Full GitHub API access: repos, PRs, issues, and code search.
- Home
- Collections
- Best Action-Taking MCPs
Best Action-Taking MCPs
Action-taking MCPs cause real effects in external systems: they post messages, create issues, run code, deploy infra, or charge cards. Powerful — and also the class of MCP where approval policy, scoping, and confirmation flows matter most. Pair these with a client that prompts before side-effecting calls.
action-takingTop Action-Taking MCPs ranked
Popularity-ordered. Click any card for install snippets, fact sheet, and trust signals.
Official Microsoft browser automation across Chromium, Firefox, and WebKit.
Scrape, crawl, extract structured data, and search the web from an AI agent.
Search, scrape, and unblock any public web page from an AI agent — official Web Unlocker MCP.
Run `fly mcp server` to expose flyctl operations to AI agents.
Reach the whole Cloudflare API from an agent — DNS records, Workers, R2, and the Registrar beta — through one hosted Code Mode server.
Manage payments, customers, and subscriptions through Stripe.
Drive Azure DevOps repos, pull requests, work items, and pipelines from an AI agent — Microsoft official.
Read, write, and search across Notion pages, databases, and blocks.
Read channel messages, post replies, and trigger meetings from MS Teams.
Ask natural-language questions across Microsoft 365 Copilot data.
Open-source workflow automation with a built-in MCP server — build, publish, and debug flows from an AI agent.
Full Supabase access: database, auth, storage, and edge functions.
Send transactional and broadcast emails via the official Resend MCP.
Official Salesforce MCP — SOQL queries, metadata deploy/retrieve, Apex tests, and org management from AI clients.
Scrape any URL, render JavaScript, and reach geo-restricted data — official Oxylabs Web Scraper MCP.
Full GitLab API access: repos, MRs, issues, pipelines, and registries.
Provision Render services, read deploy logs and metrics, and query Postgres read-only — over a hosted OAuth MCP.
2,800+ apps and managed OAuth via Pipedream's hosted MCP at mcp.pipedream.com.
Buy a domain, provision hosting, deploy a site, and set its DNS — one official server covering the whole chain, now through three search-and-execute tools.
Official Xero MCP — invoices, contacts, bank transactions, and accounting from an agent.
Figma's own MCP server — read design context, generate code, and write back to the canvas.
Manage Droplets, App Platform, Kubernetes, and Spaces from an AI agent.
Process payments and manage orders, catalog, inventory, and bookings on Square — official MCP.
Deploy a site, read the build, and manage projects, forms and extensions with Netlify's official MCP server.
Manage Heroku apps, dynos, add-ons, and Postgres from an AI agent.
Manage Mailgun messaging, domains, webhooks, and analytics from an AI agent.
Hosted, isolated Chromium runtime for AI agents that need a fresh browser per task.
AI-native browser automation: act, observe, and extract in plain English.
Outlook mail and calendar, Teams, OneDrive and Excel through one Graph API server.
Turn Make.com on-demand scenarios into agent-callable tools — official MCP.
Search, read, and write OneDrive and SharePoint files from an AI agent — official Microsoft remote MCP.
Open-source agentic browser automation that handles login walls and CAPTCHAs.
Read, search and send Telegram messages as your own account — 80+ tools over Telethon, with a read-only mode and a chat allowlist.
Manage subscriptions, transactions, products, prices, and financial reports on Paddle — official MCP.
Read, create, and manage events across Google Calendar — via Google's official remote MCP or a self-hosted community server.
Slack's own hosted MCP server — search, send messages, read threads, and manage canvases, gated by workspace admins.
Run QuickBooks Online accounting from an agent — invoices, bills, payments, and financial reports.
Send transactional email from an AI agent — verified deliverability, audit-friendly.
Trigger Make scenarios and inspect runs from an AI agent.
Edit a live Webflow site from an agent — CMS collections, pages, and the Designer canvas over OAuth.
Read and send Slack messages, manage channels and threads — the token-based community server, no admin approval needed.
Self-hosted Slack alternative — read and post from an AI agent.
Deploy to your own server from an agent — the self-hosted answer to Vercel and Railway.
Send email and inspect deliverability via SendGrid from an AI agent.
Publish and manage a WordPress site from an agent over the REST API — posts, pages, media, plugins, themes.
Send SMS, WhatsApp, and voice calls from an AI agent via Twilio.
Deploy from files or Git, buy and attach domains, edit DNS, and debug deployments on Vercel — the official remote MCP, over OAuth.
Build on Shopify with an agent — searches the dev docs and validates generated GraphQL, components and Liquid themes.
Fire IFTTT applets via webhooks from an AI agent. Community MCP wrapper archived; IFTTT itself is unaffected.
Official Cal.com hosted MCP — AI agents book, reschedule, and query availability across 34 tools via OAuth 2.1, no local install.
Expose 8,000+ Zapier integrations as tools your AI agent can call.
Official Attio MCP — natural-language CRM control across records, lists, and notes via OAuth.
Pipedrive's own hosted MCP — search and update deals, contacts, organizations, leads, activities, and notes over OAuth.
Create records, update deals, and run Zoho CRM actions from an AI agent — official Zoho MCP.
Manage leads, contacts, opportunities, and tasks in Close from an AI agent — official scoped MCP.
Search conversations, contacts, companies, and help articles in Intercom from an AI agent — official MCP.
Full browser automation: navigate, click, screenshot, and scrape.
Trigger and manage n8n workflows from an AI agent. Community MCP wrapper archived; n8n itself is unaffected.
Create invoices, capture orders, issue refunds, and track disputes on PayPal — official MCP.
Snowflake-managed MCP servers — Cortex Analyst, Cortex Search, and gated SQL, with RBAC and masking enforced by Snowflake.
Secure cloud sandboxes for executing AI-generated code — npm MCP package archived; vendor recommends the hosted E2B platform.
Spin up Railway projects, services, and deploys via remote MCP with OAuth.
Send, read, search, and label Gmail from an AI agent — community MCP with auto-OAuth.
Enterprise iPaaS — trigger Workato recipes from an AI agent.
Manage Linear issues, projects, and cycles from AI context.
Generate working websites from text prompts — verified for 2026.
Generate posters, slides, and social posts from a chat prompt — verified for 2026.
Edit images with Photoshop from a ChatGPT prompt — verified for 2026.
Edit, convert, and compress PDFs inside ChatGPT — verified for 2026.
Generate marketing creative with Adobe Express inside ChatGPT — verified for 2026.
Turn notes and prompts into flashcards and study sets — verified for 2026.
Generate and deploy code on Replit from inside ChatGPT — verified for 2026.
Curate Apple Music playlists and stations inside ChatGPT — verified for 2026.
Build playlists and discover music inside ChatGPT — verified for 2026.
Order food and groceries through ChatGPT — verified for 2026.
Book rides and Uber Eats orders inside ChatGPT — verified for 2026.
Build Target carts and find gift suggestions inside ChatGPT — verified for 2026.
Find vetted home pros and request quotes inside ChatGPT — verified for 2026.
Log meals and track macros inside ChatGPT — verified for 2026.
FAQ: Action-Taking
Are action-taking MCPs safe for agents?
They can be, with the right guardrails. Keep approvals turned on in your client (Claude Desktop and Cursor both support per-call approval), scope the underlying credentials to a specific project or role, and avoid mixing action-taking servers with fully-autonomous long-running loops.
Should I set approval on every call?
For untrusted workflows and new integrations: yes. Once you have used a server for a while and trust both the agent and the MCP, you can move to per-session or "always allow" for read-like actions while keeping destructive actions gated.
What is the biggest mistake people make here?
Using a production token with broad scopes for an agent experiment. If your GitHub token can push to main, the agent can push to main. Create a dedicated scoped token for agent use; treat the agent as a separate user.













