app with a WebUI, API, CLI and agent skill that turns a topic or keyword into a short video, writing the script and adding stock or generated footage, voiceover, subtitles and music.",
      "for_whom": "People producing short portrait, landscape or square videos from a topic on their own machine.",
      "access_notes": "Install with pip, the Windows one-click package, uv from source, or Docker (ghcr.io/harry0703/moneyprinterturbo:latest). The WebUI serves 127.0.0.1:8501 and API docs 127.0.0.1:8080/docs. Python 3.11 or later; a GPU is optional. API keys for the chosen LLM, footage, voice and video services are saved in config.toml; Edge TTS needs no key. An optional ChatGPT sign-in uses OpenAI's Sign in with ChatGPT flow. Publishing to TikTok, Instagram and YouTube Shorts goes through an Upload-Post API key. The README's agent quick start has a coding agent fetch a remote SKILL.md and install everything, so read it first. MIT.",
      "source_url": "https://github.com/harry0703/MoneyPrinterTurbo/blob/main/README-en.md",
      "source_checked": "2026-11-03",
      "verification": "Repository README, English README and publishing module reviewed; not installed",
      "thl_project": false
    },
    {
      "id": "openmontage",
      "name": "OpenMontage",
      "category": "Agent tools",
      "url": "https://github.com/calesthio/OpenMontage",
      "description": "A video production system your coding assistant runs through pipelines, stage skills and tools for research, scripting, asset generation, editing and rendering with Remotion, HyperFrames and FFmpeg.",
      "for_whom": "People who want a coding agent to plan and render explainers, documentaries or promos from a prompt or a reference video.",
      "access_notes": "Needs Python 3.10+, FFmpeg, Node.js 18+ and a coding assistant such as Claude Code, Cursor, Copilot, Windsurf or Codex; run make setup after cloning. With no keys it uses Piper TTS, open archives and free stock sources. Optional keys for fal.ai, Kling, ElevenLabs, OpenAI, Google, xAI, Runway, HeyGen, Suno and others go in .env and incur provider charges. Budget controls default to a $10 total cap, with per-action approval above $0.50. Local video generation needs a GPU. AGPL-3.0, which requires offering source for modified versions run as a network service.",
      "source_url": "https://github.com/calesthio/OpenMontage",
      "source_checked": "2026-11-03",
      "verification": "Repository README reviewed; not installed",
      "thl_project": false
    },
    {
      "id": "world-intel-mcp",
      "name": "World Intelligence MCP Server",
      "category": "MCP and integrations",
      "url": "https://github.com/marc-shade/world-intel-mcp",
      "description": "A Python MCP server, CLI and local dashboard that pulls markets, SEC filings, economic data, conflict, disaster, aviation, cyber and news feeds from public APIs, keeps a dated history, and can index results in Qdrant for semantic search.",
      "for_whom": "Analysts and research agents that need a broad, cited view of world events and markets.",
      "access_notes": "Clone, pip install -e ., then run world-intel-mcp over stdio and add it to ~/.claude.json. The dashboard serves http://localhost:8501 and binds 127.0.0.1 by default. Most sources need no key; ACLED, UCDP, NASA FIRMS, EIA, FRED, Cloudflare, OpenSky, TomTom and Windy tools use optional credentials. The optional collector daemon fetches every source on a 5-minute default interval and stores history in ~/.cache/world-intel-mcp/cache.db. Qdrant runs separately in Docker, and AI briefs use a local Ollama. Each upstream source keeps its own terms of use, so check them before business use. MIT.",
      "source_url": "https://github.com/marc-shade/world-intel-mcp",
      "source_checked": "2026-11-03",
      "verification": "Repository README reviewed; not installed",
      "thl_project": false
    },
    {
      "id": "openseo",
      "name": "OpenSEO",
      "category": "Agent tools",
      "url": "https://github.com/every-app/open-seo",
      "description": "An open-source SEO tool for keyword research, rank tracking, backlinks and site audits that people and agents such as Claude Code can use, positioned as a pay-as-you-go alternative to Semrush and Ahrefs.",
      "for_whom": "Marketers and agencies who want SEO data inside their own agent workflows.",
      "access_notes": "Self-host with Docker or EveryApp, bringing your own DataForSEO API key and paying for what you use, or use the hosted version, free to try, with plans from US$10 a month that include usage credit. MCP clients connect with an account on your instance. MIT.",
      "source_url": "https://github.com/every-app/open-seo",
      "source_checked": "2026-11-03",
      "verification": "Repository README reviewed; not installed",
      "thl_project": false
    },
    {
      "id": "dispatchseo",
      "name": "DispatchSEO",
      "category": "Agent tools",
      "url": "https://github.com/NeoZi12/dispatchseo",
      "description": "Turns a coding agent into an SEO manager that mines keywords from Search Console, proposes topics for approval and ships content as pull requests, with daily rank checks.",
      "for_whom": "Teams who run their site from a repository and already use Claude Code, Codex or Cursor.",
      "access_notes": "Connects to Google Search Console and your repository. The README says no extra API keys are needed and self-hosting has no feature limits; a hosted version also exists. AGPL-3.0, so changes to a hosted copy must be published.",
      "source_url": "https://github.com/NeoZi12/dispatchseo",
      "source_checked": "2026-11-03",
      "verification": "Repository README reviewed; not installed",
      "thl_project": false
    },
    {
      "id": "domain-api",
      "name": "Domain API",
      "category": "APIs and data",
      "url": "https://developer.domain.com.au/",
      "description": "Domain Group's API packages for Australian property data: address suggestions, agents and listings, listing management, price and rental estimates, auction results, suburb statistics and schools.",
      "for_whom": "Agencies, property apps, brokers and fintechs building on Australian real estate data.",
      "access_notes": "Sign up with a corporate email, build in the sandbox, then go live per package. Pricing and limits depend on the package, so check the plan before building. Listing Management can create and update live listings.",
      "source_url": "https://developer.domain.com.au/",
      "source_checked": "2026-11-03",
      "verification": "Official developer portal reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "nsw-property-sales-information",
      "name": "NSW bulk property sales information",
      "category": "APIs and data",
      "url": "https://www.valuergeneral.nsw.gov.au/design/bulk_psi_content/bulk_psi",
      "description": "The NSW Valuer General's free download of property sales records from 1990 onwards, updated weekly by local government area.",
      "for_whom": "Analysts and agents who need NSW sales history.",
      "access_notes": "Free download in .DAT files. Licensed under Creative Commons BY-NC-ND 4.0, which rules out commercial use and modified versions without permission.",
      "source_url": "https://www.valuergeneral.nsw.gov.au/design/bulk_psi_content/bulk_psi",
      "source_checked": "2026-11-03",
      "verification": "Official documentation reviewed; not downloaded",
      "thl_project": false
    },
    {
      "id": "public-apis",
      "name": "Public APIs",
      "category": "APIs and data",
      "url": "https://github.com/public-apis/public-apis",
      "description": "A large community list of free APIs grouped by topic, most marked with their auth type, HTTPS and CORS support.",
      "for_whom": "Builders looking for a free API for a specific job.",
      "access_notes": "A list only; each API has its own terms, keys and limits, so check the provider before relying on one. MIT.",
      "source_url": "https://github.com/public-apis/public-apis",
      "source_checked": "2026-11-03",
      "verification": "Repository README reviewed",
      "thl_project": false
    },
    {
      "id": "cloudflare-api",
      "name": "Cloudflare API",
      "category": "APIs and data",
      "url": "https://developers.cloudflare.com/fundamentals/api/get-started/",
      "description": "Cloudflare's API for managing accounts, DNS, zones, Workers and the rest of its products.",
      "for_whom": "Agents and scripts that deploy or manage sites and Workers on Cloudflare.",
      "access_notes": "Use a permission-scoped API token rather than the legacy global key, and give it only the zones and products the job needs. The published limit is 1,200 requests per five minutes per user or account token, and 200 per second per IP, with extra limits on some endpoints. Free plans exist, but metered products bill separately. Permission to manage an account is not permission to share its customers' data.",
      "source_url": "https://developers.cloudflare.com/fundamentals/api/reference/limits/",
      "source_checked": "2026-11-04",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "claude-api",
      "name": "Claude API",
      "category": "APIs and data",
      "url": "https://platform.claude.com/docs/en/api/overview",
      "description": "Anthropic's API for Claude models, with batches, token counting and managed agents.",
      "for_whom": "Teams building agents or apps on Claude.",
      "access_notes": "Authenticate with a Console API key or workload identity federation. Billing is per token, and some Max, Ultra and Team subscriptions include monthly API credits that have to be claimed. Rate limits depend on the organisation's usage tier and the model class. Commercial API inputs and outputs aren't used for training by default, with opt-in and feedback exceptions.",
      "source_url": "https://platform.claude.com/docs/en/api/rate-limits",
      "source_checked": "2026-11-04",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "openai-api",
      "name": "OpenAI API",
      "category": "APIs and data",
      "url": "https://developers.openai.com/api/reference/overview",
      "description": "OpenAI's API for model inference, realtime audio, images, tools and organisation administration.",
      "for_whom": "Teams building agents or apps on OpenAI models.",
      "access_notes": "Authenticate with an API key or a short-lived workload identity token; admin keys cover a separate administrative surface. Billing is per use, and API billing is separate from a ChatGPT plan. Limits are set per organisation and project and vary by model. API data isn't used for training by default, but abuse-monitoring logs can be kept for up to 30 days unless approved retention controls apply.",
      "source_url": "https://developers.openai.com/api/docs/guides/your-data",
      "source_checked": "2026-11-04",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "gemini-api",
      "name": "Gemini Developer API",
      "category": "APIs and data",
      "url": "https://ai.google.dev/gemini-api/docs/api-key",
      "description": "Google's API for Gemini models, with grounding, multimodal input and tool use.",
      "for_whom": "Teams building agents or apps on Gemini models.",
      "access_notes": "Keys belong to a Google Cloud project, and limits (requests per minute, tokens per minute and requests per day) apply per project, with daily limits resetting on Pacific time. There is an unpaid tier for eligible models. Under the unpaid terms, Google may use what you send to improve its products and people may review it, so don't send confidential or client data on that tier. Paid use has different terms.",
      "source_url": "https://ai.google.dev/gemini-api/terms",
      "source_checked": "2026-11-04",
      "verification": "Official documentation and terms reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "search-console-api",
      "name": "Google Search Console API",
      "category": "APIs and data",
      "url": "https://developers.google.com/webmaster-tools",
      "description": "Google's API for search performance data, verified sites and sitemaps, with URL inspection as a separate service.",
      "for_whom": "Agents and dashboards that report on a site's Google search traffic.",
      "access_notes": "Private site data needs OAuth from a user with access to that property; request the read-only scope when you only read. Search Analytics allows 1,200 queries per minute per site and user, and URL inspection allows 2,000 a day per site. The data belongs to the property, so access follows whoever the owner has granted.",
      "source_url": "https://developers.google.com/webmaster-tools/limits",
      "source_checked": "2026-11-04",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "google-places-api",
      "name": "Google Places API",
      "category": "APIs and data",
      "url": "https://developers.google.com/maps/documentation/places/web-service/get-api-key",
      "description": "Google's API for searching places and reading business and location details.",
      "for_whom": "Agents and apps that look up local businesses, addresses or opening hours.",
      "access_notes": "Needs a Google Cloud project with billing and a restricted API key. Pricing is per SKU, and the fields you request can move a call to a dearer SKU, so ask only for the fields you need. Storing or caching results is restricted, except place IDs, and results come with display and attribution rules.",
      "source_url": "https://developers.google.com/maps/documentation/places/web-service/policies",
      "source_checked": "2026-11-04",
      "verification": "Official documentation and policies reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "microsoft-graph",
      "name": "Microsoft Graph",
      "category": "APIs and data",
      "url": "https://learn.microsoft.com/en-us/graph/auth/auth-concepts",
      "description": "Microsoft's API for Microsoft 365 and identity data, including mail, files, calendars and users.",
      "for_whom": "Agents that work inside a business's Microsoft 365 tenant.",
      "access_notes": "Uses Microsoft identity platform tokens with delegated or application permissions, and some permissions need an admin to consent for the tenant. Many calls come with the user's licence, but some APIs are metered. Throttling varies by service, so honour 429 responses and their Retry-After header. A token reaches only the tenant and data its permissions allow.",
      "source_url": "https://learn.microsoft.com/en-us/graph/throttling",
      "source_checked": "2026-11-04",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "openrouter",
      "name": "OpenRouter",
      "category": "APIs and data",
      "url": "https://openrouter.ai/docs/api/reference/authentication",
      "description": "One API for many model providers, with routing between them.",
      "for_whom": "Teams that want to try or switch between models from several providers through one key.",
      "access_notes": "Authenticate with an API key, or use the documented OAuth flow for users. Some models have free variants, limited to 20 requests a minute with a daily ceiling that depends on credits bought; paid models use credits. Each provider has its own data policy. OpenRouter offers privacy settings and zero-retention routing, but legal and safety exceptions still apply.",
      "source_url": "https://openrouter.ai/docs/api-reference/limits",
      "source_checked": "2026-11-04",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "dataforseo",
      "name": "DataForSEO",
      "category": "APIs and data",
      "url": "https://docs.dataforseo.com/v3/auth/",
      "description": "APIs for search results, keywords, backlinks, market data and AI visibility, priced per call.",
      "for_whom": "Agents and SEO tools that need search and keyword data on demand.",
      "access_notes": "Uses HTTP Basic authentication with your API login and a generated API password, which differs from the dashboard password. Pay as you go, with trial credit for new accounts and a sandbox of sample responses. The default limit rose to 10,000 requests a minute, though some endpoints have their own limits. Label which data is measured and which is modelled, and check the terms before passing data on.",
      "source_url": "https://dataforseo.com/update/api-rate-limit-10000-requests-per-minute",
      "source_checked": "2026-11-04",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "stripe-api",
      "name": "Stripe API",
      "category": "APIs and data",
      "url": "https://docs.stripe.com/api/authentication",
      "description": "Stripe's API for payments, subscriptions, invoices and the events behind them.",
      "for_whom": "Agents and apps that read or manage billing.",
      "access_notes": "Use a restricted API key with only the permissions the job needs, and test in a sandbox before using live keys. The published limits are 100 requests a second in live mode and 25 in a sandbox, with a 25-a-second limit on most endpoints and further exceptions. A key that can read invoices shouldn't be able to refund or pay out, so scope it accordingly.",
      "source_url": "https://docs.stripe.com/rate-limits",
      "source_checked": "2026-11-04",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "resend-api",
      "name": "Resend API",
      "category": "APIs and data",
      "url": "https://resend.com/docs/api-reference/introduction",
      "description": "An email API for transactional and marketing email, with inbound handling.",
      "for_whom": "Agents and apps that send email from a verified domain.",
      "access_notes": "Authenticate with an API key that can be limited by permission and domain. The free plan covers 3,000 emails a month, up to 100 a day. The default API limit is 10 requests a second per team, separate from sending quotas. Recipients' details and email content are customer data, and API access doesn't give consent to email anyone.",
      "source_url": "https://resend.com/docs/api-reference/rate-limit",
      "source_checked": "2026-11-04",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "notion-api",
      "name": "Notion API",
      "category": "APIs and data",
      "url": "https://developers.notion.com/docs/authorization",
      "description": "Notion's API for pages, databases, comments and files in a workspace.",
      "for_whom": "Agents that read or update a team's Notion workspace.",
      "access_notes": "Connect with an internal connection token, a personal access token or OAuth; each reaches only the pages shared with it. A personal token acts as its user. Limits are 600 requests a minute per connection on Business and Enterprise plans and 180 on other plans, plus workspace limits, so honour Retry-After.",
      "source_url": "https://developers.notion.com/reference/request-limits",
      "source_checked": "2026-11-04",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "heygen-api",
      "name": "HeyGen API",
      "category": "APIs and data",
      "url": "https://docs.heygen.com/docs/quick-start",
      "description": "HeyGen's API for avatar video, images, voice and translation.",
      "for_whom": "Teams producing video with AI avatars or translated voice.",
      "access_notes": "The API uses an API key with scopes and bills against an API plan. The MCP server and CLI sign in as your web account and use its subscription credits instead, so a web plan isn't API credit. Limits vary by endpoint and plan. Using a person's likeness or voice needs their consent.",
      "source_url": "https://developers.heygen.com/docs/api-key",
      "source_checked": "2026-11-04",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "nvidia-nim-api",
      "name": "NVIDIA NIM API catalog",
      "category": "APIs and data",
      "url": "https://docs.api.nvidia.com/nim/docs/api-quickstart",
      "description": "Hosted model endpoints from NVIDIA for prototyping, with some models also available to run yourself.",
      "for_whom": "Developers trying open models before choosing where to run them.",
      "access_notes": "Needs an NVIDIA developer account and API key. The Developer Program covers prototyping; production use needs separate licensing, such as NVIDIA AI Enterprise. Limits show per model in your account. Each model's licence and terms apply separately.",
      "source_url": "https://docs.api.nvidia.com/nim/docs/product",
      "source_checked": "2026-11-04",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "github-rest-api",
      "name": "GitHub REST API",
      "category": "APIs and data",
      "url": "https://docs.github.com/en/rest/authentication/authenticating-to-the-rest-api",
      "description": "GitHub's API for repositories, issues, pull requests, releases and users.",
      "for_whom": "Agents that read or manage code and project work on GitHub.",
      "access_notes": "Use a fine-grained personal access token, a GitHub App or OAuth; workflows get a built-in token. Unauthenticated calls to public endpoints allow 60 an hour, and an authenticated user gets 5,000 an hour, with separate limits for search and apps. A public repository still has its own licence, so check it before reusing code.",
      "source_url": "https://docs.github.com/en/rest/using-the-rest-api/rate-limits-for-the-rest-api",
      "source_checked": "2026-11-04",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "supabase-api",
      "name": "Supabase APIs",
      "category": "APIs and data",
      "url": "https://supabase.com/docs/reference/api/introduction",
      "description": "The Supabase Management API for projects, alongside each project's own database, auth and storage APIs.",
      "for_whom": "Agents that set up or manage Supabase projects.",
      "access_notes": "The Management API uses a scoped personal access token or OAuth. Each project's data APIs use their own keys and row-level security, which is a separate layer. The free plan covers two active projects, and inactive ones pause. Never expose a management or service key in a client app.",
      "source_url": "https://supabase.com/pricing",
      "source_checked": "2026-11-04",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "influencers-club-mcp",
      "name": "Influencers Club MCP server",
      "category": "MCP and integrations",
      "url": "https://github.com/Influencers-Club/influencers-club-mcp",
      "description": "Search creators on Instagram, TikTok, YouTube and other platforms from an MCP client, with profile, audience and lookalike data.",
      "for_whom": "Marketers looking for creators whose audience matches their buyers.",
      "access_notes": "Needs an Influencers Club account with API credits, and each call spends them. A local install reads an API key from the environment, and its batch tools read and write local files. MIT licence.",
      "source_url": "https://docs.influencers.club/guides/mcp-server",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "vidiq-mcp",
      "name": "vidIQ MCP server",
      "category": "MCP and integrations",
      "url": "https://github.com/vid-io/vidiq-mcp",
      "description": "Gives an AI client vidIQ's YouTube data: video and channel stats, outlier videos, keyword research, comments, transcripts and earnings estimates.",
      "for_whom": "Marketers and creators researching YouTube channels and content.",
      "access_notes": "Needs a vidIQ account, and hosted tools may use credits. It reads data for the channels you authorise, and some tools can make approved edits to videos you own. Apache 2.0 licence for the plugin.",
      "source_url": "https://github.com/vid-io/vidiq-mcp",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "youtube-data-api",
      "name": "YouTube Data API",
      "category": "MCP and integrations",
      "url": "https://developers.google.com/youtube/v3",
      "description": "Google's official API for public channel, video and playlist data, such as subscriber, view and comment counts.",
      "for_whom": "Developers building channel analysis into agents.",
      "access_notes": "Needs a Google Cloud project and an API key. The default quota is 10,000 units a day, and most reads cost 1 unit. Changes to a channel need its owner's OAuth consent.",
      "source_url": "https://developers.google.com/youtube/v3/getting-started",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "yt-dlp",
      "name": "yt-dlp",
      "category": "Agent tools",
      "url": "https://github.com/yt-dlp/yt-dlp",
      "description": "A command line tool that downloads video, audio, subtitles and metadata from YouTube and many other sites.",
      "for_whom": "Agents and people who need a video's files or metadata on their own machine.",
      "access_notes": "Runs locally with no account. Downloads must respect each site's terms and copyright. Unlicense.",
      "source_url": "https://github.com/yt-dlp/yt-dlp",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "youtube-transcript-api",
      "name": "youtube-transcript-api",
      "category": "Agent tools",
      "url": "https://github.com/jdepoix/youtube-transcript-api",
      "description": "A Python library that fetches a YouTube video's transcript or subtitles, including auto-generated ones, without an API key.",
      "for_whom": "Developers who need video text for analysis or summaries.",
      "access_notes": "Runs locally with no account or key. It reads YouTube's caption data, which can change or be rate limited. MIT licence.",
      "source_url": "https://github.com/jdepoix/youtube-transcript-api",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "social-blade",
      "name": "Social Blade",
      "category": "Platforms",
      "url": "https://socialblade.com/",
      "description": "Public statistics, growth history and estimated earnings for YouTube, Instagram, TikTok and Twitch accounts.",
      "for_whom": "Anyone sizing a creator's reach and growth from public data.",
      "access_notes": "Public pages are free to read. Reports and an API are for business customers. Earnings figures are estimates from public view counts.",
      "source_url": "https://socialblade.com/info",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "youtube-analytics-api",
      "name": "YouTube Analytics API",
      "category": "APIs and data",
      "url": "https://developers.google.com/youtube/analytics",
      "description": "Google's official API for targeted queries on a channel's own analytics, such as views, ratings, audience age, gender and country, and estimated revenue.",
      "for_whom": "Channel owners, agencies and the agents they authorise to report on a channel's performance.",
      "access_notes": "Needs OAuth consent from the channel or content owner, so it cannot read another creator's private analytics unless they grant access. The yt-analytics.readonly scope covers activity metrics, revenue needs the separate yt-analytics-monetary.readonly scope, and Google sets a quota cost for each query. The YouTube API Services Terms and Developer Policies apply, including limits on storing data and on combining data from different content owners.",
      "source_url": "https://developers.google.com/youtube/analytics/reference/reports/query",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "youtube-reporting-api",
      "name": "YouTube Reporting API",
      "category": "APIs and data",
      "url": "https://developers.google.com/youtube/reporting",
      "description": "Google's official API for scheduled bulk reports of a channel's or content owner's analytics, delivered as daily CSV files.",
      "for_whom": "Analysts who want a channel's full daily history in their own database.",
      "access_notes": "Needs OAuth consent from the channel or content owner, with the same read-only and monetary scopes as the Analytics API. A new reporting job backfills 30 days, the first files can take 48 hours, and reports stay downloadable for 60 days, or 30 days for backfilled history. The YouTube API Services Terms and Developer Policies limit how long stored data can be kept without a refresh.",
      "source_url": "https://developers.google.com/youtube/reporting/v1/reports",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "youtube-comment-downloader",
      "name": "youtube-comment-downloader",
      "category": "Agent tools",
      "url": "https://github.com/egbertbouman/youtube-comment-downloader",
      "description": "A Python command line tool and library that downloads a YouTube video's comments to JSON or CSV without the YouTube API.",
      "for_whom": "Analysts reading audience reaction on specific videos.",
      "access_notes": "Runs locally with no account or API key and writes comments, including commenter names, to a local file. It reads YouTube's web pages rather than the official API, and YouTube's Terms of Service bar automated access without YouTube's written permission. MIT licence.",
      "source_url": "https://github.com/egbertbouman/youtube-comment-downloader",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "newpipe-extractor",
      "name": "NewPipe Extractor",
      "category": "Agent tools",
      "url": "https://github.com/TeamNewPipe/NewPipeExtractor",
      "description": "The Java library behind the NewPipe app that reads YouTube videos, channels, comments, playlists, search and trending lists, and also supports SoundCloud, PeerTube and Bandcamp.",
      "for_whom": "Java and Android developers who want YouTube data without the official API.",
      "access_notes": "Runs inside your app with no account or API key, added as a dependency from JitPack or Maven Central. It scrapes YouTube's pages, which YouTube's Terms of Service bar without permission, and changes on YouTube's side can break it. GPL-3.0 licence, so software that ships it must meet the GPL's terms.",
      "source_url": "https://github.com/TeamNewPipe/NewPipeExtractor",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "pytubefix",
      "name": "pytubefix",
      "category": "Agent tools",
      "url": "https://github.com/JuanBindez/pytubefix",
      "description": "A Python library that reads YouTube video details, captions, channels, playlists and search results, and downloads streams.",
      "for_whom": "Python developers who need captions or a channel's video list without an API key.",
      "access_notes": "Runs locally with no API key; an optional OAuth sign-in caches a Google token on the machine, and downloads are written to disk. It reads YouTube's web player rather than the official API, YouTube's Terms of Service bar automated access and downloads without permission, and changes on YouTube's side can break it. MIT licence.",
      "source_url": "https://github.com/JuanBindez/pytubefix",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "youtube-js",
      "name": "YouTube.js",
      "category": "Agent tools",
      "url": "https://github.com/LuanRT/YouTube.js",
      "description": "A JavaScript client for YouTube's internal InnerTube API that reads video details, channels, comments, playlists and search results.",
      "for_whom": "Node.js, Deno and browser developers building YouTube research into agents.",
      "access_notes": "Runs locally with no API key; it caches session data by default and can use your account cookies for signed-in requests, which gives it that account's access. InnerTube is undocumented and YouTube's Terms of Service bar automated access without permission, so expect breakage and check your use. MIT licence.",
      "source_url": "https://ytjs.dev/guide/getting-started.html",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "whisper",
      "name": "Whisper",
      "category": "Agent tools",
      "url": "https://github.com/openai/whisper",
      "description": "OpenAI's open speech recognition model and command line tool, which transcribes audio in many languages and can translate it into English.",
      "for_whom": "People who need a transcript for a video that has no captions.",
      "access_notes": "Runs locally with no account; it needs Python, PyTorch and ffmpeg, downloads model weights on first use, and models need from about 1 GB to about 10 GB of GPU memory. You need the right to download and transcribe the audio you give it. MIT licence for the code and model weights.",
      "source_url": "https://github.com/openai/whisper",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "faster-whisper",
      "name": "faster-whisper",
      "category": "Agent tools",
      "url": "https://github.com/SYSTRAN/faster-whisper",
      "description": "A reimplementation of Whisper on the CTranslate2 inference engine, with 8-bit quantisation on CPU and GPU.",
      "for_whom": "Developers running Whisper transcription in their own pipelines.",
      "access_notes": "Runs locally with no account and downloads converted models from the Hugging Face Hub on first use. It decodes audio with PyAV, so a system ffmpeg is not needed, while GPU use needs NVIDIA's CUDA libraries. MIT licence.",
      "source_url": "https://github.com/SYSTRAN/faster-whisper",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "whisper-cpp",
      "name": "whisper.cpp",
      "category": "Agent tools",
      "url": "https://github.com/ggml-org/whisper.cpp",
      "description": "A C and C++ port of Whisper that runs on CPUs, Apple Silicon and a range of GPUs, with a command line tool and bindings for other languages.",
      "for_whom": "People transcribing on a Mac or on a machine without a large GPU.",
      "access_notes": "Runs locally with no account; you build it from source and download ggml model files with the included script. The command line tool reads only 16-bit WAV files, so convert other audio with ffmpeg first. MIT licence.",
      "source_url": "https://github.com/ggml-org/whisper.cpp",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "whisperx",
      "name": "WhisperX",
      "category": "Agent tools",
      "url": "https://github.com/m-bain/whisperX",
      "description": "A transcription tool built on faster-whisper that adds word-level timestamps and speaker labels.",
      "for_whom": "Analysts transcribing interviews, podcasts or panel videos where who said what matters.",
      "access_notes": "Runs locally with no account for transcription, and GPU use needs NVIDIA's CUDA toolkit. Speaker labels need a Hugging Face read token and acceptance of the user agreement for the pyannote speaker-diarization-community-1 model, and alignment models are downloaded per language. BSD-2-Clause licence.",
      "source_url": "https://github.com/m-bain/whisperX",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "yutu",
      "name": "yutu",
      "category": "MCP and integrations",
      "url": "https://github.com/eat-pray-ai/yutu",
      "description": "A CLI, MCP server and agent mode that work through the official YouTube Data API, with optional Analytics and Reporting API access.",
      "for_whom": "Channel teams who want an agent to read and manage their own YouTube channel.",
      "access_notes": "Needs your own Google Cloud project and OAuth client, and it saves client_secret.json and youtube.token.json in the working folder unless you set its environment variables. The OAuth grant lets it create, update and delete videos, playlists and comments on that channel, and agent mode sends prompts to the Gemini or OpenAI key you supply. Data API quota applies; Apache 2.0 licence.",
      "source_url": "https://github.com/eat-pray-ai/yutu",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "youtube-mcp-server-zubeid",
      "name": "YouTube MCP Server (ZubeidHendricks)",
      "category": "MCP and integrations",
      "url": "https://github.com/ZubeidHendricks/youtube-mcp-server",
      "description": "An MCP server with read-only tools for YouTube video, channel, playlist and transcript lookups, plus creator search filtered by subscriber count and recent uploads.",
      "for_whom": "Marketers using an MCP client to shortlist creators by size and activity.",
      "access_notes": "Needs a YouTube Data API key in the environment, and each search spends that key's daily quota. It can fall back to a second and third key when one runs out, but the YouTube API Services Terms forbid getting round quota limits, so configure one key. Channel results can include emails found in public metadata, which are personal information; MIT licence.",
      "source_url": "https://github.com/ZubeidHendricks/youtube-mcp-server",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "youtube-transcript-mcp",
      "name": "YouTube Transcript MCP server",
      "category": "MCP and integrations",
      "url": "https://github.com/kimtaeyoon83/mcp-server-youtube-transcript",
      "description": "An MCP server that fetches a YouTube video's captions, with optional timestamps, and by default strips sponsor and promotional sections marked by chapters.",
      "for_whom": "People who want an agent to read or summarise what a video says.",
      "access_notes": "Runs through npx with no account or key for transcripts. It reads YouTube's caption data outside the official API, which YouTube's Terms of Service restrict, and the optional video analysis tool sends a direct video URL to TwelveLabs under your own TwelveLabs key. MIT licence.",
      "source_url": "https://github.com/kimtaeyoon83/mcp-server-youtube-transcript",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "supadata",
      "name": "Supadata",
      "category": "APIs and data",
      "url": "https://supadata.ai/",
      "description": "An API and MCP server for transcripts and metadata from YouTube and other video platforms, with AI-generated transcripts billed by the minute.",
      "for_whom": "Developers who want transcripts through a paid API instead of running their own scraper.",
      "access_notes": "Needs a Supadata account and API key, or OAuth sign-in for the hosted MCP server at api.supadata.ai/mcp; the local server reads SUPADATA_API_KEY. The free plan gives 100 credits a month at one request a second, a transcript costs 1 credit, and a generated transcript costs 2 credits a minute. The MCP server code is MIT licensed.",
      "source_url": "https://docs.supadata.ai/integrations/mcp",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "hypeauditor-mcp",
      "name": "HypeAuditor MCP server",
      "category": "MCP and integrations",
      "url": "https://mcp.hypeauditor.com/",
      "description": "HypeAuditor's hosted MCP server for YouTube, Instagram and TikTok creator analytics, including subscriber demographics, authenticity scores, growth and price estimates.",
      "for_whom": "Brands and agencies vetting creators before paying for a campaign.",
      "access_notes": "Sign in with a HypeAuditor Pro or higher account; creator analytics spend AI credits at US$0.005 each, about 10 for a search and 100 for an analysed account, and the assistant asks before any paid unlock. It can also create media plans and move creators between campaigns in your account. HypeAuditor's terms bar bots and scraping outside its API, which is a separate product sold through its sales team.",
      "source_url": "https://mcp.hypeauditor.com/",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "arcmira",
      "name": "Arcmira",
      "category": "MCP and integrations",
      "url": "https://arcmira.com/",
      "description": "A hosted transcript search service and MCP server for YouTube and podcasts that finds quotes, mentions, media appearances, ad reads and recurring channel sponsors.",
      "for_whom": "Researchers tracking what is said about a brand and which brands sponsor which channels.",
      "access_notes": "Sign in through your MCP client or use an arc_sk_ account key; the free plan has 1,000 credits a month and withholds the newest 30 days, and sponsor and ad-read data needs the Pro+ plan. Reads cost credits per row, and the write tool can create and pause monitors but not delete them. Speaker and sponsor labels can be incomplete, and the plugin repository is under a proprietary licence that only permits running it.",
      "source_url": "https://arcmira.com/docs/mcp-server",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "1of10-mcp",
      "name": "1of10 MCP",
      "category": "MCP and integrations",
      "url": "https://1of10.com/mcp",
      "description": "Connects Claude or ChatGPT to 1of10's database of YouTube outlier videos, which beat their channel's usual views, and to its title and thumbnail tracking.",
      "for_whom": "Creators and strategists looking for video ideas that already work in a niche.",
      "access_notes": "Needs a 1of10 Pro (US$89 a month) or Ultra plan, and you connect by signing in from its Claude and ChatGPT page; the server link for other clients appears only after sign-in. Research does not use credits but generating titles, ideas or thumbnails does, and it can save videos, create trackers and link your channel without deleting anything. There is no public API reference beyond the product page.",
      "source_url": "https://1of10.com/mcp",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "sponsorblock-api",
      "name": "SponsorBlock API",
      "category": "APIs and data",
      "url": "https://wiki.sponsor.ajay.app/w/API_Docs",
      "description": "The public API and database behind SponsorBlock, with crowdsourced timestamps for sponsor reads, self-promotion, intros and other segments in YouTube videos.",
      "for_whom": "Analysts measuring how often and how long channels run sponsor segments.",
      "access_notes": "Reading segments needs no account or key, and the full database can be downloaded. The API and database are under CC BY-NC-SA 4.0 unless the maintainer gives permission, so commercial use needs that permission and reuse needs attribution. Automated submissions are not allowed, and segments are community votes rather than verified facts.",
      "source_url": "https://wiki.sponsor.ajay.app/w/API_Docs",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "return-youtube-dislike-api",
      "name": "Return YouTube Dislike API",
      "category": "APIs and data",
      "url": "https://returnyoutubedislike.com/docs",
      "description": "A public API that returns like counts and estimated dislike counts for YouTube videos, built from archived dislike data and estimates extrapolated from its extension's users.",
      "for_whom": "Analysts who want a rough measure of negative reaction to a video.",
      "access_notes": "No account or key is needed, and each client is limited to 100 requests a minute and 10,000 a day. Third-party use must credit the project with a link to its repository or returnyoutubedislike.com. Dislike figures for the period since YouTube hid them are estimates, so label them as such.",
      "source_url": "https://returnyoutubedislike.com/docs/usage-rights",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "serpapi-youtube-search",
      "name": "SerpApi YouTube Search API",
      "category": "APIs and data",
      "url": "https://serpapi.com/youtube-search-api",
      "description": "A paid API that returns YouTube search results as JSON, including videos, channels, Shorts, view counts and subscriber counts.",
      "for_whom": "Agents that need to see what ranks in YouTube search for a keyword.",
      "access_notes": "Needs a SerpApi account and private API key; the free plan covers 250 searches a month at 50 an hour, and the Starter plan is US$25 a month for 1,000. Cached searches are free, and an output option returns Markdown for agents. SerpApi's U.S. Legal Shield, its cover for scraping and parsing search data, starts on the Production plan.",
      "source_url": "https://serpapi.com/pricing.md",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "noxinfluencer-api",
      "name": "NoxInfluencer API",
      "category": "APIs and data",
      "url": "https://www.noxinfluencer.com/api-service",
      "description": "NoxInfluencer's API for YouTube, TikTok and Instagram creator profiles, videos, comments, search and contact details.",
      "for_whom": "Agencies building creator search or vetting into their own tools.",
      "access_notes": "A free trial gives 80 one-time credits, and ongoing access uses a Nox Key set up through an account manager with quoted pricing; each key is limited to 60 requests a minute. The site's terms forbid crawling NoxInfluencer data, so use the API rather than automating the web app. Contact details it returns are personal information.",
      "source_url": "https://www.noxinfluencer.com/api-docs/docs/rest/api",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "modash-api",
      "name": "Modash API",
      "category": "APIs and data",
      "url": "https://www.modash.io/influencer-marketing-api",
      "description": "Modash's Discovery and Raw APIs for searching and analysing YouTube, Instagram and TikTok creators, with audience demographics, lookalikes, audience overlap and recent posts.",
      "for_whom": "Platforms and agencies building creator discovery into their own products.",
      "access_notes": "Needs an access token under a Modash API agreement; each call spends credits, published pricing starts at US$16,200 a year for Discovery and US$10,000 a year for Raw, and trial credits are offered after a call with the team. Modash also offers an MCP server for the same data. The API terms bar standalone resale of raw results and require a lawful basis for processing creator data.",
      "source_url": "https://www.modash.io/influencer-marketing-api",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "phyllo",
      "name": "Phyllo",
      "category": "APIs and data",
      "url": "https://www.getphyllo.com/",
      "description": "A social data API that returns creators' public data and, with each creator's sign-in and consent, private data such as audience demographics and income from supported platforms, including YouTube.",
      "for_whom": "Agencies and creator platforms that need data a creator has agreed to share.",
      "access_notes": "Sign up for a free sandbox, then talk to sales for production access and pricing. Consented data needs each creator to connect their account through Phyllo and approve the fields shared. Its developer documentation is published under the InsightIQ name at docs.insightiq.ai.",
      "source_url": "https://www.getphyllo.com/",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "channelcrawler",
      "name": "ChannelCrawler",
      "category": "APIs and data",
      "url": "https://channelcrawler.com/api",
      "description": "A YouTube channel database whose API searches over 35 million channels by niche, location, size and engagement and returns video lists and subscriber history, with sponsorship tracking in the web app.",
      "for_whom": "Brands and agencies finding channels to sponsor and checking which creators competitors sponsor.",
      "access_notes": "The API uses a bearer key and prepaid credits, from 100 credits for US$24, charged per result, with free search previews and email lookups billed only when an email is found. Sponsorship tracking is part of the web app's Power and Enterprise plans, not the API. Business emails it returns are personal information, so outreach must follow spam and privacy law.",
      "source_url": "https://channelcrawler.com/api",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "apify-youtube-scraper",
      "name": "Apify YouTube Scraper",
      "category": "APIs and data",
      "url": "https://apify.com/streamers/youtube-scraper",
      "description": "An Apify actor that collects public YouTube video and channel data, such as titles, views, likes, subscriber counts and upload dates, with optional subtitles.",
      "for_whom": "Analysts who need bulk YouTube data without writing a scraper.",
      "access_notes": "Needs an Apify account and API token; it bills per video, about US$2.40 to US$4 per 1,000 depending on plan, and results are stored in your Apify datasets. The free plan's US$5 monthly credit covers a small run. It scrapes YouTube outside the official API, which YouTube's Terms of Service bar without permission, and Apify says not to collect personal data without a legitimate reason.",
      "source_url": "https://apify.com/streamers/youtube-scraper",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    },
    {
      "id": "thoughtleaders-cli",
      "name": "ThoughtLeaders CLI",
      "category": "Agent tools",
      "url": "https://github.com/ThoughtLeaders-io/thoughtleaders-cli",
      "description": "A command line client for ThoughtLeaders' YouTube sponsorship data, covering which brands sponsor which channels, lookalike channels, transcripts, view curves and audience profiles.",
      "for_whom": "Brand and agency teams using an agent to research sponsorship history before a pitch.",
      "access_notes": "Needs a ThoughtLeaders account, signed in by browser OAuth, device code or API key, and every query spends credits, with recommender tools on the Intelligence plan at 25 credits a call. It can add comments to records, signing out ends every session, and tl setup writes skill files into your agent's folders. Needs Python 3.12 or later with jq, ripgrep, duckdb and yt-dlp; MIT licence.",
      "source_url": "https://github.com/ThoughtLeaders-io/thoughtleaders-cli",
      "source_checked": "2026-11-05",
      "verification": "Official documentation reviewed; not independently tested",
      "thl_project": false
    }
  ]
}
