Source-backed · agents · 20 picks

Source-backed agent workflow resources

Agent resources with source metadata that makes review, attribution, and reuse easier before a team adopts them.

Curated by @heyclaude-editors Updated 2026-07-18

Agent resources with source metadata that makes review, attribution, and reuse easier before a team adopts them.

Compared at a glance

The top 5 picks side by side on trust, install, platform support, and disclosed notes — full rationale for each below.

2 trust signals differ across this comparison (Package trust, Source provenance).

Next steps differ across picks — use the actions in the table below to copy install commands and source links per resource.

Field	Workato MCP Server for Claude Access any application, workflows, or data via Workato's integration platform Open dossier	Zapier MCP Server for Claude Connect to nearly 8,000 apps through Zapier's automation platform Open dossier	Configure Claude Code Hooks with /hooks Use the built-in /hooks menu to inspect Claude Code hooks and configure them in settings.json so shell commands run deterministically at lifecycle events like PreToolUse, PostToolUse, and Stop. Open dossier	Codex Automations Orchestrator Capability Pack Skill Expert automation-orchestration capability pack for designing safe, low-noise recurring Codex workflows with clear runbooks. Open dossier	Cursor Windsurf AI Code Editor Skill - Claude Code Skills Configure and optimize Cursor and Windsurf AI code editors for maximum productivity. Set up agent mode, composer features, keybindings, and AI-powered refactoring workflows. Customize with .cursorrules and .windsurfrules for project-specific guidance. Open dossier
Next stepsDiffers	Open dossier API JSON Open LLM MCP feed Open source Newsletter Claim listing	Open dossier API JSON Open LLM MCP feed Open source Newsletter Claim listing	Open dossier API JSON Open LLM Open source Newsletter Claim listing	Open dossier API JSON Open LLM Open source Newsletter Claim listing	Open dossier API JSON Open LLM Open source Newsletter Claim listing
Trust
Review status	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed
Package trustDiffers	Package verified	Package verified	Package not verified	Package verified2026-04-11	Package verified2025-10-23
Source provenanceDiffers	No submission link	No submission link	Source-backed	No submission link	No submission link
Submitter	—	—	—	—	—
Install risk	Low risk	Low risk	Review first	Low risk	Low risk
Notes	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓
Brand	Workato	Zapier	—	—	Windsurf
Category	mcp	mcp	commands	skills	skills
Source	First-party	First-party	Source-backed	First-party	First-party
Author	Workato	Zapier	JSONbored	JSONbored	JSONbored
Added	2025-09-18	2025-09-18	2025-10-25	2026-04-11	2025-10-23
Platforms	Claude Code Claude Desktop	Claude Code Claude Desktop	Claude Code	Claude Code Codex Windsurf Gemini Cursor CLI	Claude Code Codex Windsurf Gemini Cursor CLI
Harness	Claude Code Claude Desktop	Claude Code Claude Desktop	Claude Code	Claude Code Codex Windsurf Gemini Cursor CLI	Claude Code Codex Windsurf Gemini Cursor CLI
Source repo	—	—	—	—	—
Safety notes	✓Restrict recipe and connection access because automations can trigger reads or writes across many connected business systems.	✓Restrict the generated Zapier MCP URL and enabled actions because automations can write across many connected apps.	✓Hooks execute shell commands automatically with your user permissions whenever their event fires. A misconfigured or malicious hook can run destructive commands (file deletion, network calls, credential access) without further confirmation. PreToolUse hooks can allow or deny tool calls and PostToolUse hooks run after tools succeed; review hook commands before committing them to a shared .claude/settings.json so teammates do not inherit unexpected execution. Prefer `.claude/settings.json` for reviewed, team-shared hooks and `.claude/settings.local.json` for personal, gitignored hooks; use `disableAllHooks` to turn off user/project hooks when running untrusted code.	✓Designs and runs automation workflows that can execute commands and trigger external actions; review each automation's permissions and triggers before enabling it.	✓Setup downloads and unzips a package and changes IDE configuration files; review what it writes and run it in a trusted workspace.
Privacy notes	✓Connected app data, workflow payloads, account metadata, and integration connection details may be sent through tool calls.	✓Connected app data, workflow payloads, account metadata, and action inputs or outputs may be sent through model context.	✓Command and HTTP hooks receive event JSON on stdin including `session_id`, `transcript_path`, `cwd`, and tool input (such as file paths and Bash commands); a hook that forwards this data over the network can expose local file contents, paths, or command arguments to third parties. HTTP hooks can include headers with interpolated environment variables (restricted by `allowedEnvVars`); avoid embedding secrets in hook configuration that is committed to a repository.	✓Inputs can include source files, prompts, logs, account metadata, repository details, and operational context that may be sent to the configured AI model. Redact secrets, customer data, private URLs, credentials, and proprietary implementation details before sharing prompts, reports, or generated artifacts.	✓Cursor and Windsurf send your code and prompts to their AI backends to power completion and chat; review each editor's data-handling settings and keep API keys out of committed config.
Prerequisites	Workato account (workspace access required) Bearer token authentication (created in Workato Dashboard) Network access to your Workato workspace MCP endpoint (HTTPS required, HTTP transport) Understanding of Workato recipes/workflows (automation concepts)	Zapier account (free or paid plan) Personal authentication token (generated at mcp.zapier.com) Network access to mcp.zapier.com (HTTPS required, HTTP transport) Understanding of Zapier Zaps/workflows (automation concepts)	— none listed	Automation goals and success metrics Notification channel Operational owner	Cursor IDE or Windsurf IDE OpenAI API key or Anthropic API key macOS/Windows/Linux Cursor or Windsurf IDE installed (latest version recommended for best AI features)
Install	`claude mcp add --transport http workato YOUR_WORKATO_MCP_URL && claude mcp list`	`claude mcp add --transport http zapier YOUR_GENERATED_URL && claude mcp list`	—	`curl -L https://heyclau.de/downloads/skills/codex-automations-orchestrator-capability-pack.zip -o codex-automations-orchestrator-capability-pack.zip && unzip -o codex-automations-orchestrator-capability-pack.zip -d ./codex-automations-orchestrator-capability-pack`	`curl -L https://heyclau.de/downloads/skills/cursor-windsurf-ai-ide-setup.zip -o cursor-windsurf-ai-ide-setup.zip && unzip -o cursor-windsurf-ai-ide-setup.zip -d ./cursor-windsurf-ai-ide-setup`
Config	`Manual-only setup: { "workato": { "url": "https://your-workspace.workato.com/mcp", "transport": "http" } }`	`Manual-only setup: { "zapier": { "url": "https://mcp.zapier.com/YOUR_GENERATED_URL", "transport": "http" } }`	—	—	—
Citations	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationdocs.workato.com Package (SHA-256 pinned)/downloads/mcp/workato-mcp-server.mcpb Source methodology →	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationhelp.zapier.com Package (SHA-256 pinned)/downloads/mcp/zapier-mcp-server.mcpb Source methodology →	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationcode.claude.com Source methodology →	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationgithub.com Package (SHA-256 pinned)/downloads/skills/codex-automations-orchestrator-capability-pack.zip Source methodology →	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationdocs.cursor.com Package (SHA-256 pinned)/downloads/skills/cursor-windsurf-ai-ide-setup.zip Source methodology →
Claim	Unclaimed	Unclaimed	Unclaimed	Unclaimed	Unclaimed