Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Cloudeval AI

NPM · @GANAKAILABS/CLOUDEVAL-CLI

Cloud evaluations and reviews for Azure and static AWS CloudFormation (beta). Requires an account.

+2 this week 91 Trust /100

Last scanned (19 hours ago)

Scores higher than 94% of npm servers

Category Cloud Infrastructure

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security98
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 69 of 280 dependencies flagged as unhealthy (6 deprecated). View diagnostics → Partial
Provenance & Transparency87
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to ganakailabs/cloudeval-cli). View diagnostics → Pass
  • License check failed: the license (LicenseRef-CloudEval-CLI) isn't a recognized OSI-approved license. See how to fix → Fail
  • Actively maintained (last published 55 days ago).Pass
  • Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability78
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 6918 tokens (~135/item across 51 items; 45 tools + 6 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage98
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 92% of tool parameters carry a description.Partial
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 45 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 47 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
  • Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 31 Oct 26 +3
    • CVE-2026-109461 no longer affects this package ▲ security
    • Known CVEs: fail → pass ▲ security
    • Stability: 0.97 → pass security
  • 30 Oct 26 0
    • Security disclosure: unverified → pass ▲ functional
    • Stability: pass → 0.97 functional
  • 29 Oct 26 −1
    • Security disclosure: pass → unverified ▼ functional
  • 24 Oct 26 −2
    • CVE-2026-109461 affects this package: high ▼ security
    • Known CVEs: pass → fail ▼ security
    • Stability: 0.97 → pass security
  • 23 Oct 26 0
    • Stability: pass → 0.97 functional
  • 17 Oct 26 0
    • Stability: 0.97 → pass security
  • 16 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

  • 13 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 4 Nov 2026 · Analysed npm/@ganakailabs/cloudeval-cli@0.38.5

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem npm
Reason Verified
Discovered via Registry attestation endpoint
Source repo ganakailabs/cloudeval-cli
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/ganakailabs/cloudeval-cli/.github/workflows/npm-publish.yml@refs/heads/main
Rekor log index 2772946990
Predicate type SLSA build provenance https://slsa.dev/provenance/v1
Subject digest sha512:0eaa5ebec0ffc82e02d423ecd9305a2b0d445d5f190a773e28f4099f38ec92ef82cd0c1910f1fd9854f0c80166cfbd2a0ad63956d5b376d098c51581b

Background: How many MCP packages publish verified provenance →

Dependencies 280 packages
Packages resolved 280
Deprecated 6
Stale 63
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 45 exposed · ~6,771 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
agent_profiles_get ~140

Fetch one Cloudeval Agent Profile by id.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
profileIdstringyesAgent Profile id, for example cost.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

agent_profiles_list ~139

List backend-owned Cloudeval Agent Profiles such as Architecture, Cost, Change Reviewer, Evidence Auditor, and Security Reviewer.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

auth_status ~122

Return local Cloudeval authentication status.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

billing_ledger ~415

Inspect individual Cloudeval usage attempts and credit charges for the authenticated account. Use billing_usage for aggregates or billing_invoices for payment receipts. Defaults to the last 30 calendar days; explicit timestamps override the corresponding range bounds. Returns data.items, data.has_more and data.next_cursor; reuse the cursor with the same filters to read the next page. Requires billing read access; does not initiate purchases or evaluations.

NameTypeReqDescription
actionTypestring–Exact action_type value from a ledger row. Omit to include all action types.
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
chargeStatusstring–Charge disposition filter: charged, not_charged or bypassed.
cursorstring–Opaque data.next_cursor from the previous response. Omit for the first page; retain the same filters while paging.
endAtstring–Exclusive ISO 8601 upper bound; overrides the range end.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
limitnumber–Page size; the MCP handler floors and clamps it to 1–100.
modelstring–Exact model_name or operation value from a ledger row. Omit to include all models.
outcomestring–Usage outcome filter, such as success, failure, blocked or skipped.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
rangestring–Calendar-day window ending now. Use all for no implicit date bounds.
startAtstring–Inclusive ISO 8601 lower bound, for example 2026-09-01T00:00:00Z; overrides the range start.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

billing_notifications ~132

Return Cloudeval billing notifications for the authenticated account.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
limitnumber––
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

billing_plans ~123

Return Cloudeval billing plan configuration.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

billing_summary ~128

Return Cloudeval billing entitlement, credit status, and subscription status.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

billing_topups ~125

Return available Cloudeval credit top-up packs.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

billing_usage ~196

Return Cloudeval billing usage summary with date, granularity, and model filters.

NameTypeReqDescription
actionTypestring––
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
chargeStatusstring––
endAtstring–End timestamp.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
granularitystring––
modelstring––
outcomestring––
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
rangestring––
startAtstring–Start timestamp.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

capabilities_get ~127

Return Cloudeval CLI and MCP capability metadata for agent planning.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

config_get ~135

Return one setting from the selected Cloudeval CLI profile.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
keystringyesConfig key.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

config_profiles ~123

Return Cloudeval CLI config profile names.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

config_show ~124

Return the selected Cloudeval CLI profile configuration.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

connections_get ~145

Fetch one Cloudeval connection by id from the authenticated account's connection list.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
connectionIdstringyesCloudeval connection id to fetch.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

connections_list ~127

List Cloudeval cloud/template connections visible to the authenticated account.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

credentials_inspect ~136

Inspect a Cloudeval access-key credential by id.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
credentialIdstringyesCredential id.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

credentials_list ~156

List Cloudeval access-key credentials, optionally scoped by project.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
projectIdstring–Cloudeval project id. Defaults to active profile defaultProjectId, then Playground/first project where supported.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

credentials_templates ~123

List Cloudeval access-key credential templates.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

doctor ~150

Return local Cloudeval CLI diagnostic checks.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
deepboolean–Check backend reachability as well as local setup.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
mcpboolean–Include MCP metadata checks.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

identity_get ~127

Return Cloudeval identity and capability metadata for the active credential.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

models_default_get ~126

Return the configured default model for the selected CLI profile.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

models_list ~129

List backend-supported Cloudeval models for the active account or access key.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

projects_get ~145

Fetch one Cloudeval project by id from the authenticated account's project list.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
projectIdstringyesCloudeval project id to fetch.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

projects_graph_diff ~176

Compare two retained project graph snapshots.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
fromSyncVersionstring–Baseline sync version.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
projectIdstring–Cloudeval project id. Defaults to active profile defaultProjectId, then Playground/first project where supported.
toSyncVersionstring–Target sync version.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

projects_graph_get ~183

Fetch project graph nodes and relationships for automation.

NameTypeReqDescription
asOfstring–Optional replay timestamp.
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
includeDiffboolean––
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
projectIdstring–Cloudeval project id. Defaults to active profile defaultProjectId, then Playground/first project where supported.
syncVersionstring–Optional sync version.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

projects_graph_insights ~201

Fetch graph intelligence for overview, impact, critical paths, security, cost, or changes.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
focusstring––
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
limitnumber––
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
projectIdstring–Cloudeval project id. Defaults to active profile defaultProjectId, then Playground/first project where supported.
resourceIdstring–Resource id for impact analysis.
syncVersionstring–Optional sync version.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

projects_graph_sync_runs ~162

List recent graph-producing sync runs for a project.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
limitnumber––
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
projectIdstring–Cloudeval project id. Defaults to active profile defaultProjectId, then Playground/first project where supported.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

projects_graph_timeline ~160

List retained graph snapshots for a project.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
limitnumber––
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
projectIdstring–Cloudeval project id. Defaults to active profile defaultProjectId, then Playground/first project where supported.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

projects_list ~125

List Cloudeval projects visible to the authenticated account.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

projects_overview ~165

Fetch a Cloudeval project cockpit overview with graph, report, connection, credit, and deep-link metadata for IDE and agent workflows.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
projectIdstring–Cloudeval project id to inspect. Defaults to the configured project when omitted.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

recipes_get ~136

Fetch one Cloudeval recipe by id.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
recipeIdstringyesCloudeval recipe id.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

recipes_list ~125

List Cloudeval reusable recipes and their safety metadata.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

reports_cost ~178

Fetch the latest normalized Cloudeval cost report for a project.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
periodstring––
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
projectIdstring–Cloudeval project id. Defaults to active profile defaultProjectId, then Playground/first project where supported.
viewstring–Cost view hint such as overview or raw.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

reports_list ~165

List cost and Well-Architected reports for a project.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
kindstring–Report kind filter.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
projectIdstring–Cloudeval project id. Defaults to active profile defaultProjectId, then Playground/first project where supported.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

reports_rules ~168

Return WAF rule findings from the latest Cloudeval WAF report.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
projectIdstring–Cloudeval project id. Defaults to active profile defaultProjectId, then Playground/first project where supported.
severitystring–Optional severity filter.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

reports_show ~175

Fetch one Cloudeval report by id for a project.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
projectIdstring–Cloudeval project id. Defaults to active profile defaultProjectId, then Playground/first project where supported.
reportIdstringyesCloudeval report id.
viewstring––
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

reports_waf ~197

Fetch the latest normalized Well-Architected report for a project.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
projectIdstring–Cloudeval project id. Defaults to active profile defaultProjectId, then Playground/first project where supported.
reportIdstring–Optional report id.
severitystring–Optional severity filter.
viewstring–WAF view hint such as overview, rules, or raw.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

rules_categories ~120

List cloud validation check categories.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

rules_get ~133

Show one cloud validation check by id.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
ruleIdstringyesValidation check id.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

rules_search ~147

Search cloud validation checks.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
categorystring–Category filter.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
pillarstring–Architecture pillar filter.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
querystringyesSearch query.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

sessions_export ~127

Return local Cloudeval CLI session history for the selected profile.

NameTypeReqDescription
baseUrlstring–Cloudeval API base URL. Defaults to the MCP server --base-url, active profile, CLOUDEVAL_BASE_URL, or the public API.
frontendUrlstring–Cloudeval frontend base URL for generated links. Defaults to --frontend-url, active profile, CLOUDEVAL_FRONTEND_URL, or public frontend.
profilestring–Cloudeval CLI config profile to read defaults from. Defaults to the server --profile or CLOUDEVAL_PROFILE.
NameTypeReqDescription
commandstringyes–
data–yesTool-specific result payload.
filesWrittenarray––
frontendUrlstring––
okbooleanyes–
traceIdstring––

No examples provided.

Install

How do I install the Cloudeval AI MCP server?

Cloudeval AI runs locally as an npm package, launched with npx -y @ganakailabs/cloudeval-cli. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · @ganakailabs/cloudeval-cli

# add to Claude Code
claude mcp add ganakailabs-cloudeval -- npx -y @ganakailabs/cloudeval-cli
Common questions

What is the Cloudeval AI MCP server?

Cloudeval AI is an MCP server listed in the public MCP registry as io.github.ganakailabs/cloudeval. Cloud evaluations and reviews for Azure and static AWS CloudFormation (beta). Requires an account. This page covers its npm package (@ganakailabs/cloudeval-cli).

Is the Cloudeval AI MCP server safe to use?

Cloudeval AI scores 91 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 4 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Cloudeval AI MCP server expose?

Cloudeval AI exposes 45 tools: capabilities_get, agent_profiles_list, agent_profiles_get, projects_list, projects_get, and 40 more. Their descriptions and schemas cost roughly 6,771 tokens of context every time the server is loaded.

Is the Cloudeval AI MCP server still maintained?

Cloudeval AI is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the Cloudeval AI MCP server under?

Cloudeval AI declares the LicenseRef-CloudEval-CLI licence, which is not on the OSI-approved list. Read the terms before using it at work, and note this covers the source only, not the cost of any service it calls.