Back to Browse

Mcp Server MCP Server

Developer ToolsModerate5.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Visualise diagrams, generate Terraform HCL, and manage Azure/AWS/GCP infrastructure with AI.

About

Visualise diagrams, generate Terraform HCL, and manage Azure/AWS/GCP infrastructure with AI.

Security Report

5.2
Moderate5.2Moderate Risk

This is a well-structured MCP server for CloudForge with proper authentication, no malicious patterns, and permissions appropriately scoped to its cloud infrastructure visualization and IaC generation purpose. Authentication via bearer token is required and validated at startup. The main concerns are minor code quality issues around error handling and lack of input validation on some JSON parsing operations, but these do not create exploitable security vulnerabilities. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

3 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

CloudForge API key — generate one at cloudforge.cloud/account under API Keys. Must start with cf_live_Required

Environment variable: CLOUDFORGE_TOKEN

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cloudforgetech6-ctrl-cloudforge": {
      "env": {
        "CLOUDFORGE_TOKEN": "your-cloudforge-token-here"
      },
      "args": [
        "-y",
        "cloudforge-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

CloudForge MCP Server

npm version License: MIT

MCP server for CloudForge — lets Claude and other AI assistants visualise cloud architecture diagrams, generate Terraform HCL, import existing IaC, and manage your infrastructure resources directly from chat.

Tools

Visualisation

ToolDescription
cloudforge_diagram_to_mermaidFetch a saved diagram and render it as an inline Mermaid flowchart
cloudforge_architecture_summaryStructured summary: resource counts by category, central components, inline diagram
cloudforge_mermaid_from_jsonConvert raw diagram JSON to Mermaid without fetching from the server

Terraform

ToolDescription
cloudforge_generate_terraformGenerate Terraform HCL from a natural-language architecture description
cloudforge_export_terraform_from_diagramExport Terraform HCL from an existing saved diagram in one step
cloudforge_parse_terraformTurn raw HCL into a diagram structure — deterministic, no AI, and no account needed
cloudforge_export_terraformExport a saved diagram's Terraform as it stands, without regenerating
cloudforge_import_terraformParse existing HCL → diagram structure + Mermaid preview

AI Architect

ToolDescription
cloudforge_chatAsk the CloudForge AI Architect for IaC advice, cost estimates, security reviews
cloudforge_suggest_resourcesGet AI-recommended resources and connections for a described use case

Mold Library

ToolDescription
cloudforge_list_moldsBrowse 90 curated architecture templates (30 per cloud) — filter by provider, category, or search
cloudforge_get_moldFull detail for one Mold: layout, "why this shape" best practices, inline Mermaid preview, forge link

Diagram Management

ToolDescription
cloudforge_list_diagramsList saved diagrams with metadata
cloudforge_recent_diagramsGet recently accessed/modified diagrams
cloudforge_get_diagramFetch a diagram by ID (full JSON)
cloudforge_save_diagramSave or update a diagram
cloudforge_delete_diagramPermanently delete a diagram

Organisation

ToolDescription
cloudforge_org_detailsOrganisation overview: name, plan, member count, MFA policy, custom assistant name
cloudforge_list_membersList organisation members (name, email, role, status)
cloudforge_invite_memberSend an organisation invitation
cloudforge_list_invitationsList pending invitations
cloudforge_cancel_invitationCancel a pending invitation
cloudforge_remove_memberRemove a member from the organisation

Pricing

ToolDescription
cloudforge_get_pricingGet CloudForge's current plans & pricing (Free, Pro, Team, Business), incl. the 14-day free trial — fetched live

Deploy

Real infrastructure changes. apply and destroy stop at a human approval gate and change nothing until cloudforge_approve_deployment is called, so an agent cannot deploy on its own.

ToolDescription
cloudforge_planRun terraform plan — add/change/destroy diff plus the security quality gate. Read-only
cloudforge_dry_runValidate and plan without touching a cloud account
cloudforge_validate_deploymentProvider and HCL pre-flight checks
cloudforge_applyStart a real deployment. Creates resources and costs money; stops at the approval gate
cloudforge_destroyStart a destroy. Permanently deletes infrastructure; same approval gate
cloudforge_approve_deploymentApprove or reject a job waiting at its gate — the step that actually changes the cloud
cloudforge_deployment_statusStatus and log of one job
cloudforge_deployment_historyEvery deployment run against a diagram

Quality & cost

ToolDescription
cloudforge_fix_terraformRepair broken HCL from an error log — the same healer the deployment pipeline uses on itself
cloudforge_validate_terraformSyntax and provider-schema check without deploying
cloudforge_estimate_costEstimated monthly cost, per resource
cloudforge_review_architectureAI review: reliability, security, cost, scaling trade-offs

Drift & compliance

ToolDescription
cloudforge_scan_driftCompare a diagram against what is actually deployed
cloudforge_latest_driftMost recent drift report for a diagram
cloudforge_drift_reportRead one drift report by id — poll this after a scan
cloudforge_compliance_frameworksFrameworks available to scan against (APRA CPS 234, CIS, …)
cloudforge_compliance_scanScan against frameworks — deterministic evidence and control mappings, never an AI opinion

Self-healing — detect, approve, heal

Three steps, always in that order. There is deliberately no tool that approves a fix: approval means a person read what would change and consented to it, and a tool that let an assistant grant that consent on their behalf would remove the only guarantee the feature offers. Detect and report freely; the user approves in the CloudForge panel, the VS Code extension or the JetBrains tool window; then heal.

ToolDescription
cloudforge_detect_remediationsTurn a completed drift report into proposed fixes, all awaiting a person's decision
cloudforge_list_remediationsProposals and where each one stands
cloudforge_heal_approvedApply only what a person approved; pauses at the Terraform plan for a second yes
cloudforge_remediation_ledgerThe append-only audit trail: what changed, why, and who said it could
cloudforge_remediation_policyThe bounds healing works inside — excluded resource types, how long a proposal stays actionable

Governance

ToolDescription
cloudforge_list_policiesGovernance policies configured for the organisation
cloudforge_evaluate_policiesCheck a design against them before deploying — the pipeline enforces the same rules

Shared work

ToolDescription
cloudforge_foundry_diagramsDiagrams shared across the organisation (The Foundry)
cloudforge_list_templatesOrganisation-authored templates, distinct from the built-in Molds

Setup

Claude Desktop (recommended)

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "cloudforge": {
      "command": "npx",
      "args": ["-y", "cloudforge-mcp"],
      "env": {
        "CLOUDFORGE_TOKEN": "your-bearer-token"
      }
    }
  }
}

Claude Code / .mcp.json

{
  "mcpServers": {
    "cloudforge": {
      "command": "npx",
      "args": ["-y", "cloudforge-mcp"],
      "env": {
        "CLOUDFORGE_TOKEN": "your-bearer-token"
      }
    }
  }
}

Authentication

  1. Sign in at cloudforge.cloud
  2. Go to Account → API Keys
  3. Click Generate API Key, give it a name (e.g. CloudForge MCP), and copy the key — it starts with cf_live_ and is shown only once
  4. Set it as CLOUDFORGE_TOKEN in your MCP config

The key is long-lived and can be revoked from the same page at any time.

Environment Variables

VariableDefaultDescription
CLOUDFORGE_TOKEN(required)CloudForge API key — must start with cf_live_
CLOUDFORGE_API_URLhttps://cloudforge.cloud/apiAPI base URL — only change if self-hosting

Example prompts

Show me my recent diagrams
What serverless Molds do you have for AWS?
Show me the azure-3-tier-web-app Mold and explain why it's shaped that way
Render diagram <id> as a Mermaid chart
Generate Terraform for a 3-tier Azure web app with a private SQL database in UK South
Import this Terraform and show me a diagram: <paste HCL>
What are the security best practices for the resources in diagram <id>?
Invite john@example.com as a Member to my organisation

Pricing

The cloudforge_get_pricing tool returns CloudForge's current plans live (so they're always up to date). All prices USD; paid plans include a 14-day free trial:

PlanPrice
Free$0 — visual designer, limited export, community support
ProUS$9.99/mo or US$99/yr · 14-day free trial
TeamUS$12/user/mo (3-seat min) · 14-day free trial
BusinessContact us — volume/annual pricing

Full details: cloudforge.cloud/pricing.

Self-hosting

If you run CloudForge on-premises, point the server at your own API:

"env": {
  "CLOUDFORGE_API_URL": "https://your-cloudforge-host/api",
  "CLOUDFORGE_TOKEN": "your-token"
}

License

MIT © CloudForge

Reviews

No reviews yet

Be the first to review this server!