MCP servers · by job

Cloud & infra MCP servers

239 MCP servers that operate cloud accounts, containers, clusters and pipelines. 59 are SAFE, 48 CAUTION and 132 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Cloud & infra MCP servers”. Retrieved 28 Oct 2026. https://modelsatlas.com/mcp/topic/cloud

Verdicts · 239 servers

✓SAFE59!CAUTION48✕BLOCK132

Transports

A server can list more than one transport.

Tool risk

66

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 9 tools.

Servers with no destructive tools →

239 cloud & infra servers

1–24 of 239 · ranked by trust score, then stars

Minima

dmayboroda/minima

✓SAFE B

On-premises conversational RAG with configurable containers

★ 1,0491 readstdio

Security Hub

fuzzinglabs/mcp-security-hub

✓SAFE B

A growing collection of MCP servers bringing offensive security tools to AI assistants. Nmap, Ghidra, Nuclei, SQLMap, Hashcat and more.

★ 7948 writestdio

Yutu

eat-pray-ai/yutu

✓SAFE B

The AI-powered toolkit that grows your YouTube channel on autopilot.

★ 695Not listed in sourcestdio

Prometheus

pab1it0/prometheus-mcp-server

✓SAFE B

A Model Context Protocol (MCP) server that enables AI agents and LLMs to query and analyze Prometheus metrics through standardized interfaces.

★ 517Not listed in sourcesse

Tfmcp

nwiizo/tfmcp

!CAUTION B

🌍 Terraform Model Context Protocol (MCP) Tool - An experimental CLI tool that enables AI assistants to manage and operate Terraform environments. Supports reading Terraform configurations, analyzing plans, applying configurations, and managing state with Claude Desktop integration. ⚡️

★ 372Not listed in sourcestdio

Code Execution Mode

elusznik/mcp-server-code-execution-mode

✓SAFE B

An MCP server that executes Python code in isolated rootless containers with optional MCP server proxying. Implementation of Anthropic's and Cloudflare's ideas for reducing MCP tool definitions context bloat.

★ 3391 readstdio

Aws

rafalwilinski/aws-mcp

✓SAFE B

Talk with your AWS using Claude. Model Context Protocol (MCP) server for AWS. Better Amazon Q alternative.

★ 2961 writestdio

OpenClaw

freema/openclaw-mcp

!CAUTION B

🦞 MCP server for OpenClaw - secure bridge between Claude.ai and your self-hosted OpenClaw assistant with OAuth2 authentication

★ 1852 writesse

Aws Finops

ravikiranvm/aws-finops-mcp-server

✓SAFE B

An MCP (Model Context Protocol) server that brings powerful AWS FinOps capabilities directly into your AI assistant. Analyze cloud costs, audit for waste, and get budget insights using natural language, all while keeping your credentials secure on your local machine.

★ 1831 writestdio

BigQuery

ergut/mcp-bigquery-server

✓SAFE B

A Model Context Protocol (MCP) server that provides secure, read-only access to BigQuery datasets. Enables Large Language Models (LLMs) to safely query and analyze data through a standardized interface.

★ 1481 writestdio

AWS

rishikavikondala/mcp-server-aws

✓SAFE B

A Model Context Protocol server implementation for operations on AWS resources

★ 1275 destructivestdio

Octopus Deploy Official MCP Server

OctopusDeploy/mcp-server

✓SAFE B

Octopus Deploy Official MCP Server

★ 1015 writestdio

Github Project Manager

kunwarvivek/mcp-github-project-manager

!CAUTION B

MCP server for AI-powered GitHub project management — 20 tools, 169 actions, agent swarm orchestration, GitHub Actions/Releases/Branches, MCP Resources & Prompts, PRD-to-issues pipeline

★ 10117 destructive

Octopus Deploy

octopusdeploy/mcp-server

✓SAFE B

Octopus Deploy Official MCP Server

★ 1015 writestdio

Strimzi Kafka CLI

systemcraftsman/strimzi-kafka-cli

!CAUTION B

Command Line Interface and MCP Server for the Strimzi Kafka Operator

★ 929 destructivestdio

Terminal

theailanguage/terminal_server

✓SAFE B

MCP server that can execute terminal commands

★ 912 writestdio

OPNsense

pixelworlds/opnsense-mcp-server

!CAUTION B

Modular MCP server for OPNsense firewall management - 88 tools providing access to 2000+ methods through AI assistants

★ 894 readstdio

Draw.io MCP Server

simonkurtz-msft/drawio-mcp-server

✓SAFE B

A Model Context Protocol (MCP) server for programmatic diagram generation using Draw.io (Diagrams.net). This server generates Draw.io XML directly — no browser extension or Draw.io instance required.

★ 813 destructivestdio

Google Cloud

krzko/google-cloud-mcp

✓SAFE B

🤖 A Model Context Protocol (MCP) server for Google Cloud (GCP)

★ 802 writestdio

DevEx

parthkapoor-dev/devex

✓SAFE B

⚡️ Devex — A Fast, Secure, and Scalable Repl-as-a-Service Platform built for Developers 🚀

★ 793 destructivestreamable-http

Ntfy-Me

gitmotion/ntfy-me-mcp

!CAUTION B

An ntfy MCP server for sending/fetching ntfy notifications to self-hosted or ANY ntfy.sh server from AI Agents 📤 (supports secure token auth & more - use with npx or docker!)

★ 752 readstdio

Omni

openadaptai/omnimcp

✓SAFE B

Labs: a perceive-plan-act computer-use experiment. Not the OpenAdapt product. The product is openadapt-flow: a compiled program that halts unless an independent check passes.

★ 747 read

Shinzo Ts

shinzo-labs/shinzo-ts

✓SAFE B

TypeScript SDK for MCP server observability, built on OpenTelemetry. Gain insight into agent usage patterns, contextualize tool calls, and analyze server performance across platforms. Integrate with any OpenTelemetry ingest service including the Shinzo platform.

★ 682 writestdio

GitLab

yoda-digital/mcp-gitlab-server

!CAUTION B

Production-grade GitLab MCP server with 86 tools — full GitLab control from any AI agent (Claude, Cursor, Zed).

★ 646 destructivesse

Other jobs

By risk

Questions

How do you decide which servers are cloud & infra servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which cloud & infra MCP servers rank highest on trust?
Minima (dmayboroda/minima), Security Hub (fuzzinglabs/mcp-security-hub) and Yutu (eat-pray-ai/yutu), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many cloud & infra servers only read?
81 of the 239 declare tools that all only read; 66 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.