Cloudeval AI
NPM · @GANAKAILABS/CLOUDEVAL-CLI · SCANNED SEP 20
Cloud evaluations and reviews for Azure and static AWS CloudFormation (beta). Requires an account.
Available components
+6 this week
83 83 Trust /100
Trust breakdown (7 categories)
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security99
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 65 of 264 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency87
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to ganakailabs/cloudeval-cli). View diagnostics → Pass
- License check failed: the license (LicenseRef-CloudEval-CLI) isn't a recognized OSI-approved license. See how to fix → Fail
- Actively maintained (last published 10 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability78
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 6918 tokens (~135/item across 51 items; 45 tools + 6 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management37
- Stability observed for 11 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage98
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 92% of tool parameters carry a description.Partial
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 45 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 47 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
- Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
Install
How do I install the Cloudeval AI MCP server?
Cloudeval AI runs locally as an npm package, launched with npx -y @ganakailabs/cloudeval-cli. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @ganakailabs/cloudeval-cli
# add to Claude Code
claude mcp add ganakailabs-cloudeval -- npx -y @ganakailabs/cloudeval-cli
// .cursor/mcp.json
{
"mcpServers": {
"ganakailabs-cloudeval": {
"command": "npx",
"args": [
"-y",
"@ganakailabs/cloudeval-cli"
]
}
}
} // .vscode/mcp.json
{
"servers": {
"ganakailabs-cloudeval": {
"command": "npx",
"args": [
"-y",
"@ganakailabs/cloudeval-cli"
]
}
}
} # add to Codex CLI
codex mcp add ganakailabs-cloudeval -- npx -y @ganakailabs/cloudeval-cli
// opencode.json
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"ganakailabs-cloudeval": {
"type": "local",
"command": [
"npx",
"-y",
"@ganakailabs/cloudeval-cli"
],
"enabled": true
}
}
} # add to OpenClaw
openclaw mcp add ganakailabs-cloudeval --command npx --arg -y --arg @ganakailabs/cloudeval-cli
# ~/.hermes/config.yaml
mcp_servers:
ganakailabs-cloudeval:
command: "npx"
args: ["-y", "@ganakailabs/cloudeval-cli"] // ~/.netclaw/config/netclaw.json
{
"McpServers": {
"ganakailabs-cloudeval": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"@ganakailabs/cloudeval-cli"
]
}
}
} # add to Vellum
assistant mcp add ganakailabs-cloudeval -t stdio -c npx -a -y @ganakailabs/cloudeval-cli
// mcp.json
{
"mcpServers": {
"ganakailabs-cloudeval": {
"command": "npx",
"args": [
"-y",
"@ganakailabs/cloudeval-cli"
]
}
}
} Changelog
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.
- 18 Sept 26 +5
- Stability: unverified → 0.30 ▲ functional
- 9 Sept 26 77
First indexed and scored.
Diagnostics
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed npm/@ganakailabs/cloudeval-cli@0.38.5
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | npm |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | ganakailabs/cloudeval-cli |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/ganakailabs/cloudeval-cli/.github/workflows/npm-publish.yml@refs/heads/main |
| Rekor log index | 2772946990 |
| Predicate type | https://slsa.dev/provenance/v1 |
| Subject digest | sha512:0eaa5ebec0ffc82e02d423ecd9305a2b0d445d5f190a773e28f4099f38ec92ef82cd0c1910f1fd9854f0c80166cfbd2a0ad63956d5b376d098c51581b |
Background: How many MCP packages publish verified provenance →
Dependencies 264 packages
| Packages resolved | 264 |
|---|---|
| Stale | 65 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
MCP tools
· 45 exposed
· ~6,771 tokens
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
Tool
Tokens
agent_profiles_get Get Agent Profile ~140
Fetch one Cloudeval Agent Profile by id.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| profileId | string | yes | Agent Profile id, for example cost. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
agent_profiles_list List Agent Profiles ~139
List backend-owned Cloudeval Agent Profiles such as Architecture, Cost, Change Reviewer, Evidence Auditor, and Security Reviewer.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
auth_status Auth Status ~122
Return local Cloudeval authentication status.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
billing_ledger Billing Ledger ~415
Inspect individual Cloudeval usage attempts and credit charges for the authenticated account. Use billing_usage for aggregates or billing_invoices for payment receipts. Defaults to the last 30 calendar days; explicit timestamps override the corresponding range bounds. Returns data.items, data.has_more and data.next_cursor; reuse the cursor with the same filters to read the next page. Requires billing read access; does not initiate purchases or evaluations.
| Name | Type | Req | Description |
|---|---|---|---|
| actionType | string | – | Exact action_type value from a ledger row. Omit to include all action types. |
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| chargeStatus | string | – | Charge disposition filter: charged, not_charged or bypassed. |
| cursor | string | – | Opaque data.next_cursor from the previous response. Omit for the first page; retain the same filters while paging. |
| endAt | string | – | Exclusive ISO 8601 upper bound; overrides the range end. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| limit | number | – | Page size; the MCP handler floors and clamps it to 1–100. |
| model | string | – | Exact model_name or operation value from a ledger row. Omit to include all models. |
| outcome | string | – | Usage outcome filter, such as success, failure, blocked or skipped. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| range | string | – | Calendar-day window ending now. Use all for no implicit date bounds. |
| startAt | string | – | Inclusive ISO 8601 lower bound, for example 2026-09-01T00:00:00Z; overrides the range start. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
billing_notifications Billing Notifications ~132
Return Cloudeval billing notifications for the authenticated account.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| limit | number | – | – |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
billing_plans Billing Plans ~123
Return Cloudeval billing plan configuration.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
billing_summary Billing Summary ~128
Return Cloudeval billing entitlement, credit status, and subscription status.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
billing_topups Billing Top-ups ~125
Return available Cloudeval credit top-up packs.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
billing_usage Billing Usage ~196
Return Cloudeval billing usage summary with date, granularity, and model filters.
| Name | Type | Req | Description |
|---|---|---|---|
| actionType | string | – | – |
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| chargeStatus | string | – | – |
| endAt | string | – | End timestamp. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| granularity | string | – | – |
| model | string | – | – |
| outcome | string | – | – |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| range | string | – | – |
| startAt | string | – | Start timestamp. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
capabilities_get Get Cloudeval Capabilities ~127
Return Cloudeval CLI and MCP capability metadata for agent planning.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
config_get Get Config Value ~135
Return one setting from the selected Cloudeval CLI profile.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| key | string | yes | Config key. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
config_profiles List Config Profiles ~123
Return Cloudeval CLI config profile names.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
config_show Show Config ~124
Return the selected Cloudeval CLI profile configuration.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
connections_get Get Connection ~145
Fetch one Cloudeval connection by id from the authenticated account's connection list.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| connectionId | string | yes | Cloudeval connection id to fetch. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
connections_list List Connections ~127
List Cloudeval cloud/template connections visible to the authenticated account.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
credentials_inspect Inspect Credential ~136
Inspect a Cloudeval access-key credential by id.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| credentialId | string | yes | Credential id. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
credentials_list List Credentials ~156
List Cloudeval access-key credentials, optionally scoped by project.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| projectId | string | – | Cloudeval project id. Defaults to active profile defaultProjectId, then Playground/first project where supported. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
credentials_templates Credential Templates ~123
List Cloudeval access-key credential templates.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
doctor CLI Doctor ~150
Return local Cloudeval CLI diagnostic checks.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| deep | boolean | – | Check backend reachability as well as local setup. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| mcp | boolean | – | Include MCP metadata checks. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
identity_get Get Identity ~127
Return Cloudeval identity and capability metadata for the active credential.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
models_default_get Get Default Model ~126
Return the configured default model for the selected CLI profile.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
models_list List Models ~129
List backend-supported Cloudeval models for the active account or access key.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
projects_get Get Project ~145
Fetch one Cloudeval project by id from the authenticated account's project list.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| projectId | string | yes | Cloudeval project id to fetch. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
projects_graph_diff Project Graph Diff ~176
Compare two retained project graph snapshots.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| fromSyncVersion | string | – | Baseline sync version. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| projectId | string | – | Cloudeval project id. Defaults to active profile defaultProjectId, then Playground/first project where supported. |
| toSyncVersion | string | – | Target sync version. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
projects_graph_get Get Project Graph ~183
Fetch project graph nodes and relationships for automation.
| Name | Type | Req | Description |
|---|---|---|---|
| asOf | string | – | Optional replay timestamp. |
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| includeDiff | boolean | – | – |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| projectId | string | – | Cloudeval project id. Defaults to active profile defaultProjectId, then Playground/first project where supported. |
| syncVersion | string | – | Optional sync version. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
projects_graph_insights Project Graph Insights ~201
Fetch graph intelligence for overview, impact, critical paths, security, cost, or changes.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| focus | string | – | – |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| limit | number | – | – |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| projectId | string | – | Cloudeval project id. Defaults to active profile defaultProjectId, then Playground/first project where supported. |
| resourceId | string | – | Resource id for impact analysis. |
| syncVersion | string | – | Optional sync version. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
projects_graph_sync_runs Project Graph Sync Runs ~162
List recent graph-producing sync runs for a project.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| limit | number | – | – |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| projectId | string | – | Cloudeval project id. Defaults to active profile defaultProjectId, then Playground/first project where supported. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
projects_graph_timeline Project Graph Timeline ~160
List retained graph snapshots for a project.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| limit | number | – | – |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| projectId | string | – | Cloudeval project id. Defaults to active profile defaultProjectId, then Playground/first project where supported. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
projects_list List Projects ~125
List Cloudeval projects visible to the authenticated account.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
projects_overview Get Project Overview ~165
Fetch a Cloudeval project cockpit overview with graph, report, connection, credit, and deep-link metadata for IDE and agent workflows.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| projectId | string | – | Cloudeval project id to inspect. Defaults to the configured project when omitted. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
recipes_get Get Recipe ~136
Fetch one Cloudeval recipe by id.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| recipeId | string | yes | Cloudeval recipe id. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
recipes_list List Recipes ~125
List Cloudeval reusable recipes and their safety metadata.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
reports_cost Latest Cost Report ~178
Fetch the latest normalized Cloudeval cost report for a project.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| period | string | – | – |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| projectId | string | – | Cloudeval project id. Defaults to active profile defaultProjectId, then Playground/first project where supported. |
| view | string | – | Cost view hint such as overview or raw. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
reports_list List Reports ~165
List cost and Well-Architected reports for a project.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| kind | string | – | Report kind filter. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| projectId | string | – | Cloudeval project id. Defaults to active profile defaultProjectId, then Playground/first project where supported. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
reports_rules WAF Rules ~168
Return WAF rule findings from the latest Cloudeval WAF report.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| projectId | string | – | Cloudeval project id. Defaults to active profile defaultProjectId, then Playground/first project where supported. |
| severity | string | – | Optional severity filter. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
reports_show Show Report ~175
Fetch one Cloudeval report by id for a project.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| projectId | string | – | Cloudeval project id. Defaults to active profile defaultProjectId, then Playground/first project where supported. |
| reportId | string | yes | Cloudeval report id. |
| view | string | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
reports_waf Latest WAF Report ~197
Fetch the latest normalized Well-Architected report for a project.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| projectId | string | – | Cloudeval project id. Defaults to active profile defaultProjectId, then Playground/first project where supported. |
| reportId | string | – | Optional report id. |
| severity | string | – | Optional severity filter. |
| view | string | – | WAF view hint such as overview, rules, or raw. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
rules_categories Rule Categories ~120
List cloud validation check categories.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
rules_get Get Rule ~133
Show one cloud validation check by id.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| ruleId | string | yes | Validation check id. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
rules_search Search Rules ~147
Search cloud validation checks.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| category | string | – | Category filter. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| pillar | string | – | Architecture pillar filter. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| query | string | yes | Search query. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
sessions_export Export Sessions ~127
Return local Cloudeval CLI session history for the selected profile.
| Name | Type | Req | Description |
|---|---|---|---|
| baseUrl | string | – | Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API. |
| frontendUrl | string | – | Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend. |
| profile | string | – | Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE. |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | – |
| data | – | yes | Tool-specific result payload. |
| filesWritten | array | – | – |
| frontendUrl | string | – | – |
| ok | boolean | yes | – |
| traceId | string | – | – |
No examples provided.
Common questions
What is the Cloudeval AI MCP server?
Cloudeval AI is an MCP server listed in the public MCP registry as io.github.ganakailabs/cloudeval. Cloud evaluations and reviews for Azure and static AWS CloudFormation (beta). Requires an account. This page covers its npm package (@ganakailabs/cloudeval-cli).
Is the Cloudeval AI MCP server safe to use?
Cloudeval AI scores 83 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Cloudeval AI MCP server expose?
Cloudeval AI exposes 45 tools: capabilities_get, agent_profiles_list, agent_profiles_get, projects_list, projects_get, and 40 more. Their descriptions and schemas cost roughly 6,771 tokens of context every time the server is loaded.
Is the Cloudeval AI MCP server still maintained?
Cloudeval AI is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the Cloudeval AI MCP server under?
Cloudeval AI declares the LicenseRef-CloudEval-CLI licence, which is not on the OSI-approved list. Read the terms before using it at work, and note this covers the source only, not the cost of any service it calls.