AI for Analyzing Your Cloud Asset Inventory
This post was originally published on CloudQuery's blog.

|5 min read

AI for Analyzing Your Cloud Asset Inventory

AI for Analyzing Your Cloud Asset Inventory header

Note: TL;DR: We built an MCP server that lets any AI agent directly query your cloud inventory using natural language. Your existing CloudQuery Asset Inventory data now powers Claude Desktop, Cursor, and custom workflows to generate real dashboards, tables, and reports from actual infrastructure data.

CloudQuery already makes it easy for you to interrogate your cloud data using complex searches or SQL. Today, we’re releasing a Model Context Protocol (MCP) server, making it possible to ask questions about your cloud asset inventory using an LLM.

Whether you’re running a quick check for public S3 buckets or want to check whether a particular team is following the correct tagging approach, using natural language is a fast and easy way to quickly get information about your cloud infrastructure and makes this data accessible to teams that may not be used to writing their own SQL code - but that’s just one of the use cases for our MCP server.

We all know AI agents are everywhere now. Cursor writes your code. Custom workflows handle deployments. But here’s what we keep seeing: for platform teams looking to use agentic AI with their cloud infrastructure, these agents are operating blind.

They don’t have the context they need, because they can’t see your actual infrastructure. They don’t know which EC2 instances are running, what S3 buckets exist, or whether your security groups make sense.

We built CloudQuery’s Model Context Protocol (MCP) server to fix this gap.

CloudQuery Security Risk Dashboard. On the left, a chat bubble shows a user asking, "Can you help me find some security risks in my CloudQuery asset inventory?" with a response offering an interactive dashboard powered by CloudQuery MCP server data. On the right, a dashboard interface displays metrics such as total resources (4.7M+), clouds (3), issues (5), and a risk score (68%), alongside a pie chart of risk distribution.

The CloudQuery MCP server gives AI agents a performant, trusted database that they can query in a structured way. This allows them to work autonomously, making recommendations or decisions based on real-life cloud data. Connect the CloudQuery MCP server to your favorite LLM to run security, governance, or FinOps analysis that makes an immediate impact in a fraction of the time.

With CloudQuery, AI agents can now perform complex cloud infrastructure tasks with:

  • Access to proper, accurate context
  • Stop stuffing manual exports into prompts and overflowing your context window
  • No more writing wrappers or custom functions to hit Cloud APIs directly

What We Built

We made CloudQuery speak directly to any AI agent that supports MCP. Your existing cloud inventory data becomes instantly available to:

No wrappers. No maintenance overhead. No stale data.

Diagram showing a feedback loop between a user, a large language model (LLM) call, and the CloudQuery MCP system. The user initiates a request to the LLM, which performs an action via the CloudQuery MCP. CloudQuery MCP returns feedback to the LLM. If necessary, the process stops based on the feedback loop.

We already sync your entire multi-cloud asset inventory. Now your agents can query it directly using natural language.

How to get started analyzing your cloud asset inventory with AI

You need Claude Desktop, Cursor, or any MCP-compatible environment. That’s it.

Install our MCP server from GitHub. Connect it to your existing CloudQuery instance. Start asking questions in natural language.

The same cloud inventory data powering your current analytics now works with your AI workflows. No additional setup required.

How Our Community Is Already Using This

Since we released the MCP server, our users have been doing things that honestly surprised us. Here are some ways we’ve seen them using it:

Security Teams Going Beyond Manual Audits

One platform team asked: “Show me all EC2 instances with public IPs that don’t have security groups restricting SSH access, then create a dashboard showing trends over the past 6 months.”

Screenshot of a prompt to Claude asking for a dashboard of EC2 instances with unrestricted SSH access and trend analysis, next to the CloudQuery MCP server's AWS EC2 Security Dashboard. The output shows 7 vulnerable instances, 34.2% permissive security groups, and a 6-month instance launch trend chart.

Their agent pulled actual instance data, generated visualizations, and created an automated report. No more manual security reviews.

FinOps Teams Mixing Security and Cost Data

“Generate a table showing which S3 buckets lack encryption, include their monthly costs, and create a pie chart showing cost distribution by team ownership.”

Screenshot of a query to Claude requesting a table of unencrypted S3 buckets with cost analysis, alongside the CloudQuery MCP server output showing an S3 Encryption Security Analysis. It highlights five unencrypted buckets, $1,839.36 in monthly cost exposure, and risk levels per bucket.

The agent combined security posture with cost analysis, outputting formatted tables and charts. Security and finance finally had the same data.

Infrastructure Teams Automating Cleanup Reports

“Create a report of orphaned resources across all clouds, include cost impact, and generate charts showing resource waste by region and team.”

Screenshot of a Claude-generated prompt asking for a report on orphaned cloud resources, next to the MCP server output showing a Cloud Orphaned Resources Report. It visualizes 19 orphaned resources, $28.80 in monthly waste, 14 security risks, and 1GB of unused storage.

The agent produced multi-page reports with embedded graphs. Manual resource audits became automated intelligence.

The limit isn’t our MCP server. The limit is what you can think to ask for.

What’s Coming Next

This MCP server starts something bigger. We’re building toward autonomous agents that can:

  • Identify and fix misconfigurations in real-time
  • Provide cost optimization recommendations with full context
  • Correlate security threats across your entire cloud footprint
  • Turn compliance reporting into conversations

Your agents will stop guessing about your infrastructure. They’ll know.

Start Today

Get the MCP server: https://github.com/cloudquery/mcp-releases

Need help with specific workflows? Contact the CloudQuery team

We Want Your Input

We’re actively building new capabilities. Tell us:

  • How are you using AI agents with infrastructure right now?
  • What use cases need cloud inventory context most?
  • What MCP server features would change your workflows?

Share your thoughts: Community discussions

Joe Karlsson

Joe Karlsson

Developer Marketing Engineer at CData, leading developer growth for the managed MCP platform that connects AI agents to live enterprise data. Writing about databases, self-hosting, and the things I build. Runs a 60+ container Proxmox homelab with AI-powered automations.

cat newsletter.md

I write a weekly newsletter about databases, self-hosting, and whatever I'm building.

Subscribe on Substack →

Related Posts