The largest Claude Code plugin marketplace. 500 plugins, 600+ developer tools in one MCP server. Security, testing, DevOps, databases, frontend, backend, ML/AI, mobile, cloud, and more.
How to install claude-plugin-marketplace?
barnburner121/claude-plugin-marketplace
$git clone https://github.com/barnburner121/claude-plugin-marketplaceInstalls into the current project.
›Prefer a prompt? Paste this to your agent
Install claude-plugin-marketplace by running `git clone https://github.com/barnburner121/claude-plugin-marketplace`, then use it for the current task and follow its documentation at https://github.com/barnburner121/claude-plugin-marketplace.
README.md
| 1 | # Plugin Hub — The Largest Claude Code Plugin Marketplace |
| 2 | |
| 3 | **500+ developer tools in one MCP server.** Install once, get everything. |
| 4 | |
| 5 | ``` |
| 6 | /plugin marketplace add barnburner121/claude-plugin-marketplace |
| 7 | ``` |
| 8 | |
| 9 | Plugin Hub is the most comprehensive collection of developer tools available for Claude Code and Claude Cowork. Every tool runs through a single MCP server — no separate installations, no configuration sprawl, no dependency conflicts. |
| 10 | |
| 11 | ## Quick Start |
| 12 | |
| 13 | **Install the marketplace:** |
| 14 | ``` |
| 15 | /plugin marketplace add barnburner121/claude-plugin-marketplace |
| 16 | ``` |
| 17 | |
| 18 | **Install any plugin:** |
| 19 | ``` |
| 20 | /plugin install <plugin-name>@barnburner121-plugins |
| 21 | ``` |
| 22 | |
| 23 | **Or use the MCP server directly:** |
| 24 | ```json |
| 25 | { |
| 26 | "mcpServers": { |
| 27 | "plugin-hub": { |
| 28 | "command": "npx", |
| 29 | "args": ["-y", "@barnburner121/plugin-hub-mcp"] |
| 30 | } |
| 31 | } |
| 32 | } |
| 33 | ``` |
| 34 | |
| 35 | ## What's Included |
| 36 | |
| 37 | ### Security & Compliance (15 plugins) |
| 38 | | Plugin | What It Does | |
| 39 | |--------|-------------| |
| 40 | | `env-guardian` | Scan for exposed secrets, generate .env templates, validate configs, rotate secrets | |
| 41 | | `iac-scanner` | Scan Terraform/CloudFormation/K8s manifests for misconfigurations | |
| 42 | | `container-guard` | Audit Dockerfiles and docker-compose for security best practices | |
| 43 | | `cors-config` | Analyze and fix CORS configurations across API endpoints | |
| 44 | | `csp-builder` | Generate and validate Content Security Policy headers | |
| 45 | | `auth-architect` | Generate authentication flows (JWT, OAuth2, session-based) | |
| 46 | | `rbac-forge` | Generate role-based access control systems with permission matrices | |
| 47 | | `input-sanitizer` | Scan code for missing input validation, generate sanitizers | |
| 48 | | `sql-armor` | Detect SQL injection vulnerabilities and generate parameterized queries | |
| 49 | | `xss-shield` | Scan templates and frontend code for XSS vulnerabilities | |
| 50 | | `secrets-vault` | Generate HashiCorp Vault, AWS Secrets Manager integrations | |
| 51 | | `ssl-manager` | Check SSL configs, generate renewal scripts, fix TLS settings | |
| 52 | | `owasp-checker` | Scan codebase against OWASP Top 10 with remediation plans | |
| 53 | | `gdpr-toolkit` | Generate GDPR compliance: consent forms, data export, deletion endpoints | |
| 54 | | `hipaa-guard` | Audit code for HIPAA compliance issues | |
| 55 | |
| 56 | ### Code Quality & Refactoring (20 plugins) |
| 57 | | Plugin | What It Does | |
| 58 | |--------|-------------| |
| 59 | | `dead-code` | Find and remove unused code, functions, imports, variables | |
| 60 | | `code-smells` | Detect code smells with refactoring suggestions | |
| 61 | | `duplication-hunter` | Find duplicate code blocks and suggest DRY refactoring | |
| 62 | | `complexity-reducer` | Analyze cyclomatic complexity and suggest simplifications | |
| 63 | | `naming-conventions` | Enforce and fix naming conventions across a codebase | |
| 64 | | `import-optimizer` | Clean up and organize imports | |
| 65 | | `error-handler` | Audit error handling and add proper patterns | |
| 66 | | `null-safety` | Find null/undefined issues and add safety checks | |
| 67 | | `async-fixer` | Detect async/await anti-patterns and race conditions | |
| 68 | | `type-strengthener` | Strengthen TypeScript types, replace `any`, add generics | |
| 69 | | `magic-numbers` | Find magic numbers/strings and extract to constants | |
| 70 | | `comment-quality` | Audit comments, remove outdated, add missing docs | |
| 71 | | `function-splitter` | Identify overly long functions and suggest splits | |
| 72 | | `dependency-injector` | Refactor to dependency injection patterns | |
| 73 | | `solid-checker` | Analyze code against SOLID principles | |
| 74 | | `pattern-matcher` | Identify where design patterns should be applied | |
| 75 | | `tech-debt-tracker` | Scan TODO/FIXME/HACK and generate tech debt reports | |
| 76 | | `code-metrics` | Generate code metrics: complexity, coverage, maintainability | |
| 77 | | `refactor-planner` | Create prioritized refactoring plans | |
| 78 | | `legacy-modernizer` | Identify legacy patterns and suggest modern replacements | |
| 79 | |
| 80 | ### Documentation (15 plugins) |
| 81 | | Plugin | What It Does | |
| 82 | |--------|-------------| |
| 83 | | `api-docs` | Generate OpenAPI/Swagger specs from route handlers | |
| 84 | | `readme-gen` | Generate comprehensive README.md from project analysis | |
| 85 | | `changelog-gen` | Generate changelogs from git commits | |
| 86 | | `jsdoc-writer` | Generate JSDoc/TSDoc comments for exported functions | |
| 87 | | `architecture-docs` | Generate architecture documentation with diagrams | |
| 88 | | `onboarding-guide` | Generate developer onboarding guides | |
| 89 | | `runbook-writer` | Generate operational runbooks | |
| 90 | | `adr-creator` | Create Architecture Decision Records | |
| 91 | | `api-changelog` | Detect API changes between versions | |
| 92 | | `storybook-gen` | Generate Storybook stories for components | |
| 93 | | `diagram-gen` | Generate Mermaid/PlantUML diagrams from code | |
| 94 | | `glossary-builder` | Extract domain terms and generate glossary | |
| 95 | | `contrib-guide` | Generate CONTRIBUTING.md with guidelines | |
| 96 | | `license-gen` | Generate LICENSE files and source headers | |
| 97 | | `release-notes` | Generate user-facing release notes | |
| 98 | |
| 99 | ### Testing (20 plugins) |
| 100 | | Plugin | What It Does | |
| 101 | |--------|-------------| |
| 102 | | `unit-test-gen` | Generate unit tests with edge cases | |
| 103 | | `integration-test-gen` | Generate integration tests for services | |
| 104 | | `e2 |
Related
6 picksType
- langchain-mcp-adaptersMake Anthropic Model Context Protocol (MCP) tools compatible with LangChain and LangGraph agents.Jul 2026
- mcporterTypeScript runtime and CLI for connecting to configured Model Context Protocol servers.Jul 2026
- mcp-proxyA MCP server which proxies requests to a remote MCP server over streamable HTTP or SSE.Jul 2026
- mcp-atlassianThe Model Context Protocol (MCP) Atlassian integration is an open-source implementation that bridges Atlassian products (Jira and Confluence) with AI language models following Anthropic's MCP specification.Jul 2026
- open-webuiOpen WebUIJul 2026
- rulesyncUnified AI rules management CLI tool that generates configuration files for various AI development toolsJul 2026
