Cloud Devops MCP Server

Name: Cloud Devops MCP Server
Availability: InStock
Author: alexcgodwin

Gives your AI assistant tools for Cloud DevOps analysis across infrastructure, identity, Kubernetes, CI/CD, SRE and the software supply chain. It scores Terraform plans for destructive changes and public exposure, reviews IAM and cloud identity policies, Kubernetes manifests, GitHub Actions workflows and SBOMs, builds incident runbooks and works out SLO error budgets. Optional extras read live AWS, Azure and GCP inventory and traces, serve over authenticated HTTP, or send change evidence to a private OpsChugex service you configure.

Written by ooruby from the README of cloud-devops-mcp-server 0.14.0.

Not claimed by its maker. Is this yours? Prove it and answer the findings

Why it's useful

Your assistant can check infrastructure changes and delivery pipelines against specific controls and say which evidence is still missing.

What you could do with it

Feed it a Terraform plan and ask which changes are destructive, publicly exposed or missing encryption.
Paste an IAM policy and have wildcard scope and privilege-escalation paths pointed out.
Ask for an incident runbook for a named service, symptom, environment and severity.

Written from its documentation: what it says it can do, not what our checks found.

Maintenance

Not measured

No release date is on record for this package yet. The nightly publisher check records one as it reaches each npm package, about once every ten nights.

Release activity only: it says nothing about quality or safety, and a finished small package can be fine without releases. How it is measured

Not yet tested

What this does not cover

Everything. Treat it as you would software from anywhere else.

Receipt history: every signed receipt for every version of this listing, and what changed between them.

In its maker's words

Cloud DevOps MCP server with guarded operations and optional private OpsChugex root-cause, governance, security posture, FinOps and change intelligence.

Compare with

Compare all 4

How far this has been checked

Static scanned

What it establishes: Its published package, or for a hosted server its source repository at a recorded commit, was read file by file, without running it, by every check in our current scan.
What it does not: How it behaves when it runs, or anything the scan does not read yet: several rubric checks, the repository's history, and compiled code in folders named dist or build. For a hosted server, that the endpoint runs the code that was read. The ooruby Index sets out exactly what was read.
Exactly what was read: Version 0.14.0, the file with digest sha512-LLgWjp0EKGVMj6O0KG5tm5zx1eXL/oZ92cT46YV8QRlxmrZIVkV7FRSW3hutv5PvXOKhZtsCwox2hGYnEEeQUQ==, as the registry publishes it. A published version cannot be replaced, so this names the same bytes for anyone who checks.
Authentication: Runs locally. No hosted endpoint is listed for this package. You run it on your own machine, so there is no endpoint of ours to authenticate against.

How the rungs work

Adding it

Paste this into your client's MCP configuration.

{
  "mcpServers": {
    "cloud-devops-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "cloud-devops-mcp-server@0.14.0"
      ]
    }
  }
}

Or run it directly.

npx -y cloud-devops-mcp-server@0.14.0

Pinned to 0.14.0, which is the version the findings above were found in. Drop the version to take whatever is newest, and the report on this page stops describing what you installed.

Where this came from

Registry: npm
Package: cloud-devops-mcp-server
Version read: 0.14.0
Resolved: 2026-10-10

Open the source

Built from source, attested

npm publishes a signed statement that this exact package was built from the repository below, at this commit. It is verifiable without taking our word for it.

Repository: github.com/alexcgodwin/cloud-devops-mcp-server
Commit: 48457ff5bd52
Built by: github.com/actions/runner/github-hosted
Registry publish attestation: signed by npm · 2026-10-10
Checked: 2026-10-10

The badge, if this is your listing

It renders the current rung (static scanned) and links back here, where what that does and does not establish is one click away. It updates itself as the evidence deepens.

[![ooruby: static scanned](https://ooruby.com/api/badge/cloud-devops-mcp-server)](https://ooruby.com/market/cloud-devops-mcp-server)

About this listing

Kind: MCP server
Category: Infrastructure
Pricing: Free
Sandbox: No
Hosted: No
Updated: 2026-10-05

Similar MCP servers

All MCP servers

3 findingsStatic scanned

Azure MCP

azure

Free

Gives your agent tools across many Azure services, from Key Vault and App Service to AI Search.

544.8k installs/moMIT

1 findingStatic scanned

Azure Devops MCP

azure-devops

Free

Lets your agent work with Azure DevOps projects, work items, repos, builds, test plans and wikis.

389.8k installs/moMIT

4 findingsStatic scanned

Hostinger Api MCP

devs_hostinger

Free

Lets your agent query the Hostinger API for datacentres, domain name ideas and Reach plan features.

526.4k installs/moMIT

Verification records what our published tests found on a specific version at a specific date. It is not a warranty, and it does not certify that software is free of defects.

Sign inSell

Cloud Devops MCP Server

alexcgodwin · MCP server

Written by ooruby from the README of cloud-devops-mcp-server 0.14.0.

Not claimed by its maker. Is this yours? Prove it and answer the findings

Why it's useful

Your assistant can check infrastructure changes and delivery pipelines against specific controls and say which evidence is still missing.

What you could do with it

Feed it a Terraform plan and ask which changes are destructive, publicly exposed or missing encryption.
Paste an IAM policy and have wildcard scope and privilege-escalation paths pointed out.
Ask for an incident runbook for a named service, symptom, environment and severity.

Written from its documentation: what it says it can do, not what our checks found.

Maintenance

Not measured

No release date is on record for this package yet. The nightly publisher check records one as it reaches each npm package, about once every ten nights.

Release activity only: it says nothing about quality or safety, and a finished small package can be fine without releases. How it is measured

Not yet tested

What this does not cover

Everything. Treat it as you would software from anywhere else.

Receipt history: every signed receipt for every version of this listing, and what changed between them.

In its maker's words

Cloud DevOps MCP server with guarded operations and optional private OpsChugex root-cause, governance, security posture, FinOps and change intelligence.

Compare with

Compare all 4

How far this has been checked

Static scanned

What it establishes: Its published package, or for a hosted server its source repository at a recorded commit, was read file by file, without running it, by every check in our current scan.
What it does not: How it behaves when it runs, or anything the scan does not read yet: several rubric checks, the repository's history, and compiled code in folders named dist or build. For a hosted server, that the endpoint runs the code that was read. The ooruby Index sets out exactly what was read.
Exactly what was read: Version 0.14.0, the file with digest sha512-LLgWjp0EKGVMj6O0KG5tm5zx1eXL/oZ92cT46YV8QRlxmrZIVkV7FRSW3hutv5PvXOKhZtsCwox2hGYnEEeQUQ==, as the registry publishes it. A published version cannot be replaced, so this names the same bytes for anyone who checks.
Authentication: Runs locally. No hosted endpoint is listed for this package. You run it on your own machine, so there is no endpoint of ours to authenticate against.

How the rungs work

Adding it

Paste this into your client's MCP configuration.

{
  "mcpServers": {
    "cloud-devops-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "cloud-devops-mcp-server@0.14.0"
      ]
    }
  }
}

Or run it directly.

npx -y cloud-devops-mcp-server@0.14.0

Pinned to 0.14.0, which is the version the findings above were found in. Drop the version to take whatever is newest, and the report on this page stops describing what you installed.

Where this came from

Registry: npm
Package: cloud-devops-mcp-server
Version read: 0.14.0
Resolved: 2026-10-10

Open the source

Built from source, attested

npm publishes a signed statement that this exact package was built from the repository below, at this commit. It is verifiable without taking our word for it.

Repository: github.com/alexcgodwin/cloud-devops-mcp-server
Commit: 48457ff5bd52
Built by: github.com/actions/runner/github-hosted
Registry publish attestation: signed by npm · 2026-10-10
Checked: 2026-10-10

The badge, if this is your listing

It renders the current rung (static scanned) and links back here, where what that does and does not establish is one click away. It updates itself as the evidence deepens.

[![ooruby: static scanned](https://ooruby.com/api/badge/cloud-devops-mcp-server)](https://ooruby.com/market/cloud-devops-mcp-server)

About this listing

Kind: MCP server
Category: Infrastructure
Pricing: Free
Sandbox: No
Hosted: No
Updated: 2026-10-05

Similar MCP servers

All MCP servers

3 findingsStatic scanned

Azure MCP

azure

Free

Gives your agent tools across many Azure services, from Key Vault and App Service to AI Search.

544.8k installs/moMIT

1 findingStatic scanned

Azure Devops MCP

azure-devops

Free

Lets your agent work with Azure DevOps projects, work items, repos, builds, test plans and wikis.

389.8k installs/moMIT

4 findingsStatic scanned

Hostinger Api MCP

devs_hostinger

Free

Lets your agent query the Hostinger API for datacentres, domain name ideas and Reach plan features.

526.4k installs/moMIT

Verification records what our published tests found on a specific version at a specific date. It is not a warranty, and it does not certify that software is free of defects.