Cloudwright MCP server

by xmpuspus·io.github.xmpuspus/cloudwright·v1.10.0·33 stars

No reviews yet

Cloud architecture and migration planning with costs, controls, evidence, and deployable IaC.

A88/100grade A

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

A88/100

full report

Adoption

Growing

33 stars79 downloads/wk

Reviews

Write one

Nobody has reviewed Cloudwright yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Cloudwright tools (24, 4 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

analyze_blast_radius
Analyze blast radius and dependency structure of an architecture.
catalog_search
Search the cloud instance catalog by provider, specs, or text query.
chat_create_sessionwrite action
Create a new stateful architecture-design conversation session.
chat_delete_sessionwrite action
Delete a conversation session.
chat_list_sessions
List all saved conversation sessions.
chat_sendwrite action
Send a message to an existing conversation session and get a response.
compare_provider_costs
Compare the monthly **cost totals** of an architecture across cloud providers.
compare_providers
Compare an architecture's **service mapping** across cloud providers.
design_architecture
diff_architectures
Diff two architecture specs and return a structured change report.
estimate_cost
Estimate the monthly cloud bill for an architecture spec.
export_architecture
Export an architecture spec to Terraform, CloudFormation, Mermaid, D2, or other formats.
lint_architecture
Lint an architecture for anti-patterns and best-practice violations.
list_services
List all cloud services supported for a given provider.
modify_architecture
Modify an existing architecture with a natural-language instruction.
plan_infrastructure
plan_migration
Build read-only migration waves, economics, and acceptance gates.
review_architecturewrite action
Run the deterministic offline critic (scorer + linter + validator) on an architecture.
scan_compliance_controls
scan_terraform
Scan Terraform HCL source for security misconfigurations.
score_architecture
Score an architecture across reliability, security, cost, compliance, and complexity.
security_scan
Scan an architecture for security anti-patterns and misconfigurations.
validate_compliance
Validate an architecture against compliance frameworks.
verify_migration
Rebuild migration gates and check recorded evidence for closure.

Public scan report

scanner v0.1.10 · 2026-11-01 · same rubric, same numbers if you re-run it

no findings

Code scan16 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 69 days ago12/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 88/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

How Cloudwright compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 88/100; higher than 75% of 48,243 servers
Tools: 24; the typical server has 7
Tools that change things: 17%; typical: 0%. Fewer write tools means less an agent can break
GitHub stars: 33; more than 92% of 28,706 servers
Downloads a week: 79; more than 56% of 12,306 servers with a package

What its tools let an agent do: 19 read · 5 change

Install Cloudwright in Claude Code, Cursor or VS Code

claude mcp add cloudwright -- uvx cloudwright-ai-mcp

Add to Cursor

What the publisher says

From the Cloudwright repository's README, as published. We do not edit it. Read it on GitHub

Cloudwright

Design a cloud architecture or plan a migration. Get costs, controls, code, and checked evidence.

pip install 'cloudwright-ai[cli]'
export ANTHROPIC_API_KEY=sk-ant-...
cloudwright design "HIPAA healthcare API on AWS with Postgres and Redis"

Cloudwright turns one line of English into a typed spec, a cost breakdown, a control-mapped compliance report, and infrastructure code. A source estate and target become ordered migration waves, explicit costs, and evidence gates. It covers AWS, GCP, Azure and Databricks across 114 service keys. Only design, modify, chat and adr call a model. Every other command runs offline and needs no API key.

Quickstart · Migrations · Compliance · Agents · Docs · Changelog

A prompt produces a spec, a cost, a control-mapped report, and Terraform

Spec. Typed YAML you commit, diff and review. Everything below reads from it.
Cost. Per component and region-aware, with a confidence flag on every line.
Compliance. HIPAA, SOC 2, PCI-DSS, FedRAMP, GDPR, ISO 27001 and NIST 800-53 control IDs.
Infrastructure code. Terraform, OpenTofu, Pulumi (TypeScript or Python) and CloudFormation.
Diagrams. ASCII, Mermaid, D2, and a web canvas you can edit by hand.
An MCP server, so any coding agent runs the same checks inside its own loop.

Exports carry safe defaults. S3 gets a public-access block, SSE and versioning. RDS gets encryption, multi-AZ and deletion protection. EC2 gets IMDSv2. A compliance framework overrides the workload profile, and always forces encryption and high availability.

Quickstart

cloudwright design "HIPAA healthcare API on AWS with Postgres and Redis"
cloudwright cost spec.yaml --workload-profile medium
cloudwright compliance spec.yaml --frameworks hipaa,soc2
cloudwright export spec.yaml --format terraform -o ./infra
cloudwright plan spec.yaml --target terraform          # proves it deploys, never applies
cloudwright migrate demo                               # packaged migration proof, fully offline
cloudwright chat --web                                 # canvas at http://localhost:8765

Add --json before any subcommand for machine-readable output, or --stream to watch tokens arrive. Set ANTHROPICAPIKEY or OPENAIAPIKEY for the four commands that need a model.

Migration plans stop when evidence is missing

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Cloudwright: common questions

Is Cloudwright MCP server safe?: Yes, by our scan: it is graded A (88/100). Read the Cloudwright safety report
How do I install Cloudwright?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Cloudwright need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Cloudwright maintained?: The last commit was 73 days ago (2026-08-24). The latest release is v1.10.0.
What can I use instead of Cloudwright?: Servers from other publishers that do the same job: Mobilerun MCP server.
How does Cloudwright compare with other MCP servers?: safety score 88/100 (higher than 75% of 48,243 servers); tools 24 (the typical server has 7); tools that change things 17% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Cloudwright

Same job from other publishers: the closest match first, then the best rated.

Mobilerun
Let AI agents control Android and iOS devices on Mobilerun Cloud: screen, input, apps, workflows.
not reviewed
Established
A