Cloud DevOps MCP Server

Name: Cloud DevOps MCP Server
Author: alexcgodwin

作者：alexcgodwin版本 0.14.0i★ –i在你的电脑上运行

注册名称io.github.alexcgodwin/cloud-devops-mcp-server

安装

概览

作者提供的说明（英文原文）

Cloud DevOps analysis with guarded Git, infrastructure, cloud and observability operations.

PopNx MCP 的三大支柱

这三项永远不会合并成一个分数：意见、测量和人气是不同的东西。

用户评价i暂无评价评价功能将在后续阶段与账户功能一起开放
我们的基础检查i1 项中通过 1 项依据公开信息检查；尚未扫描代码
使用情况i尚未统计★ –

它能帮你做什么

我们还没有为它写通俗的介绍。下面是我们从注册中心读取到的事实。

连接方式: 在你的电脑上运行
传输方式: stdio
分类: 开发者工具

安装

选择你使用的 AI 应用，然后复制设置。

安装之前

基础检查：1 项中通过 1 项
在你的电脑上运行，拥有你的用户账户的权限（文件、网络、应用）。
注册中心没有列出需要填写的密钥。

你需要

npm已安装 Node.js（用于 npx 命令）

你用的是哪个应用？

ClaudeClaude CodeCursorVS CodeChatGPT

在上方选择你的应用。我们会记住它，下次按钮会显示“安装到 …”。

打开 Claude Desktop → Settings → Developer → Edit Config，把下面的内容粘贴到 claude_desktop_config.json

{
  "mcpServers": {
    "cloud-devops": {
      "command": "npx",
      "args": [
        "-y",
        "cloud-devops-mcp-server"
      ]
    }
  }
}

在终端中运行这条命令

claude mcp add cloud-devops -- npx -y cloud-devops-mcp-server

在 Cursor 中打开

或者自己复制设置

粘贴到项目中的 .cursor/mcp.json，或 ~/.cursor/mcp.json

{
  "mcpServers": {
    "cloud-devops": {
      "command": "npx",
      "args": [
        "-y",
        "cloud-devops-mcp-server"
      ]
    }
  }
}

浏览器会先询问是否打开应用，然后应用会显示设置并请你确认。密钥的值会留空，由你自己填写。

在 VS Code 中打开

或者自己复制设置

粘贴到项目中的 .vscode/mcp.json

{
  "servers": {
    "cloud-devops": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "cloud-devops-mcp-server"
      ]
    }
  }
}

浏览器会先询问是否打开应用，然后应用会显示设置并请你确认。密钥的值会留空，由你自己填写。

这个服务器在你的电脑上运行，而 ChatGPT 只能连接互联网上的服务器。请选择其他应用。

你的选择通过 Cookie 保存在这台设备上，无需账户。

这些设置是根据作者在注册中心的条目生成的。如果 README 的写法不同，请以 README 为准。

它能做什么

它在你的电脑上运行；安装后，工具列表会显示在你的 AI 应用中。

基础检查i

我们检查的是任何人都能看到的信息；我们没有阅读代码。不适用的检查项不计入总数。 · 检查于 2026年11月6日

✓ 通过
作者与仓库一致
注册名称已通过 GitHub 账户 alexcgodwin 验证，该账户拥有此仓库
… 尚未检查
仍在维护
我们还没有从 GitHub 读取这个仓库
… 尚未检查
有许可证
我们还没有从 GitHub 读取这个仓库
– 不适用
端点有响应
它在你的电脑上运行，没有互联网端点
– 不适用
使用 OAuth 登录
在你的电脑上运行，改用本地设置
… 尚未检查
工具描述中没有隐藏指令
它在你的电脑上运行；我们只能读取互联网端点的工具列表

与“开发者工具”中的其他服务器比较i

星标数多于此分类中其他 1385 个服务器的 0%
发布到注册中心的时间比此分类中其他 1385 个服务器的 61% 更新
基础检查结果等于或优于此分类中其他 1385 个服务器的 100%

与注册中心里这个分类中所有活跃的服务器比较。只有当发布者拥有该仓库时，星标数才计入。

常见问题

Cloud DevOps MCP Server 安全吗？

它在 1 项适用的基础检查中通过了 1 项。我们没有阅读代码。在添加密钥或令牌之前，请先看看这个服务器要求哪些权限，并使用只具备所需权限的密钥。

它需要哪些密钥或代码？

注册中心没有列出必需的密钥，不过有些服务器会在首次使用时要求你登录。

它在我的电脑上运行还是在云端？

它在你的电脑上运行。你的 AI 应用会在需要时启动它，数据不会经过作者的服务器（除非它自己调用在线服务）。

它还在维护吗？

GitHub 仓库最后更新于–，最新版本（0.14.0）于35天前进入注册中心。

哪些应用可以使用它？

支持 MCP 的应用，例如 Claude Desktop、Claude Code、Cursor 和 VS Code。你的电脑上还需要有 Node.js。

有什么可以替代它？

同一分类中有：GitHub, Desktop Commander, Cloudflare MCP

替代选择

同一分类中其他作者的服务器，按星标数排序。

如何看卡片：★ GitHub 星标i三大支柱：评价 · 检查 · 使用情况i更新 = 最新版本发布到注册中心的时间i

GitHub

作者：github

Connect AI assistants to GitHub - manage repos, issues, PRs, and workflows through natural language.

电脑或云端★ 34,245MIT3天前更新

安装

Desktop Commander

作者：wonderwhy-er

MCP server for terminal commands, file operations, and process management

在你的电脑上运行★ 10,225MIT15天前更新

安装

Cloudflare MCP

作者：cloudflare

Cloudflare MCP servers

在云端运行★ 4,446Apache-2.014个月前更新

安装

作者的 README

打开 README

按原文从作者的仓库复制。PopNx MCP 没有审查或背书其内容。HTML、图片和脚本已被移除。链接会离开本站。

Cloud DevOps MCP Server

Cloud DevOps MCP Server is a Model Context Protocol v2 server by Alex C. Godwin. It provides evidence-backed Cloud DevOps analysis across infrastructure, identity, Kubernetes, CI/CD, SRE and software supply-chain controls.

The v0.14 line adds an opt-in OpsChugex change-intelligence and blast-radius gateway. The public MCP forwards bounded planned-change, topology and readiness evidence to a host-configured private OpsChugex service and returns change risk, impacted topology nodes, representative blast paths, blockers, warnings and evidence gaps. Proprietary dependency propagation, risk weighting and blocker rules are not included in this public MIT repository.

The v0.13 line adds an opt-in OpsChugex advanced FinOps gateway. The public MCP forwards bounded cloud-cost, utilization and Kubernetes allocation evidence to a host-configured private OpsChugex service and returns optimization opportunities, cost anomalies, low/high savings ranges, confidence, cost correlations and evidence gaps. Proprietary savings factors, anomaly thresholds, prioritization and deduplication are not included in this public MIT repository.

The v0.12 line adds an opt-in OpsChugex cloud security posture gateway. The public MCP forwards bounded cloud asset, identity, secret and network-reachability evidence to a host-configured private OpsChugex service and returns security score, risk level, ordered findings, attack paths, evidence gaps and recommendations. Proprietary security rules, severity thresholds, scoring and attack-path correlation are not included in this public MIT repository.

The v0.11 line adds an opt-in OpsChugex policy and governance gateway. The public MCP sends bounded resource evidence and approved exception metadata to a host-configured private OpsChugex service and returns pass, review or block decisions with control findings and evidence gaps. Proprietary profiles, rules, weights and exception-processing logic are not included in this public MIT repository.

The v0.10 line adds an opt-in OpsChugex root-cause intelligence gateway. The public MCP sends bounded incident evidence to a host-configured private OpsChugex service and returns evidence-ranked probable causes, contradictions, limitations and next checks. Proprietary ranking and correlation rules are not included in this public MIT repository.

The v0.9 line adds an opt-in distributed-tracing and SLO-intelligence plane for Grafana Tempo and Jaeger v3 trace reads, service dependency mapping, tracing coverage assessment, multi-window SLO burn-rate analysis and trace/SLO incident correlation. The v0.8 production-observability and operations-intelligence plane remains available for Prometheus, Grafana, CloudWatch Logs Insights, Kubernetes health, GitHub Actions diagnosis, cloud health, FinOps and drift. Live AWS, Azure and GCP access remains bounded and read-only. Cloud mutation remains intentionally unavailable.

Why this exists
Tools
Architecture
Quickstart
Install from npm
MCP clients
Configuration
Authenticated Streamable HTTP
Public release verification
Example tool input
Demo outputs
Docker
Development
Security model
Roadmap
Author

Why this exists

AI assistants are more useful in engineering work when they can call focused tools with clear inputs and consistent outputs. This server provides a Cloud DevOps tool layer for:

Cross-domain release-risk correlation across infrastructure, identity, runtime and delivery.
Infrastructure-as-code deployment risk analysis.
Production incident runbook generation.
CI/CD delivery readiness review.
SLO error budget calculations.
AWS IAM least-privilege review.
AWS, Azure and GCP identity policy packs.
Terraform destructive-change, public exposure and encryption security analysis.
Kubernetes workload production readiness and security-policy analysis.
GitHub Actions workflow security and deployment review.
CycloneDX/SPDX SBOM quality and software supply-chain correlation.
Optional authenticated Streamable HTTP serving for self-hosted remote access.
Optional allowlisted live AWS/Azure/GCP inventory, observability, FinOps and drift signals.
Optional Grafana Tempo and Jaeger v3 trace reads, service dependency maps and SLO burn-rate intelligence.
Optional OpsChugex private root-cause intelligence across metrics, logs, traces, Kubernetes, cloud, Terraform and CI/CD evidence.
Optional OpsChugex private policy and governance intelligence for development, staging, production and regulated profiles.
Optional OpsChugex private cloud security posture intelligence for exposure, identity, secrets and attack-path analysis.
Optional OpsChugex private advanced FinOps intelligence for rightsizing, anomaly detection, Kubernetes/cloud cost correlation and savings-range analysis.
Optional OpsChugex private change intelligence for pre-change dependency propagation, blast-radius mapping, blockers and rollback/readiness analysis.

Tools

Tool	Purpose
`assess_cloud_change_bundle`	Correlates Terraform, IAM, Kubernetes and GitHub Actions evidence into one deployment-risk assessment with cross-domain change paths.
`assess_terraform_change`	Scores Terraform/IaC risk and can derive evidence from raw Terraform plan JSON.
`build_incident_runbook`	Produces a practical incident response runbook for a service, symptom, environment and severity.
`review_cicd_pipeline`	Reviews CI/CD maturity while separating failed controls from unknown evidence.
`estimate_slo_error_budget`	Calculates downtime and request-failure budgets with consistency validation.
`review_iam_policy`	Parses IAM policy JSON and detects wildcard scope and privilege-escalation paths.
`review_kubernetes_deployment`	Parses Kubernetes YAML for probes, resources, disruption protection, image and exposure risks.
`review_github_actions_workflow`	Parses workflow YAML for triggers, immutable action pins, permissions, caching and concurrency.
`review_cloud_identity_policy`	Applies AWS IAM, Azure RBAC or GCP IAM policy packs to raw policy JSON.
`review_terraform_security`	Reviews Terraform plan JSON for destructive changes, public exposure, encryption, deletion protection and wildcard IAM.
`review_kubernetes_security`	Reviews privileged mode, host access, service accounts, capabilities, seccomp, root filesystems and NetworkPolicy.
`review_software_supply_chain`	Correlates CycloneDX/SPDX SBOM quality with CI action pinning, image immutability, signatures and provenance.

Optional live multi-cloud reads

When explicitly enabled, six additional tools provide allowlisted AWS/Azure/GCP identity verification, bounded inventory, managed Kubernetes discovery, observability configuration summaries, FinOps waste signals and drift reporting. No cloud mutation commands are exposed. AWS general inventory is sourced from the Resource Groups Tagging API, so untagged AWS resources may not appear in that inventory or AWS drift comparison.

Optional production observability intelligence

When explicitly enabled, twelve additional tools provide bounded Prometheus queries, Grafana alert summaries, CloudWatch Logs Insights queries, Kubernetes pod-health summaries, GitHub Actions failure diagnosis, cross-signal incident correlation, cloud-health assessment, deployment/incident correlation, observability coverage assessment, FinOps correlation, cross-runtime drift analysis and operations briefs. Endpoints, cloud scopes, log groups, cluster contexts, namespaces and repositories are allowlisted. The layer is read-only and exposes no alert mutation, deployment mutation or arbitrary shell execution.

Optional distributed tracing and SLO intelligence

When explicitly enabled, six additional v0.9 tools provide bounded Tempo/Jaeger trace search and retrieval, service dependency mapping, tracing coverage assessment, multi-window SLO burn-rate analysis and trace/SLO incident correlation. Remote tracing endpoints must be allowlisted and use HTTPS unless loopback. Backend credentials stay in host environment variables. Trace search windows and result sizes are bounded, and the plane exposes no trace ingestion, sampling mutation or telemetry deletion.

Optional OpsChugex root-cause intelligence

When explicitly enabled, v0.10 exposes diagnose_root_cause. The tool accepts bounded evidence from metrics, logs, traces, Kubernetes, cloud, Terraform and CI/CD, then calls a host-configured private OpsChugex service. The public MCP contains no proprietary ranking rules, accepts no service URL or credential as tool input, and performs no remediation. Evidence scores represent evidence strength rather than statistical probability.

Optional OpsChugex policy and governance intelligence

When explicitly enabled, v0.11 exposes assess_governance_policy. The tool accepts bounded factual resource evidence plus optional owner-attributed, time-bounded exceptions and forwards them to the private OpsChugex policy engine. It returns pass, review, or block with control findings and evidence gaps.

The public MCP contains no proprietary governance profiles, policy rules, scoring weights, exception evaluation logic or enforcement capability. The service URL and token remain host-side and cannot be supplied as MCP arguments.

Optional OpsChugex cloud security posture intelligence

When explicitly enabled, v0.12 exposes assess_cloud_security_posture. The tool accepts bounded asset, identity, secret and network-reachability evidence and forwards it to the private OpsChugex security engine. It returns a security score, risk level, ordered findings, correlated attack paths, evidence gaps and recommended next actions.

The public MCP contains no proprietary security detection thresholds, severity rules, scoring logic or attack-path algorithm. It cannot rotate credentials, change IAM, modify network controls, alter encryption settings or remediate infrastructure.

Optional OpsChugex advanced FinOps intelligence

When explicitly enabled, v0.13 exposes analyze_advanced_finops. The tool accepts bounded cloud-cost, utilization and Kubernetes allocation evidence and forwards it to the private OpsChugex FinOps engine. It returns optimization opportunities, anomalies, savings ranges, confidence, cost correlations and evidence gaps.

The public MCP contains no proprietary savings factors, anomaly thresholds, prioritization rules, confidence algorithm or portfolio deduplication logic. It does not resize resources, terminate workloads, purchase commitments, change Kubernetes requests or perform billing actions.

Optional OpsChugex change intelligence and blast-radius analysis

When explicitly enabled, v0.14 exposes analyze_change_blast_radius. T

只显示了开头部分；其余内容请在仓库中阅读

Cloud DevOps MCP Server

概览

PopNx MCP 的三大支柱

它能帮你做什么

安装

安装之前

它能做什么

基础检查i

作者与仓库一致

仍在维护

有许可证

端点有响应

使用 OAuth 登录

工具描述中没有隐藏指令

与“开发者工具”中的其他服务器比较i

常见问题

替代选择

GitHub

Desktop Commander

Cloudflare MCP

作者的 README

Cloud DevOps MCP Server

Table of contents

Why this exists

Tools

Optional live multi-cloud reads

Optional production observability intelligence

Optional distributed tracing and SLO intelligence

Optional OpsChugex root-cause intelligence

Optional OpsChugex policy and governance intelligence

Optional OpsChugex cloud security posture intelligence

Optional OpsChugex advanced FinOps intelligence

Optional OpsChugex change intelligence and blast-radius analysis