Power your agent
คำสั่งของผู้เผยแพร่เอง ไม่ใช่เอนด์พอยต์ของ PlugMCP
Host a copy with our keys and logs.
npx -y [email protected]Claude Code ไม่มีลิงก์ติดตั้งสำหรับคำสั่งแบบโลคัล ให้คัดลอกคำสั่งด้านล่างแล้วรันในเทอร์มินัล
claude mcp add cloud-devops-mcp-server -- npx -y cloud-devops-mcp-server@0.14.0รันในเทอร์มินัล
{ "mcpServers": { "cloud-devops-mcp-server": { "command": "npx", "args": [ "-y", "[email protected]" ] } }}claude_desktop_config.json
URL แบบรีโมตหรือคำสั่งบนเครื่องของคุณ? การติดตั้งสองแบบต่างกันอย่างไร
รันบน PlugMCP
A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.
เปิดCloud DevOps MCP Server is a Model Context Protocol v2 server by Alex C. Godwin. It provides evidence-backed Cloud DevOps analysis across infrastructure, identity, Kubernetes, CI/CD, SRE and software supply-chain controls.
The v0.14 line adds an opt-in OpsChugex change-intelligence and blast-radius gateway. The public MCP forwards bounded planned-change, topology and readiness evidence to a host-configured private OpsChugex service and returns change risk, impacted topology nodes, representative blast paths, blockers, warnings and evidence gaps. Proprietary dependency propagation, risk weighting and blocker rules are not included in this public MIT repository.
The v0.13 line adds an opt-in OpsChugex advanced FinOps gateway. The public MCP forwards bounded cloud-cost, utilization and Kubernetes allocation evidence to a host-configured private OpsChugex service and returns optimization opportunities, cost anomalies, low/high savings ranges, confidence, cost correlations and evidence gaps. Proprietary savings factors, anomaly thresholds, prioritization and deduplication are not included in this public MIT repository.
The v0.12 line adds an opt-in OpsChugex cloud security posture gateway. The public MCP forwards bounded cloud asset, identity, secret and network-reachability evidence to a host-configured private OpsChugex service and returns security score, risk level, ordered findings, attack paths, evidence gaps and recommendations. Proprietary security rules, severity thresholds, scoring and attack-path correlation are not included in this public MIT repository.
The v0.11 line adds an opt-in OpsChugex policy and governance gateway. The public MCP sends bounded resource evidence and approved exception metadata to a host-configured private OpsChugex service and returns pass, review or block decisions with control findings and evidence gaps. Proprietary profiles, rules, weights and exception-processing logic are not included in this public MIT repository.
The v0.10 line adds an opt-in OpsChugex root-cause intelligence gateway. The public MCP sends bounded incident evidence to a host-configured private OpsChugex service and returns evidence-ranked probable causes, contradictions, limitations and next checks. Proprietary ranking and correlation rules are not included in this public MIT repository.
The v0.9 line adds an opt-in distributed-tracing and SLO-intelligence plane for Grafana Tempo and Jaeger v3 trace reads, service dependency mapping, tracing coverage assessment, multi-window SLO burn-rate analysis and trace/SLO incident correlation. The v0.8 production-observability and operations-intelligence plane remains available for Prometheus, Grafana, CloudWatch Logs Insights, Kubernetes health, GitHub Actions diagnosis, cloud health, FinOps and drift. Live AWS, Azure and GCP access remains bounded and read-only. Cloud mutation remains intentionally unavailable.
AI assistants are more useful in engineering work when they can call focused tools with clear inputs and consistent outputs. This server provides a Cloud DevOps tool layer for:
When explicitly enabled, six additional tools provide allowlisted AWS/Azure/GCP identity verification, bounded inventory, managed Kubernetes discovery, observability configuration summaries, FinOps waste signals and drift reporting. No cloud mutation commands are exposed. AWS general inventory is sourced from the Resource Groups Tagging API, so untagged AWS resources may not appear in that inventory or AWS drift comparison.
When explicitly enabled, twelve additional tools provide bounded Prometheus queries, Grafana alert summaries, CloudWatch Logs Insights queries, Kubernetes pod-health summaries, GitHub Actions failure diagnosis, cross-signal incident correlation, cloud-health assessment, deployment/incident correlation, observability coverage assessment, FinOps correlation, cross-runtime drift analysis and operations briefs. Endpoints, cloud scopes, log groups, cluster contexts, namespaces and repositories are allowlisted. The layer is read-only and exposes no alert mutation, deployment mutation or arbitrary shell execution.
When explicitly enabled, six additional v0.9 tools provide bounded Tempo/Jaeger trace search and retrieval, service dependency mapping, tracing coverage assessment, multi-window SLO burn-rate analysis and trace/SLO incident correlation. Remote tracing endpoints must be allowlisted and use HTTPS unless loopback. Backend credentials stay in host environment variables. Trace search windows and result sizes are bounded, and the plane exposes no trace ingestion, sampling mutation or telemetry deletion.
When explicitly enabled, v0.10 exposes diagnose_root_cause. The tool accepts bounded evidence from metrics, logs, traces, Kubernetes, cloud, Terraform and CI/CD, then calls a host-configured private OpsChugex service. The public MCP contains no proprietary ranking rules, accepts no service URL or credential as tool input, and performs no remediation. Evidence scores represent evidence strength rather than statistical probability.
When explicitly enabled, v0.11 exposes assess_governance_policy. The tool accepts bounded factual resource evidence plus optional owner-attributed, time-bounded exceptions and forwards them to the private OpsChugex policy engine. It returns pass, review, or block with control findings and evidence gaps.
The public MCP contains no proprietary governance profiles, policy rules, scoring weights, exception evaluation logic or enforcement capability. The service URL and token remain host-side and cannot be supplied as MCP arguments.
When explicitly enabled, v0.12 exposes assess_cloud_security_posture. The tool accepts bounded asset, identity, secret and network-reachability evidence and forwards it to the private OpsChugex security engine. It returns a security score, risk level, ordered findings, correlated attack paths, evidence gaps and recommended next actions.
The public MCP contains no proprietary security detection thresholds, severity rules, scoring logic or attack-path algorithm. It cannot rotate credentials, change IAM, modify network controls, alter encryption settings or remediate infrastructure.
When explicitly enabled, v0.13 exposes analyze_advanced_finops. The tool accepts bounded cloud-cost, utilization and Kubernetes allocation evidence and forwards it to the private OpsChugex FinOps engine. It returns optimization opportunities, anomalies, savings ranges, confidence, cost correlations and evidence gaps.
The public MCP contains no proprietary savings factors, anomaly thresholds, prioritization rules, confidence algorithm or portfolio deduplication logic. It does not resize resources, terminate workloads, purchase commitments, change Kubernetes requests or perform billing actions.
When explicitly enabled, v0.14 exposes analyze_change_blast_radius. The tool accepts bounded planned-change items, topology nodes/edges and readiness evidence, then forwards them to the private OpsChugex change-intelligence engine. It returns risk level/score, impacted nodes, representative blast paths, blockers, warnings, evidence gaps and recommendations.
The public MCP contains no proprietary graph-propagation algorithm, change-risk weights, production-blocker rules or approval logic. The tool is read-only and cannot apply Terraform, mutate Kubernetes, merge pull requests, deploy workloads, approve changes or execute rollback.
When explicitly enabled, six additional tools provide Terraform format/validation/plan summaries and Kubernetes read-only runtime inspection. These operations use repository, context, namespace and resource allowlists. Full Terraform plan JSON, Kubernetes Secrets, arbitrary shell execution, Terraform apply and Kubernetes mutation are deliberately excluded.
flowchart TD
LocalClient["Local MCP client"] --> Stdio["stdio"]
RemoteClient["Remote MCP client"] --> HTTPS["HTTPS reverse proxy / gateway"]
HTTPS --> AuthHTTP["Bearer-authenticated Streamable HTTP"]
Stdio --> Server["Cloud DevOps MCP server"]
AuthHTTP --> Server
Server --> DomainTools["Domain + policy-pack analyzers"]
DomainTools --> Correlator["Cross-domain and supply-chain correlation"]
DomainTools --> Output["Structured guidance"]
Correlator --> Output
Run the published MCP server directly from npm:
npx -y [email protected]
On Windows PowerShell systems where script execution policy blocks npx.ps1, use:
npx.cmd -y [email protected]
Install the CLI globally if you prefer a persistent local command:
npm install -g [email protected]
cloud-devops-mcp-server
The package is published on npm as cloud-devops-mcp-server and registered in the official MCP Registry as io.github.alexcgodwin/cloud-devops-mcp-server.
Cloud DevOps MCP Server supports local stdio clients and MCP clients capable of connecting to Streamable HTTP endpoints. Common local clients include:
Use stdio for normal local operation. For self-hosted remote access, start the optional authenticated Streamable HTTP endpoint and place non-local deployments behind an HTTPS reverse proxy or gateway.
For MCP clients that support local stdio servers, the recommended public configuration is:
{
"mcpServers": {
"cloud-devops": {
"command": "npx",
"args": ["-y", "[email protected]"]
}
}
}
Windows clients can use npx.cmd if npx resolves through a blocked PowerShell wrapper:
{
"mcpServers": {
"cloud-devops": {
"command": "npx.cmd",
"args": ["-y", "[email protected]"]
}
}
}
See docs/configuration.md for npm, global-install, source-development and authenticated Streamable HTTP configuration options.
Local loopback example:
$env:CLOUD_DEVOPS_MCP_BEARER_TOKEN="<random secret at least 32 characters>"
npm run start:http
The MCP endpoint is http://127.0.0.1:3000/mcp and requires Authorization: Bearer <token>. A non-local bind additionally requires CLOUD_DEVOPS_MCP_ALLOWED_HOSTS and an HTTPS CLOUD_DEVOPS_MCP_PUBLIC_BASE_URL so remote traffic is expected to terminate TLS at a reverse proxy or gateway.
The v0.14.0 release candidate passes 116 automated tests, with 85.80% statement, 72.18% branch, 85.89% function and 89.11% line coverage. The production dependency audit reports zero vulnerabilities. Public clean-install and MCP Registry acceptance are recorded after publication.
See docs/public-acceptance.md for the verification record.
{
"changedResources": ["network", "iam", "kubernetes"],
"includesIamChanges": true,
"includesPublicIngress": true,
"modifiesStatefulResources": false,
"hasRollbackPlan": true,
"hasPeerReview": true,
"hasTerraformPlan": true
}
Example output shape:
{
"riskScore": 78,
"riskLevel": "critical",
"changedResources": ["network", "iam", "kubernetes"],
"recommendedReleasePath": "Change-advisory review, maintenance window and staged execution are recommended."
}
See docs/demo.md for practical sample inputs and outputs across the toolset.
Build and run the server in a container:
docker build -t cloud-devops-mcp-server .
docker run --rm -i cloud-devops-mcp-server
npm run dev
npm run build
npm test
npm run check
The core decision logic lives in src/logic.ts and the MCP tool registration lives in src/index.ts.
More project notes are available in DEVELOPMENT.md, RELEASE.md and docs/architecture.md.
Built by Alex C. Godwin, Cloud DevOps Engineer.
Cloud DevOps MCP server with guarded operations and optional private OpsChugex root-cause, governance, security posture, FinOps and change intelligence.
{ "mcpServers": { "cloud-devops-mcp-server": { "command": "npx", "args": [ "-y", "[email protected]" ] } }}เครื่องมือ
ยังไม่มีรายการเครื่องมือ เซิร์ฟเวอร์แบบรีโมตจะได้รายการหลังการตรวจสอบสถานะครั้งแรก
FAQ
คัดลอกคอนฟิก stdio สำหรับ Cursor, Claude Desktop, Claude Code หรือ VS Code ได้ในหน้านี้ คอนฟิกนี้ใช้การติดตั้งของผู้เผยแพร่ ไม่ใช่พร็อกซีของ PlugMCP
ระเบียนนี้ไม่ได้ระบุตัวแปรสภาพแวดล้อมที่จำเป็น
Cloud Devops ทำงานแบบโลคัลผ่าน stdio
ตรวจสอบล่าสุดเมื่อ 2026-11-09 Cloud DevOps MCP server with guarded operations and optional private OpsChugex root-cause, governance, security posture, FinOps and change intelligence.