# cloudcostwise MCP server

> Identifies AWS cost waste by running local, read-only scans across various services like EC2, S3, and Lambda.

- Repository: https://github.com/cloudwise-app/cloudcostwise
- Page: https://hostedmcp.org/servers/cloudwise-app/cloudcostwise
- Transport: stdio
- Stars: 1
- License: Apache-2.0
- Latest version: 0.1.23

## Install

### Claude Code

```sh
claude mcp add cloudcostwise -- uvx cloudcostwise
```

### Cursor (`~/.cursor/mcp.json`)

```json
{
  "mcpServers": {
    "cloudcostwise": {
      "command": "uvx",
      "args": [
        "cloudcostwise"
      ]
    }
  }
}
```

### VS Code (`.vscode/mcp.json`)

```json
{
  "servers": {
    "cloudcostwise": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "cloudcostwise"
      ]
    }
  }
}
```

### Claude Desktop (`claude_desktop_config.json`)

```json
{
  "mcpServers": {
    "cloudcostwise": {
      "command": "uvx",
      "args": [
        "cloudcostwise"
      ]
    }
  }
}
```

### Codex (`~/.codex/config.toml`)

```toml
[mcp_servers.cloudcostwise]
command = "uvx"
args = ["cloudcostwise"]
```

### Gemini CLI (`~/.gemini/settings.json`)

```json
{
  "mcpServers": {
    "cloudcostwise": {
      "command": "uvx",
      "args": [
        "cloudcostwise"
      ]
    }
  }
}
```

## Environment variables

| Name | Required | Secret | Description |
|---|---|---|---|
| `AWS_PROFILE` | no | no | AWS profile to scan with (read-only access is enough). Defaults to the standard credential chain. |

## Tools (31)

- `ami_orphaned_snapshot`
- `classic_lb_migration`
- `elasticache_data_tiering_opportunity`
- `elasticache_engine_migration`
- `elasticache_extended_support_cost`
- `empty_log_group`
- `idle_lightsail`
- `lambda_arm64_migration`
- `lambda_provisioned_concurrency_idle`
- `lightsail_idle_load_balancer`
- `lightsail_unattached_disk`
- `lightsail_unattached_static_ip`
- `low_traffic_alb`
- `multiple_eips_per_instance`
- `no_lifecycle_efs`
- `orphaned_ebs_snapshot`
- `previous_gen_sagemaker_instance`
- `s3_empty_bucket`
- `stopped_sagemaker_notebook_storage`
- `dynamodb_no_autoscaling`
- `elasticache_replication_waste`
- `excessive_retention_log_group`
- `idle_efs`
- `idle_load_balancer`
- `incomplete_multipart`
- `lambda_excessive_timeout`
- `no_retention_log_group`
- `old_ecr_images`
- `oversized_sagemaker_endpoint`
- `s3_rapid_growth`
- `untagged_ecr_images`

## FAQ

### Is it safe to use with my AWS credentials?

Yes, it uses read-only credentials and cannot change your account. Every AWS call is checked to ensure it is only a Describe, List, Get, Search, or Lookup action.

### Does the tool send my data to CloudWise?

No, it runs locally and only sends a summary if you explicitly opt in.

### Are there any costs associated with running a scan?

While the tool is free, running RI/Savings Plans checks calls AWS Cost Explorer, which incurs a small charge per request.