cloudrift-mcp

An MCP server that gives your AI assistant (Claude Code, Claude Desktop, Cursor, and any other MCP client) read-only access to your own CloudRift data: cloud-waste findings, optimization recommendations, cost summaries, budgets, and the verified-savings ledger. The thesis is simple: in the agent era, your cost data should be queryable by the assistants you already work in - "what are my ten most expensive orphaned resources?" or "how much has CloudRift actually saved us, and how is that number computed?" should be one question away, answered from your tenant's live findings and receipts rather than a stale export.

Read-only by construction. Every tool is a GET against the CloudRift public API, scoped to the tenant that owns the API key. No tool mutates anything, and no tool accepts a credential argument - the key comes from the environment only.

Quickstart

Requires Python 3.10+ and uv, or pip:

uvx cloudrift-mcp        # no install step
pip install cloudrift-mcp && cloudrift-mcp

Create an API key in CloudRift (Settings > API Keys) with read-only scopes, then export it as CLOUDRIFT_API_KEY.

Claude Code

claude mcp add cloudrift --env CLOUDRIFT_API_KEY=crk_live_... -- uvx cloudrift-mcp

Claude Desktop

Add to claude_desktop_config.json (Settings > Developer > Edit Config):

{
  "mcpServers": {
    "cloudrift": {
      "command": "uvx",
      "args": ["cloudrift-mcp"],
      "env": {
        "CLOUDRIFT_API_KEY": "crk_live_..."
      }
    }
  }
}

Environment variables

Tools

All tools are read-only GETs with a 30 second timeout. Lists are capped, and every capped result states the cap and the full totals, so a partial view is never silent.

Errors come back as one honest line - API_ERROR: CloudRift API returned 403 for GET /api/v1/costs/summary: This API key is missing the required scope: read:costs. - never a stack trace.

Security

• Use a read-only key. Grant only the read:* scopes (read:resources, read:recommendations, read:costs, read:budgets) when you mint the key. This server only ever issues GETs, so a broader key buys nothing and risks more.
• Env-only auth. The key is read from CLOUDRIFT_API_KEY and sent as Authorization: Bearer. No tool accepts a key as an argument (a test enforces that no credential-shaped field exists in any tool schema), and the key is never echoed into tool results or error messages.
• Tenant-scoped by the API. The CloudRift public API scopes every query to the key owner's account; this server adds no cross-tenant reach.
• Bounded requests. At most five pages of 200 items are fetched per tool call, and CloudRift rate-limits each key to 120 requests/minute.

License

MIT. See LICENSE.