AI

Product News

AI for Analyzing Your Cloud Asset Inventory

AI for Analyzing Your Cloud Asset Inventory header

TL;DR:
We built an MCP server that lets any AI agent directly query your cloud inventory using natural language. Your existing CloudQuery Asset Inventory data now powers Claude Desktop, Cursor, and custom workflows to generate real dashboards, tables, and reports from actual infrastructure data.

CloudQuery already makes it easy for you to interrogate your cloud data using complex searches or SQL. Today, we’re releasing a Model Context Protocol (MCP) server, making it possible to ask questions about your cloud asset inventory using an LLM.

Whether you’re running a quick check for public S3 buckets or want to check whether a particular team is following the correct tagging approach, using natural language is a fast and easy way to quickly get information about your cloud infrastructure and makes this data accessible to teams that may not be used to writing their own SQL code - but that’s just one of the use cases for our MCP server.

We all know AI agents are everywhere now. Cursor writes your code. Custom workflows handle deployments. But here's what we keep seeing: for platform teams looking to use agentic AI with their cloud infrastructure, these agents are operating blind.

They don’t have the context they need, because they can't see your actual infrastructure. They don't know which EC2 instances are running, what S3 buckets exist, or whether your security groups make sense.

We built CloudQuery's Model Context Protocol (MCP) server to fix this gap.

CloudQuery Security Risk Dashboard. On the left, a chat bubble shows a user asking, “Can you help me find some security risks in my CloudQuery asset inventory?” with a response offering an interactive dashboard powered by CloudQuery MCP server data. On the right, a dashboard interface displays metrics such as total resources (4.7M+), clouds (3), issues (5), and a risk score (68%), alongside a pie chart of risk distribution.

The CloudQuery MCP server gives AI agents a performant, trusted database that they can query in a structured way. This allows them to work autonomously, making recommendations or decisions based on real-life cloud data. Connect the CloudQuery MCP server to your favorite LLM to run security, governance, or FinOps analysis that makes an immediate impact in a fraction of the time.

With CloudQuery, AI agents can now perform complex cloud infrastructure tasks with:

  • Access to proper, accurate context
  • Stop stuffing manual exports into prompts and overflowing your context window
  • No more writing wrappers or custom functions to hit Cloud APIs directly

What We Built

We made CloudQuery speak directly to any AI agent that supports MCP. Your existing cloud inventory data becomes instantly available to:

No wrappers. No maintenance overhead. No stale data.

Diagram showing a feedback loop between a user, a large language model (LLM) call, and the CloudQuery MCP system. The user initiates a request to the LLM, which performs an action via the CloudQuery MCP. CloudQuery MCP returns feedback to the LLM. If necessary, the process stops based on the feedback loop.

We already sync your entire multi-cloud asset inventory. Now your agents can query it directly using natural language.

How to get started analyzing your cloud asset inventory with AI

You need Claude Desktop, Cursor, or any MCP-compatible environment. That's it.

Install our MCP server from GitHub. Connect it to your existing CloudQuery instance. Start asking questions in natural language.

The same comprehensive cloud inventory data powering your current analytics now works with your AI workflows. No additional setup required.

How Our Community Is Already Using This

Since we released the MCP server, our users have been doing things that honestly surprised us. Here are some ways we’ve seen them using it:

Security Teams Going Beyond Manual Audits

One platform team asked: "Show me all EC2 instances with public IPs that don't have security groups restricting SSH access, then create a dashboard showing trends over the past 6 months."

Screenshot of a prompt to Claude asking for a dashboard of EC2 instances with unrestricted SSH access and trend analysis, next to the CloudQuery MCP server’s AWS EC2 Security Dashboard. The output shows 7 vulnerable instances, 34.2% permissive security groups, and a 6-month instance launch trend chart.

Their agent pulled actual instance data, generated visualizations, and created an automated report. No more manual security reviews.

FinOps Teams Mixing Security and Cost Data

"Generate a table showing which S3 buckets lack encryption, include their monthly costs, and create a pie chart showing cost distribution by team ownership."

Screenshot of a query to Claude requesting a table of unencrypted S3 buckets with cost analysis, alongside the CloudQuery MCP server output showing an S3 Encryption Security Analysis. It highlights five unencrypted buckets, $1,839.36 in monthly cost exposure, and risk levels per bucket.

The agent combined security posture with cost analysis, outputting formatted tables and charts. Security and finance finally had the same data.

Infrastructure Teams Automating Cleanup Reports

"Create a comprehensive report of orphaned resources across all clouds, include cost impact, and generate charts showing resource waste by region and team."

Screenshot of a Claude-generated prompt asking for a comprehensive report on orphaned cloud resources, next to the MCP server output showing a Cloud Orphaned Resources Report. It visualizes 19 orphaned resources, $28.80 in monthly waste, 14 security risks, and 1GB of unused storage.

The agent produced multi-page reports with embedded graphs. Manual resource audits became automated intelligence.

The limit isn't our MCP server. The limit is what you can think to ask for.

What's Coming Next

This MCP server starts something bigger. We're building toward autonomous agents that can:

  • Identify and fix misconfigurations in real-time
  • Provide cost optimization recommendations with full context
  • Correlate security threats across your entire cloud footprint
  • Turn compliance reporting into conversations

Your agents will stop guessing about your infrastructure. They'll know.

Start Today

Get the MCP server: https://github.com/cloudquery/mcp-releases

Need help with specific workflows? Contact our team

We Want Your Input

We're actively building new capabilities. Tell us:

  • How are you using AI agents with infrastructure right now?
  • What use cases need cloud inventory context most?
  • What MCP server features would change your workflows?

Share your thoughts: Community discussions

Try CloudQuery yourself

Self-hosted, open source, and free to start. Or schedule a demo to see the managed version.

Related posts

AI

Cloud Asset Inventory

Product News

CloudQuery Platform Adds Business Context and Scheduled Exports to Cloud Inventory

CloudQuery Platform now groups cloud resources into apps and environments, and lets you schedule automated data exports to your data warehouse on a cron.

Zeen Rachidi

Zeen Rachidi

August 31, 2026

AI

Product News

What's new in the CloudQuery Platform AI Assistant

The CloudQuery Platform AI Assistant just got a major upgrade enabling you to build reports from chat, revisit past conversations, manage policies conversationally, and more.

Zeen Rachidi

Zeen Rachidi

July 16, 2026

AI

Product News

Try CloudQuery Platform Today: Self-Service Signup Is Here

CloudQuery's Platform now offers self-service signup

Zeen Rachidi

Zeen Rachidi

June 18, 2026

AI

Product News

Introducing the CloudQuery Platform AI Assistant

CloudQuery's new AI Assistant lets you ask questions about your cloud infrastructure in plain English - no SQL required.

Joe Karlsson

Joe Karlsson

May 18, 2026

AWS

Cloud Asset Inventory

Product News

AWS Relations Transformer: Every Dependency in One Table

The AWS Relations transformer writes every reference between your synced AWS resources to one SQL table. Try the v1.0.0 preview and tell us what you build.

CloudQuery Team

CloudQuery Team

September 27, 2026

Cloud Asset Inventory

Product News

A Field Guide to Finding Zombie Infrastructure in AWS

Three playbooks for identifying zombie cloud resources - abandoned databases, forgotten prototypes, and unowned compute - using AWS CLI, SQL, and Insights.

Joe Karlsson

Joe Karlsson

April 2, 2026

Product News

Security

Investigating Toxic IAM and Access Combinations in AWS

Three investigation playbooks for finding toxic signal combinations in AWS - stale credentials, open SSH, and unowned compute - with SQL and Insights.

Joe Karlsson

Joe Karlsson

April 2, 2026

Product News

Security

How to Find GitHub Repos Vulnerable to Supply Chain Attacks Like CanisterWorm

Find which of your GitHub repos are vulnerable to fork PR supply chain attacks like CanisterWorm, and how to fix the settings before they're exploited.

Ştefan Muraru

Ştefan Muraru

March 25, 2026

Product News

Introducing the Markmonitor Integration for CloudQuery

CloudQuery's new Markmonitor integration syncs your enterprise domain portfolio into your data warehouse for domain expiration tracking and DNSSEC analysis.

Joe Karlsson

Joe Karlsson

March 12, 2026

Own your pipeline.
Own your data.