Back to MCP Trust Indexm8ven
63
/ 100
1 month ago
glama

nable (finops-mcp)

Local-first FinOps MCP server. Ask about your AWS, Azure, GCP, and SaaS costs in plain English. Anomaly detection, rightsizing, idle-resource cleanup, and Jira/Linear ticketing. Credentials never leave your machine.

→ chaandannn/finopsmcp· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Secret credentials may flow to a network call
18 flows detected: RESEND_API_KEY, VERCEL_KV_REST_API_URL, OIDC_CLIENT_SECRET. We can’t prove the destination matches the brand the credential belongs to.
🔐
You'll be asked for 31 credentials: ACCOUNT_SECRET, ANTHROPIC_API_KEY, FINOPS_LICENSE_PRIVATE_KEY, LOOPS_API_KEY, OIDC_CLIENT_SECRET, POSTHOG_API_KEY, RESEND_API_KEY, STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET, AZURE_CLIENT_SECRET, FINOPS_API_KEY, FINOPS_SSO_CLIENT_SECRET, DATABRICKS_TOKEN, DATABRICKS_ACCOUNT_TOKEN, FINOPS_INVOICE_IMAP_PASSWORD, CLOUDFLARE_API_TOKEN, DATADOG_API_KEY, DATADOG_APP_KEY, GITHUB_TOKEN, MONGODB_ATLAS_PUBLIC_KEY, MONGODB_ATLAS_PRIVATE_KEY, NEW_RELIC_API_KEY, NOTION_API_KEY, PAGERDUTY_API_KEY, SNOWFLAKE_PASSWORD, TWILIO_AUTH_TOKEN, FINOPS_LICENSE_SECRET, FINOPS_LICENSE_KEY, SLACK_BOT_TOKEN, GITHUB_APP_PRIVATE_KEY, GITHUB_WEBHOOK_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretACCOUNT_SECRET
🔐 secretANTHROPIC_API_KEY
configDEMO_ASK_DAILY_CAP
🔐 secretFINOPS_LICENSE_PRIVATE_KEY
🔐 secretLOOPS_API_KEY
configOIDC_CLIENT_ID
🔐 secretOIDC_CLIENT_SECRET
configOIDC_DEFAULT_ROLE
configOIDC_GROUPS_CLAIM
configOIDC_ISSUER
configOIDC_PLAN
configOIDC_REDIRECT_URI
configOIDC_ROLE_MAP
configOIDC_SCOPE
🔐 secretPOSTHOG_API_KEY
🔐 secretRESEND_API_KEY
🔐 secretSTRIPE_SECRET_KEY
configSTRIPE_TEAM_MIN_CENTS
configSTRIPE_TEAM_PRICE_IDS
🔐 secretSTRIPE_WEBHOOK_SECRET
configSUBSCRIBE_DAILY_CAP
configFINOPS_ACCOUNTS_FILE
configNABLE_BENCHMARKING_ENDPOINT
configNABLE_BENCHMARKING_ENABLED
configNABLE_BENCHMARKING_SALT
configFINOPS_AI_CONTRACTS
configFINOPS_HOME
configAWS_ROLE_ARNS
configAZURE_TENANT_ID
configAZURE_CLIENT_ID
🔐 secretAZURE_CLIENT_SECRET
configGCP_BQ_BILLING_TABLE
configFINOPS_TAG_RULES
configFINOPS_PROFILE
configFINOPS_NO_AUDIT
🔐 secretFINOPS_API_KEY
configDATABASE_URL
configFINOPS_REQUIRE_AUTH
configFINOPS_SSO_ISSUER
configFINOPS_SSO_CLIENT_ID
🔐 secretFINOPS_SSO_CLIENT_SECRET
configFINOPS_SSO_ALLOWED_DOMAINS
configFINOPS_COST_CACHE_TTL
configFINOPS_K8S_CACHE_TTL
configFINOPS_CACHE_TTL
configFINOPS_CACHE_MAX_ENTRIES
configFINOPS_CACHE_DISABLED
configFINOPS_CLEANUP_ENABLED
configFINOPS_AIRGAP
configFINOPS_FIPS
configFINOPS_GOVCLOUD
configFINOPS_MAX_ROLE_ARNS
configAWS_DEFAULT_REGION
configFINOPS_MAX_LOOKBACK_DAYS
configFINOPS_ORG_ROLE_NAME
configFINOPS_ORG_MAX_ACCOUNTS
configAZURE_SUBSCRIPTION_IDS
configDATABRICKS_HOST
🔐 secretDATABRICKS_TOKEN
configDATABRICKS_ACCOUNT_ID
🔐 secretDATABRICKS_ACCOUNT_TOKEN
configDATABRICKS_DBU_PRICE
configGCP_BILLING_ACCOUNT_IDS
configGCP_SERVICE_ACCOUNT_KEY_PATH
configGOOGLE_APPLICATION_CREDENTIALS
configGCP_PROJECT_IDS
configFINOPS_INVOICE_IMAP_HOST
configFINOPS_INVOICE_IMAP_USER
🔐 secretFINOPS_INVOICE_IMAP_PASSWORD
configFINOPS_INVOICE_FOLDER
configFINOPS_INVOICE_SEARCH
configKUBECONFIG
configK8S_CONTEXTS
configK8S_CLOUD_PROVIDER
configNABLE_K8S_TEAM_LABEL
configNABLE_K8S_IDLE_THRESHOLD
🔐 secretCLOUDFLARE_API_TOKEN
configCLOUDFLARE_ACCOUNT_ID
🔐 secretDATADOG_API_KEY
🔐 secretDATADOG_APP_KEY
configDATADOG_SITE
🔐 secretGITHUB_TOKEN
configGITHUB_ORGS
🔐 secretMONGODB_ATLAS_PUBLIC_KEY
🔐 secretMONGODB_ATLAS_PRIVATE_KEY
configMONGODB_ATLAS_ORG_IDS
configN8N_WEBHOOK_URL
🔐 secretNEW_RELIC_API_KEY
configNEW_RELIC_ACCOUNT_ID
configNEW_RELIC_INGEST_PRICE_PER_GB
configNEW_RELIC_FULL_PLATFORM_PRICE
🔐 secretNOTION_API_KEY
configNOTION_PAGE_ID
🔐 secretPAGERDUTY_API_KEY
configSNOWFLAKE_ACCOUNT
configSNOWFLAKE_USER
🔐 secretSNOWFLAKE_PASSWORD
configSNOWFLAKE_WAREHOUSE
configSNOWFLAKE_ROLE
configSNOWFLAKE_PRIVATE_KEY_PATH
configSNOWFLAKE_CREDIT_PRICE
configTWILIO_ACCOUNT_SID
🔐 secretTWILIO_AUTH_TOKEN
configTERRAFORM_BIN
configFINOPS_REQUIRED_TAGS
configGCP_BILLING_BQ_TABLE
configFINOPS_DEMO_MODE
configFINOPS_DEMO
configNO_PROXY
configno_proxy
🔐 secretFINOPS_LICENSE_SECRET
🔐 secretFINOPS_LICENSE_KEY
configSLACK_WEBHOOK_URL
🔐 secretSLACK_BOT_TOKEN
configSLACK_CHANNEL
configTEAMS_WEBHOOK_URL
configNABLE_COST_GATE_USD
configNABLE_COMMENT_TAG
configGITHUB_APP_ID
configGITHUB_APP_PRIVATE_KEY_PATH
🔐 secretGITHUB_APP_PRIVATE_KEY
🔐 secretGITHUB_WEBHOOK_SECRET
configPR_COST_THRESHOLD_USD
configPR_WEBHOOK_PORT
configCUR_ATHENA_S3_OUTPUT
configCUR_ATHENA_DATABASE
configCUR_ATHENA_TABLE
configFINOPS_DB_PATH
configFINOPS_SNAPSHOT_CRON
configFINOPS_ANOMALY_CRON
configFINOPS_DIGEST_CRON
configFINOPS_INVOICE_CRON
configFINOPS_WEEKLY_CRON
configFINOPS_WEEKLY_SLACK_CRON
configFINOPS_VERIFY_CRON
configFINOPS_CREDIT_CRON
configFINOPS_AI_MONITOR_CRON
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/chaandannn-finopsmcp-1r55qo)](https://m8ven.ai/mcp/chaandannn-finopsmcp-1r55qo)
commit: 99160f7c04060131107a62877d4173c67d4e1d32
code hash: 9d4a139e347d06b2974d264657e8bc1cbb58bded7de70c0991a6abba2289615a
verified: 6/18/2026, 11:24:04 AM
view raw JSON →