MCP/CloudBurn MCP
CloudBurn MCP logo

CloudBurn MCP

Verified Golden (1000+ GitHub stars)

AWS cost policy engine with 82 deterministic rules to detect and remediate wasteful cloud spending across IaC and live accounts.

developer-tools•Cloud & Infrastructure
GitHub1.8k
License:Apache-2.0
VERIFIED

About this Server

CloudBurn (`cloudburn` / `@cloudburn/mcp`) is an open-source policy engine that detects and blocks bad AWS spending patterns before they ship in IaC (Terraform, CloudFormation) and remediates wasteful spending in live AWS accounts. With 82 deterministic cost rules covering EBS, EC2, RDS, S3, and Lambda, it provides coding agents with read-only tools to audit IaC templates, discover idle cloud resources, and prevent budget overruns.

Real-time Interaction

Direct low-latency RPC protocol communication with structured JSON schemas.

Scoped Sandboxing

Restricted capability bounds to prevent accidental modifications or leakage.

Security & Best Practices

Read-Only Operations: The MCP server executes strictly read-only checks against IaC files and live AWS APIs without modifying infrastructure.
Resource Explorer Boundaries: Live account discovery is scoped to the configured AWS region and active IAM role policies.
Local IaC Parsing: Static IaC scanning processes files entirely on the local machine with zero telemetry or file transmission.

When to Use (and When Not To)

Best For
  • •Reviewing Terraform or CloudFormation pull requests to catch expensive cloud resource misconfigurations
  • •Auditing live AWS accounts to find unattached EBS volumes, idle RDS instances, and outdated gp2 storage
  • •Implementing FinOps guardrails across engineering teams to prevent unexpected AWS cloud bills
Not For / Limitations
  • •Executing live AWS CLI pipeline commands like restart or delete (use AWS Cloud MCP Server instead)
  • •Azure subscription infrastructure and VM management (use Azure MCP Server instead)
  • •Kubernetes pod scheduling and cluster management (use Kubernetes MCP instead)

Install & Setup

terminal command
$claude mcp add cloudburn -- npx -y @cloudburn/mcp@latest

Exposed Tools & Endpoints

4 tools

Functions your AI agent can invoke via this Model Context Protocol server

cloudburn_scan_iac

Scans Terraform (.tf) and CloudFormation templates for AWS cost anti-patterns and unoptimized resource configurations.

cloudburn_discover_resources

Inspects live AWS accounts across regions using AWS Resource Explorer to find running resources causing waste.

cloudburn_list_rules

Lists the 82 active AWS FinOps rules across compute, storage, databases, networking, and tagging categories.

cloudburn_explain_rule

Returns full rationale, AWS documentation references, and remediation steps for a specific rule ID (e.g. CLDBRN-AWS-EBS-1).