// MCP TOOL REFERENCE

INFRACOST TOOLS

8 tools from the Infracost MCP Server, categorised by risk level.

// ALL 8 INFRACOST TOOLS

READ 2 tools

Read infracost_breakdown Generate cost breakdown for Infrastructure as Code (Terraform, CloudFormation, etc.). Shows cost estimates ... Read infracost_diff Show cost diff between current IaC and planned changes. Useful for pull request reviews to understand cost ...

WRITE 6 tools

Write infracost_auth Authenticate with Infracost Cloud. Opens browser for login flow. Write infracost_comment Post cost estimate comments to pull requests on GitHub, GitLab, Azure Repos, or Bitbucket. Write infracost_configure Get or set Infracost configuration options (API key, currency, etc.). Write infracost_generate_usage Generate Infracost usage file with sensible defaults for specified resource types. Complements infracost_co... Write infracost_output Format Infracost JSON output to different formats (table, html, github-comment, etc.). Write infracost_upload Upload Infracost JSON output to Infracost Cloud for centralized cost visibility and reporting.

// RUNNING THIS SERVER

The managed route: connect Infracost through the PolicyLayer gateway — every tool call above is checked against your policy before it runs, with a full audit log.

DIRECT INSTALL (UNMANAGED) npx -y @downatthebottomofthemolehole/infracost-mcp-server

// FAQ

How many tools does the Infracost MCP server have? +

The Infracost MCP server exposes 8 tools across 2 categories: Read, Write.

How do I enforce policies on Infracost tools? +

Route the Infracost server through the PolicyLayer gateway. Define allow, deny, or approval rules per tool in the dashboard — they are enforced on every call before it reaches the server.

What risk categories do Infracost tools fall into? +

Infracost tools are categorised as Read (2), Write (6). Each category has a recommended default policy.

Let agents act without letting them run wild.

Route your MCP servers through PolicyLayer and every tool call is checked against your policy before it runs — allow, deny, or require approval. Per-identity grants. Full audit log. Live in minutes.

SECURE YOUR MCP →

Free to start. No card required.

4,600+ MCP servers and 31,000+ tools scanned and risk-classified.