CloudPulse MCP Server
CloudPulse MCP 서버
AI 에이전트를 위한 크로스 클라우드 인프라 가시성 도구입니다. AWS, Vercel, GCP, Cloudflare 전반의 문제를 에디터를 벗어나지 않고 진단하세요.
왜 CloudPulse인가요?
문제점 | CloudPulse 해결책 |
Vercel에서 프론트엔드 오류 발생 → AWS 콘솔을 열어야 함 |
|
AI가 SG가 5432 포트를 차단하는지 알 수 없음 |
|
Lambda 동시성 제한에 조용히 도달함 |
|
디버깅 전 토폴로지를 알 수 없음 |
|
Related MCP server: Daemoon
빠른 시작
1. npx로 설치/실행
npx cloudpulse-mcp서버는 사용자의 머신에 이미 존재하는 자격 증명(AWS CLI, 환경 변수 등)을 자동으로 감지합니다.
2. AI 클라이언트 구성
Claude Desktop – ~/Library/Application Support/Claude/claude_desktop_config.json에 추가:
{
"mcpServers": {
"cloudpulse": {
"command": "npx",
"args": ["-y", "cloudpulse-mcp"],
"env": {
"VERCEL_TOKEN": "<your-vercel-token>",
"AWS_PROFILE": "default",
"AWS_REGION": "us-east-1"
}
}
}
}Cursor – 프로젝트의 .cursor/mcp.json에 추가:
{
"mcpServers": {
"cloudpulse": {
"command": "npx",
"args": ["-y", "cloudpulse-mcp"],
"env": {
"VERCEL_TOKEN": "<your-vercel-token>",
"AWS_REGION": "us-east-1"
}
}
}
}VS Code + GitHub Copilot (에이전트 모드) – VS Code 1.99+ 및 GitHub Copilot 확장이 필요합니다.
먼저 프로젝트를 빌드하세요:
npm run build그런 다음 이 저장소에 .vscode/mcp.json을 생성하세요:
{
"servers": {
"cloudpulse": {
"type": "stdio",
"command": "node",
"args": ["${workspaceFolder}/dist/index.js"],
"env": {
"VERCEL_TOKEN": "${env:VERCEL_TOKEN}",
"AWS_REGION": "${env:AWS_REGION}",
"AWS_PROFILE": "${env:AWS_PROFILE}"
}
}
}
}${env:VAR}은 셸 환경에서 읽어오므로 소스 제어에 비밀 정보가 포함되지 않습니다.
사용 방법: Copilot Chat을 열고 Agent 모드로 전환한 뒤, Select Tools를 클릭하여 CloudPulse 도구를 활성화하고 자연스럽게 질문하세요:
Why can't my Vercel project reach AWS RDS instance "my-db"?자격 증명 및 보안
CloudPulse는 읽기 전용, 비저장 정책을 따릅니다:
자격 증명 | 제공 방법 |
AWS |
|
Vercel |
|
Vercel Team |
|
GCP |
|
Cloudflare |
|
자격 증명은 기록되거나 저장되지 않습니다. 모든 값은 호출 시점에 환경 변수에서 읽어옵니다.
사용 가능한 도구
list_cloud_topology
구성된 모든 플랫폼을 스캔하고 통합 서비스 맵을 반환합니다.
Input (all optional):
platforms – ["aws", "vercel"] filter platforms
aws_region – "us-east-1"get_correlated_logs
Vercel + AWS CloudWatch의 로그를 가져와 하나의 타임라인으로 병합합니다.
Input:
start_time * – ISO-8601 or epoch ms e.g. "2024-06-01T10:00:00Z"
end_time – defaults to now
trace_id – filter by trace/request ID across all sources
aws_log_group_prefix – default "/aws/lambda"
vercel_project – project name or ID
aws_regiondiagnose_service_link
서비스 A가 리소스 B에 연결할 수 없는 이유를 확인합니다.
Input:
source_service * – "vercel" | "lambda" | "ec2" | ...
target_resource * – "<type>:<id>" e.g. "aws-rds:my-db", "external-api:https://..."
port – auto-detected (5432 for RDS, 443 for APIs, ...)
vercel_project
aws_region수행되는 검사:
Vercel 환경 변수에
DATABASE_URL/DB_URL이 포함되어 있는지 확인AWS 보안 그룹이 필요한 포트에서 인바운드 TCP를 허용하는지 확인
외부 API HEAD 도달 가능성 테스트
check_resource_limits
할당량을 쿼리하고 제한에 가까워진 리소스를 표시합니다.
Input (all optional):
platforms – filter platforms
warn_threshold – usage % to warn at (default 80)
aws_region로드맵
단계 | 상태 | 범위 |
1 – MVP | ✅ 완료 | Vercel + AWS (Lambda, RDS, CloudWatch, 보안 그룹, S3) |
2 – 확장 | ✅ 완료 | GCP Cloud Run + Cloud SQL + 로깅; Cloudflare Workers + Pages; S3 CORS |
3 – 지능형 | 🔜 | CORS, 504 타임아웃, 콜드 스타트 루프를 위한 사전 구축된 진단 플레이북 |
개발
git clone https://github.com/Galadriel-Tech-Solutions/cloudpulse-mcp
cd cloudpulse-mcp
npm install
npm run dev # run from source with tsx
npm run build # compile to dist/프로젝트 구조
src/
├── index.ts # MCP server + tool registration
├── types.ts # shared domain types
├── utils.ts # concurrency, formatting helpers
├── providers/
│ ├── aws/
│ │ ├── index.ts # client factory + isAWSConfigured()
│ │ ├── cloudwatch.ts # CloudWatch Logs
│ │ ├── lambda.ts # Lambda function listing
│ │ ├── rds.ts # RDS/Aurora instances & clusters
│ │ ├── ec2.ts # Security Group inspection
│ │ ├── s3.ts # S3 buckets + CORS checks
│ │ └── quotas.ts # Service Quotas API
│ ├── gcp/
│ │ ├── index.ts # isGCPConfigured() + resolveGCPProject()
│ │ ├── cloud-run.ts # Cloud Run services
│ │ ├── cloud-sql.ts # Cloud SQL instances (sqladmin v1beta4)
│ │ └── logging.ts # Cloud Logging
│ ├── cloudflare/
│ │ └── index.ts # Pages, Workers, Worker tail logs (WebSocket)
│ └── vercel/
│ └── index.ts # Vercel REST API v9
└── tools/
├── list-cloud-topology.ts
├── get-correlated-logs.ts
├── diagnose-service-link.ts
└── check-resource-limits.ts새로운 클라우드 플랫폼 추가
src/providers/<platform>/index.ts를 생성하고 다음을 내보냅니다:is<Platform>Configured(): boolean플랫폼별 데이터 함수
src/tools/아래의 관련 도구에 함수를 연결합니다.src/types.ts의CloudPlatform유니온에 플랫폼 이름을 추가합니다.
라이선스
MIT © CloudPulse Contributors
Available Tools
4 toolscheck_resource_limitsA
Query quota limits and current usage across configured cloud platforms. Highlights resources approaching or exceeding their limits (default warning threshold: 80%). Use this to proactively catch Lambda concurrency limits, Vercel plan caps, and similar issues before they cause outages.
| Name | Required | Description | Default |
|---|---|---|---|
| platforms | No | Platforms to check. Omit to check all configured platforms. | |
| warn_threshold | No | Usage percentage at which to emit a warning. Default: 80. | |
| aws_region | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It effectively communicates that this is a read-only query operation (implied by 'Query') and adds useful context about the warning threshold behavior. However, it doesn't mention authentication requirements, rate limits, error conditions, or what format the results will be returned in, which are important for a tool interacting with multiple cloud platforms.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is efficiently structured in two sentences: the first states the core purpose, and the second provides usage guidance with concrete examples. Every element serves a clear purpose with zero wasted words, making it easy to parse quickly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 3 parameters, no annotations, and no output schema, the description provides adequate purpose and usage context but lacks important behavioral details. It doesn't explain what the output looks like, how errors are handled, or authentication requirements. Given the complexity of querying multiple cloud platforms, more complete guidance would be helpful.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 67% schema description coverage (2 of 3 parameters documented in schema), the description adds significant value by explaining the purpose of the 'warn_threshold' parameter and providing context about what platforms it works with. While it doesn't explicitly mention the 'platforms' or 'aws_region' parameters, it gives enough semantic context about the tool's scope to help understand parameter usage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the specific action ('Query quota limits and current usage'), identifies the target resources ('across configured cloud platforms'), and distinguishes this tool from siblings by focusing on proactive monitoring rather than diagnosis or logging. It provides concrete examples of what it monitors ('Lambda concurrency limits, Vercel plan caps').
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states when to use this tool ('to proactively catch...issues before they cause outages'), providing clear context for its purpose. However, it doesn't mention when not to use it or explicitly differentiate it from sibling tools like 'diagnose_service_link' or 'list_cloud_topology', which might also involve cloud resources.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
diagnose_service_linkA
Diagnose connectivity issues between a source service and a target resource. Checks Vercel environment variables, AWS Security Group inbound rules on the required port, and external API reachability. Returns a list of diagnostic results with actionable messages.
| Name | Required | Description | Default |
|---|---|---|---|
| source_service | Yes | The origin service that initiates the connection. | |
| target_resource | Yes | The resource to connect to. Format: '<type>:<identifier>'. Examples: 'aws-rds:my-db', 'aws-lambda:my-function', 'external-api:https://api.example.com' | |
| port | No | TCP port to verify access on. Auto-detected from common resource types when omitted. | |
| aws_region | No | ||
| vercel_project | No | Vercel project name or ID for env-var checks. | |
| s3_origin | No | When target is aws-s3, check CORS for this origin (e.g. 'https://my-app.pages.dev'). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It describes what the tool checks (three specific areas) and what it returns (diagnostic results with actionable messages), which is helpful. However, it doesn't disclose important behavioral traits like whether this is a read-only operation, whether it makes any changes to systems, authentication requirements, rate limits, or error handling. The description adds value but leaves significant behavioral gaps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is perfectly sized and front-loaded. The first sentence establishes the core purpose, the second specifies the three diagnostic checks, and the third describes the return format. Every sentence earns its place with no wasted words or redundant information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (6 parameters, connectivity diagnostics across multiple cloud platforms) and no annotations or output schema, the description is adequate but incomplete. It explains what the tool does and returns at a high level, but doesn't cover important contextual details like authentication requirements, whether it performs active probes or passive checks, error conditions, or the format of diagnostic results. For a diagnostic tool with no structured output documentation, more completeness would be helpful.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 83% schema description coverage, the schema already documents most parameters well. The description adds meaningful context by explaining the diagnostic scope (Vercel env vars, AWS Security Groups, API reachability) which helps understand what the parameters enable. It doesn't provide additional parameter-specific details beyond the schema, but the high schema coverage means less burden on the description. The description compensates adequately for the 17% coverage gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the specific verb ('diagnose connectivity issues') and resources ('between a source service and a target resource'), distinguishing it from sibling tools like 'check_resource_limits' or 'get_correlated_logs'. It explicitly mentions what the tool checks (Vercel environment variables, AWS Security Group rules, external API reachability) and what it returns (diagnostic results with actionable messages).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context for when to use this tool: for diagnosing connectivity issues between services and resources. It doesn't explicitly state when NOT to use it or name alternatives among sibling tools, but the specificity of its purpose strongly implies it's for connectivity diagnostics rather than resource monitoring or log analysis.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_cloud_topologyA
Scan all configured cloud platforms (AWS, Vercel, GCP, Cloudflare) and return a unified topology of active services including their endpoints and regions. Run this first to understand the infrastructure landscape.
| Name | Required | Description | Default |
|---|---|---|---|
| platforms | No | Platforms to include. Omit to auto-detect all configured platforms. | |
| aws_region | No | AWS region to scan. Defaults to AWS_REGION env var or us-east-1. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It mentions scanning 'all configured cloud platforms' and returning a 'unified topology,' which gives some context about scope and output format. However, it doesn't disclose important behavioral aspects like authentication requirements, rate limits, execution time, or what happens if platforms aren't properly configured.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is perfectly concise with two sentences that each serve distinct purposes: the first explains what the tool does, and the second provides usage guidance. There's zero wasted language, and the most important information (the scanning action) is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (scanning multiple cloud platforms) and lack of both annotations and output schema, the description is somewhat incomplete. While it explains the purpose and usage timing well, it doesn't address authentication needs, error handling, or the structure of the returned topology. For a discovery tool with no output schema, more detail about the return format would be helpful.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents both parameters thoroughly. The description doesn't add any parameter-specific information beyond what's in the schema. The baseline score of 3 is appropriate when the schema does the heavy lifting for parameter documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the specific action ('Scan all configured cloud platforms'), the resource ('active services'), and the output ('unified topology of active services including their endpoints and regions'). It distinguishes this tool from siblings by emphasizing its discovery/scanning purpose rather than diagnostics or log analysis.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states when to use this tool ('Run this first to understand the infrastructure landscape'), providing clear guidance about its role as an initial discovery step. This differentiates it from sibling tools like check_resource_limits or diagnose_service_link that would be used after understanding the topology.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
4 tool updates
v0.1.2- First observed
check_resource_limits - First observed
diagnose_service_link - First observed
get_correlated_logs - First observed
list_cloud_topology
TDQS
Scored across 4 tools
Each tool has a clearly distinct purpose with no overlap: check_resource_limits focuses on quota monitoring, diagnose_service_link on connectivity diagnostics, get_correlated_logs on log aggregation, and list_cloud_topology on infrastructure discovery. The descriptions reinforce unique scopes, making misselection unlikely.
All tool names follow a consistent verb_noun pattern (e.g., check_resource_limits, diagnose_service_link), using snake_case uniformly. This predictability aids agent understanding and tool selection without confusion.
Four tools is a reasonable count for a cloud monitoring server, covering key areas like limits, diagnostics, logs, and topology. It feels slightly lean but well-scoped, as each tool addresses a distinct monitoring need without bloat.
The toolset covers core cloud monitoring workflows: proactive limits checking, connectivity diagnosis, log correlation, and topology mapping. Minor gaps exist, such as lack of alerting or remediation tools, but agents can work around these with the provided diagnostic and data-fetching capabilities.
Maintenance
Related MCP Connectors
- SuperlogOAuthsh.superlog
Open-source agent that observes and fixes your application. Query logs, traces, metrics, incidents.
AI agent observability for production traces, natural-language insights, and improvement loops.
Data + AI observability — monitor and troubleshoot production-grade agents and the context they use.
Compare, estimate, and deploy cloud infrastructure across AWS, GCP, and Azure for AI agents.
Related MCP Servers
AlicenseAqualityDmaintenanceEnables AI agents to discover, evaluate, and provision cloud infrastructure across AWS, GCP, and Azure with cross-cloud normalization, cost comparisons, and deployable execution kits.53 npmMIT- AlicenseNot gradedqualityDmaintenanceGives AI coding agents (Claude Code, Cursor, etc.) unified, secure access to dev infrastructure (Vercel, GitHub, Supabase, Cloudflare, GCP) via a single MCP token.MIT
- FlicenseNot gradedqualityCmaintenanceProvides real-time monitoring of AI agents, context, usage limits, workflows, files, Git, tests, builds, errors, secrets, and model-economy advice for tools like Claude Code, Codex, and Cursor, with 30 MCP tools for comprehensive observability.1-
- FlicenseAqualityBmaintenanceProvides AI coding agents with real-time visibility into local development runtime state, enabling them to tail application logs, inspect ports, monitor process metrics, and diagnose network errors.1-