도구

Security baseline and compliance checks for AWS, Azure, GCP, Kubernetes, GitHub, M365 and more, with built-in CIS, NIST, PCI-DSS, SOC 2 and other frameworks. Generates reports or opens a local dashboard. Configure credentials for each cloud account first.

Estimates cloud costs of Terraform, Terragrunt, CloudFormation and AWS CDK changes before deployment and checks them against FinOps policies, in the terminal, editor, AI agents or CI. Requires an Infracost account; a free tier is available.

Microsoft's official Azure CLI (az) for managing VMs, storage, resource groups and other Azure resources, with JMESPath queries, table or JSON output and clear exit codes for scripting. Run az login first.

Microsoft's official Azure MCP: one server covering dozens of Azure services, including Storage, Cosmos DB, AKS, App Service, Key Vault and Monitor, so agents can query and manage cloud resources. Sign in to Azure first.

Microsoft's official skill collection: 170+ skills focused on Azure SDKs (Python, .NET, TypeScript, Java, Rust) and Microsoft Foundry development, plus plugins, custom agents and MCP configs. Microsoft recommends picking skills per project rather than installing them all.

Microsoft's official Azure DevOps MCP server: query and act on work items, repos, pull requests, build pipelines, test plans and wikis. Sign in with a Microsoft account that has access on first use; Microsoft recommends the no-install remote version instead.

Searches and reads official Microsoft Learn documentation and code samples for Azure, .NET and more, so agents give fewer outdated answers about Microsoft tech. Maintained by Microsoft; the remote server is free and needs no key.

Microsoft's official Azure skill set: deployment prep and validation, deployment, production diagnostics, AKS, quota lookup, compliance audits, cloud migration and Foundry; the plugin version also connects the Azure MCP Server. Needs an Azure account and az login.

Microsoft's official Azure plugin: bundles 20+ skills such as azure-prepare, azure-deploy, azure-diagnostics and azure-cost, and connects the Azure MCP and Foundry MCP to query resources, estimate costs, deploy and troubleshoot. Needs an Azure subscription and az login.

Query and manage Microsoft 365 and Azure tenants in natural language via Microsoft Graph: create users and security groups, check devices and Conditional Access policies and view cloud costs. Needs a work account with the right permissions; changes apply immediately.