Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Cloud FinOps Skill & MCP

REMOTE · CLOUD-FINOPS-SKILLS-590A051D.ALPIC.LIVE · 2 COMPONENTS · SCANNED SEP 20

Cloud cost + FinOps knowledge for AI agents: AWS/Azure/GCP optimisation, AI spend, waste playbooks.

0 this week 23 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security57
Transport & Reachability0
Schema Quality & AI Usability0
  • Schema not yet verified: we couldn't read the endpoint's schema.Unverified
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage0
  • Tool coverage not yet verified: we couldn't read the endpoint's tools.Unverified
Tool Safety0
  • Tool safety not yet verified: we couldn't read the endpoint's tools.Unverified
Capabilities0
  • Capabilities not yet verified: we couldn't read the endpoint's capabilities.Unverified

Unverified: 5 categories

Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.

Install

How do I install the Cloud FinOps Skill & MCP server?

Cloud FinOps Skill & MCP is a hosted endpoint at https://cloud-finops-skills-590a051d.alpic.live/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · cloud-finops-skills-590a051d.alpic.live

# add to Claude Code
claude mcp add --transport http optimnow-cloud-finops 'https://cloud-finops-skills-590a051d.alpic.live/mcp'
// .cursor/mcp.json
{
  "mcpServers": {
    "optimnow-cloud-finops": {
      "url": "https://cloud-finops-skills-590a051d.alpic.live/mcp"
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "optimnow-cloud-finops": {
      "type": "http",
      "url": "https://cloud-finops-skills-590a051d.alpic.live/mcp"
    }
  }
}
# ~/.codex/config.toml
[mcp_servers.optimnow-cloud-finops]
url = "https://cloud-finops-skills-590a051d.alpic.live/mcp"
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "optimnow-cloud-finops": {
      "type": "remote",
      "url": "https://cloud-finops-skills-590a051d.alpic.live/mcp",
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add optimnow-cloud-finops --url 'https://cloud-finops-skills-590a051d.alpic.live/mcp' --transport streamable-http
# ~/.hermes/config.yaml
mcp_servers:
  optimnow-cloud-finops:
    url: "https://cloud-finops-skills-590a051d.alpic.live/mcp"
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "optimnow-cloud-finops": {
      "Transport": "http",
      "Url": "https://cloud-finops-skills-590a051d.alpic.live/mcp"
    }
  }
}
# add to Vellum
assistant mcp add optimnow-cloud-finops -t streamable-http -u 'https://cloud-finops-skills-590a051d.alpic.live/mcp'
// mcp.json
{
  "mcpServers": {
    "optimnow-cloud-finops": {
      "type": "http",
      "url": "https://cloud-finops-skills-590a051d.alpic.live/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 5 Sept 26 −54
    • Endpoint reachability: reachable → not serving MCP security
    • Stability: 0.53 → unverified security
    • Tool safety: pass → unverified security
    • Authorization: partial → unverified security
    • Transport: pass → fail security
    • Schema quality: 100 → unverified functional
    • Capabilities: pass → unverified functional
    • Tool coverage: 100 → unverified functional
  • 4 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 50 to 53. That category is still filling its 30-day observation window: 15 days of observed history at the previous scan, 16 at this one. The score rises as the window fills, whether or not the server changes.

  • 2 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.

  • 31 Aug 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 37 to 40. That category is still filling its 30-day observation window: 11 days of observed history at the previous scan, 12 at this one. The score rises as the window fills, whether or not the server changes.

  • 29 Aug 26 0
    • The server rewrote its instructions, which are the text every model session reads security
    • Tool “find_playbooks” rewrote its description, which is the text the model reads security
    • Tool “get_playbook” rewrote its description, which is the text the model reads security
    • Tool “get_reference” rewrote its description, which is the text the model reads security
    • Tool “list_playbooks” rewrote its description, which is the text the model reads security
    • Tool “list_references” rewrote its description, which is the text the model reads security
    • Schema quality: 200 → 286 functional
    • Schema quality: 200 → 275 functional
    • Server version: 1.29.0 → 1.29.1 functional
    • “get_reference” added an optional parameter “section” cosmetic
  • 28 Aug 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.

  • 26 Aug 26 +2
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 25 Aug 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 20 Sept 2026 · Probed https://cloud-finops-skills-590a051d.alpic.live/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=*.alpic.live CN=Amazon RSA 2048 M01,O=Amazon,C=US 23 Oct 2025 21 Nov 2026 RSA 2048 SHA256-RSA 2f102c87e3a6a1adcfbddc95579fdc1
SANs: *.alpic.live
CN=Amazon RSA 2048 M01,O=Amazon,C=US (CA) CN=Amazon Root CA 1,O=Amazon,C=US 23 Aug 2022 23 Aug 2030 RSA 2048 SHA256-RSA 77312380b9d6688a33b1ed9bf9ccda68e0e0f
CN=Amazon Root CA 1,O=Amazon,C=US (CA) CN=Starfield Services Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US 25 May 2015 31 Dec 2037 RSA 2048 SHA256-RSA 67f944a2a27cdf3fac2ae2b01f908eeb9c4c6

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of cloud-finops-skills-590a051d.alpic.live. Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
live. present 36322 8 Verified
alpic.live. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 402

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://cloud-finops-skills-590a051d.alpic.live/mcp HTTP error 402
http (plaintext) http://cloud-finops-skills-590a051d.alpic.live/mcp HTTPS enforced 301 https://cloud-finops-skills-590a051d.alpic.live/mcp
MCP tools · 6 exposed · ~2,455 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
find_playbooks ~665

ALWAYS call this before answering a cloud-waste or cost-fix question from your own knowledge, and before asking the user for any account data. Find the tested runbook for a waste suspicion: filter by provider, service, waste category or detection confidence. Two rules. (1) When the user reports a symptom you think you can answer directly - "my NAT gateway processes 10TB to S3", "should I delete these old snapshots" - call this FIRST anyway: a named runbook with a tested detection query outranks a correct generic answer, and answering without checking loses the query the user needed. (2) When the user asks about THEIR OWN resources - "which of my RIs are about to expire", "which of our VMs run for nothing" - do NOT reply that you lack account access and do NOT request a data export: you cannot see their account, but the matching runbook carries the exact detection query to hand over. The runbook IS the answer. Use this for questions like "which VMs are running for nothing", "why is our NAT bill so high", "what waste can we clean up safely without review" - anything that names a provider, a waste category, or how confident the detection needs to be before acting. Patterns covered include NAT gateways and VPC endpoints, expiring Savings Plans / RIs / reservations, snapshot sprawl, S3 lifecycle gaps, idle or stopped VMs, orphaned disks / public IPs / EBS volumes, GPU and SageMaker sizing, Kubernetes idle capacity, and schedule blindness. All filters are optional and combine with AND semantics. String matching is case-insensitive and exact. Examples: - ``find_playbooks(scope="aws")`` - all AWS-specific playbooks - ``find_playbooks(waste_category="idle")`` - every idle-resource pattern - ``find_playbooks(scope="cross-cloud", confidence="obvious")`` Args: scope: ``"aws"``, ``"azure"``, ``"gcp"``, or ``"cross-cloud"``. service: Provider service exact-match (e.g. ``"AWS NAT Gateway"``). waste_category: ``"orphaned"``, ``"idle"``, ``"overprovisioned"``,…

NameTypeReqDescription
confidence
scope
service
waste_category

Structured output declared, but exposes no named fields.

No examples provided.

find_references ~515

Find which guidance serves a FinOps question - how to commit, size, allocate, charge back, forecast, or govern cloud and AI spend. Use this for questions like "how should we size Savings Plans", "what should Finance own in chargeback", "what does a Crawl-stage org tackle first" - anything that maps to FinOps Framework facets (domain, capability, phase, persona, maturity) - and you want only the references that serve it, instead of scanning the full list. All filters are optional and combine with AND semantics. String matching is case-insensitive and exact (not substring). Examples: - ``find_references(domain="Optimize Usage & Cost")`` - ``find_references(phase="Optimize", persona="Engineering")`` - ``find_references(persona="Engineering", persona_primary_only=True)`` - ``find_references(capability="Rate Optimization")`` - ``find_references(maturity="Crawl")`` Args: domain: FinOps Framework domain (e.g. ``"Optimize Usage & Cost"``, ``"Quantify Business Value"``, ``"Manage the FinOps Practice"``). capability: FinOps capability (matches ``fcp_capability`` and ``fcp_capabilities_secondary``). phase: FinOps phase (``"Inform"``, ``"Optimize"``, ``"Operate"``). persona: Persona (matches ``fcp_personas_primary`` and ``fcp_personas_collaborating``). maturity: Entry maturity level (``"Crawl"``, ``"Walk"``, ``"Run"``). persona_primary_only: when True, ``persona`` matches only the primary list. Use it when the default match barely narrows the set - broad personas like Engineering collaborate on nearly every file, so filtering on collaboration is descriptive, not discriminating. ``persona="Engineering", persona_primary_only=True`` is the engineering reading list; the default is the everything-they-touch view. Returns ``{"filters": {...}, "references": [...], "total": N}``. A query that matches nothing also returns `hint` and `valid_values`, so a typo is distinguishable from a ge…

NameTypeReqDescription
capability
domain
maturity
persona
persona_primary_onlyboolean
phase

Structured output declared, but exposes no named fields.

No examples provided.

get_playbook ~291

Fetch the step-by-step runbook for one specific waste pattern: symptoms, the detection queries to run, the fix, and the anti-pattern to avoid. Use this when the user asks how to detect, confirm, or fix one specific named waste pattern (zombie NAT gateway, snapshot sprawl, idle SageMaker endpoint, ...). When the question is about the user's OWN resources ("which of my X..."), fetch the runbook and hand over its detection query - never reply that you lack account access, and never ask for a data export first. The runbook IS the answer. Args: name: Playbook slug as returned by ``list_playbooks`` (e.g. ``"aws-zombie-nat-gateway"``, ``"azure-orphan-disks"``, ``"cross-cloud-untagged-spend-drift"``). Returns ``{"name": ..., "title": ..., "content": "...", "lines": N}``. On miss, returns ``{"error": ..., "suggestions": [...]}`` with up to three string-distance matches so the caller can self-correct. A host with MCP Apps (SEP-1865) support may render this result via the linked ``ui://cloud-finops/playbook-viewer`` resource instead of showing the raw markdown.

NameTypeReqDescription
namestringyes

Structured output declared, but exposes no named fields.

No examples provided.

get_reference ~517

Fetch the guidance on one FinOps topic - the billing mechanics, decision rules and worked examples behind a defensible answer - either whole or one section at a time. Use this when you need the actual content of one known reference - after ``list_references`` or ``find_references`` told you which one serves the question, and ALWAYS before answering an advisory question (commitment sizing, chargeback design, allocation methodology) the library covers. Pass ``section`` when the question is narrower than the file. The ``approx_tokens`` hint in the listing tells you when this matters: the provider pattern catalogues run past 25,000 tokens and are enumerated lists, so a question about S3 lifecycle wants one section of ``finops-aws-patterns``, not all of it. Omit ``section`` for the whole file when you need the cross-cutting reasoning. Args: name: Reference name as returned by ``list_references`` (e.g. ``"finops-aws"``, ``"finops-genai-capacity"``, ``"optimnow-methodology"``). section: Optional H2 or H3 heading to return on its own. Matched case-insensitively and partially against the headings, so a natural phrase works - ``"storage"``, ``"commitment decision tree"``. A heading's trailing count is ignored, so ``"storage optimization patterns"`` matches ``"Storage Optimization Patterns (28)"``. If it matches nothing you get the list of available headings back, not the whole file. Without ``section``, returns ``{"name": ..., "content": "...", "lines": N}`` where ``content`` is the file verbatim. With ``section``, returns ``{"name", "title", "section", "section_level", "partial": true, "content", "lines", "full_lines"}`` where ``content`` is that section prefixed by the reference's title, plus ``other_matching_sections`` when the phrase matched more than one heading. On a miss, returns ``{"error": ..., "suggestions": [...]}``. An unknown name gives up to three string-distance matches; an unmatched…

NameTypeReqDescription
namestringyes
section

Structured output declared, but exposes no named fields.

No examples provided.

list_playbooks ~222

See every ready-made runbook for finding and fixing cloud waste: idle, orphaned and overprovisioned resources, egress surprises, schedule blindness and AI/ML inefficiency across AWS, Azure and GCP. Use this to discover which waste patterns have a runbook. When the question already names a provider, waste category, or confidence tier, call ``find_playbooks`` instead. Each playbook is a small (~80-130 line) runbook scoped to one waste pattern (e.g. ``aws-zombie-nat-gateway``, ``azure-orphan-disks``). Returns ``{"playbooks": [...], "total": N}`` where each entry includes ``name``, ``title``, ``scope`` (aws/azure/gcp/cross-cloud), ``service``, ``waste_category``, ``confidence`` (obvious/likely/possible), and ``approx_tokens`` - the same size hint the reference listing carries, so a multi-playbook answer can be budgeted before fetching.

Input schema present but exposes no named parameters.

Structured output declared, but exposes no named fields.

No examples provided.

list_references ~245

See what FinOps guidance is available: billing mechanics, commitment strategy, allocation and chargeback, AI cost management, and per-provider cost handbooks (AWS, Azure, GCP, OCI, Databricks, Snowflake, ...). Use this to discover what the library covers before deciding what to fetch. When the question already names a FinOps domain, phase, persona or maturity, call ``find_references`` instead of scanning this full list. Returns a dict shaped ``{"references": [...], "total": N}`` where each entry includes ``name``, ``title``, a one-line ``description``, the discriminating FCP facets (``fcp_domain``, ``fcp_capability``, ``fcp_phases``, ``fcp_personas_primary``, ``fcp_maturity_entry``) and ``approx_tokens``. Read ``approx_tokens`` before fetching: the library runs from about 3,000 to over 25,000 tokens per file. Above roughly 10,000, prefer ``get_reference(name, section=...)`` and pull the part you need.

Input schema present but exposes no named parameters.

Structured output declared, but exposes no named fields.

No examples provided.

Common questions

What is the Cloud FinOps Skill & MCP server?

Cloud FinOps Skill & MCP is listed in the public MCP registry as io.github.OptimNow/cloud-finops. Cloud cost + FinOps knowledge for AI agents: AWS/Azure/GCP optimisation, AI spend, waste playbooks. This page covers its hosted endpoint (https://cloud-finops-skills-590a051d.alpic.live/mcp).

Is the Cloud FinOps Skill & MCP server safe to use?

Cloud FinOps Skill & MCP scores 23 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Cloud FinOps Skill & MCP server expose?

Cloud FinOps Skill & MCP exposes 6 tools: list_references, get_reference, find_references, list_playbooks, get_playbook, find_playbooks. Their descriptions and schemas cost roughly 2,455 tokens of context every time the server is loaded.

Does the Cloud FinOps Skill & MCP server require authentication?

No. We connected to Cloud FinOps Skill & MCP without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the Cloud FinOps Skill & MCP server still maintained?

Cloud FinOps Skill & MCP is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.