aws-finops-mcp-server

What is AWS FinOps MCP Server?

An MCP (Model Context Protocol) server that brings AWS FinOps capabilities into your AI assistant. It analyzes cloud costs, audits for waste, and provides budget insights using natural language, while keeping your credentials secure on your local machine.

How to use AWS FinOps MCP Server?

Install via pipx install aws-finops-mcp-server (or using uv). Configure one or more AWS CLI profiles. Then add the server to your MCP client’s configuration file (e.g., Claude for Desktop’s claude_desktop_config.json). After restarting the client, ask questions about your AWS finances in plain English.

Key features of AWS FinOps MCP Server

• Detailed cost analysis with tags, time ranges, and service groupings.
• Automated FinOps audit for stopped EC2, unattached EBS, and unassociated Elastic IPs.
• Budget monitoring to check status and forecast.
• Multi‑profile and multi‑region queries in a single command.
• Secure by design – AWS credentials never leave your machine.

Use cases of AWS FinOps MCP Server

• “Show me my AWS costs for the default profile this month.”
• “Compare costs for staging and production profiles over the last 30 days.”
• “Run a FinOps audit on my default profile in us‑east‑1.”
• “Generate a comprehensive FinOps report for all profiles in ap‑south‑1.”
• “Check for unused resources in multiple regions across several profiles.”

FAQ from AWS FinOps MCP Server

What are the prerequisites for using AWS FinOps MCP Server?

You need Python 3.10+, the AWS CLI installed and configured, at least one AWS profile with read‑only IAM permissions, and an MCP‑compatible client (e.g., Claude Desktop).

How much does it cost to use this server?

Each get_cost call makes 2 calls to the AWS Cost Explorer API, costing $0.01. The run_finops_audit tool uses other AWS APIs (EC2, Budgets) that are generally in the free tier or have negligible cost.

Which MCP clients are supported?

Claude Desktop and Amazon Q CLI are explicitly supported. Any MCP‑compatible client that supports tools can also be used.

What AWS permissions are required?

The IAM policy must allow the following read‑only actions: ce:GetCostAndUsage, budgets:ViewBudget, ec2:DescribeInstances, ec2:DescribeVolumes, ec2:DescribeAddresses, and sts:GetCallerIdentity.

How are my AWS credentials handled?

The server runs locally and uses your existing AWS CLI configuration. Credentials never leave your machine; API calls are made directly from your local environment to AWS.