Skip to main content
Glama
cloud-governance-mcp

cloud-governance-mcp

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault
--allowed-rootYesAbsolute path to an existing directory containing plan files. Repeat for more directories; relative plan paths use the first root.

Instructions

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Capabilities

Features and capabilities supported by this server

Protocol revision2025-11-25

CapabilityDetails
tools
{
  "listChanged": false
}

Tools

Functions exposed to the LLM to take actions

NameDescription
analyze_terraform_planA

Summarize resource identities and proposed actions from a local Terraform plan JSON file in an allowed directory. Returns no resource attribute values and performs no compliance evaluation or infrastructure changes.

evaluate_terraform_policiesA

Evaluate bundled governance policies against a local Terraform plan JSON file in an allowed directory. Return policy findings, uncertainty and coverage without resource attribute values. Requires configured OPA; does not inspect or modify deployed infrastructure.

list_policiesA

List the bundled governance policies available for Terraform plan evaluation, including their versions, severity, supported resources, scope and required configuration. Does not read plans or invoke OPA.

Prompts

Interactive templates invoked by user choice

NameDescription

No prompts

Resources

Contextual data attached and managed by the client

NameDescription

No resources

TDQS

A4.2/5.0

Scored across 3 tools

Disambiguation4/5

analyze_terraform_plan and evaluate_terraform_policies both consume a local plan JSON file, which creates surface-level overlap, but the descriptions draw a clear line (summarize identities/actions vs. run OPA policy findings, with explicit 'performs no compliance evaluation' disclaimers). list_policies is unambiguously distinct as pure catalog discovery.

Naming Consistency5/5

All three tools use a consistent snake_case verb_noun pattern (analyze_/evaluate_/list_) with the resource clearly stated. The noun varies appropriately with the target object (terraform_plan, terraform_policies, policies) rather than indicating inconsistency.

Tool Count4/5

Three tools is on the thin side, but the server has a narrow, well-defined scope (read-only Terraform plan governance) and each tool maps to a distinct phase: discovery, structural summary, policy evaluation. No tool feels redundant or filler.

Completeness4/5

The core lifecycle for a read-only governance server is covered: list what policies exist, inspect what a plan will do, and evaluate it. Minor gaps remain — no tool to enumerate plan files in the allowed directories and no way to fetch full detail for a single policy — but agents can work around these by supplying paths and relying on list_policies output.

Maintenance

ActivityMaintained
ResponsivenessNo recent community issues